gcp-vertexai v5.6.0 - Check and undeploy unapproved models on endpoints
Oct 28, 2026•GuardrailsMods
What's new?
- You can now check that your endpoints serve only the models you approve. List the approved models in GCP > Agent Platform > Endpoint > Deployed Models > Approved > Models by their Model Garden or Model Registry name, with an optional version. Then set GCP > Agent Platform > Endpoint > Deployed Models > Approved to Check: Approved to alarm on endpoints serving any other model, or to Enforce: Undeploy unapproved to undeploy those models. Only the unapproved models are undeployed, and their traffic moves to the models that stay. The policy defaults to Skip, so nothing changes until you set it.
- If Guardrails can't yet tell which model a deployment is, it reports it in the alarm but never undeploys it.
- You can now see which models are offered in each region's Model Garden, including models from publishers such as Meta, Qwen, DeepSeek and OpenAI that the global catalog doesn't list. Set GCP > Agent Platform > Region Publisher Model > CMDB to Enforce: Enabled to record them, and choose the regions in GCP > Agent Platform > Region Publisher Model > Regions. The CMDB policy defaults to Skip, so nothing is recorded until you turn it on.
- Vertex AI is now called Agent Platform in Guardrails, to match Google's new name, so its policies and controls appear under GCP > Agent Platform. Your existing policy settings keep working, including values that still mention Vertex AI, so you don't need to change anything.
Bug fixes
- The Allowed > Custom, Allowed > Region and Allowed > Encryption at Rest controls for endpoints no longer try to delete an endpoint that still has models deployed to it, which Google Cloud refuses. They keep the endpoint in alarm and delete it once its models are undeployed.
- When Google Cloud returns a temporary error, the Delete actions for models, deployment resource pools, notebook runtime templates and endpoints now show its message instead of [object Object].
- Models and publisher models no longer lose their version ID when Guardrails updates them. It is now kept as modelVersionId.
- Publisher Model discovery now also finds Model Garden models from Mistral AI and xAI.
- Publisher models are now refreshed every 24 hours, so models that Google adds to or removes from the global Model Garden catalog show up in Guardrails. Before, the catalog was read only once.
Resource Types
Added
- GCP > Agent Platform > Region Publisher Model
Renamed
- GCP > Vertex AI to GCP > Agent Platform
- GCP > Vertex AI > Deployment Resource Pool to GCP > Agent Platform > Deployment Resource Pool
- GCP > Vertex AI > Endpoint to GCP > Agent Platform > Endpoint
- GCP > Vertex AI > Model to GCP > Agent Platform > Model
- GCP > Vertex AI > Notebook Runtime Template to GCP > Agent Platform > Notebook Runtime Template
- GCP > Vertex AI > Publisher Model to GCP > Agent Platform > Publisher Model
Control Types
Added
- GCP > Agent Platform > Endpoint > Deployed Models
- GCP > Agent Platform > Endpoint > Deployed Models > Approved
- GCP > Agent Platform > Region Publisher Model > CMDB
- GCP > Agent Platform > Region Publisher Model > Discovery
Renamed
- GCP > Vertex AI > API Enabled to GCP > Agent Platform > API Enabled
- GCP > Vertex AI > CMDB to GCP > Agent Platform > CMDB
- GCP > Vertex AI > Deployment Resource Pool > Active to GCP > Agent Platform > Deployment Resource Pool > Active
- GCP > Vertex AI > Deployment Resource Pool > Allowed to GCP > Agent Platform > Deployment Resource Pool > Allowed
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Custom to GCP > Agent Platform > Deployment Resource Pool > Allowed > Custom
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Encryption at Rest to GCP > Agent Platform > Deployment Resource Pool > Allowed > Encryption at Rest
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Region to GCP > Agent Platform > Deployment Resource Pool > Allowed > Region
- GCP > Vertex AI > Deployment Resource Pool > CMDB to GCP > Agent Platform > Deployment Resource Pool > CMDB
- GCP > Vertex AI > Deployment Resource Pool > Discovery to GCP > Agent Platform > Deployment Resource Pool > Discovery
