Google Cloud release notes

The following release notes cover the most recent changes over the last 30 days. For a comprehensive list, see the individual product release note pages .

You can see the latest product updates for all of Google Cloud on the Google Cloud release notes page.

To get the latest product updates delivered to you, add the URL of this page to your feed reader, or add the feed URL directly: https://cloud.google.com/feeds/gcp-release-notes.xml

May 20, 2020

Anthos Service Mesh

1.5.4-asm.2

1.5.4-asm.2 is now available.

Security fixes

1.5.4-asm.2 contains all the same security fixes that are in Anthos Service Mesh 1.4.

Beta release of the Anthos CLI

The Anthos CLI simplifies the installation of Anthos Service Mesh. You can use the Anthos CLI to:

Port change for automatic sidecar injection

If you are installing Anthos Service Mesh on a private cluster, you must add a firewall rule to open port 15017 if you want to use automatic sidecar injection. In Anthos Service Mesh 1.4, the port used for automatic sidecar injection is 9443.

If you don't add the firewall rule and automatic sidecar injection is enabled, you get an error when you deploy workloads. For details on adding a firewall rule, see Adding firewall rules for specific use cases.

The alpha authentication policy is deprecated

See Updating to the beta security policies for more information.

IstioOperator API replaces IstioControlPlane API

The alpha IstioControlPlane API has been replaced by the IstioOperator API. You must use the IstioOperator API in YAML files to enable optional features when you install Anthos Service Mesh.

Citadel CA supported on GKE

By default, the Anthos Service Mesh Certificate Authority (Mesh CA) is enabled on GKE when you install Anthos Service Mesh. You can optionally enable the Citadel CA as a replacement for Mesh CA on GKE.

Istio CNI plugin is supported

By default Anthos Service Mesh injects an initContainer, istio-init, in pods deployed in the mesh. The istio-init container sets up the pod network traffic redirection to/from the sidecar proxy. This requires the user or service-account deploying pods to the mesh to have sufficient Kubernetes RBAC permissions to deploy containers with the NET_ADMIN and NET_RAW capabilities. Requiring users to have elevated Kubernetes RBAC permissions is problematic for some organization's security compliance. The Istio Container Network Interface (CNI) plugin is a replacement for the istio-init container that performs the same networking functionality but without requiring users to enable elevated Kubernetes RBAC permissions.

The Istio CNI plugin performs the mesh pod traffic redirection in the Kubernetes pod lifecycle's network setup phase, thereby removing the requirement for the NET_ADMIN and NET_RAW capabilities for users deploying pods into the mesh. The Istio CNI plugin replaces the functionality provided by the istio-init container.

Enabling pod security policies no longer needed

SDS security was improved by merging Node Agent with Pilot Agent as Istio Agent and removing cross-pod UDS, which no longer requires users to deploy Kubernetes pod security policies for UDS connections.

BigQuery

Happy 10th birthday, BigQuery!

Cloud SQL federated queries are now generally available (GA).

Dynamic SQL is now available as a beta release in all BigQuery regions. Dynamic SQL lets you generate and execute SQL statements dynamically at runtime. For more information, see EXECUTE IMMEDIATE.

BigQuery Trial slots are now available in US and EU multi-regions. Trial slots are a limited promotion for qualified customers.

Cloud Load Balancing

For internal TCP/UDP load balancers, you can create multiple forwarding fules with the same IP address. The forwarding rules can have different protocols and ports. This feature is available in Beta.

Cloud Monitoring

Cloud Monitoring introduces an improved experience for viewing and managing incidents. Improvements include performance optimizations for Workspaces with large numbers of incidents, summary statics, and the ability to filter by alerting policy name, metric type, and resource type. For more information, see Incidents and events.

Compute Engine

If your managed instance group encountered errors - for example, if a VM could not be created - you can view those errors to diagnose and mitigate the cause. This is Generally available.

May 19, 2020

Cloud Debugger

Cloud Debugger now lets you canary snapshots and logpoints on your Java applications. To learn more, see the Java page for setting up Cloud Debugger.

Cloud Monitoring

Alert notifications delivered by email now come from "[email protected]" instead of "[email protected]".

Compute Engine

Troubleshoot VMs by capturing screenshots. This is in beta.

Config Connector

Bug fixes and reliability improvements

Improving handling of scenarios when version field on ContainerNodePool is updated externally

Filestore

Learn how to create low disk space alerts for your Filestore instances.

