Welcome to issue #240 May 3rd, 2021

News

Google Cloud announces new region to support growing customer base in Israel - The new Google Cloud region in Israel will bring low-latency for users in the area, as well as a full complement of Google Cloud services.

Turbocharge workloads with new multi-instance NVIDIA GPUs on GKE - You can now partition a single NVIDIA A100 GPU into up to seven instances and allocate each instance to a single Google Kubernetes Engine container.

Introducing Open Saves: Open-source cloud-native storage for games - Check out the new Open Saves interface that lets game developers manage multiple storage back ends–from Google Cloud and 2K Games.

Introducing new connectors for Workflows - We're announcing new connectors for Workflows, which simplify calling Google Cloud services and APIs.

Articles, Tutorials

Infrastructure, Networking, Security, Kubernetes

Sign here! Creating a policy contract with Configuration as Data - A declarative Configuration as Data approach improves not just configuration, but policy as well.

Build security into Google Cloud deployments with our updated security foundations blueprint - Get step by step guidance for creating a secured environment with Google Cloud with the security foundations guide and Terraform blueprint scripts.

How Anthos supports your multicloud needs from day one - Anthos features and capabilities make multicloud not only possible, but desirable.

Risk governance of digital transformation: guide for risk, compliance & audit teams - This whitepaper serves as a guide for risk, compliance, and audit teams on how to manage risk governance in your cloud digital transformation journey.

Creating safer cloud journeys with new security features and guidance for Google Cloud and Workspace - This bundle of new security features and resources will help Google Cloud customers secure their environments.

The evolution of Kubernetes networking with the GKE Gateway controller - The Kubernetes Gateway API is now supported in Google Kubernetes Engine as the GKE Gateway controller for improved service networking.

6 more reasons why GKE is the best Kubernetes service - We’ve made a lot of improvements to GKE since the last KubeCon to make it the easy-to-use managed Kubernetes service it is today.

SRE at Google: Our complete list of CRE life lessons - Find links to blog posts that share Google’s SRE best practices in one handy location.

Choose the best way to use and authenticate service accounts on Google Cloud - Help keep applications secure by using the right type of service account authentication for the situation.

GKE operations magic: From an alert to resolution in 5 steps - Teams operating microservices increasingly rely on metrics, logs, and traces to identify and troubleshoot problems. The GKE Dashboard brings all of that information into one, easily navigated dashboard to make troubleshooting fast and easy.

How to use multi-VPC networking in Google Cloud VMware Engine - Learn how and why to connect the same VMware Private Cloud to multiple Virtual Private Clouds (VPCs) with Google Cloud VMware Engine.

Authentication on GCP: Application Default Credentials - How applications magically authenticate themselves with GCP through their environment, and how to make locally running containers magic too.

Building fast and scalable security controls: Deep-dive into Google Kubernetes Engine (GKE) - Examples of security processes that are helping to scale security on GKE.

Turn reactive audit logs into proactive alerts - Using Audit logs to proactively alert before security incidents occur.

App Development, Serverless, Databases, DevOps

Cloud computing 101: Frequently asked questions - What are containers? What’s a data lake? What does that acronym stand for? Get answers to the questions you're too afraid to ask.

6 database trends to watch - Using managed cloud database services like Cloud SQL, Spanner, and more, can bring performance, scale, and more. See what’s next for modern databases in this infographic.

How to automate with AppSheet Automation - Build your first automation bot with AppSheet Automation.

4 simple steps to make the perfect spreadsheet to power your no-code app - Turn Spreadsheets/Google Sheets data into a powerful web app with AppSheet, no coding necessary.

The modern web architecture jigsaw puzzle, made easy for you - Deploying a modern, globally distributed, scale-on-demand web application can be quite a puzzle, or you can take the easy path.

Agent installation options for Google Cloud VMs - Google Cloud makes it easy to install agents on your single VMs or your whole fleet of VMs so you can collect data for monitoring and troubleshooting.

How to transfer your data to Google Cloud - You've decided to migrate your data to the Google Cloud but where should you begin? What are the Google Cloud data transfer services available to you?

Automated, Static, re-ip of GCP Windows VM - Deploying Windows Compute Engine instances.

How to analyze your GCP Logging usage - Setting up proactive log monitoring, and handling cyclical log emissions.

