Google Distributed Cloud (software only) for bare metal 1.31 release notes

Functionality changes:

• Added support for configuring the GKE Identity Service to enforce a minimum transport layer security (TLS) version of 1.2 for HTTPS connections. By default, the GKE Identity Service allows TLS 1.1 and higher connections. If you require enforcement for a minimum of TLS 1.2, reach out to Cloud Customer Care for assistance.

• Updated the bmctl push images command to check for the existence of an image digest to determine whether or not to push an image.

• Increased priority for cert-manager pods to system-cluster-critical to prevent premature eviction under control plane node resource pressure.

• Updated the logic for parsing the cluster configuration file for newer clusters to validate that the anthosBareMetalVersion value follows the full x.y.z-gke.n semantic versioning scheme, including the GKE patch version.

• Updated the snapshot capability to collect the following information:

  • Details for all custom resources
  • Additional debugging information for clusters

• Add a health check to check that the ifnode-problem-detector systemd service is running on the node.

• Updated the bmctl update command to identify differences (if any) between the preview feature annotations in the cluster configuration file and the annotations in the deployed Cluster resource.

• Added a --num-of-parallel-threads flag to the snapshot command (bmctl check cluster --snapshot) so that you can specify the number of threads to use to create a snapshot. The default number of threads for snapshot creation is 10.