- GCP > Vertex AI > Discovery to GCP > Agent Platform > Discovery
- GCP > Vertex AI > Endpoint > Active to GCP > Agent Platform > Endpoint > Active
- GCP > Vertex AI > Endpoint > Active > Request-Response Logging to GCP > Agent Platform > Endpoint > Active > Request-Response Logging
- GCP > Vertex AI > Endpoint > Allowed to GCP > Agent Platform > Endpoint > Allowed
- GCP > Vertex AI > Endpoint > Allowed > Custom to GCP > Agent Platform > Endpoint > Allowed > Custom
- GCP > Vertex AI > Endpoint > Allowed > Encryption at Rest to GCP > Agent Platform > Endpoint > Allowed > Encryption at Rest
- GCP > Vertex AI > Endpoint > Allowed > Region to GCP > Agent Platform > Endpoint > Allowed > Region
- GCP > Vertex AI > Endpoint > Approved to GCP > Agent Platform > Endpoint > Approved
- GCP > Vertex AI > Endpoint > CMDB to GCP > Agent Platform > Endpoint > CMDB
- GCP > Vertex AI > Endpoint > Discovery to GCP > Agent Platform > Endpoint > Discovery
- GCP > Vertex AI > Endpoint > Labels to GCP > Agent Platform > Endpoint > Labels
- GCP > Vertex AI > Model > Active to GCP > Agent Platform > Model > Active
- GCP > Vertex AI > Model > Allowed to GCP > Agent Platform > Model > Allowed
- GCP > Vertex AI > Model > Allowed > Custom to GCP > Agent Platform > Model > Allowed > Custom
- GCP > Vertex AI > Model > Allowed > Region to GCP > Agent Platform > Model > Allowed > Region
- GCP > Vertex AI > Model > CMDB to GCP > Agent Platform > Model > CMDB
- GCP > Vertex AI > Model > Discovery to GCP > Agent Platform > Model > Discovery
- GCP > Vertex AI > Model > Labels to GCP > Agent Platform > Model > Labels
- GCP > Vertex AI > Notebook Runtime Template > Active to GCP > Agent Platform > Notebook Runtime Template > Active
- GCP > Vertex AI > Notebook Runtime Template > Allowed to GCP > Agent Platform > Notebook Runtime Template > Allowed
- GCP > Vertex AI > Notebook Runtime Template > Allowed > Custom to GCP > Agent Platform > Notebook Runtime Template > Allowed > Custom
- GCP > Vertex AI > Notebook Runtime Template > Allowed > Region to GCP > Agent Platform > Notebook Runtime Template > Allowed > Region
- GCP > Vertex AI > Notebook Runtime Template > Approved to GCP > Agent Platform > Notebook Runtime Template > Approved
- GCP > Vertex AI > Notebook Runtime Template > CMDB to GCP > Agent Platform > Notebook Runtime Template > CMDB
- GCP > Vertex AI > Notebook Runtime Template > Discovery to GCP > Agent Platform > Notebook Runtime Template > Discovery
- GCP > Vertex AI > Notebook Runtime Template > Labels to GCP > Agent Platform > Notebook Runtime Template > Labels
- GCP > Vertex AI > Publisher Model > CMDB to GCP > Agent Platform > Publisher Model > CMDB
- GCP > Vertex AI > Publisher Model > Discovery to GCP > Agent Platform > Publisher Model > Discovery
Policy Types
Added
- GCP > Agent Platform > Endpoint > Deployed Models
- GCP > Agent Platform > Endpoint > Deployed Models > Approved
- GCP > Agent Platform > Endpoint > Deployed Models > Approved > Models
- GCP > Agent Platform > Region Publisher Model > CMDB
- GCP > Agent Platform > Region Publisher Model > Regions
Renamed
- GCP > Vertex AI > API Enabled to GCP > Agent Platform > API Enabled
- GCP > Vertex AI > Allowed Regions [Default] to GCP > Agent Platform > Allowed Regions [Default]
- GCP > Vertex AI > Approved Regions [Default] to GCP > Agent Platform > Approved Regions [Default]
- GCP > Vertex AI > CMDB to GCP > Agent Platform > CMDB
- GCP > Vertex AI > Deployment Resource Pool > Active to GCP > Agent Platform > Deployment Resource Pool > Active
- GCP > Vertex AI > Deployment Resource Pool > Active > Age to GCP > Agent Platform > Deployment Resource Pool > Active > Age
- GCP > Vertex AI > Deployment Resource Pool > Active > Last Modified to GCP > Agent Platform > Deployment Resource Pool > Active > Last Modified
- GCP > Vertex AI > Deployment Resource Pool > Allowed to GCP > Agent Platform > Deployment Resource Pool > Allowed
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Custom to GCP > Agent Platform > Deployment Resource Pool > Allowed > Custom