May 18, 2020

Cloud Bigtable

The Cloud Bigtable Monitoring page in the Cloud Console has been redesigned. Changes to the visual experience include the following:

  • Views that are now split into separate tabs
  • A new time range picker
  • Updated styling on the graphs
Cloud Billing

Cloud Billing budgets emails: ensure your budget alert emails are seen by the right people using Cloud Monitoring notifications on your Cloud Billing budgets. By default, alert emails are sent to Billing Account Administrators. With the Monitoring notifications feature, you can customize your budget to send alerts to up to five additional email recipients you specify. See the documentation for more details.

New information is now available on your Cloud Billing account Overview page in the Cloud Console, featuring at-a-glance summaries of the top five spending projects and top five spending products over the last 12 months.

To see the updated Billing Account Overview page, go to the Manage billing accounts page in the Cloud Console and sign in, then select the name of the Cloud Billing account you want to view. The Billing Overview page is displayed with the BILLING ACCOUNT OVERVIEW tab selected. You might need to scroll the page to see all the features.

Cloud DNS

DNS forwarding to a non-RFC 1918 address is available in General Availability.

Cloud Functions

Cloud Functions now supports Node.js 10 at the General Availability release level.

Cloud Identity and Access Management

Recommendations from the Cloud IAM recommender can now include suggestions to create custom roles.

Cloud Logging

Logs Viewer now contains the Logs field explorer panel, which lets you view aggregation-based results for your project's log fields and makes it more efficient to refine queries. To learn more, go to the Logs Viewer (Preview) page.

Cloud SQL for MySQL

MySQL 5.6 minor version is upgraded to 5.6.42. MySQL 5.7 minor version is upgraded to 5.7.25.

Cloud Spanner

You can now run SQL queries to retrieve transaction statistics for your database over recent one-minute, 10-minute, and one-hour time periods.

Cloud Storage

The V4 signing process is now in GA.

  • The V4 signing process is an improved method for creating signatures using RSA or HMAC keys.
Virtual Private Cloud

Subnets in VPC networks now support IP addresses other than RFC 1918 addresses. For more information, see Subnet ranges.

May 17, 2020

Dialogflow

Old Node.js client library require statements must be updated. Your require statements should look like this:

const dialogflow = require('@google-cloud/dialogflow').v2;

or this:

const dialogflow = require('@google-cloud/dialogflow').v2beta1;

Old syntax that does not include @google-cloud is now deprecated. The old syntax will continue to work, but you will not receive updates.

May 16, 2020

Cloud Data Loss Prevention

Added infoType detectors:

AWS_CREDENTIALS

May 15, 2020

Cloud Composer
  • New versions of Cloud Composer images: composer-1.10.3-airflow-1.10.2, composer-1.10.3-airflow-1.10.3 and composer-1.10.3-airflow-1.10.6. The default is composer-1.10.3-airflow-1.10.3. Upgrade your Cloud SDK to use features in this release.
  • Resource quota limits have been updated, allowing environment administrators to set quotas with more granularity. The default quotas for read and write operations have also changed; see Cloud Composer resource quotas for details. The old limits are deprecated, but will not be removed from the Cloud Console Quotas page until a future release.
  • The machine type of the Airflow web server will now be preserved during Composer environment updates, including cases like new PyPi module installations, or adding new environment variables.
  • Synchronization of log files between the Airflow scheduler, web server and workers has been improved.
  • More useful error messages have been added for Composer environment upgrade failures.
  • Future change: Airflow 1.10.6 will become the default Airflow version for Composer environments in an upcoming release.
  • Composer version 1.6.1 has been deprecated.
Cloud SQL for PostgreSQL

PostgreSQL 9.6 minor version is upgraded to 9.6.16. PostgreSQL 10 minor version is upgraded to 10.11. PostgreSQL 11 minor version is upgraded to 11.6. PostgreSQL 12 minor version is upgraded to 12.1.

Cloud Vision

OCR model upgrades

The text_detection and document_text_detection models have been upgraded to newer versions. The API interface and client library will be the same as previous version. The API follows the same Service Level Agreement.

The legacy models can still be accessed until June 30, 2020. Specify "builtin/legacy_20190601" in the model field of a Feature object to get the old model results. After June 30, 2020 the old models will not longer be offered.

For more information, see the product documentation.