How to build and update a container running on Google Compute Engine based on a Github commit - Cloud Build pipeline to update deployed container on GCE instance.

Big Data, Analytics, ML&AI

Using TFX inference with Dataflow for large scale ML inference patterns - Walk-through of TensorFlow Extended ( TFX ) RunInference API with Google Cloud Dataflow. Abstracting you away from the manual toil of implementing inference patterns at scale.

Building a Fincrime Feature Store — How we use Golang and Dataflow - Building Apache Beam pipeline in Go.

Deploying Javascript functions on Google Big Query - Writing and using Javascript User Defined Functions in BigQuery.

Managing and Executing gcloud commands in JupyterLab - Example of executing gcloud commands in JupyterLab notebooks.

How to do rolling count distinct in BigQuery? Analytic function is not a good solution - Calculating a rolling count of how many users logged in during the past 30 and 365 days period in BigQuery.

Introduction to Google AutoML Vision - An introduction to AutoML and creating a real AI application for Cats — Dogs Classification using AutoML Vision and deploying to Cloud Run step by step.

How capital markets can prepare for the future with AI - Learn four best practices that can help capital markets adopt and benefit from modern AI/ML technologies.

Various

How Cloud Spanner helped Merpay easily scale to millions of users - E-commerce company Mercari chose managed database Cloud Spanner to help power Merpay, their new mobile payment platform, for scale and performance.

Seven-Eleven Japan uses Google Cloud to serve up real-time data for fast business decisions - Learn how 7-Eleven Japan's built Seven Central, a new platform for practical data use to support the company’s future IT strategies and digital transformation initiatives.

Go from Database to Dashboard with BigQuery and Looker - Understand how to quickly go from database to dashboard with BigQuery and Looker at an upcoming webinar where you can see the entire process live.

Google Cloud Mind Map - Get a complete picture of the Google Cloud Platform with this interactive map.

Slides, Videos, Audio

GCP Podcast - #257 GKE Autopilot with Yochay Kiriaty and William Denniss.

Kubernetes Podcast - #148 Liqo, with Alex Palesandro.

Releases

AppEngine Standard - Automatic scaling elements min_instances and min_idle_instances will now only apply to versions of a service that have been configured to receive traffic.

BigQuery - BigQuery now supports the following data definition language (DDL) statements: CREATE VIEW, ALTER COLUMN SET OPTIONS, ALTER COLUMN NOT NULL. This feature is in GA.

Binary Authorization - Binary Authorization now supports Continuous Validation.

Compute Engine - Preview: With the introduction of OS inventory management v2.0, you can now query the OS Config API to get inventory and vulnerability report data for your VMs in a specific zone, see OS inventory management. You can now create extreme persistent disks in certain regions. C2 machines are available in the following regions and zones: Osaka asia-northeast2-a See VM instance pricing for details. N2D machines are available in the following regions and zones: Osaka asia-northeast2-c Montréal northamerica-northeast1-a,c Finland europe-north1-a,b,c See VM instance pricing for details.

Config Connector - Config Connector version 1.49.0 is now available. Hierarchical reference field is optional for BigQueryDataset, ComputeDisk, Folder, and Project (Fixes a follow-up issue in #349). Config Connector version 1.48.0 is now available. ComputeDisk added support for projectRef. Added go-clients for GKEHubMembership and CloudIdentityGroup.

Dialogflow - Preview launch of the following languages in Dialogflow ES: Bengali Filipino Finnish Malay Marathi Romanian Sinhala Tamil Telugu Vietnamese.

Google Kubernetes Engine - For GKE clusters with Windows Server nodes, node names will now be limited to 15-characters to allow for Active Directory joining. Fixes for the following GKE Autopilot clusters issues are rolling out to the Rapid release channel: Pods with a priority lower than -10 would not trigger scale up. (2021-R14) Version updates GKE cluster versions have been updated. Multi-Instance GPU on GKE is available in Preview.

Google Kubernetes Engine Rapid - Fixes for the following GKE Autopilot clusters issues are rolling out to the Rapid release channel: Pods with a priority lower than -10 would not trigger scale up. (2021-R14) Version updates Version 1.19.9-gke.1400 is now the default version in the Rapid channel.

