Google Kubernetes Engine: Cloud Kubernetes Ledger
Google is building GKE into the place to run very large AI training and inference fleets on its own TPUs and NVIDIA GPUs, while folding Autopilot and…
Part of the Managed Cloud Kubernetes Ledger (edition 2026-10-13). How the scores work: methodology.
1. Snapshot
- Tier: Hyperscaler
- Owner: Alphabet Inc. (Google Cloud), public company
- Licence model: Pay as you go: $0.10 per cluster-hour (one zonal or Autopilot cluster covered by a $74.40 monthly credit), Autopilot billed per pod resource, +$0.50 per cluster-hour in extended support
- Products scored: GKE Standard and Autopilot on Google Cloud, with fleet features, Backup for GKE and GKE multicloud as scored add-ons; Google Distributed Cloud is scored in the On-Prem Ledger
- Latest release: Kubernetes 1.36 in Regular channel 2026-06-09; 1.37 in Rapid channel 2026-09-02
- Next signal: 1.37 predicted in Regular channel 2026-10-14; No-channel clusters moved to Stable after 2027-06-14
- Archetype: AI-scale Kubernetes reference
- Evidence grade: A. Release notes (2014 to 2026), release schedule with Wayback history, pricing and SLA archives and security bulletins read directly; gaps are a few pre-2020 GA dates, compliance scope and partner facts.
2. Scorecard
| Dimension | Score | Direction |
|---|---|---|
| Capability today | 92.0 / 100 | higher is better |
| Momentum since end of 2022 | +9.4 points | higher is better |
| Credibility | 21.0 / 25 | higher is better |
| Commercial risk | 5.5 / 25 | lower is better |
| Technical lock-in | 8.0 / 25 | lower is better |
| Integrator fit | 18.0 / 20 | higher is better |
| AI leverage | 15.0 / 20 | higher is better |
| Ledger Index | 82.4 / 100 | balanced weights |
3. Capability by domain
Scores 0 to 5 against fixed anchors; total is weighted to 100.
| Domain (weight) | 2016 | 2019 | 2022 | Today |
|---|---|---|---|---|
| Versions, upgrades and support (12) | 3 | 3.5 | 4 | 4.5 |
| Nodes, autoscaling and compute choice (12) | 3 | 3.5 | 4.5 | 5 |
| Networking (10) | 2 | 3.5 | 4.5 | 5 |
| Storage and data protection (8) | 1.5 | 2 | 3.5 | 5 |
| Security and compliance (12) | 2 | 3 | 4.5 | 4 |
| Observability and day-2 operations (8) | 2 | 3 | 4 | 4.5 |
| Multi-cluster, hybrid and fleet (10) | 1 | 3.5 | 4.5 | 5 |
| Developer and app platform (8) | 2.5 | 3 | 4 | 4 |
| GPU and AI workloads (10) | 0 | 3 | 4 | 5 |
| Regions, sovereignty and SLA (10) | 3 | 2.5 | 3.5 | 4 |
| Total / 100 | 40.8 | 61.8 | 82.6 | 92.0 |
Year by year: 2016: 40.8 · 2017: 39.8 · 2018: 48.8 · 2019: 61.8 · 2020: 63.8 · 2021: 70.2 · 2022: 82.6 · 2023: 85.0 · 2024: 90.4 · 2025: 92.0 · 2026: 92.0
What moved the score
| Year | Domain | Change | Points | Trigger |
|---|---|---|---|---|
| 2017 | Regions, sovereignty and SLA | 3 → 2.5 | -1.0 | SLA withdrawn 2017-11-28 when the fee was removed; internal goals only until 2020 |
| 2018 | GPU and AI workloads | 0 → 3 | +6.0 | NVIDIA GPU node pools GA 2018-06-18; Cloud TPU in GKE beta 2018-07 |
| 2018 | Networking | 2 → 3.5 | +3.0 | Alias IP VPC-native GA 2018-05-22 and private clusters GA 2018-10-02; Calico network policy |
| 2019 | Developer and app platform | 2.5 → 3 | +0.8 | Cloud Build, Marketplace apps; Config Connector in beta |
| 2019 | Multi-cluster, hybrid and fleet | 1 → 3.5 | +5.0 | Anthos 2019 with GKE On-Prem and config management; Config Sync GA 2020-01-29 |
| 2019 | Nodes, autoscaling and compute choice | 3 → 3.5 | +1.2 | Node auto-provisioning and Vertical Pod Autoscaler GA 2019-10-11; GPU nodes GA 2018-06 |
| 2019 | Observability and day-2 operations | 2 → 3 | +1.6 | Node auto-repair, usage metering GA 2019-06, Kubernetes monitoring in Stackdriver |