Config Connector

fix ContainerNodePool version upgrade scenario

increase the cpu/memory request for webhook and recorder

Miscellaneous bug fixes and improvement

May 14, 2020

App Engine flexible environment PHP

To get a fine-grained view of billing data for each resource used by your App Engine services, you can apply labels to the services, export your billing data to BigQuery, and run queries. For more information, see Labeling App Engine resources.

App Engine flexible environment Ruby

To get a fine-grained view of billing data for each resource used by your App Engine services, you can apply labels to the services, export your billing data to BigQuery, and run queries. For more information, see Labeling App Engine resources.

Cloud Monitoring

Starting in version 6.0.2, the Cloud Monitoring agent is available for the Ubuntu LTS 20.04 (Focal Fossa) distribution.

May 13, 2020

AI Platform Prediction

AI Platform Prediction now supports the following regions for batch prediction, in addition to those that were already supported:

  • northamerica-northeast1 (Montréal)
  • southamerica-east1 (São Paulo)
  • australia-southeast1 (Sydney)

See the full list of available regions.

northamerica-northeast1 and southamerica-east1 have the same pricing as other Americas regions, and australia-southeast1 has the same pricing as other Asia Pacific regions. Learn about pricing for each region.

AI Platform Training

AI Platform Training now supports the following regions, in addition to those that were already supported:

  • northamerica-northeast1 (Montréal)
  • southamerica-east1 (São Paulo)
  • australia-southeast1 (Sydney)

GPUs are available for training in each of the new regions:

  • NVIDIA Tesla P4 GPUs are available in northamerica-northeast1.
  • NVIDIA Tesla T4 GPUs are available in southamerica-east1.
  • NVIDIA Tesla P4 GPUs and NVIDIA Tesla P100 GPUs are available in australia-southeast1.

See the full list of available regions and the guide to training with GPUs.

northamerica-northeast1 and southamerica-east1 have the same pricing as other Americas regions, and australia-southeast1 has the same pricing as other Asia Pacific regions. Learn about pricing for each region.

BigQuery

Updated versions of Magnitude Simba JDBC drivers have been released.

Cloud Run

Cloud Run (fully managed) now supports connecting to a VPC network with Serverless VPC Access, in beta.

Memorystore for Redis

Released support for VPC Service Controls for Memorystore for Redis.

VPC Service Controls

Beta stage support for the following integration:

May 12, 2020

AI Platform Deep Learning VM Image

M47 release

Fixed an OS login issue under single user mode for a user external to an organization.

Fixed a git extensions plugin issue in TensorFlow 2 images.

Anthos Service Mesh

1.4.9-asm.1

Fixes the security issue, CVE-2020-10739, with the same fixes as OSS Istio 1.4.9. See ISTIO-SECURITY-2020-005 for more information.

BigQuery

Updated versions of Magnitude Simba ODBC drivers have been released.

Cloud Profiler

The Cloud Profiler Python agent is now generally available. See Profiling Python applications for information on configuring your Python application.

Cloud TPU

Cloud TPU currently supports TensorFlow version 1.15.2. See the Release Notes.

TensorFlow 1.15 supported Python 2, but that support has been discontinued with TensorFlow 1.15.2.

Compute Engine

Automatically manage the size of sole-tenant node groups with the sole-tenant node group autoscaler. This is Generally Available.

Security Command Center

Security Command Center Premium and Standard tiers are now available.

The Security Command Center Premium tier includes:

  • Security Health Analytics
  • Web Security Scanner managed scans
  • Event Threat Detection
  • Container Threat Detection

Learn more about the Security Command Center Premium tier.

The Event Threat Detection API will be deprecated in the coming months. Similar functionality is available in the Security Command Center API settings feature.

Container Threat Detection currently supports the following Kubernetes Engine versions on the Regular and Rapid channels:

  • >= 1.15.9-gke.12
  • >= 1.16.5-gke.2
  • >= 1.17

In a future update, Container Threat Detection will support version 1.14 and the Stable channel.

May 11, 2020

App Engine standard environment Python

Updated Python SDK to version 1.9.91.

Cloud Logging

You can now use regular expressions to query your logs data and create filters. For more information, go to Using regular expressions.

Cloud SQL for PostgreSQL

Cloud SQL has expanded support for PostgreSQL extensions. Eight additional PostgreSQL extensions are now available:

  • pageinspect
  • pgfincore
  • pg_freespacemap
  • pg_repack
  • pg_visibility
  • PL/Proxy
  • postgres_fdw
  • postgresql-hll

For information about these newly-added extensions, see PostgreSQL extensions.

