Releasesby GlyphGKE version 1.35.1-gke.1031000 and later include the following changes to automatically created firewall...
GKE version 1.35.1-gke.1031000 and later include the following changes to automatically created firewall rules for Services : Changes the priority of multiple existing firewall rules for Services from 1000 to 999 . Creates additional firewall rules to deny traffic that is not explicitly allowed by other auto-created firewall rules.
Also shipped Sep 1, 2026Google Cloud in September 2026 →
Fivetran connection cron scheduling enters beta
Connections can now use one or more cron expressions to control exactly when they sync, giving finer control than fixed sync frequencies.
Fivetran Connection Warnings REST API enters private preview
New endpoints retrieve active warnings for a connection, grouped by destination table with codes, messages and timestamps, and dismiss all instances of a warning type, enabling programmatic warning management.
Snowflake App Runtime (General availability)
Snowflake App Runtime is now generally available and is no longer in Preview .
Apache Arrow support for Zerobus Ingest is now generally available
Apache Arrow support for Zerobus Ingest in Lakeflow Connect is now generally available. See Use Arrow Flight with Zerobus Ingest .
Genie One web search is in Beta
Genie One can now search the public web to answer questions that need current information, such as recent release notes, third-party documentation, or news. Genie One cites the external sources it uses as links in its response. See Search the web .
Genie Code scheduled tasks are now generally available
Genie Code scheduled tasks are now generally available. You can schedule Genie Code to run a prompt on a recurring schedule. Each run executes your prompt as a full Genie Code session and produces a continuable Genie chat with the results, so you can turn recurring analysis and other work into an unattended background task.
More from Google Kubernetes EngineEvery Google Kubernetes Engine release →
The bare metal machine types from the C3 machine series are now generally available with GKE clusters
The bare metal machine types from the C3 machine series are now generally available with GKE clusters. You can now provision machine types such as c3-standard-192-metal in Standard mode with any available GKE version.
(2026-R37) Version updates
GKE cluster versions have been updated. New versions available for upgrades and new clusters. The following versions are now available for new GKE clusters, and for manual control plane upgrades and node upgrades for existing clusters. For more information about versioning and upgrades, see GKE versioning and support and About GKE cluster upgrades .
Note : Your clusters might not have these versions available
Note : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to complete across all Google Cloud zones. Version 1.36.3-gke.1767000 is now the default version for cluster creation in the Rapid channel.
Session affinity support using GCPTrafficDistributionPolicy for GKE Gateway is generally available
Session affinity support using GCPTrafficDistributionPolicy for GKE Gateway is generally available. This release currently supports single-cluster GKE Gateway load balancers using the following GatewayClasses: gke-l7-rilb gke-l7-regional-external-managed gke-l7-global-external-managed In addition to the session affinity types available in Preview, you can...
GKE support for using the c3-standard-*-lssd machine types as Confidential GKE Nodes with Intel TDX is...
GKE support for using the c3-standard-*-lssd machine types as Confidential GKE Nodes with Intel TDX is generally available. For more information, see the following: To use this feature with GKE, see Encrypt workload data in-use with Confidential GKE Nodes . To learn more about the feature from Compute Engine, see Confidential VM overview .
Kubernetes 1.37 is available
Kubernetes 1.37 is now available in the Rapid channel. For more information about the content of Kubernetes 1.37, read the Kubernetes 1.37 Release Notes and Kubernetes 1.37 Release Blog .
Removed in 1.37
- Identity Service for GKE is no longer supported starting in GKE 1.37: Creating new clusters or upgrading existing clusters to GKE version 1.37 or later with Identity Service for GKE enabled is blocked. For external OIDC authentication, please migrate to Workforce Identity Federation .
Other changes in 1.37
- Starting with GKE version 1.37.0-gke.2100000, newly created clusters default to using control plane node creation, which improves cluster security by having the control plane manage node registration instead of kubelet self-registration. Existing clusters are not affected.