Google Distributed Cloud air-gapped 1.10.0 release notes

August 04, 2023 [GDCH 1.10.0]

Google Distributed Cloud air-gapped 1.10.0 is now available.

See the product overview to learn about the features of Google Distributed Cloud air-gapped.

In the Google Distributed Cloud air-gapped 1.10.0 Addon Manager (ADD) component, the GKE on Bare Metal version is updated to 1.15.1-gke.10 to apply the latest security patches and important updates.

See GKE on Bare Metal 1.15.1 release notes for details.

Updated Canonical Ubuntu OS image version to 20230529 to apply the latest security patches and important updates. The following security vulnerabilities are fixed:

In the Google Distributed Cloud air-gapped 1.10.0 Hardware Security Module (HSM) component, additional internal HSM backups are available for improved durability.

In the Google Distributed Cloud air-gapped 1.10.0 Hardware Security Module (HSM) component, rotation of the HSM credentials is automated.

The Google Distributed Cloud air-gapped 1.10.0 Hardware Security Module (HSM) component introduces the gdcloud system hsm backup command to perform automatic backups of the HSM cluster.

In the Google Distributed Cloud air-gapped 1.10.0 Hardware Security Module (HSM) component, an issue is resolved where HSM resources prevented organization deactivation.

In the Google Distributed Cloud air-gapped 1.10.0 Hardware Security Module (HSM) component, the issue on the HSM not generating organization configurations is resolved.

In the Google Distributed Cloud air-gapped 1.10.0 Hardware Security Module (HSM) component, an issue is resolved on preventing successful HSM backup key generation.

In the Google Distributed Cloud air-gapped 1.10.0 AddOn component, the issue on clamav runner handling SIGTERM signal is resolved.

This release fixes an issue with disaster recovery execution of HSM backups.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where role-based access control (RBAC) and schema settings in the VM manager that stops users from starting VM backup and restore processes.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where a Harbor cluster is unhealthy as the Harbor jobservice's state is CrashLoopBackOff after an upgrade.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where some pods cannot be evicted during ABM node draining, which blocks the ABM cluster upgrade.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where some pods might crash due to API server access issues such as refresh leader election.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where the node os upgrade on the org admin cluster gets stuck in NodeDraining status.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where node upgrade fails to backup ipsec config.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where upgrade fails when a pod is terminated.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where a node upgrade is blocked on the update-control-plane-config job.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where upgrading an organization to 1.10.x from 1.9.1 or earlier might cause kube-apiserver pods to not come up during an upgrade.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where upgrading to 1.10 might cause a storageCluster object to be unhealthy.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where upgrading to 1.10 might cause a storageCluster object to not finish reconciling aggregate encryption.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where upgrading to 1.10 might cause multiple storagevirtualmachine objects to be unhealthy.

Google Distributed Cloud air-gapped 1.10.0 has a known issue where alerts in organization system clusters don't reach the ticketing system.