Compute Engine

You can identify idle persistent disk resources by using idle persistent disk recommendations. Following these recommendations will help reduce unused resources and reduce your compute bill. This feature is Generally available.

May 08, 2020

BigQuery Cloud Composer

Cloud Composer is now available in Hong Kong (asia-east2).

Cloud Composer is now available in Las Vegas (us-west4).

Cloud Monitoring

Monitoring Query Language (MQL) is now available in Beta. MQL is an expressive, text-based interface to Cloud Monitoring time-series data. With MQL, you can create charts you can't create any other way. You can access MQL from both the Cloud Console and the Monitoring API. For more information, see Introduction to Monitoring Query Language.

Cloud Run

Cloud Code IDE extensions support Cloud Run. See Cloud Code for VS Code and Cloud Code for IntelliJ

Cloud TPU

Cloud TPU now supports TensorFlow 2.2. See the TensorFlow 2.2 Release Notes for a complete list of features included with this release. New models for Image segmentation and Image classification have been added to the official cloud TPU supported models list.

Dialogflow

Beta launch of a one-click integration with the Voximplant telephony partner:

May 07, 2020

Anthos GKE deployed on AWS

To upgrade your Anthos GKE on AWS clusters, you need to uninstall all your management and user clusters. You also need to download the new version of the anthos-gke cli tool.

Anthos GKE on AWS now supports auto-scaling. You can enable auto-scaling by changing settings in your AWSNodePools, or scale your clusters manually by adding new AWSNodePools.

Built-in EBS StorageClass names have been changed to standard-rwo and premium-rwo. If you declare the singlewriter-standard or singlewriter-premium StorageClasses with your workloads, you must update your workloads when upgrading.

Anthos GKE on AWS now support for Application-layer secrets encryption with AWS KMS by passing a KMS key ARN to your AWSCluster.

May 06, 2020

Traffic Director

A new document is added to Traffic Director: Ingress traffic for your mesh.

May 05, 2020

Dataproc

Clusters can now be created with non-preemptible secondary workers.

Dialogflow

GA (general availability) launch of auto speech adaptation.

May 04, 2020

Cloud Data Loss Prevention

We have made quality and performance enhancements to our name detectors. PERSON_NAME should be used in most scenarios as it will return the most comprehensive finding. MALE_NAME and FEMALE_NAME are now synonymous with FIRST_NAME with Likelihood now never being greater than POSSIBLE. These changes will be rolled out over the coming days.

Cloud SQL for MySQL

As previously announced, Cloud SQL First Generation was deprecated on January 29, 2019. All First Generation instances have been migrated to Second Generation. In the documentation and in the Google Cloud Console, "MySQL Second Generation instances" are now referred to simply as "MySQL instances." For general information about this deprecation, see the existing deprecation notice.

Dialogflow

The shutdown of 7 integrations announced in January is now extended to June 6th, 2020.

May 01, 2020

BigQuery

A new function, JSON_EXTRACT_ARRAY, has been added to the list of JSON functions. This function allows you to extract the contents of a JSON document as a string array. For more information, see the JSON_EXTRACT_ARRAY reference section.

The ORDER BY clause now supports the NULLS FIRST and NULLS LAST clauses. These clauses allow you to specify the sort order of null and non-null values. For more information, see the ORDER BY reference section.

Cloud CDN

Added a new Features page that summarizes all Cloud CDN capabilities.

Dataproc

Announcing the Beta release of Dataproc Component Gateway, which provides secure access to web endpoints for Dataproc default and optional components.

Text-to-Speech

Cloud Text-to-Speech now offers 36 new voices (both Standard and WaveNet) in the following languages. See the Supported Voices and Languages page for complete details.

  • Arabic
  • Bengali (India)
  • English (India)
  • French (France)
  • German (Germany)
  • Gujarati (India)
  • Hindi (India)
  • Indonesian (Indonesia)
  • Kannada (India)
  • Malayalam (India)
  • Mandarin Chinese
  • Russian (Russia)
  • Tamil (India)
  • Telugu (India)
  • Thai (Thailand)

April 30, 2020

BigQuery

The BigQuery Data Transfer Service is now available in the Taiwan (asia-east1) region.

