Google Cloud Update Version 1.35.0-gke.525

Covers BigQuery sharing listings GA, GKE version updates, and multiple platform changes. Highlights include Cloud Composer region restrictions, Cluster Toolkit v1.90.0, Google Distributed Cloud 1.35.0-gke.525, and several security and stability fixes. Reference IDs: Google Distributed Cloud (software only) for VMware 1.35.0-gke.525, Google Distributed Cloud (software only) for bare metal 1.35.0-gke.525, GKE (2026-R18).

• Google Distributed Cloud for VMware 1.35.0-gke.525 and Google Distributed Cloud for bare metal 1.35.0-gke.525 include vulnerability fixes.
• GKE release notes include updated Container-Optimized OS images with cumulative security fixes.
• Google Distributed Cloud fixes certificate handling so custom registry CA certificates work together with system root certificates, preventing x509: certificate signed by unknown authority errors.
• Google Distributed Cloud fixes issues that could cause authentication/login failures after upgrading non-advanced clusters with OIDC to advanced clusters.

• Fixed an iOS mobile SDK crash when users clicked End chat.
• Cluster Toolkit v1.90.0 adds experimental job submission support, regional AI zones support in Slurm, updated GKE TPU examples, and several Slurm fixes.
• Google Distributed Cloud for VMware fixes upgrade hangs, proxy configuration parsing issues, VM creation timeouts, node label issues, and several cluster operator and networking failures.
• Google Distributed Cloud for bare metal fixes node upgrade hangs, concurrent task handling, Metrics API TLS errors during CA rotation, CA rotation deadlocks, GKE Connect agent redeploy loops, incomplete log capture, operator crashes on missing annotations, and networking scheduling issues.
• GKE fixes incomplete file reads and premature EOF errors with Cloud Storage FUSE CSI on ARM64 nodes with 64 KiB pages.
• Google SecOps Marketplace updates improve concurrent request handling, API rate limit handling, backtick support in Query Joiner, enrichment logic for Azure Active Directory, and token reuse for Palo Alto Next Gen Firewall.

• BigQuery sharing listings can now target multiple regions simultaneously for datasets and linked replicas.
• Cloud Trace now automatically generates trace spans for remote MCP server tool calls.
• Cluster Toolkit v1.90.0 adds experimental job submission via gcluster job and support for regional AI zones in Slurm.
• Gemini Enterprise adds new public preview data stores for Mermaid Chart, Blockscout, Open Targets, and Apollo GraphOS MCP Tools.
• Gemini Enterprise Agent Platform updates Gemini 3.1 Flash Image Preview and Gemini 3 Pro Image Preview with improved 4K output efficiency, a one-thought-image limit, new image_size values, and a Minimal default thinking level.
• Google Distributed Cloud for VMware 1.35.0-gke.525 updates to Kubernetes 1.35, upgrades containerd to 2.1, changes advanced cluster node pool update behavior to parallel by default, changes the default Docker bridge IP, and moves vsphere-csi-controller to control plane nodes.
• Google Distributed Cloud for bare metal 1.35.0-gke.525 updates to Kubernetes 1.35, upgrades containerd to 2.1, adds stale secret and ConfigMap mount health checks, upgrades Ansible to 2.18, adds registry mirror configuration in the cluster config header, and introduces preview EgressDSCP tagging.
• GKE Pod Snapshots are generally available on clusters running version 1.35.3-gke.1234000 or later.
• GKE Standard clusters now support live migration on Confidential GKE Nodes using C3D machine series with AMD SEV enabled.
• Secure Source Manager now supports CODEOWNERS files for required pull request reviewers.
• Virtual Private Cloud now offers Organization Policy Service custom constraints for private services access connections.

• Starting June 1, 2026, BigQuery Data Transfer Service connectors for Google Ads, Search Ads 360, and Google Analytics 4 will stop populating backfill data earlier than 37 months from the current date.
• Managed Airflow (Gen 2) environments can no longer be created in Johannesburg (africa-south1); only Managed Airflow (Gen 3) is supported there.
• Google Distributed Cloud for VMware and bare metal require cgroupsv2; cgroupsv1 is no longer supported and will block creation or upgrades.
• Google Distributed Cloud for VMware no longer supports legacy ubuntu, ubuntu_containerd, and cos OSImageType options in this release.
• Google Distributed Cloud for bare metal requires Ansible 2.18, which in turn requires Python 3.9 on target nodes; RHEL 8.10 or later is required for supported Python versions.
• GKE version rollouts may take multiple days and some versions may not be immediately available in all zones.

• Google Distributed Cloud versions 1.35.0-gke.525 are available for download; upgrades should follow the documented cluster upgrade procedures.
• After release, GKE On-Prem API clients may take 7 to 14 days to expose new Google Distributed Cloud versions in the console, gcloud CLI, and Terraform.
• For Google Distributed Cloud on VMware, third-party storage vendors should be checked against the Google Distributed Cloud-ready storage partners list before upgrading.
• For Google Distributed Cloud on bare metal, use preview.baremetal.cluster.gke.io/traffic-selector: enable and the EgressDSCP and TrafficSelector custom resources to use EgressDSCP tagging.
• For Google Distributed Cloud on bare metal, to bypass sequential task locking for concurrent machine updates, add baremetal.cluster.gke.io/concurrent-machine-update: "true".
• For Google Distributed Cloud on VMware advanced clusters, the default node pool update policy changed to parallel; use nodePoolUpdatePolicy and maximumConcurrentNodePoolUpdate to customize or revert it.
• For Google Distributed Cloud on VMware, the default Docker bridge IP changed to 169.254.123.1/24; clusters using 172.17.0.0/16 may conflict.
• For Google Distributed Cloud on VMware, upgrading control planes and node pools recreates nodes with Ubuntu 24.04 automatically.
• For Google Distributed Cloud on bare metal, registry mirrors can now be configured in the cluster configuration file header.
• GKE release notes indicate that updated Container-Optimized OS images are cumulative and the specific vulnerabilities are listed in the linked OS image release notes.

Product Information

Vendor: Google

Product: Cloud

Product type: Other

Platform: Web

Version: 1.35.0-gke.525

Vendor release date: May 6, 2026

Published on updatealert.io: Jun 4, 2026

Description: Cloud platform for compute, data, networking, and developer services.