Google Distributed Cloud air-gapped release notes

Google Distributed Cloud air-gapped 1.9.10 is now released.

See the product overview to learn about the features of Google Distributed Cloud air-gapped.

Updated Canonical Ubuntu OS image version to 20240114 to apply the latest security patches and important updates. To take advantage of the bug and security vulnerability fixes, you must upgrade all nodes with each release. The following security vulnerabilities are fixed:

• CVE-2017-16516
• CVE-2020-14394
• CVE-2020-24165
• CVE-2021-3638
• CVE-2022-1725
• CVE-2022-1771
• CVE-2022-1897
• CVE-2022-2000
• CVE-2022-24795
• CVE-2023-1544
• CVE-2023-2861
• CVE-2023-3180
• CVE-2023-33460
• CVE-2023-3354
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-29491
• CVE-2023-36054
• CVE-2023-38408
• CVE-2023-39804
• CVE-2023-46246
• CVE-2023-48231
• CVE-2023-48233
• CVE-2023-48234
• CVE-2023-48235
• CVE-2023-48236
• CVE-2023-48237
• CVE-2023-48795
• CVE-2023-5088
• CVE-2023-7104

The following container image security vulnerabilities are fixed:

• CVE-2021-46848
• CVE-2022-2097
• CVE-2022-3094
• CVE-2022-3821
• CVE-2022-4304
• CVE-2022-4415
• CVE-2022-4450
• CVE-2022-4883
• CVE-2022-29458
• CVE-2022-32221
• CVE-2022-43552
• CVE-2022-44617
• CVE-2022-46285
• CVE-2022-47629
• CVE-2023-0215
• CVE-2023-0286
• CVE-2023-0361
• CVE-2023-0464
• CVE-2023-0465
• CVE-2023-0466
• CVE-2023-2650
• CVE-2023-2828
• CVE-2023-3138
• CVE-2023-3341
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-23916
• CVE-2023-27533
• CVE-2023-27535
• CVE-2023-27536
• CVE-2023-27538
• CVE-2023-28321
• CVE-2023-28484
• CVE-2023-29469
• CVE-2023-29491
• CVE-2023-34969
• CVE-2023-36054
• CVE-2023-40303
• CVE-2023-43785
• CVE-2023-43786
• CVE-2023-43787
• CVE-2023-43788
• CVE-2023-43789

Updated the gcr.io/distroless/base base image to digest sha256:sha256:d08c10f03c27271160993f294e0eb120af71217d0cf4587c484cc5b7cb3fe5ee to apply the latest security patches and important updates.

Google Distributed Cloud air-gapped 1.9.10 fixes an issue where Grafana displays an empty invalid upstream error.

Google Distributed Cloud air-gapped 1.9.10 fixes an issue where firewall blocks traffic between the Operations Suite Infrastructure - Core Services (OIC) and the Operations organization.

Upgrade:

• The NodeUpgradeTask for the node is stuck at NodeMaintainCompleted step for a longer period (more than 30mins)

• The zp-aa-bm08 node of the root admin cluster shows a provisioning error and cannot finish because the registry is unhealthy.

• The gpcbackup-agent-0 pod fails with the error message failed to stage volume: iSCSI login failed .

• The upgrade is stuck at AdminClusterHealth postflight check.

VM Backup and Restore:

• Role-based access control (RBAC) and schema settings in the VM manager is stopping users from starting VM backup and restore processes.