Releasesby GlyphTPU Subslicing (also known as Dynamic Subslicing) is now generally available for Ironwood (TPU7x)
TPU Subslicing (also known as Dynamic Subslicing) is now generally available for Ironwood (TPU7x). This feature enables you to incrementally provision node pools for a cube or litepod, breaking them into smaller slices (subslices) to run workloads requiring smaller topologies.
Also shipped Aug 3, 2026Google Cloud in August 2026 →
Inline Stored Procedures for hybrid tables (Public preview)
Inline Stored Procedures for hybrid tables are now available in public preview. Inline Stored Procedures are a new type of Snowflake stored procedure designed for operational workloads on hybrid tables.
Organization Hub (General availability)
The Insights page under Organization Hub presents interactive tiles that show trends, alerts, and summary data for your entire organization. The feature is now generally available to customers who have ORGANIZATION_USAGE premium views enabled, and is no longer in Preview .
AI Agents Inventory in the Trust Center AI Security tab (Preview)
With this preview release, the AI Security tab in the Trust Center includes an AI Agents Inventory section. This section provides a consolidated inventory of the Cortex Agents in your account, filtered by one or more categories, so that you can identify which agents to assess or investigate for better governance and security posture.
Trust Center AI Security scanner package and tab (General availability)
The AI Security scanner package and the AI Security tab in the Trust Center are now generally available. Use them to monitor AI-related configurations and usage in your account, and to review the security posture of AI workloads that use Cortex Agents, Snowflake CoWork, or Cortex Code from a single dashboard.
Serverless compute access control is now generally available
Serverless compute access control is now generally available. Workspace admins can govern who runs serverless workloads through two built-in serverless compute objects: Default Interactive Compute (governs access to notebooks and Databricks Connect) and Default Automated Compute (governs access to jobs and Spark Declarative Pipelines on Lakeflow).
Secrets in Unity Catalog is GA
Secrets in Unity Catalog is now generally available. You can store, govern, and access secrets as securable objects in Unity Catalog. A Unity Catalog secret uses the three-level namespace ( catalog.schema.secret ) and is governed by Unity Catalog privileges, so you can apply the same access controls and auditing that you use for other data assets.
More from Google Kubernetes EngineEvery Google Kubernetes Engine release →
You can generate optimized GKE configurations that can improve performance for specific workloads, such as...
You can generate optimized GKE configurations that can improve performance for specific workloads, such as Redis and MySQL, by using the gcloud CLI. The configurations are ConfigMaps and ComputeClasses that apply performance recommendations to the workloads and the nodes.
In GKE version 1.36.0-gke.3302001 and later, you can run Arm workloads on the Autopilot container-optimized...
In GKE version 1.36.0-gke.3302001 and later, you can run Arm workloads on the Autopilot container-optimized compute platform by using the general-purpose autopilot-arm and autopilot-arm-spot ComputeClasses. You can select these ComputeClasses in Autopilot or Standard clusters. GKE runs the workloads that select these ComputeClasses in Autopilot mode.
(2026-R32) Version updates
GKE cluster versions have been updated. New versions available for upgrades and new clusters. The following versions are now available for new GKE clusters, and for manual control plane upgrades and node upgrades for existing clusters. For more information about versioning and upgrades, see GKE versioning and support and About GKE cluster upgrades .
Note : Your clusters might not have these versions available
Note : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to complete across all Google Cloud zones. Version 1.36.2-gke.2064000 is now the default version for cluster creation in the Rapid channel.
GKE now supports opting out of the default kubernetes.io/arch=arm64:NoSchedule taint on Arm nodes in Standard...
GKE now supports opting out of the default kubernetes.io/arch=arm64:NoSchedule taint on Arm nodes in Standard node pools and in custom ComputeClasses. To opt out of the default taint, set the --node-architecture-taint-behavior gcloud CLI flag to NONE for a node pool or set the taintConfig.architectureTaintBehavior field to NONE for a ComputeClass.
GKE Gateway and Inference Gateway now support Cross-Origin Resource Sharing (CORS)
GKE Gateway and Inference Gateway now support Cross-Origin Resource Sharing (CORS). You can configure a CORS filter directly on an HTTPRoute resource by using the portable syntax standardized by Gateway API .
In GKE version 1.36 and later, GKE Dataplane V2 with NetworkPolicies supports up to 15,000 nodes per cluster...
In GKE version 1.36 and later, GKE Dataplane V2 with NetworkPolicies supports up to 15,000 nodes per cluster, increased from the previous limit of 7,500 nodes. For clusters exceeding 5,000 nodes, contact Cloud Customer Care to request a quota increase. For more information, see Cluster size limits and requirements .
In version 1.36.2-gke.1498000 and later, GKE supports mixed-protocol Services of type LoadBalancer in general...
In version 1.36.2-gke.1498000 and later, GKE supports mixed-protocol Services of type LoadBalancer in general availability (GA). Mixed-protocol Services let both external (NetLB) and internal (ILB) passthrough Network Load Balancers handle simultaneous TCP and UDP traffic on a single IP address across IPv4, IPv6, and dual-stack environments. Main