| 2019 | Security and compliance | 2 → 3 | +2.4 | RBAC, private clusters GA 2018-10; Binary Authorization and Shielded nodes in beta |
| 2019 | Storage and data protection | 1.5 → 2 | +0.8 | Still in-tree Persistent Disk; CSI driver only in beta 2020-02; no managed backup |
| 2019 | Versions, upgrades and support | 3 → 3.5 | +1.2 | Release channels GA 2019-09-16 and regional multi-master clusters; but 1.12 to 1.15 reached GA 153 to 177 days after upstream |
| 2020 | Regions, sovereignty and SLA | 2.5 → 3.5 | +2.0 | SLA back 2020-06-04: 99.95% regional, 99.5% zonal; Autopilot 99.95% from 2021-02 |
| 2021 | Multi-cluster, hybrid and fleet | 3.5 → 4.5 | +2.0 | Multi-cluster Ingress GA 2020-04, Multi-cluster Services GA 2021-02, clusters on AWS and Azure, attached clusters |
| 2021 | Networking | 3.5 → 4.5 | +2.0 | Dataplane V2 eBPF GA 2021-05-12, multi-cluster Ingress and Services, Gateway GA 2022-11, dual-stack 2022-12 |
| 2021 | Nodes, autoscaling and compute choice | 3.5 → 4.5 | +2.4 | Autopilot 2021-02 with Google-managed nodes, Windows nodes GA 2020-04, Spot VMs GA 2022-05, 15,000-node clusters |
| 2022 | Developer and app platform | 3 → 4 | +1.6 | Config Connector GA 2020-01-29, Artifact Registry, Cloud Deploy for GKE delivery |
| 2022 | GPU and AI workloads | 3 → 4 | +2.0 | Multi-Instance GPU GA 2021-09, GPU time-sharing GA 2022-06, TPU node pools |
| 2022 | Observability and day-2 operations | 3 → 4 | +1.6 | Managed Prometheus GA 2022-03, cost allocation GA 2022-10-14, deprecation insights in preview |
| 2022 | Security and compliance | 3 → 4.5 | +3.6 | Workload Identity GA 2020-03-16, GKE Sandbox GA 2020-01, Confidential nodes GA 2022-06-15, published bulletins |
| 2022 | Storage and data protection | 2 → 3.5 | +2.4 | Backup for GKE GA 2022-11-16 and Persistent Disk CSI; no object storage CSI yet |
| 2022 | Versions, upgrades and support | 3.5 → 4 | +1.2 | Surge upgrades GA 2020-02-11, maintenance windows and exclusions; no extended support yet |
| 2023 | Observability and day-2 operations | 4 → 4.5 | +0.8 | Infrastructure dashboards and metrics packages GA 2023-11-09, managed GPU metrics 2024-07 |
| 2023 | Storage and data protection | 3.5 → 4.5 | +1.6 | Cloud Storage FUSE CSI GA 2023-07-13, Hyperdisk Extreme and Throughput GA 2023-06 |
| 2024 | GPU and AI workloads | 4 → 5 | +2.0 | TPU v5e GA 2023-11, Trillium GA 2024-12, 65,000-node clusters; DRA GA 2025-09, Inference Gateway GA 2025-12 |
| 2024 | Networking | 4.5 → 5 | +1.0 | FQDN network policies GA 2024-02, transparent inter-node encryption, managed DRANET GA 2026-04 |
| 2024 | Nodes, autoscaling and compute choice | 4.5 → 5 | +1.2 | 65,000-node clusters 2024-11; Autopilot compute in Standard clusters 2025-09; Arm ComputeClasses |
| 2024 | Versions, upgrades and support | 4 → 4.5 | +1.2 | Extended channel GA 2024-07-31 with up to 24 months; Rapid within a week of upstream, Regular median 66 days |
| 2025 | Multi-cluster, hybrid and fleet | 4.5 → 5 | +1.0 | Fleet, team scopes, Config Sync and Policy Controller included in GKE from 2025-09-02; on-prem via Google Distributed Cloud |
| 2025 | Regions, sovereignty and SLA | 3.5 → 4 | +1.0 | 43 regions; SecNumCloud 3.2 for partner S3NS 2025-12; Google Cloud Dedicated with T-Systems announced 2025-05 |
| 2025 | Security and compliance | 4.5 → 4 | -1.2 | Policy Controller included 2025-09, TDX nodes; less 1.0 for GCP-2025-001 firewall exposure and GCP-2026-058 cross-project flaw |
| 2025 | Storage and data protection | 4.5 → 5 | +0.8 | Hyperdisk ML GA 2024-08, Parallelstore CSI 2024-10, cross-project backup and restore GA 2025-08-25 |
4. Direction, 2023 to 2026
Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).
