Supported Kubernetes cluster versions

Each GKE attached clusters release comes with Kubernetes version notes. These are similar to release notes but are specific to a Kubernetes version and may offer more technical detail.

GKE attached clusters supports the following Kubernetes versions:

Kubernetes 1.31

1.31.0-gke.1

Kubernetes 1.30

1.30.0-gke.4

  • Breaking Change: GKE attached clusters validate that the following required services are enabled when creating or updating attached clusters: cloudresourcemanager.googleapis.com, monitoring.googleapis.com. For details, see Google Cloud requirements.

1.30.0-gke.3

1.30.0-gke.2

1.30.0-gke.1

Kubernetes 1.29

1.29.0-gke.7

  • Breaking Change: GKE attached clusters validate that the following required services are enabled when creating or updating attached clusters: cloudresourcemanager.googleapis.com, monitoring.googleapis.com. For details, see Google Cloud requirements.

1.29.0-gke.6

1.29.0-gke.5

1.29.0-gke.4

1.29.0-gke.3

1.29.0-gke.2

  • Breaking Change: Starting from Kubernetes 1.29, clusters require outbound HTTPS connectivity to the domain kubernetesmetadata.googleapis.com. Please ensure that your proxy server and/or firewall configuration allows this traffic. You also need to enable the Kubernetes Metadata API, which can be enabled in the Google Cloud console.

  • Feature: Removed the requirement for connectivity to the domain opsconfigmonitoring.googleapis.com. This domain was previously required for logging and monitoring but is no longer needed for Kubernetes 1.29 and later. You should remove this domain from your firewall and/or proxy server configuration.

  • Bug Fix: Fixed an issue where the Fluentbit agent can become unresponsive and stop ingesting logs into Cloud Logging. Added a mechanism to detect and automatically restart the agent when this occurs.

1.29.0-gke.1

  • Breaking Change: Starting from Kubernetes 1.29, clusters require outbound HTTPS connectivity to the domain kubernetesmetadata.googleapis.com. Please ensure that your proxy server and/or firewall configuration allows this traffic. You also need to enable the Kubernetes Metadata API, which can be enabled in the Google Cloud console.

  • Feature: Removed the requirement for connectivity to the domain opsconfigmonitoring.googleapis.com. This domain was previously required for logging and monitoring but is no longer needed for Kubernetes 1.29 and later. You should remove this domain from your firewall and/or proxy server configuration.

  • Bug Fix: Fixed an issue where the Fluentbit agent can become unresponsive and stop ingesting logs into Cloud Logging. Added a mechanism to detect and automatically restart the agent when this occurs.

Kubernetes 1.28

1.28.0-gke.9

1.28.0-gke.8

1.28.0-gke.7

1.28.0-gke.6

1.28.0-gke.5

  • Security Fixes:

1.28.0-gke.4

  • Security Fixes:

1.28.0-gke.3

1.28.0-gke.2

  • Bug Fix: Fixed an intermittent authorization failure when using Google Groups.

1.28.0-gke.1

  • Breaking Change: Starting from 1.28, clusters require outbound HTTPS connectivity to {GCP_LOCATION}-gkemulticloud.googleapis.com. Ensure your proxy server and/or firewall allows for this traffic.

  • Feature: Removed the need to explicitly add Google IAM bindings for most features.

    1. No longer need to add any bindings for gke-system/gke-telemetry-agent when creating a cluster.
    2. No longer need to add any bindings for gmp-system/collector or gmp-system/rule-evaluator when enabling managed data collection for Google Managed Service for Prometheus.
    3. No longer need to add any bindings for gke-system/binauthz-agent when enabling binary authorization.

  • Bug Fix: Enhanced Cloud Logging's ingestion of logs from Anthos attached clusters:

    • Fixed an issue in timestamp parsing.
    • Assigned the correct severity level to the anthos-metadata-agent's error logs.

Kubernetes 1.27

1.27.0-gke.9

1.27.0-gke.8

  • Security Fixes:

1.27.0-gke.7

  • Security Fixes:

1.27.0-gke.6

1.27.0-gke.5

  • Bug Fix: Fixed an intermittent authorization failure when using Google Groups.

1.27.0-gke.4

  • Bug Fix: Enhanced Cloud Logging's ingestion of logs from Anthos attached clusters:
    • Fixed an issue in timestamp parsing.
    • Assigned the correct severity level to the anthos-metadata-agent's error logs.

1.27.0-gke.3

  • Feature: Added support for attaching any CNCF-conformant Kubernetes cluster, in addition to EKS and AKS clusters. To attach a cluster, specify the distribution type as "generic".
  • Bug Fix: Removed deployment of Fluent Bit when logging is disabled.