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Custom > Rules to GCP > Agent Platform > Deployment Resource Pool > Allowed > Custom > Rules
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Encryption at Rest to GCP > Agent Platform > Deployment Resource Pool > Allowed > Encryption at Rest
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Encryption at Rest > Level to GCP > Agent Platform > Deployment Resource Pool > Allowed > Encryption at Rest > Level
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Encryption at Rest > Level > Customer Managed Key to GCP > Agent Platform > Deployment Resource Pool > Allowed > Encryption at Rest > Level > Customer Managed Key
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Region to GCP > Agent Platform > Deployment Resource Pool > Allowed > Region
- GCP > Vertex AI > Deployment Resource Pool > Allowed > Region > Regions to GCP > Agent Platform > Deployment Resource Pool > Allowed > Region > Regions
- GCP > Vertex AI > Deployment Resource Pool > CMDB to GCP > Agent Platform > Deployment Resource Pool > CMDB
- GCP > Vertex AI > Deployment Resource Pool > Regions to GCP > Agent Platform > Deployment Resource Pool > Regions
- GCP > Vertex AI > Enabled to GCP > Agent Platform > Enabled
- GCP > Vertex AI > Endpoint > Active to GCP > Agent Platform > Endpoint > Active
- GCP > Vertex AI > Endpoint > Active > Age to GCP > Agent Platform > Endpoint > Active > Age
- GCP > Vertex AI > Endpoint > Active > Last Modified to GCP > Agent Platform > Endpoint > Active > Last Modified
- GCP > Vertex AI > Endpoint > Active > Request-Response Logging to GCP > Agent Platform > Endpoint > Active > Request-Response Logging
- GCP > Vertex AI > Endpoint > Allowed to GCP > Agent Platform > Endpoint > Allowed
- GCP > Vertex AI > Endpoint > Allowed > Custom to GCP > Agent Platform > Endpoint > Allowed > Custom
- GCP > Vertex AI > Endpoint > Allowed > Custom > Rules to GCP > Agent Platform > Endpoint > Allowed > Custom > Rules
- GCP > Vertex AI > Endpoint > Allowed > Encryption at Rest to GCP > Agent Platform > Endpoint > Allowed > Encryption at Rest
- GCP > Vertex AI > Endpoint > Allowed > Encryption at Rest > Level to GCP > Agent Platform > Endpoint > Allowed > Encryption at Rest > Level
- GCP > Vertex AI > Endpoint > Allowed > Encryption at Rest > Level > Customer Managed Key to GCP > Agent Platform > Endpoint > Allowed > Encryption at Rest > Level > Customer Managed Key
- GCP > Vertex AI > Endpoint > Allowed > Region to GCP > Agent Platform > Endpoint > Allowed > Region
- GCP > Vertex AI > Endpoint > Allowed > Region > Regions to GCP > Agent Platform > Endpoint > Allowed > Region > Regions
- GCP > Vertex AI > Endpoint > Approved to GCP > Agent Platform > Endpoint > Approved
- GCP > Vertex AI > Endpoint > Approved > Custom to GCP > Agent Platform > Endpoint > Approved > Custom
- GCP > Vertex AI > Endpoint > Approved > Regions to GCP > Agent Platform > Endpoint > Approved > Regions
- GCP > Vertex AI > Endpoint > Approved > Usage to GCP > Agent Platform > Endpoint > Approved > Usage
- GCP > Vertex AI > Endpoint > CMDB to GCP > Agent Platform > Endpoint > CMDB
- GCP > Vertex AI > Endpoint > Labels to GCP > Agent Platform > Endpoint > Labels
- GCP > Vertex AI > Endpoint > Labels > Template to GCP > Agent Platform > Endpoint > Labels > Template
- GCP > Vertex AI > Endpoint > Regions to GCP > Agent Platform > Endpoint > Regions
- GCP > Vertex AI > Labels Template [Default] to GCP > Agent Platform > Labels Template [Default]
- GCP > Vertex AI > Model > Active to GCP > Agent Platform > Model > Active
- GCP > Vertex AI > Model > Active > Age to GCP > Agent Platform > Model > Active > Age
- GCP > Vertex AI > Model > Active > Last Modified to GCP > Agent Platform > Model > Active > Last Modified
- GCP > Vertex AI > Model > Allowed to GCP > Agent Platform > Model > Allowed
- GCP > Vertex AI > Model > Allowed > Custom to GCP > Agent Platform > Model > Allowed > Custom
- GCP > Vertex AI > Model > Allowed > Custom > Rules to GCP > Agent Platform > Model > Allowed > Custom > Rules
- GCP > Vertex AI > Model > Allowed > Region to GCP > Agent Platform > Model > Allowed > Region