| Date | Item | Theme | Driver |
|---|---|---|---|
| 2023-07 | Cloud Storage FUSE CSI driver GA | D5 Storage and data protection | C |
| 2023-11 | Cloud TPU v5e GA in GKE | D13 Accelerators | V |
| 2023-11 | GKE Enterprise edition GA | D3 Fleet and hybrid | P |
| 2024-02 | FQDN network policies GA | D4 Networking | C |
| 2024-07 | Extended release channel with $0.50 per hour fee | D1 Versions and lifecycle | C |
| 2024-11 | 65,000-node clusters | D2 Compute and autoscaling | M |
| 2024-12 | Trillium TPU v6e GA in GKE | D13 Accelerators | V |
| 2025-05 | Container-optimized compute platform for Autopilot | D2 Compute and autoscaling | V |
| 2025-08 | Backup for GKE cross-project backup and restore GA | D5 Storage and data protection | C |
| 2025-09 | Autopilot features in Standard clusters | D2 Compute and autoscaling | V |
| 2025-09 | Dynamic Resource Allocation GA with 1.34 | D13 Accelerators | U |
| 2025-09 | GKE Enterprise features folded into GKE and standalone SKUs | D12 Packaging and pricing | P |
| 2025-12 | GKE Inference Gateway GA | D13 Accelerators | M |
| 2026-04 | Gemini Cloud Assist investigations limited to Premium Support | D7 AI-assisted operations | P |
| 2026-04 | Managed DRANET GA | D4 Networking | U |
- Centre of gravity: Accelerators (4), Compute and autoscaling (3), Storage and data protection (2)
- Driver mix: Vision 27%, Customer need 27%, Market window 13%, Upstream 13%, Portfolio 20%
5. Credibility: 21.0 / 25
| Criterion | Score | Basis |
|---|---|---|
| Cadence | 5 | Weekly dated release notes and a published release schedule with channel dates per minor, kept since 2021 |
| Roadmap transparency | 3.5 | Release schedule predicts dates by quarter; no public roadmap board, direction comes from Next and KubeCon posts |
| Say-do | 3.5 | 10 of 13 resolvable promises 2023-2026 reached GA within 12 months (77%); Gemini Cloud Assist and RayTurbo slipped |
| Velocity | 5 | Several GA capabilities per quarter in 2024-2026: TPUs, DRA, Inference Gateway, Autopilot in Standard, backup features |
| Lifecycle stability | 4 | Extended channel to 24 months since 2024-07; but GKE Enterprise edition launched 2023 and dissolved 2025, No channel removed 2027 |
Say-do record, 2023 to 2026: 14 items 2023-2026 from preview launches and Next keynotes: 10 shipped, 1 partial (Ironwood), 3 not delivered (Duet AI / Gemini Cloud Assist for GKE still preview since 2023-08, Cloud Assist investigations gated 2026-04, RayTurbo on GKE not found). No public roadmap board exists.
6. Commercial risk: 5.5 / 25 (lower is better)
| Criterion | Score | Basis |
|---|---|---|
| Price and licence volatility | 2.5 | Since 2023: Enterprise edition at $0.00822 per vCPU-hour added then dissolved into SKUs 2025-09; extended fee $0.50 per hour from 2024-07 |
| Purchase constraints | 0.5 | Pay as you go, per-second cluster fee, monthly credit covers one zonal or Autopilot cluster |
| Channel and access | 0 | Self-service sign-up, public docs, pricing and release notes, 43 regions |
| Owner stability | 0.5 | Alphabet, profitable and stable; Google Cloud profitable |
| Cost of staying supported | 2 | About 14 months standard support with forced auto-upgrade after; extended support costs $0.50 per cluster-hour |
Security record of the product itself: GCP-2025-001 (2025-01-08): Multi-Cluster Gateway created allow-all ingress firewall rules in customer VPCs 2024-12-04 to 2025-01-04, fixed by Google. GCP-2026-058 (2026-09-02, Critical): missing permission check in GKE Multi-Cloud APIs allowed cross-project Workload Identity token minting, fixed server-side, no exploitation. GCP-2023-047 and GCP-2025-033 are GKE-specific but need prior compromise; not deducted.
