November 4, 2026 · Google CloudFeature
Bare metal 1.35.700-gke.124 removes distrusted eMudhra and AAA root CAs
The following changes were added in 1.35.700-gke.124:
- Updated system components and container base images to remove the distrusted eMudhra (emSign) and AAA Certificate Services root CAs and reject compromised eMudhra intermediate CAs.
Text from the Google Cloud release notes, licensed under CC BY 4.0. Source: Google Cloud release notes.
More Google Distributed Cloud (software only) for bare metal changes
Corrects fix versions for Metrics API TLS errors during CA rotation; 1.33 remains unfixed
Version 1.34.1000-gke.111 released, running Kubernetes v1.34.7-gke.200
Bundled BGP load balancing control plane failover drops from up to 20 seconds to about 4
Version 1.36.200-gke.118 released, running Kubernetes v1.36.4-gke.100
All Google Distributed Cloud (software only) for bare metal changes