GKE cluster versions have been updated. New versions available for upgrades and new clusters

## Change Change #### (2025-R51) Version updates GKE cluster versions have been updated. **New versions available for upgrades and new clusters.** The following versions are now available for new GKE clusters, and for manual control plane upgrades and node upgrades for existing clusters. For more information about versioning and upgrades, see [GKE versioning and support](https://cloud.google.com/kubernetes-engine/versioning) and [About GKE cluster upgrades](https://cloud.google.com/kubernetes-engine/upgrades). ### Rapid channel **Note**: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to complete across all Google Cloud zones. * Version [1.34.1-gke.3355002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) is now the default version for cluster creation in the Rapid channel. * The following versions are now available in the Rapid channel: * [1.31.14-gke.1081000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v13114) * [1.32.9-gke.1632000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1329) * [1.33.5-gke.1956000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1335) * [1.34.1-gke.3355002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * [1.34.1-gke.3403002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * [1.34.1-gke.3556000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * The following versions are no longer available in the Rapid channel: * 1.31.13-gke.1231000 * 1.31.13-gke.1377000 * 1.32.9-gke.1330000 * 1.32.9-gke.1462000 * 1.34.1-gke.3355001 * 1.34.1-gke.3403001 * Clusters in this channel running the listed minor version have new general auto-upgrade targets. GKE can upgrade control planes and nodes to the following new versions with this release: * GKE upgrades clusters to the following new minor versions if there are no factors, such as [maintenance exclusions](https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or deprecated APIs, preventing upgrades: * 1.33 to [1.34.1-gke.3355002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * GKE upgrades clusters to the following new patch versions if no minor version upgrade is available, or if the cluster has [maintenance exclusions](https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors preventing minor version upgrades: * 1.34 to [1.34.1-gke.3355002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) ### Regular channel **Note**: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to complete across all Google Cloud zones. * The following versions are now available in the Regular channel: * [1.31.14-gke.1033000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v13114) * [1.32.9-gke.1575000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1329) * [1.33.5-gke.1862000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1335) * [1.34.1-gke.3355002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * The following versions are no longer available in the Regular channel: * 1.31.13-gke.1454000 * 1.32.9-gke.1548000 * 1.33.5-gke.1791000 ### Stable channel **Note**: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to complete across all Google Cloud zones. There are no new releases in the Stable channel. ### Extended channel **Note**: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to complete across all Google Cloud zones. * The following versions are now available in the Extended channel: * [1.28.15-gke.3188000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) * [1.28.15-gke.3225000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) * [1.29.15-gke.2505000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12915) * [1.29.15-gke.2553000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12915) * [1.30.14-gke.1746000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13014) * [1.30.14-gke.1794000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13014) * [1.31.14-gke.1033000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v13114) * [1.32.9-gke.1575000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1329) * [1.33.5-gke.1862000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1335) * [1.34.1-gke.3355002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * The following versions are no longer available in the Extended channel: * 1.28.15-gke.3096000 * 1.28.15-gke.3202000 * 1.29.15-gke.2380000 * 1.29.15-gke.2520000 * 1.30.14-gke.1658000 * 1.30.14-gke.1760000 * 1.31.13-gke.1454000 * 1.32.9-gke.1548000 * 1.33.5-gke.1791000 * Clusters in this channel running the listed minor version have new general auto-upgrade targets. GKE can upgrade control planes and nodes to the following new versions with this release: * GKE upgrades clusters to the following new minor versions if there are no factors, such as [maintenance exclusions](https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or deprecated APIs, preventing upgrades: * 1.27 to [1.28.15-gke.3163000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) * 