1.27.0-gke.2

  • Bug Fix: Fixed a problem where Kubernetes resource metrics might not be successfully scraped from Kubelet for EKS if the node's name did not match the node's hostname.

1.27.0-gke.1

Kubernetes 1.26

1.26.0-gke.9

1.26.0-gke.8

  • Bug Fix: Fixed an intermittent authorization failure when using Google Groups.

1.26.0-gke.7

  • Bug Fix: Enhanced Cloud Logging's ingestion of logs from Anthos attached clusters:
    • Fixed an issue in timestamp parsing.
    • Assigned the correct severity level to the anthos-metadata-agent's error logs.

1.26.0-gke.6

  • Feature: Added support for attaching any CNCF-conformant Kubernetes cluster, in addition to EKS and AKS clusters. To attach a cluster, specify the distribution type as "generic".

1.26.0-gke.5

  • Bug Fix: Fixed a problem where Kubernetes resource metrics might not be successfully scraped from Kubelet for EKS if the node's name did not match the node's hostname.
  • Security Fixes

1.26.0-gke.4

1.26.0-gke.3

1.26.0-gke.2

  • Bug Fixes
    • Fixed an issue in which the logging agent consumed increasingly high amounts of memory.

1.26.0-gke.1

  • Feature: Added support for Kubernetes 1.26.

  • Feature: Enabled connecting to an Anthos attached cluster as a member of a Google group. For details, see Connect to your EKS cluster and Connect to your AKS cluster.

  • Feature: Fixed a regression which breaks scraping from authenticated Kubelet port.

  • Feature: Added day 2 operations for Anthos attached clusters in the Google Cloud console, allowing you to easily view, update, and detach EKS clusters. From the Google Cloud Console, you can also view, update, and detach AKS clusters.

  • Feature: Enabled sending Kubernetes resource metadata to Google Cloud Platform, improving both the user interface and cluster metrics. For the metadata to be ingested properly, customers need to enable the Config Monitoring for Ops API. This API can be enabled either in the Google Cloud Console , or by manually enabling the opsconfigmonitoring.googleapis.com API in the gcloud CLI. Additionally, customers must follow the steps outlined in the Authorize Cloud Logging/Monitoring documentation to add the necessary IAM bindings.

Kubernetes 1.25

1.25.0-gke.8

  • Feature: Added support for attaching any CNCF-conformant Kubernetes cluster, in addition to EKS and AKS clusters. To attach a cluster, specify the distribution type as "generic".

1.25.0-gke.7

  • Bug Fix: Fixed a problem where Kubernetes resource metrics might not be successfully scraped from Kubelet for EKS if the node's name did not match the node's hostname.
  • Security Fixes

1.25.0-gke.6

1.25.0-gke.5

1.25.0-gke.4

  • Bug Fixes
    • Fixed an issue in which the logging agent consumed increasingly high amounts of memory.

1.25.0-gke.3

  • Feature: Added day 2 operations for Anthos attached clusters in the Google Cloud console, allowing you to easily view, update, and detach EKS clusters. From the Google Cloud Console, you can also view, update, and detach AKS clusters.

  • Feature: Enabled sending Kubernetes resource metadata to Google Cloud Platform, improving both the user interface and cluster metrics. For the metadata to be ingested properly, customers need to enable the Config Monitoring for Ops API. This API can be enabled either in the Google Cloud Console , or by manually enabling the opsconfigmonitoring.googleapis.com API in the gcloud CLI. Additionally, customers must follow the steps outlined in the Authorize Cloud Logging/Monitoring documentation to add the necessary IAM bindings.

  • Bug Fix: Fixed a regression which breaks scraping from authenticated Kubelet port.

1.25.0-gke.2

1.25.0-gke.1

  • Feature: Added support for Kubernetes 1.25.

Kubernetes 1.24

1.24.0-gke.5

1.24.0-gke.4

  • Bug Fixes
    • Fixed an issue in which the logging agent consumed increasingly high amounts of memory.

1.24.0-gke.3

  • Feature: Added day 2 operations for Anthos attached clusters in the Google Cloud console, allowing you to easily view, update, and detach EKS clusters. From the Google Cloud Console, you can also view, update, and detach AKS clusters.

  • Bug Fix: Fixed a regression which breaks scraping from authenticated Kubelet port.

1.24.0-gke.2

1.24.0-gke.1

  • Feature: Added support for Kubernetes 1.24.

Kubernetes 1.23

1.23.0-gke.3

1.23.0-gke.2

1.23.0-gke.1

  • Feature: Added support for Kubernetes 1.23.

Kubernetes 1.22

1.22.0-gke.1

  • Feature: Added support for Kubernetes 1.22.

Kubernetes 1.21

1.21.0-gke.1

  • Feature: Added support for Kubernetes 1.21.