GKE 1.32 changelog

This document lists the changes for the patch versions of the Google Kubernetes Engine (GKE) 1.32 minor version.

These changelogs are supplementary information about the updates to specific GKE system components. For information about features, changes, and security issues in GKE, see the following documents:

1.32.13-gke.2504000

The following sections describe changes in this patch version when compared with the previous patch version, 1.32.13-gke.2427000. For information about upstream Kubernetes changes, see the Kubernetes v1.32.13 changelog.

Kubernetes Updates

k8s-api

Updated k8s-api cohort from version 1.32.13-gke.700 to 1.32.13-gke.900.

  • Miscellaneous:
    • Updated the Go runtime to version 1.27.1 and updated base images (including go-runner and setcap) for core Kubernetes components.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

filestorecsi

Updated filestorecsi component from version 0.15.48 to 0.15.49.

  • Security Fixes:
  • Miscellaneous:
    • Updated the Go toolchain and container base images for Filestore CSI driver components.

gcsfusecsi

Updated gcsfusecsi component from version 0.9.77 to 0.9.78.

  • Security Fixes:
    • Updated the google.golang.org/grpc module to v1.83.1 and the CSI node driver registrar image to resolve CVE-2026-84304.

gvisor

Updated gvisor component from version 1.32.3 to 1.32.6.

  • Miscellaneous:
    • Updated the container base image to gke_distroless_20260915.00_p0.

osimage

Updated osimage component from version 1.32.174 to 1.32.176.

  • Features:
    • Updated the Linux kernel to version 6.6.153.
    • Updated Docker to v27.5.1.
    • Updated Containerd to v2.0.10.
  • Bug Fixes:
    • Fixed an issue with docker cp where copying to or from containers with symlinked bind mounts would fail.
  • Security Fixes:
  • Miscellaneous:
    • Updated system packages: google-guest-configs to v20260819.00, docker-credential-helpers to v0.9.9, sqlite to v3.53.4, libnftnl to v1.2.9, and passwdqc to v2.0.3-r1.

pdcsi

Updated pdcsi component from version 0.21.97 to 0.21.100.

workloadautoscaler

Updated workloadautoscaler component from version 15.14.0 to 15.16.0.

  • Miscellaneous:
    • Updated Vertical Pod Autoscaler (VPA) components, including the admission controller, recommender, and updater, to version 0.23.0-gke.20.

1.32.13-gke.2427000

The following sections describe changes in this patch version when compared with the previous patch version, 1.32.13-gke.2411000. For information about upstream Kubernetes changes, see the Kubernetes v1.32.13 changelog.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

gcsfusecsi

Updated gcsfusecsi component from version 0.9.76 to 0.9.77.

  • Miscellaneous:
    • Updated the Go runtime and base images for the gcs-fuse-csi-driver, csi-node-driver-registrar, gcs-fuse-csi-driver-sidecar-mounter, and gcs-fuse-csi-driver-metadata-prefetch components.

kube-addon-manager

Updated kube-addon-manager component from version 31.0.21 to 31.0.22.

  • Miscellaneous:
    • Updated the gke-distroless/bash container image to version gke_distroless_20260815.00_p0.

1.32.13-gke.2411000

There are no customer-facing updates in this version when compared to the previous patch version, 1.32.13-gke.2393000. For information about upstream Kubernetes changes, see the Kubernetes v1.32.13 changelog.

1.32.13-gke.2393000

The following sections describe changes in this patch version when compared with the previous patch version, 1.32.13-gke.2337000. For information about upstream Kubernetes changes, see the Kubernetes v1.32.13 changelog.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

gcsfusecsi

Updated gcsfusecsi component from version 0.9.74 to 0.9.76.

osimage

Updated osimage component from version 1.32.166 to 1.32.174.

1.32.13-gke.2337000

The following sections describe changes in this patch version when compared with the previous patch version, 1.32.13-gke.2314000. For information about upstream Kubernetes changes, see the Kubernetes v1.32.13 changelog.

Component Updates

The following sections provide information about updates to specific GKE system components in this patch version.

advanceddatapath

Updated advanceddatapath component from version 32.3.76 to 32.3.77.

  • Security Fixes:
    • Fixed security vulnerability GO-2026-4440 in golang.org/x/net.
    • Fixed security vulnerability GO-2026-5942 in golang.org/x/net.
    • Fixed security vulnerability GO-2026-5970 in golang.org/x/text.
  • Miscellaneous:
    • Updated Cilium components, including the agent, operator, and Hubble relay/CLI, to version v1.16.8-gke1.32-gke.107.

customer-logs-exporter

Updated customer-logs-exporter component from version 1.32.1-gke.25 to 1.32.1-gke.26.

  • Miscellaneous:
    • Updated the gke-distroless/bash base image to a newer version.

gcsfusecsi

Updated gcsfusecsi component from version 0.9.73 to 0.9.74.

  • Security Fixes:
    • Updated Go modules and dependencies to address identified security vulnerabilities.

gpu-device-plugin

Updated gpu-device-plugin component from version 1.32.6-gke.19 to 1.32.7-gke.0.

  • Miscellaneous:
    • Updated Go builder versions to 1.24 for the NRI injector and persistenced installer.