Google Kubernetes Engine Regular - (2021-R14) Version updates Version 1.18.16-gke.2100 is now the default version in the Regular channel.

Google Kubernetes Engine Stable - (2021-R14) Version updates Version 1.17.17-gke.4900 is now available in the Stable channel.

Load Balancing - Internal TCP/UDP Load Balancing now supports session affinity for the UDP protocol.

Cloud Logging - You can now install the Cloud Logging agent, Cloud Monitoring agent, and Ops Agent on VMs running OpenSUSE Leap versions 15, 15.1, and 15.2.

Cloud Monitoring - You can now install the Cloud Logging agent, Cloud Monitoring agent, and Ops Agent on VMs running OpenSUSE Leap versions 15, 15.1, and 15.2.

Cloud Run for Anthos - Cloud Run for Anthos on Google Cloud version 0.21.0-gke.0 is now available for the following GKE minor versions: 1.19 1.20 1.21. Events for Cloud Run for Anthos version 0.20.0-gke.108 is now available for the following GKE minor versions: 1.19 1.20 1.21.

Cloud SQL SQL Server - The following version upgrade applies to Cloud SQL for SQL Server: SQL Server 2017 is upgraded from 14.0.3257.3 to 14.0.3370.1 If you use maintenance windows, the new version will be available after your maintenance update.

Cloud Storage - You can now compose objects using source objects that were encrypted with Cloud KMS keys.

Cloud Translation - Document Translation for Cloud Translation - Advanced (v3) is now available in Preview.

Dialogflow Enterprise - Preview launch of the following languages in Dialogflow ES: Bengali Filipino Finnish Malay Marathi Romanian Sinhala Tamil Telugu Vietnamese.

Anthos GKE on AWS - Anthos clusters on AWS 1.7.1-gke.1 is now available. The Anthos clusters on AWS 1.7.1-gke.1 patch release addresses the following security vulnerabilities: CVE-2020-29361 CVE-2020-29362 CVE-2021-24031 CVE-2021-23336 CVE-2021-3449 CVE-2021-3450 CVE-2020-1971 CVE-2021-23841 CVE-2021-23840.

Channel Services - The create, delete, get, list, and patch Customer APIs can now use an alternate parent binding to specify the customer's Channel Partner. Added LICENSE_CAP_CHANGED to the list of EntitlementEvent.Type.ENUM_VALUES to deliver notifications for a new Pub/Sub event type.

Anthos clusters on bare metal - 1.7. Anthos clusters on bare metal release 1.7.1 is now available. Functionality changes: Customers can now take cluster snapshots regardless of whether the admin cluster control plane is running. Fixes: Fixed potential stuck upgrade from 1.6.x to 1.7.0. Known issues: Upgrading the container runtime from containerd to Docker will fail in Anthos clusters on bare metal release 1.7.1.

AI Platform Unified - Vizier is now available in preview.

Anthos clusters on AWS - Anthos clusters on AWS 1.7.1-gke.1 is now available. The Anthos clusters on AWS 1.7.1-gke.1 patch release addresses the following security vulnerabilities: CVE-2020-29361 CVE-2020-29362 CVE-2021-24031 CVE-2021-23336 CVE-2021-3449 CVE-2021-3450 CVE-2020-1971 CVE-2021-23841 CVE-2021-23840.

Cloud Build - Webhook triggers are now generally available. Users can now run manual triggers on a schedule.

Cloud Run for Anthos - Cloud Run for Anthos on Google Cloud version 0.21.0-gke.0 is now available for the following GKE minor versions: 1.19 1.20 1.21. Events for Cloud Run for Anthos version 0.20.0-gke.108 is now available for the following GKE minor versions: 1.19 1.20 1.21.

GKE - (2021-R14) Version updates The following versions are now available: 1.17.17-gke.6700 1.18.17-gke.1900 1.19.9-gke.1900 Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.18 to version 1.18.16-gke.2100 with this release.

Assured Workloads for Goverment - v1. Assured Workloads now provides support for CJIS and FedRAMP High, and a more streamlined provisioning experience for some compliance regimes.

Firebase Admin Node.js SDK v9.7.0

Firebase Admin Python SDK v5.0.0

If you have suggestion, feedback or link you want to share feel free to email me at zdenko@gcpweekly.com

Have a great week,

Zdenko