Google Cloud Update Version 1.35.300-gke.87

July 20, 2026 Cloud release adds BigQuery Lakehouse for SAP BDC preview, Cloud Load Balancing BYOIP IPv6 reservation, Cloud NGFW WildFire preview, and Cloud Storage lifecycle size conditions. It also includes a Gemini Enterprise Agent Platform SSRF fix and deprecations for Compute Engine CSEKs and Google SecOps legacy SIEM APIs.

• Gemini Enterprise Agent Platform: Fixed a Server-Side Request Forgery (SSRF) vulnerability in the auto-generated /api-proxy backend endpoint for web apps created before July 1, 2026.
• The updated Agent Studio backend code adds strict domain allowlist validation for /api-proxy destinations.
• Google SecOps legacy SIEM APIs are being deprecated in favor of Chronicle API, reducing reliance on older Backstory and Ingestion API endpoints.

• Google Distributed Cloud for bare metal 1.35.300-gke.87 removes the deprecated csi-snapshot-validation-webhook component and relies on native CEL validation in CRDs.

• BigQuery Lakehouse for Apache Iceberg now supports SAP Business Data Cloud (BDC) integration in Preview, including federation, direct querying, and publishing to SAP BDC.
• Cloud Load Balancing now supports reserving or promoting BYOIP IPv6 addresses for regional external passthrough Network Load Balancers in Preview.
• Cloud NGFW adds WildFire malware inspection and blocking in the Cloud Firewall Enterprise tier, available in Preview.
• Cloud Storage Object Lifecycle Management now supports sizeAboveBytes and sizeBelowBytes conditions for size-based lifecycle actions.
• Virtual Private Cloud now supports reserving static external IPv6 addresses from BYOIP sub-prefixes in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode, in Preview.

• BigQuery Lakehouse for Apache Iceberg does not support Data Products with special characters such as / or -; sharing such products from SAP BDC to BigQuery can stop refresh and require re-enrollment.

• Batch: Starting July 31, 2026 for most projects, and June 30, 2027 for projects that successfully submitted at least one affected job before July 31, 2026, new jobs can no longer locate Compute Engine resources outside the job's location when using allowedLocations[].
• Batch: If no jobs specify allowedLocations[], no action is required; otherwise, ensure all specified regions or zones are in the same region as the job's location before the enforcement date.
• Compute Engine: Customer-supplied encryption keys (CSEKs) for disks, snapshots, images, and machine images are deprecated and will be disabled on July 20, 2027.
• Google Distributed Cloud for bare metal 1.35.300-gke.87 is available for download and runs on Kubernetes v1.35.3-gke.400; availability in console, gcloud, and Terraform may take 7 to 14 days.
• If you use a third-party storage vendor with Google Distributed Cloud for bare metal, verify qualification for this release before upgrading.
• Google SecOps legacy SIEM API deprecation affects custom scripts, integrations, SOAR connectors, and ingestion feeds that call Backstory API or Ingestion API endpoints; migrate to Chronicle API.
• If you downloaded, generated, or deployed Agent Studio web app code before July 1, 2026, regenerate and redeploy the app to pick up the SSRF fix.

Product Information

Vendor: Google

Product: Cloud

Product type: Other

Platform: Web

Version: 1.35.300-gke.87

Vendor release date: Jul 20, 2026

Published on updatealert.io: Jul 21, 2026

Description: Cloud platform for compute, data, networking, and developer services.