7. Technical lock-in: 8.0 / 25 (lower is better)
| Criterion | Score | Basis |
|---|---|---|
| Formats | 1.5 | CNCF-conformant; Autopilot, ComputeClasses and Config Connector CRDs are Google-specific but optional |
| Export path | 1.5 | Exit data transfer fees waived since 2024-01-11; Backup for GKE is Google-only, Velero works |
| Stack coupling | 2.5 | Workload Identity to Google IAM, Gateway on Cloud Load Balancing, Persistent Disk and Hyperdisk storage classes |
| Hardware / cloud coupling | 1 | Fleet runs GKE on AWS and Azure, attached clusters and Google Distributed Cloud on premises |
| Skills and tooling coupling | 1.5 | kubectl, Terraform and gcloud; Autopilot and fleet concepts are GKE-specific |
8. Integrator fit: 18.0 / 20
| Criterion | Score | Basis |
|---|---|---|
| Partner programme openness | 4.5 | Google Cloud Partner Advantage with large SI and MSP base; programme details not re-read |
| Multi-tenancy and self-service | 4.5 | Projects, folders and fleet team scopes with namespaces; multi-team management included since 2025-09 |
| API and infrastructure-as-code | 5 | hashicorp/google provider 2.65 billion downloads; GKE module 63 million; Config Connector; gcloud and SDKs |
| Skills and certification | 4 | Professional Cloud Architect and DevOps Engineer certifications cover GKE; no GKE-only certification |
9. AI leverage: 15.0 / 20
| Strand | Today | Latest step |
|---|---|---|
| AI workload support | 5 | 2025: DRA GA 2025-09, Inference Gateway GA 2025-12, Inference Quickstart, DRANET GA 2026-04 |
| AI platform stack | 3 | 2025: Cluster Director for GKE GA at Next 2025, Inference Gateway with model-aware routing |
| AI-assisted operations | 2.5 | 2025: Gemini Cloud Assist for GKE in preview since 2023 (half step); investigations read-only, Premium-only from 2026-04 |
| Agent openness | 4.5 | 2026: Remote GKE MCP server listed without preview label 2026, IAM roles and audit logging documented; tools read-only |
AI say-do 2023-2026: 8 tracked, 4 GA, 1 partial (Ironwood), 3 not delivered (Duet AI / Gemini Cloud Assist for GKE, Cloud Assist investigations, RayTurbo). The AI that ships is in the workload layer (TPUs, DRA, Inference Gateway); the operator assistant is read-only and still preview.
10. Reading
Google is building GKE into the place to run very large AI training and inference fleets on its own TPUs and NVIDIA GPUs, while folding Autopilot and fleet features into one product. The release notes show steady weekly delivery, fast Rapid-channel adoption of new Kubernetes minors and most previews reaching GA within a year, but packaging moved twice and the operator AI assistant has stayed in preview since 2023. Buyers get the broadest managed feature set with modest lock-in, at the cost of a per-cluster fee and paid extended support.
11. Open questions and evidence caveats
- Two provider-side security flaws with cross-tenant or VPC-wide exposure in 2025-2026 (GCP-2025-001, GCP-2026-058), both fixed by Google.
- Regular-channel lag was 153 to 296 days for 1.12 to 1.19; it is 42 to 120 days since 2023, with Rapid under a week.
- Incidents: europe-west9 water leak and fire 2023-04-25, 1.25 stuck-volume defect for 15 days 2023-09, VPC controller automation bug 2024-05-16.
- No financially backed SLA from 2017-11-28 to 2020-06 while the control plane was free.
- FedRAMP and other compliance scope for GKE not re-verified in this pass; SecNumCloud is through partner S3NS, not Google itself.
More from Managed Cloud Kubernetes Ledger 2026
- Overview: all platforms side by side
- Cloud Kubernetes Ledger Methodology: How Every Score Is Built
- Akamai Linode Kubernetes Engine: Cloud Kubernetes Ledger
- Alibaba ACK: Cloud Kubernetes Ledger 2026
- Amazon Elastic Kubernetes Service: Cloud Kubernetes Ledger
- Azure Kubernetes Service: Cloud Kubernetes Ledger
- Civo Kubernetes: Cloud Kubernetes Ledger
- CoreWeave Kubernetes Service: Cloud Kubernetes Ledger
- DigitalOcean Kubernetes: Cloud Kubernetes Ledger
- Huawei Cloud Cloud Container Engine: Cloud Kubernetes Ledger
- IBM IKS / ROKS: Cloud Kubernetes Ledger 2026
- IONOS Cloud Managed Kubernetes: Cloud Kubernetes Ledger
- Open Telekom Cloud Cloud Container Engine: Cloud Kubernetes Ledger
- Oracle OCI Kubernetes Engine: Cloud Kubernetes Ledger
- OVHcloud Managed Kubernetes Service: Cloud Kubernetes Ledger
- Red Hat OpenShift Service on AWS: Cloud Kubernetes Ledger
- Scaleway Kubernetes Kapsule and Kosmos: Cloud Kubernetes Ledger
- STACKIT Kubernetes Engine: Cloud Kubernetes Ledger
- Tencent Kubernetes Engine: Cloud Kubernetes Ledger
- Upstream Kubernetes: Cloud Kubernetes Ledger
- Vultr Kubernetes Engine: Cloud Kubernetes Ledger