- title: "The API no longer returns revoked tokens for the agent for Kubernetes"
  announcement_milestone: "15.8"
  removal_milestone: "16.0"
  breaking_change: true
  reporter: nagyv-gitlab
  stage: configure
  issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/382129
  body: |
    Currently, GET requests to the [Cluster Agents API](https://docs.gitlab.com/ee/api/cluster_agents.html#list-tokens-for-an-agent)
    endpoints can return revoked tokens. In GitLab 16.0, GET requests will not return revoked tokens.

    You should review your calls to these endpoints and ensure you do not use revoked tokens.

    This change affects the following REST and GraphQL API endpoints:

    - REST API:
      - [List tokens](https://docs.gitlab.com/ee/api/cluster_agents.html#list-tokens-for-an-agent)
      - [Get a single token](https://docs.gitlab.com/ee/api/cluster_agents.html#get-a-single-agent-token)
    - GraphQL:
      - [`ClusterAgent.tokens`](https://docs.gitlab.com/ee/api/graphql/reference/#clusteragenttokens)