Session affinity support using GCPTrafficDistributionPolicy for GKE Gateway is generally available
Session affinity support using GCPTrafficDistributionPolicy for GKE Gateway is generally available. This release currently supports single-cluster GKE Gateway load balancers using the following GatewayClasses: gke-l7-rilb gke-l7-regional-external-managed gke-l7-global-external-managed In addition to the session affinity types available in Preview, you can...
Also shipped Aug 31, 2026Google Cloud in August 2026 →
app.yml for Snowflake App Runtime (Preview)
Snowflake App Runtime projects use a single app.yml file to describe both deployment and the remote build. Include version: 2 at the top of the file. snow app setup writes this file for new projects.
Snowflake-provided tags (Public Preview)
With this preview release, Snowflake-provided tags are available in every account. These out of the box tags in the SNOWFLAKE.TAGS schema give you a consistent vocabulary for common governance use cases, including cost center, certification status, sensitivity, environment, and project, without creating and maintaining equivalent tags in each account.
Second generation Openflow (Preview)
Second generation (gen 2) Openflow is now in public preview. Gen 2 makes Openflow deployments, runtimes, and connectors first-class Snowflake SQL objects with standard RBAC, SQL lifecycle management, and versioned connector configuration. Supported connectors at public preview: PostgreSQL CDC, MySQL/MariaDB CDC. Gen 2 Openflow is available on AWS and Azure.
Databricks SQL version 2026.36 is now available in Preview
Databricks SQL version 2026.36 is now available in the Preview channel. See features in 2026.32 .
Pipeline events system table is in Beta
The pipeline_events system table is in Beta . This table records Lakeflow pipelines event log entries for pipelines in your account, capturing lifecycle transitions, flow progress, data quality metrics, errors, and other operational data across all pipelines and workspaces in a region.
ABAC GRANT policies are generally available for models and services
ABAC GRANT policies for models, model services, model provider services, Model Context Protocol (MCP) services, and agent services are now generally available. These policies dynamically grant Unity Catalog privileges to securable objects whose governed tags match a condition, instead of granting privileges on each object individually.
More from Google Kubernetes EngineEvery Google Kubernetes Engine release →
GKE version 1.35.1-gke.1031000 and later include the following changes to automatically created firewall...
GKE version 1.35.1-gke.1031000 and later include the following changes to automatically created firewall rules for Services : Changes the priority of multiple existing firewall rules for Services from 1000 to 999 . Creates additional firewall rules to deny traffic that is not explicitly allowed by other auto-created firewall rules.
The bare metal machine types from the C3 machine series are now generally available with GKE clusters
The bare metal machine types from the C3 machine series are now generally available with GKE clusters. You can now provision machine types such as c3-standard-192-metal in Standard mode with any available GKE version.
(2026-R37) Version updates
GKE cluster versions have been updated. New versions available for upgrades and new clusters. The following versions are now available for new GKE clusters, and for manual control plane upgrades and node upgrades for existing clusters. For more information about versioning and upgrades, see GKE versioning and support and About GKE cluster upgrades .
Note : Your clusters might not have these versions available
Note : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to complete across all Google Cloud zones. Version 1.36.3-gke.1767000 is now the default version for cluster creation in the Rapid channel.
GKE support for using the c3-standard-*-lssd machine types as Confidential GKE Nodes with Intel TDX is...
GKE support for using the c3-standard-*-lssd machine types as Confidential GKE Nodes with Intel TDX is generally available. For more information, see the following: To use this feature with GKE, see Encrypt workload data in-use with Confidential GKE Nodes . To learn more about the feature from Compute Engine, see Confidential VM overview .
Kubernetes 1.37 is available
Kubernetes 1.37 is now available in the Rapid channel. For more information about the content of Kubernetes 1.37, read the Kubernetes 1.37 Release Notes and Kubernetes 1.37 Release Blog .
Removed in 1.37
- Identity Service for GKE is no longer supported starting in GKE 1.37: Creating new clusters or upgrading existing clusters to GKE version 1.37 or later with Identity Service for GKE enabled is blocked. For external OIDC authentication, please migrate to Workforce Identity Federation .
Other changes in 1.37
- Starting with GKE version 1.37.0-gke.2100000, newly created clusters default to using control plane node creation, which improves cluster security by having the control plane manage node registration instead of kubelet self-registration. Existing clusters are not affected.