August 2, 2023 [GDCH 1.9.5]
Google Distributed Cloud air-gapped 1.9.5 is now released.
See the product overview to learn about the features of Google Distributed Cloud air-gapped.
In the Google Distributed Cloud air-gapped 1.9.5 Addon Manager (ADD) component, the GKE on Bare Metal version is updated to 1.14.6 to apply the latest security patches and important updates.
See GKE on Bare Metal 1.14.6 release notes for details.
The following container image security vulnerabilities are fixed:
- CVE-2020-11080
- CVE-2021-39537
- CVE-2022-1050
- CVE-2022-4144
- CVE-2023-0330
- CVE-2023-1380
- CVE-2023-1523
- CVE-2023-1667
- CVE-2023-1859
- CVE-2023-1981
- CVE-2023-2283
- CVE-2023-24329
- CVE-2023-24593
- CVE-2023-25180
- CVE-2023-2602
- CVE-2023-2603
- CVE-2023-2609
- CVE-2023-2610
- CVE-2023-29491
- CVE-2023-29499
- CVE-2023-3138
- CVE-2023-31436
- CVE-2023-31484
- CVE-2023-32233
- CVE-2023-32324
- CVE-2023-32611
- CVE-2023-32636
- CVE-2023-32643
- CVE-2023-32665
- CVE-2023-32681
- CVE-2023-34241
In the Google Distributed Cloud air-gapped 1.9.5 AddOn component, the issue on clamav runner handling SIGTERM signal is resolved.
In Google Distributed Cloud air-gapped versions 1.9.0 through 1.9.4, if a Project was created with a name longer than 20 characters, the Monitoring stack would fail to start due to a volume name being generated that exceeded Kubernetes' limit. The volume name is no longer generated in this way and the Monitoring stack supports the full 30-character Project name limit.
This release fixes an issue with disaster recovery execution of HSM backups.
Google Distributed Cloud air-gapped 1.9.5 has a known issue where role-based access control (RBAC) and schema settings in the VM manager is stopping users from starting VM backup and restore processes.
Google Distributed Cloud air-gapped 1.9.5 has a known issue where the
harbor-cert-secret has a different certificate authority (CA) from the client side CA.
Google Distributed Cloud air-gapped 1.9.5 has a known issue where a user cluster with three n2-standard-4 worker nodes has insufficient CPU resources for upgrade.
Google Distributed Cloud air-gapped 1.9.5 has a known issue where upgrade fails when a pod is terminated.
Google Distributed Cloud air-gapped 1.9.5 has a known
issue where the kube-state-metrics deployment crash loops.
Google Distributed Cloud air-gapped 1.9.5 has a known issue where a user cluster does not become ready in time to restart the coredns deployment.
Google Distributed Cloud air-gapped 1.9.5 has a known issue where alerts in organization system clusters don't reach the ticketing system.