- GCP > Vertex AI > Model > Allowed > Region > Regions to GCP > Agent Platform > Model > Allowed > Region > Regions
- GCP > Vertex AI > Model > CMDB to GCP > Agent Platform > Model > CMDB
- GCP > Vertex AI > Model > Labels to GCP > Agent Platform > Model > Labels
- GCP > Vertex AI > Model > Labels > Template to GCP > Agent Platform > Model > Labels > Template
- GCP > Vertex AI > Model > Regions to GCP > Agent Platform > Model > Regions
- GCP > Vertex AI > Notebook Runtime Template > Active to GCP > Agent Platform > Notebook Runtime Template > Active
- GCP > Vertex AI > Notebook Runtime Template > Active > Age to GCP > Agent Platform > Notebook Runtime Template > Active > Age
- GCP > Vertex AI > Notebook Runtime Template > Active > Last Modified to GCP > Agent Platform > Notebook Runtime Template > Active > Last Modified
- GCP > Vertex AI > Notebook Runtime Template > Allowed to GCP > Agent Platform > Notebook Runtime Template > Allowed
- GCP > Vertex AI > Notebook Runtime Template > Allowed > Custom to GCP > Agent Platform > Notebook Runtime Template > Allowed > Custom
- GCP > Vertex AI > Notebook Runtime Template > Allowed > Custom > Rules to GCP > Agent Platform > Notebook Runtime Template > Allowed > Custom > Rules
- GCP > Vertex AI > Notebook Runtime Template > Allowed > Region to GCP > Agent Platform > Notebook Runtime Template > Allowed > Region
- GCP > Vertex AI > Notebook Runtime Template > Allowed > Region > Regions to GCP > Agent Platform > Notebook Runtime Template > Allowed > Region > Regions
- GCP > Vertex AI > Notebook Runtime Template > Approved to GCP > Agent Platform > Notebook Runtime Template > Approved
- GCP > Vertex AI > Notebook Runtime Template > Approved > Custom to GCP > Agent Platform > Notebook Runtime Template > Approved > Custom
- GCP > Vertex AI > Notebook Runtime Template > Approved > Regions to GCP > Agent Platform > Notebook Runtime Template > Approved > Regions
- GCP > Vertex AI > Notebook Runtime Template > Approved > Usage to GCP > Agent Platform > Notebook Runtime Template > Approved > Usage
- GCP > Vertex AI > Notebook Runtime Template > CMDB to GCP > Agent Platform > Notebook Runtime Template > CMDB
- GCP > Vertex AI > Notebook Runtime Template > Labels to GCP > Agent Platform > Notebook Runtime Template > Labels
- GCP > Vertex AI > Notebook Runtime Template > Labels > Template to GCP > Agent Platform > Notebook Runtime Template > Labels > Template
- GCP > Vertex AI > Notebook Runtime Template > Regions to GCP > Agent Platform > Notebook Runtime Template > Regions
- GCP > Vertex AI > Permissions to GCP > Agent Platform > Permissions
- GCP > Vertex AI > Permissions > Levels to GCP > Agent Platform > Permissions > Levels
- GCP > Vertex AI > Permissions > Levels > Modifiers to GCP > Agent Platform > Permissions > Levels > Modifiers
- GCP > Vertex AI > Publisher Model > CMDB to GCP > Agent Platform > Publisher Model > CMDB
- GCP > Vertex AI > Regions to GCP > Agent Platform > Regions
Action Types
Added
- GCP > Agent Platform > Endpoint > Undeploy Model
Renamed
- GCP > Vertex AI > Deployment Resource Pool > Delete to GCP > Agent Platform > Deployment Resource Pool > Delete
- GCP > Vertex AI > Deployment Resource Pool > Router to GCP > Agent Platform > Deployment Resource Pool > Router
- GCP > Vertex AI > Endpoint > Delete to GCP > Agent Platform > Endpoint > Delete
- GCP > Vertex AI > Endpoint > Router to GCP > Agent Platform > Endpoint > Router
- GCP > Vertex AI > Endpoint > Set Labels to GCP > Agent Platform > Endpoint > Set Labels
- GCP > Vertex AI > Model > Delete to GCP > Agent Platform > Model > Delete
- GCP > Vertex AI > Model > Router to GCP > Agent Platform > Model > Router
- GCP > Vertex AI > Model > Set Labels to GCP > Agent Platform > Model > Set Labels
- GCP > Vertex AI > Notebook Runtime Template > Delete to GCP > Agent Platform > Notebook Runtime Template > Delete
- GCP > Vertex AI > Notebook Runtime Template > Router to GCP > Agent Platform > Notebook Runtime Template > Router
- GCP > Vertex AI > Notebook Runtime Template > Set Labels to GCP > Agent Platform > Notebook Runtime Template > Set Labels
- GCP > Vertex AI > Set API Enabled to GCP > Agent Platform > Set API Enabled