Product overview
Google Kubernetes Engine is tracked by BlackTree as a vendor-operated software service. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Main capabilities
- Hosted product capabilities
- Vendor-managed operation and updates
- Version or feature retirement management
Typical use
Used through a hosted service, API or managed product interface.
Deployment
Operated by the publisher, with customer configuration and integrations where applicable.
This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page ↗.
Collected lifecycle data
| Product | Google Kubernetes Engine |
|---|
| Release | Published lifecycle |
|---|
| End of Starting on July 1, 2026, Identity Service for GKE is deprecated in GKE version 1.36 and earlier. This feature is also unavailable in organizations that were created on or after July 1, 2025. GKE version 1.37 and later don't support Identit | 1 July 2026 |
|---|
| Date precision | Day |
|---|
Known exploited vulnerabilities
Catalogue updated 27 Oct 2026These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.
No CISA known-exploited entries currently match this mapped product family.
This does not mean the product has no vulnerabilities.
Package vulnerability advisories
OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.
No package advisories have been linked for this product identity.
This is not evidence that the product has no vulnerabilities.
Source evidence
PRIMARYReady
Alphabet (Google) lifecycle discovery
Bug fixes : Fixed duplicate findings in cm report and cm stats , and stopped merging distinct vulnerability types reported on the same line. Fixed database is locked errors during cm find --deep scans with multiple workers. Reduced false positives by requiring a concrete, viable exploit before reporting a finding with high confidence. Included sessions from cm find --deep and cm find --diff workers in cm stats . Fixed cm verify resolving relative finding and exploit artifact paths against the current working directory instead of the project root. | For more information, see the CodeMender documentation . | Google Kubernetes Engine | Deprecated | Starting on July 1, 2026, Identity Service for GKE is deprecated in GKE version 1.36 and earlier. This feature is also unavailable in organizations that were created on or after July 1, 2025. GKE version 1.37 and later don't support Identity Service for GKE. Before you upgrade clusters to 1.37 and later, disable this feature and migrate to Workforce Identity Federation. | For more information, see Identity Service for GKE deprecation . | Feature | GKE support for using the c4-standard-* machine types (up to 192 vCPUs) as Confidential GKE Nodes with Intel TDX is generally available. For more information, see the following pages:
Official vendor lifecycle or product-change property. Extracted records require human review.
First collected 25 Aug 2026 · Last collected 25 Oct 2026 · Review state accepted
Open official vendor source ↗ 