Cloud Service Mesh

Patch 1.29.8-asm.8 contains the fix for the following platform CVEs:

p

Patch 1.30.5-asm.8 contains the fix for the following platform CVEs:

p

Patch 1.28.10-asm.49 contains the fix for the following platform CVEs:

p

1.28.10-asm.49 is now available for in-cluster Cloud Service Mesh.

p

1.29.8-asm.8 is now available for in-cluster Cloud Service Mesh.

p

1.31.1-asm.16 is now available for in-cluster Cloud Service Mesh.

p

1.30.5-asm.8 is now available for in-cluster Cloud Service Mesh.

p

Cloud Service Mesh support for the managed ISTIOD control plane on Google Kubernetes Engine (GKE) on Google Cloud is deprecated as of September 28, 2026, and…

Cloud Service Mesh support for the managed ISTIOD control plane on Google Kubernetes Engine (GKE) on Google Cloud is deprecated as of September 28, 2026, and support will end on March 1, 2028.

Cloud Service Mesh support for the in-cluster ISTIOD control plane on Google Kubernetes Engine (GKE) on Google Cloud is deprecated as of September 28, 2026,…

Cloud Service Mesh support for the in-cluster ISTIOD control plane on Google Kubernetes Engine (GKE) on Google Cloud is deprecated as of September 28, 2026, and support will end on March 1, 2028.

Patch 1.30.4-asm.14 contains the fix for the following platform CVEs:

p

Patch 1.29.7-asm.18 contains the fix for the following platform CVEs:

p

1.29.7-asm.18 is now available for in-cluster Cloud Service Mesh.

p

Patch 1.28.10-asm.40 contains the fix for the following platform CVEs:

p

1.28.10-asm.40 is now available for in-cluster Cloud Service Mesh.

p

1.30.4-asm.14 is now available for in-cluster Cloud Service Mesh.

p

Managed Cloud Service Mesh will start using proxy version csm_mesh_proxy.20260819_RC00 for Gateway API on GKE clusters.

This proxy version maps closest to Envoy version 1.37. This change is rolling out to all release channels and contains the fix for the managed Cloud Service Mesh security vulnerabilities listed in GCP-2026-057.

1.30.4-asm.1 is now available for in-cluster Cloud Service Mesh.

p

In-cluster Cloud Service Mesh 1.27 is no longer supported.

For more information and to view the earliest end-of-life dates for other versions, see Supported versions.

The following images are now rolling out for managed Cloud Service Mesh:

p

For clusters using the TRAFFIC_DIRECTOR implementation, configuring the trace sampling rate with randomSamplingPercentage with the Telemetry API is now…

For clusters using the TRAFFIC_DIRECTOR implementation, configuring the trace sampling rate with randomSamplingPercentage with the Telemetry API is now supported in the Rapid release channel. For more information, see Accessing Cloud Trace.