1.28 to [1.29.15-gke.2467000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12915) * 1.29 to [1.30.14-gke.1719000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13014) * GKE upgrades clusters to the following new patch versions if no minor version upgrade is available, or if the cluster has [maintenance exclusions](https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors preventing minor version upgrades: * 1.28 to [1.28.15-gke.3163000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) * 1.29 to [1.29.15-gke.2467000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12915) * 1.30 to [1.30.14-gke.1719000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13014) ### No channel **Note**: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to complete across all Google Cloud zones. * The following versions are now available: * [1.31.14-gke.1033000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v13114) * [1.31.14-gke.1081000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v13114) * [1.32.9-gke.1575000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1329) * [1.32.9-gke.1632000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1329) * [1.33.5-gke.1956000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1335) * [1.34.1-gke.3355002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * [1.34.1-gke.3403002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * [1.34.1-gke.3556000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * The following node versions are now available: * [1.28.15-gke.3225000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) * [1.29.15-gke.2553000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12915) * [1.30.14-gke.1794000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13014) * [1.31.14-gke.1081000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v13114) * [1.32.9-gke.1632000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1329) * [1.33.5-gke.1956000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1335) * [1.34.1-gke.3355002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * [1.34.1-gke.3403002](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * [1.34.1-gke.3556000](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.34.md#v1341) * The following versions are no longer available: * 1.31.13-gke.1231000 * 1.31.13-gke.1377000 * 1.32.9-gke.1330000 * 1.32.9-gke.1462000 * 1.33.5-gke.1791000 * 1.34.1-gke.2037001 * 1.34.1-gke.3403001 ## Security Security #### (2025-R51) Security updates This release includes new GKE versions that use updated Container-Optimized OS images. These updated images are cumulative, incorporating security fixes from all Container-Optimized OS versions released since the previous GKE release. To identify the specific vulnerabilities that were resolved in each updated Container-Optimized OS image, see the **Security** release notes for that image. The following table includes links to the release notes for each updated Container-Optimized OS image: | GKE version | Container-Optimized OS version | Details | | ------------------- | ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------- | | 1.28.15-gke.3225000 | cos-113-18244-521-39 | [cos-113-18244-521-39 release notes](https://cloud.google.com/container-optimized-os/docs/release-notes/m113#cos-113-18244-521-39%5F) | | 1.29.15-gke.2553000 | cos-113-18244-521-39 | [cos-113-18244-521-39 release notes](https://cloud.google.com/container-optimized-os/docs/release-notes/m113#cos-113-18244-521-39%5F) | | 1.30.14-gke.1794000 | cos-113-18244-521-39 | [cos-113-18244-521-39 release notes](https://cloud.google.com/container-optimized-os/docs/release-notes/m113#cos-113-18244-521-39%5F) | | 1.31.14-gke.1081000 | cos-117-18613-439-45 | [cos-117-18613-439-45 release notes](https://cloud.google.com/container-optimized-os/docs/release-notes/m117#cos-117-18613-439-45%5F) | | 1.32.9-gke.1632000 | cos-117-18613-439-45 | [cos-117-18613-439-45 release notes](https://cloud.google.com/container-optimized-os/docs/release-notes/m117#cos-117-18613-439-45%5F) | | 1.33.5-gke.1956000 | cos-121-18867-294-38 | [cos-121-18867-294-38 release notes](https://cloud.google.com/container-optimized-os/docs/release-notes/m121#cos-121-18867-294-38%5F) | | 1.34.1-gke.3556000 | cos-125-19216-104-39 | [cos-125-19216-104-39 release notes](https://cloud.google.com/container-optimized-os/docs/release-notes/m125#cos-125-19216-104-39%5F) | ## Feature Feature In GKE version 1.34.1-gke.2541000 and later, you can specify secure tags for firewalls in the[spec.nodePoolConfig.resourceManagerTags field](https://docs.cloud.google.com/kubernetes-engine/docs/reference/crds/computeclass#resourceManagerTags)in ComputeClasses. GKE adds those secure tags to the nodes that GKE creates for that ComputeClass, so that you can target nodes by using these tags in firewall policies. For more information, see[Selectively enforce firewall policies in GKE](https://docs.cloud.google.com/kubernetes-engine/docs/how-to/tags-firewall-policies).