Policy Controller deprecated, end of support on December 31, 2027

Policy Controller is deprecated as of November 12, 2026, and reaches end of support on December 31, 2027. Starting January 31, 2027, you can't enable Policy Controller in fleet host projects that don't already have Policy Controller enabled. Google Kubernetes Engine (GKE) blocks upgrades to version 1.39 and later for clusters that have Policy Controller installed. Clusters that run GKE version 1.39 and later don't support Policy Controller. On December 31, 2027, technical support, security patching on GKE version 1.38 and earlier, and the Google Cloud console dashboard for Policy Controller end.

Migrate your admission policies to Kubernetes ValidatingAdmissionPolicies, Pod Security Admission, or self-managed Open Policy Agent (OPA) Gatekeeper. For more information, see Migrate from Policy Controller.