News

Welcome to issue #302 July 11th, 2022

IN, NOT_IN and NOT EQUAL query operators for Firestore in Datastore Mode - Firestore in Datastore-Mode now supports IN, Not IN, Not Equal operators enhancing development agility.

Announcing native image support for Java Client Libraries — Optimize your short lived workloads - This is an overview of the new GraalVM Native Image support for our client libraries and a showcase of the benefits that are now available.

How Google is preparing for a post-quantum world - Large-scale quantum computers soon will be able to break most public-key cryptosystems currently in use. Here’s several of Google Cloud’s steps to prepare for that future.

Show off your cloud skills by completing the #GoogleClout weekly challenge - Complete the weekly #GoogleClout challenge and show off your cloud skills.

Articles, Tutorials

Infrastructure, Networking, Security, Kubernetes

Invest early, save later: Why shifting security left helps your bottom line - By “shifting left,” identifying cloud-related misconfigurations earlier, organizations can improve the quality of their products and lower their security costs.

Network & Application Security in Google Cloud - When your traffic is on the Google network, it no longer transits the public internet, making it less likely to be attacked, intercepted, or manipulated. Data is encrypted in transit and the scale of the network provides robust denial-of-service protection. Along with this inherent network security you have access to services that help protect your applications against network-based threats and attacks even further.

How Ocado Technology delivers smart, secure online grocery shopping with Security Command Center - Ocado Technology powers online grocery shopping around the world, and relies on Google Cloud’s Security Command Center to do it securely. Here’s how.

Managing Google Cloud API keys using Terraform - Google Cloud offers a simple interface for creating and updating API keys and their restrictions. Terraform helps you maintain them.

Custom Intercom domain using GCP - This short article describes how to add a custom domain to Intercom behind SSL certificate managed by Google.

App Development, Serverless, Databases, DevOps

REWE Group accommodates growth spikes and enhances hybrid architecture with Google Cloud - By using Cloud Spanner, REWE was able to scale the processing of transactions per day to almost double and deploy applications faster.

How Kitabisa re-structured its fundraising platform to drive "kindness at scale" on Google Cloud - The Indonesian fundraising platform overhauled its platform by moving to containers, a microservices architecture and Cloud SQL and ProxySQL.

I/O Adventure Google Cloud architecture - How Google Cloud infrastructure powers the Google I/O Adventure online conference experience.

Connecting Cloud SQL to On Premise with Shared VPC and Private Service Connect - Connecting Cloud SQL to the on-premise application through a private connection with shared VPC architecture in your environment so it can be reached from your application in an on-premise environment.

Notification system for Cloud Run with Google Chat for CI/CD pipelines. - This article explains how to be notified every time CI/CD pipeline fires and performs an action (updated, deleted, and more) on Cloud Run services.

Minimal Downtime Database Migration from MariaDB Galera Cluster to CloudSQL for MySQL at Production - An Implementation Guide - Configuring MySQL chain replica for migration to Cloud SQL.

Export data from Firestore collection to CSV/JSON in seconds without code - You can export your data from Firebase Firestore collections an open-source and free tool specifically made for Firebase.

Import data from CSV to Firebase Firestore, the fastest way - Import CSV to Firestore without writing any custom scripts code or building internal tools or visiting Firebase Console.

Big Data, Analytics, ML&AI

Awesome new Feature: Change History in Google BigQuery - Using The Append Change history TVF in BigQuery.

DBT at scale on Google Cloud - The series of 3 articles describing an end-to-end data engineering architecture on Google Cloud with DBT as the backbone.

Accelerate Translation for Oracle to BigQuery migration using Interactive SQL Translation. - This blog introduces the best practices and SQL utility to accelerate SQL translation from Oracle to BigQuery migrations.

From Zero to Modern Data Stack - The evolution of Phlo’s data platform, from an early hand-rolled v1 to a scalable Modern Data Stack.

Google BI Engine Statistics Dashboard - Monitoring your BI Engine workloads.

AI Booster: how Vodafone is supercharging AI & ML at scale - Vodafone is building a fully scalable ML platform on Google Cloud that reduces time from PoC to production from 5 months to approximately 4 weeks.

Recommendation Engine Pipeline with BigQuery ML and Vertex AI Pipelines using Matrix Factorization - How to build a fully automated recommendations pipeline in under 60 minutes.

Vertex Pipelines (Kubeflow) for Machine Learning Model Training Pipeline - Introducing ML model training pipeline using Vertex Pipelines (Kubeflow).

Various

The Architect and the Helicopter Racing - This article is written on fresh impressions about passing the certification for Google’s Professional Cloud Architect.

WWCode Conversations 49: Priyanka Vergadia Staffing Developer Advocate at Google - An interview with Priyanka.

Slides, Videos, Audio

Kubernetes Podcast - #184 Mercedes-Benz Tech Innovation, with Sabine Wolz.

