Version 1.13. This version is no longer supported. For more information, see the version support policy. For information about how to upgrade to version 1.14, see Upgrading Anthos on bare metal in the 1.14 documentation.

Available supported versions: 1.28 | 1.16 | 1.15

Deleted Kubernetes 1.25 APIs

GKE on Bare Metal version 1.14 runs on Kubernetes 1.25. Kubernetes 1.25 has deleted certain APIs. You can see a list of these deleted APIs in Kubernetes 1.25 deleted APIs.

Determine if the API deletion affects you

In version 1.13, of GKE on Bare Metal, all clusters have cluster audit logging enabled and audit logs are streamed to Google Cloud Observability.

To determine if the Kubernetes Service Accounts you use make calls to any deleted APIs, run the supplied query in Logs Explorer:

In the Google Cloud console, go to the Logs Explorer page in the Logging menu.

Go to Logs Explorer

In the Query field, enter the following query:

resource.labels.cluster_name = "CLUSTER_NAME" AND
logName = "projects/PROJECT_ID/logs/externalaudit.googleapis.com%2Factivity" AND
protoPayload.authenticationInfo.principalEmail:("system:serviceaccount" OR "@") AND
protoPayload.authenticationInfo.principalEmail!~("system:serviceaccount:kube-system:") AND
protoPayload.authenticationInfo.principalEmail!~("system:serviceaccount:cert-manager:") AND
protoPayload.authenticationInfo.principalEmail!~("system:serviceaccount:capi-kubeadm-bootstrap-system:") AND
protoPayload.authenticationInfo.principalEmail!~("system:serviceaccount:capi-kubeadm-bootstrap-system-webhook:") AND
protoPayload.authenticationInfo.principalEmail!~("system:serviceaccount:capi-system:") AND
protoPayload.authenticationInfo.principalEmail!~("system:serviceaccount:capi-system-webhook:") AND
labels."k8s.io/removed-release"="1.25"

The output from this query shows if any of your Kubernetes Service Accounts make deleted API calls.