BigQuery Data Transfer Service

BigQuery Data Transfer Service is now available in the Taiwan (asia-east1) region.

Compute Engine

SSD persistent disks now have increased write throughput limits on instances with 1 to 15 vCPUs. This improvement applies to SSD persistent disks on all machine types except C2 machine types. To learn more about the requirements to reach these limits, see Block storage performance.

Config Connector

Fixes for the examples for the following resources: CloudBuildTrigger, AccessContextManager, ComputeDisk, and ComputeSubNetwork

Reduced memory requirements for deletion defender, recorder, and webhook. Reduced cpu requirements for recorder and webhook Increased CPU for the manager controller from 100m to 200m.

Ensure the webhook process does not signal it is ready until it is serving HTTP traffic

Data Catalog

Data Catalog is now generally available (GA). - The Data Catalog v1 API, gcloud commands, and UI are now available. For details, see the API reference. Code samples throughout the documentation have been updated to use the new API. - Data Catalog has been regionalized, and now hosts user metadata in 23 regions worldwide. - Billing has been enabled for Data Catalog API calls and storage using all supported resources. For more info, see the pricing page.

Dialogflow

Beta launch of a one-click integration with a new telephony partner:

April 29, 2020

AI Platform Prediction

AI Platform Prediction now supports several regional endpoints for online prediction. Regional endpoints provide additional protection against outages in other regions by isolating your model and version resources from other regions. The following regional endpoints are available in beta:

  • us-central1-ml.googleapis.com
  • europe-west4-ml.googleapis.com
  • asia-east1-ml.googleapis.com

You can use these endpoints instead of the global endpoint, ml.googleapis.com, when you use AI Platform Prediction for online prediction. Learn how to use regional endpoints for online prediction, and read about their benefits and limitations.

You can now deploy scikit-learn and XGBoost models for online prediction using Compute Engine (N1) machine types. Previously, you could only deploy TensorFlow models when you used these machine types. Learn more about ML framework support for Compute Engine (N1) machine types.

You cannot use GPUs with scikit-learn or XGBoost models, and you can only use scikit-learn and XGBoost models with Compute Engine (N1) machine types when you deploy your models and versions to a regional endpoint.

Compute Engine (N1) machine types for online prediction remain available in the beta launch stage.

The europe-west4 (Netherlands) and asia-east1 (Taiwan) regions are now available for online prediction. These regions are only available for online prediction on their respective regional endpoints, and you can only use Compute Engine (N1) machine types for online prediction in these regions.

When you deploy model versions in the europe-west4 region, you can optionally use NVIDIA Tesla P4, NVIDIA Tesla T4, or NVIDIA Tesla V100 GPUs to accelerate prediction.

When you deploy model versions in the asia-east1 region, you can optionally use NVIDIA Tesla K80 or NVIDIA Tesla P100 GPUs to accelerate prediction.

Learn more about using GPUs for online prediction, and see which GPUs are available in which regions.

Learn about the pricing for the newly available regions and GPU resources.

We recommend against using Compute Engine (N1) machine types on the AI Platform Prediction global endpoint. Instead, only use Compute Engine (N1) machine types when you deploy models and versions to a regional endpoint.

Model versions that use Compute Engine (N1) machine types and were previously deployed to the us-central1 region on the global endpoint will continue to function.

Virtual Private Cloud

Google Cloud now encrypts VPC traffic within the boundaries of the data centers in asia-east2. We will roll out this feature gradually to other regions. Google Cloud already encrypts VPC traffic between all data centers as described in Encryption in Transit in Google Cloud.

April 28, 2020

Anthos Service Mesh

The Anthos Service Mesh dashboard in the Google Cloud Console is generally available for Anthos Service Mesh installations on Google Kubernetes Engine clusters. For more information, see the Observability overview.

Cloud Data Loss Prevention

Added additional infoType detector:

  • JSON_WEB_TOKEN
Cloud Monitoring

The 5.x version of the Cloud Monitoring agent for Linux is deprecated. Users are encouraged to upgrade their agents as soon as possible.

The stack-install.sh and the install-monitoring-agent.sh installation scripts for the Cloud Monitoring agent for Linux are deprecated. Refer to the Installing the Cloud Monitoring agent guide for the latest installation procedures.

Media Translation

Beta release of Media Translation API. Media Translation translates an audio file or stream of speech into text for 12 languages.

April 27, 2020

BigQuery

BigQuery is now available in the Las Vegas (us-west4) region.