Security Podcast - #73 Your SOC Is Dead? Evolve to Output-driven Detect and Respond!

Releases

Anthos clusters on bare metal - 1.10. Release 1.10.6 Anthos clusters on bare metal 1.10.6 is now available for download. Fixes: The following container image security vulnerabilities have been fixed: CVE-2022-1292 CVE-2018-25032 CVE-2021-43618 CVE-2021-4160 CVE-2022-29824 CVE-2022-0778 CVE-2021-33574 CVE-2022-23219 CVE-2022-23218 CVE-2022-27782 CVE-2022-29155. Known issues: For information about the latest known issues, see Anthos on bare metal known issues in the Troubleshooting section.

Anthos clusters on VMware - Anthos clusters on VMware v1.12.0-gke.446 is now available. Announcements vSphere releases for versions lower than version 7.0 Update 2 are deprecated in Kubernetes 1.24. Breaking changes: In Kubernetes 1.23, the rbac.authorization.k8s.io/v1alpha1 API version is removed. Platform enhancements: General Availability (GA): Separate vSphere data centers for the admin cluster and the user clusters are supported. Functionality changes: Upgraded COS from m93 to m97, and containerd to 1.6 on COS. Fixes Fixed a known issue in which the cluster backup feature affected the inclusion of always-on secrets encryption keys in the backup. Known issues: On the out-of-the-box monitoring dashboards, the GKE on-prem Windows pod status and GKE on-prem Windows node status also show data from Linux clusters.

BigQuery - Azure workload identity federation is now available in preview for BigQuery Omni connections. The APPENDS change history TVF is now in preview.

Chronicle - The following supported default parsers have changed (listed by product name and ingestion label): Azure DevOps Audit (AZURE_DEVOPS) Bitdefender (BITDEFENDER) CA Access Control (CA_ACCESS_CONTROL) Carbon Black App Control (CB_APP_CONTROL) Check Point (CHECKPOINT_FIREWALL) Cisco Firepower NGFW (CISCO_FIREPOWER_FIREWALL) Cisco Router (CISCO_ROUTER) Cloud Passage (CLOUD_PASSAGE) Digital Guardian (DIGITALGUARDIAN_EDR) ExtraHop RevealX (EXTRAHOP) Forcepoint NGFW (FORCEPOINT_FIREWALL) IBM DataPower Gateway (IBM_DATAPOWER) IBM Guardium (GUARDIUM) Imperva (IMPERVA_WAF) Microsoft Azure Resource (AZURE_RESOURCE_LOGS) Microsoft SQL Server (MICROSOFT_SQL) Office 365 (OFFICE_365) pfSense (PFSENSE) Proofpoint On Demand (PROOFPOINT_ON_DEMAND) Proofpoint Tap Alerts (PROOFPOINT_MAIL) SonicWall (SONIC_FIREWALL) Sophos UTM (SOPHOS_UTM) VMware AirWatch (AIRWATCH) VMware ESXi (VMWARE_ESX) Workspace Activities (WORKSPACE_ACTIVITY) For details about changes in each parser, see Supported default parsers. The following new fields are available in the Unified Data Model: The new fields prevalence, first_seen_time, and last_seen_time were added to the File object.

Dataproc - Dataproc support for the following images has been extended to the following dates: Dataproc image version 1.5: March 31, 2023 Dataproc image version 2.0: June 30, 2023.

Deep Learning VM - M94 Release Added support for PyTorch 1.12.

Dialogflow Enterprise - Dialogflow CX now provides new client libraries for C++, C#, and Go. Dialogflow ES now provides a new client library for C++.

Dialogflow - Dialogflow CX now provides new client libraries for C++, C#, and Go. Dialogflow ES now provides a new client library for C++.

Cloud Data Loss Prevention - InfoType categories were added to built-in infoTypes.

Cloud Functions - Cloud Functions (1st gen) now supports Google-managed Artifact Registry at the General Availability release level. Cloud Functions now supports the following runtimes at the General Availability release level: Python 3.10 PHP 8.1.

IAM - Workforce identity federation lets you authenticate and authorize users from external identity providers to access supported Google Cloud products.

Google Kubernetes Engine - The blue-green upgrade mechanism is now available to upgrade your GKE node pools, and can be selected per node pool instead of the default surge upgrade mechanism.

Secret Manager - A weekly digest of client library updates from across the Cloud SDK.

SAP Solutions - Cloud Storage Backint agent for SAP HANA version 1.0.20 Version 1.0.20 of the Cloud Storage Backint agent for SAP HANA is now available.

Cloud SQL MySQL - Cloud SQL for MySQL now supports setting timezone names as values for the time_zone parameter.

Cloud SQL Postgres - The July maintenance changelog is now available.

Vertex AI - Tabular Workflows is available in Preview.

If you have suggestion, feedback or link you want to share feel free to email me at zdenko@gcpweekly.com

Have a great week,

Zdenko