Google Distributed Cloud air-gapped release notes

February 22, 2024 [GDCH 1.11.4]

---

Google Distributed Cloud air-gapped 1.11.4 is now available.

See the product overview to learn about the features of Google Distributed Cloud air-gapped.

---

Updated Canonical Ubuntu OS image version to 20240114 to apply the latest security patches and important updates. To take advantage of the bug and security vulnerability fixes, you must upgrade all nodes with each release. The following security vulnerabilities are fixed:

• CVE-2017-16516
• CVE-2020-14394
• CVE-2020-19726
• CVE-2020-24165
• CVE-2021-3638
• CVE-2021-46174
• CVE-2022-1725
• CVE-2022-1771
• CVE-2022-1897
• CVE-2022-2000
• CVE-2022-24795
• CVE-2022-35205
• CVE-2023-1544
• CVE-2023-2861
• CVE-2023-3180
• CVE-2023-3180
• CVE-2023-33460
• CVE-2023-3354
• CVE-2023-39804
• CVE-2023-46246
• CVE-2023-48231
• CVE-2023-48233
• CVE-2023-48234
• CVE-2023-48235
• CVE-2023-48236
• CVE-2023-48237
• CVE-2023-48795
• CVE-2023-5088
• CVE-2023-7104

---

The following container image security vulnerabilities are fixed:

• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-5388
• CVE-2023-29491
• CVE-2023-36054
• CVE-2023-39326
• CVE-2023-45285
• CVE-2023-48795

---

Reliability:

• Added an Infrastructure Operator (IO) tool container to provide consistent tooling and reliable access to documentation for IO.

---

Operations Suite Infrastructure Core Services (OIC)

• Google Distributed Cloud air-gapped 1.11.4 collects OIC logs in Grafana.

---

Identity and access:

• The issue with assigning the predefined role user-cluster-node-viewer to a user is fixed.

Logging:

• The alert OperationalLogsPipelineSlowLokiBehind that incorrectly sends and overcounts messages is fixed when SIEM exports are enabled.

Node Platform:

• The issue with false positive alerts being reported after metrics were updated with new values is fixed.

Operations Suite Infrastructure - Core Services (OIC):

• The issue where the OIC VM creation process left Hyper-V time synchronization enabled is fixed.

Upgrade:

• The issue with the node upgrade not responding for the operating system in-place upgrade is fixed.

---

VM Backup and Restore:

• Role-based access control (RBAC) and schema settings in the VM manager is stopping users from starting VM backup and restore processes.
• When upgrading a tenant organization, a preflight check might fail.

---

Upgrade:

• During upgrade, a job on baremetal is stuck at gathering facts.