BigQuery BI Engine

BigQuery BI Engine is now available in the Las Vegas (us-west4) region.

BigQuery Data Transfer Service

BigQuery Data Transfer Service is now available in the Las Vegas (us-west4) region.

BigQuery ML

BigQuery ML is now available in the Las Vegas (us-west4) region.

Cloud Composer
  • New versions of Cloud Composer images: composer-1.10.2-airflow-1.10.2, composer-1.10.2-airflow-1.10.3 and composer-1.10.2-airflow-1.10.6. The default is composer-1.10.2-airflow-1.10.3. Upgrade your Cloud SDK to use features in this release.
  • Fixed an issue with the CloudSQL Proxy HealthCheck that caused the Proxy Pod to restart repeatedly.
  • The fluentd spec for in-cluster build log exporting now correctly points to the production fluentd image from cloud-airflow-releaser. This fix is required for Composer to correctly perform in-cluster builds for VPC SC configuration.
  • Adjusted ImageBuilder to fix PyPI package installation issues when using VPC SC.
  • Fixed intermittent issues with airflow-monitoring during the initialization phase.
  • Fixed an issue that caused the Airflow scheduler and worker pods to take ~10 minutes to terminate.
  • Fixed an issue with upgrading the image version and improved error handling during Composer environment upgrades.
  • The oldest supported version of Composer is now composer-1.6.0-airflow-x.x.x
Cloud Load Balancing

Google-managed SSL certificates are available in General Availability.

Cloud Logging

The Logs Viewer (Preview) is now GA. To learn more, go to the Logs Viewer (Preview) Overview page.

Dataproc

Dataproc on GKE version 1.4.27-beta is available with minor fixes.

April 25, 2020

Dialogflow

In May 2020, the Facebook Messenger integration will be updated, and you may notice slight changes related to fulfillment.

To make sure that your Facebook Messenger bot keeps functioning normally, observe the following recommendations:

  1. To get the Facebook sender.id value, use the originalDetectIntentRequest.payload.data.sender field from the Dialogflow WebhookRequest message.
  2. To get the source field value, use the originalDetectIntentRequest.source field from the Dialogflow WebhookRequest message.
  3. To send rich response messages from your webhook to the Facebook Messenger integration, use the WebhookResponse.fulfillment_mesages[].payload field.
  4. In your webhook logic, don’t rely on the fields that are not documented in the official Facebook Messenger API.

If you have any questions, reach out to your primary support channel.

April 24, 2020

AI Platform Prediction

Visualization settings for AI Explanations are now available. You can customize how feature attributions are displayed for image data.

Learn more about visualizing explanations.

Dataproc

Image 1.5

Delta Lake version is upgraded to 0.5.0 release. Delta Lake Hive Connector 0.1.0 is also added to the 1.5 image.

Customers can now adjust the amount of time the Dataproc startup script will wait for Presto Coordinator service to start before deciding that their startup has succeeded. This is set via dataproc:startup.component.service-binding-timeout.presto-coordinator property and takes a value in seconds. The maximum respected value is 1800 (30 minutes).

New sub-minor image versions: 1.2.96-debian9, 1.3.56-debian9, 1.4.27-debian9, 1.3.56-debian10, 1.4.27-debian10, 1.5.2-debian10, 1.3.56-ubuntu18, 1.4.27-ubuntu18, 1.5.2-ubuntu18

Image 1.5

Cloud Storage connector upgraded to version 2.1.2 (for more information, review the change notes in the GitHub repository)

Image 1.5

Notebook bug fixes: fixed a bug in Zeppelin and Jupyter that resulted in a failure to render images when using Component Gateway. Also fixed a Jupyter Notebooks bug that caused notebook downloads to fail.

Virtual Private Cloud

Private Google Access for on-premises hosts permits on-premises hosts to send traffic from any internal IP addresses, not just RFC 1918 addresses. This feature is now Generally Available.

April 23, 2020

Anthos

Anthos 1.3.1 is now available.

Updated components:

Anthos Config Management

Anthos Config Management images are now included in the Google-provided system images for Binary Authorization.

Policy Agent now allows configuration of namespaces that will bypass the admission controller. For more information, see Excluding Namespaces from Policy Controller

You can now exempt Namespaces from Policy Controller enforcement

Anthos Config Management v1.3.1 now supports Kubernetes v1.16 and higher. Earlier versions of Anthos Config Management relied on APIs that have been deprecated in Kubernetes v1.16.

