Google Distributed Cloud air-gapped release notes

December 14, 2023 [GDCH 1.11.2]

---

Google Distributed Cloud air-gapped 1.11.2 is now available.

See the product overview to learn about the features of Google Distributed Cloud air-gapped.

---

Updated Canonical Ubuntu OS image version to 20231116 to apply the latest security patches and important updates. To take advantage of the bug and security vulnerability fixes, you must upgrade all nodes with each release. The following security vulnerabilities are fixed:

• CVE-2022-33065
• CVE-2023-4016
• CVE-2023-36054
• CVE-2023-43804
• CVE-2023-45803
• CVE-2023-46316

---

The following container image security vulnerabilities are fixed:

• CVE-2023-2975
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-3978
• CVE-2023-4527
• CVE-2023-4806
• CVE-2023-4911
• CVE-2023-5363
• CVE-2023-27533
• CVE-2023-27535
• CVE-2023-27536
• CVE-2023-27538
• CVE-2023-28321
• CVE-2023-29406
• CVE-2023-36054
• CVE-2023-38408
• CVE-2023-39318
• CVE-2023-39319
• CVE-2023-39323
• CVE-2023-39325
• CVE-2023-43785
• CVE-2023-43786
• CVE-2023-43787
• CVE-2023-43788
• CVE-2023-43789
• CVE-2023-44487
• CVE-2023-45142
• GHSA-jq35-85cj-fj4p

---

A fix for CVE-2008-5161 is applied to Palo Alto Networks firewall devices.

---

Add-on Manager:

• The Google Distributed Cloud Virtual for Bare Metal version is updated to 1.16.3-gke.2 to apply the latest security patches and important updates.

  See Google Distributed Cloud Virtual for Bare Metal 1.16.3 release notes for details.

Infrastructure as Code (IAC):

• GDC 1.11.2 removes all legacy IAC-related images.

Operations Center IT organization name update:

• The name of the Operations Center IT organization is updated to gdchservices.

Version update:

• The Debian-based image version is updated to bullseye-v1.4.3-gke.10.

---

Authentication and authorization:

• The issue with assigning the predefined role user-cluster-node-viewer to a user is fixed.

Billing:

• The issue with billing storage initialization script is fixed.

Operations Suite Infrastructure Core Services:

• The issue with New-OCVM.ps1 not setting disk size is fixed.

Virtual machines (VM):

• The issue with fetching packages from the GDC VM package repository using apt update not working for Ubuntu VMs in organizations other than gdchservices is fixed.

---

Monitoring:

• Alerts in organization system clusters don't reach the ticketing system.
  

Physical servers:

• The root admin cluster update progress is stuck at node upgrade, specifically NodeBIOSFirmwareUpgradeCompleted.

Networking:

• The API server is blocked intermittently.

Node platform:

• Multi-tenant system cluster fails.

Upgrade:

• Node draining is blocked due to pod stuck in the terminating state.
• The Address Resolution Protocol (ARP) entry is not updated during an upgrade from GDC 1.11.1 to 1.11.2.

VM Backup and Restore:

• Role-based access control (RBAC) and schema settings in the VM manager is stopping users from starting VM backup and restore processes.