[google-appengine] Re: How is patching done for flexible instances?

2017-11-20 Thread 'Jun (Cloud Platform Support)' via Google App Engine
Hi Attila, You're correct about the uncovered scenarios mentioned if your app runtime is container image runtime. However, we are very aware of all of the above mentioned scenrios, and our product teams are working hard to improve App Engine to a state where more needed solutions will be provid

[google-appengine] Re: How is patching done for flexible instances?

2017-11-17 Thread Attila-Mihaly Balazs
Hello, Thank you for the reply. Just making sure that I understand correctly: when you say "excludes container image runtime", it means that none of the following scenarios are covered: Lets say that I'm running a CentOS based docker image on AppEngine Flex. 1) A security bug is discovered in

[google-appengine] Re: How is patching done for flexible instances?

2017-11-17 Thread 'Jun (Cloud Platform Support)' via Google App Engine
Hi Attila, Basically Google's management services will apply in-place security patches (excludes container image runtime) and any operating system and security updates during the restarts on a weekly basis per the doc at "Choosing an App Engine Environment