The Anthos Config Management Syncer pod now reports when it detects that it is fighting with another process over a resource.

Anthos Config Management no longer allows managing resources in unmanaged Namespaces.

If you define a CRD with an integer field that has min/max values, Anthos Config Management will be unable to update the CRD.

Anthos Config Management no longer overwrites undeclared labels and annotations on Namespaces.

Anthos GKE on-prem

Preflight check in gkeadm for access to the Cloud Storage bucket that holds the admin workstation OVA.

Preflight check for internet access includes additional URL www.googleapis.com.

Preflight check for test VM DNS availability.

Preflight check for test VM NTP availability.

Preflight check for test VM F5 access.

Before downloading and creating VM templates from OVAs, GKE on-prem checks if the VM template already exists in vCenter.

Rename gkeadm’s automatically created service accounts.

OVA download displays download progress.

gkeadm prepopulates bundlepath in the seed config on the admin workstation.

Fix for Docker failed DNS resolution on admin workstation at startup.

Admin workstation provisioned by gkeadm uses thin disk provisioning.

Improved user cluster Istio ingress gateway reliability.

Ubuntu image is upgraded to include newest packages.

Update the vCenter credentials for your clusters using the preview command gkectl update credentials vsphere.

The gkeadm configuration file, admin-ws-config.yaml, accepts paths that are prefixed with ~/ for the Certificate Authority (CA) certificate.

Test VMs wait until the network is ready before starting preflight checks.

Improve the error message in preflight check failure for F5 BIG-IP.

Skip VIP check in preflight check in manual load balancing mode.

Upgraded Calico to version 3.8.8 to fix several security vulnerabilities.

Upgraded F5 BIG-IP Controller Docker image to version 1.14.0 to fix a security vulnerability.

Fixed gkeadm admin workstation gcloud proxy username and password configuration.

Fixed the bug that was preventing gkectl check-config from automatically using the proxy that you set in your configuration file when running the full set of preflight validation checks with any GKE on-prem download image.

Fixed an admin workstation upgrade failure when the upgrade process was unable to retrieve SSH keys, which would cause a Golang segmentation fault.

Cloud Billing

For customers with self-serve/online Cloud Billing accounts, you can now find your Cloud Billing documents in the Documents page of the Cloud Billing console. In the Documents page, you can find your monthly invoices or statements, as well as tax documents, if applicable to your account. Before this launch, the Documents page was only available to customers viewing invoiced Cloud Billing accounts, while self-serve/online accounts were limited to finding their Cloud Billing documents in the Transactions page. See the ⁠documentation for more details.

Cost forecasts in Cloud Billing reports has been updated to calculate your forecasted spend up to 12 months in the future. Previously, the calculation forecasted your spend for the next 30 days. Cost forecasts make it easier to see at a glance how your costs are trending and how much you are projected to spend over a time range you specify. See the documentation for more information.

Cloud Load Balancing

External HTTP(S) load balancers now support header-based routing and query parameter-based routing.

These features are available in General Availability.

April 22, 2020

BigQuery ML

BigQuery ML now supports exporting BigQuery ML models to Cloud Storage and using them for online prediction. This feature is in beta. For more information, see Exporting models.

Cloud Billing

Budget alerts: new budget filters are now available. In addition to project and product filters, you can now scope your budgets and alerts for groups of subaccounts and resource labels. Budget alerts help you stay informed of how your spend is tracking against your budget so you can avoid billing surprises. (Note that these filters are not available in the Budgets API in this release.) See the ⁠documentation for more details.

Cloud Data Fusion

Cloud Data Fusion version 6.1.2 is now available. This version includes several stability and performance improvements and new features.

  • Added support for Field Level Lineage for Spark plugins and Streaming pipelines
  • Added support for Spark 2.4
  • Added an option to skip header in the files in delimited, CSV, TSV, and text formats
  • Added an option for database source to replace the characters in the field names

Reduced preview startup by 60%. Also added limit to max concurrent preview runs (10 by default).

Fixed a bug that caused errors when Wrangler's parse-as-csv with header was used when reading multiple small files.

Fixed a bug that caused zombie processes when using the Remote Hadoop Provisioner.

Fixed a bug that caused DBSource plugin to fail in preview mode.

Fixed a race condition that caused a failure when running a Spark program.