chore(deps): update dependency k3s-io/k3s to v1.32.0+k3s1

[renovate]

This PR contains the following updates:

Package	Update	Change
k3s-io/k3s	minor	v1.23.6+k3s1 -> v1.32.0+k3s1

---

Release Notes

k3s-io/k3s (k3s-io/k3s)

v1.32.0+k3s1: v1.32.0+k3s1

Compare Source

This release is K3S's first in the v1.32 line. This release updates Kubernetes to v1.32.0.

Kubernetes 1.32 moves the AuthorizeNodeWithSelectors feature gate to Beta and on by default. See KEP-4601 for more information.

This feature-gate breaks some of the RBAC that previous releases of K3s relied upon. The January releases of K3s v1.29, v1.30, and v1.31 will contain backported fixes. Until then, you must set --kube-apiserver-arg=feature-gates=AuthorizeNodeWithSelectors=false on server nodes, if you want to mix K3s v1.32 nodes with nodes of other versions (within the limits of what is supported by the Kubernetes Version Skew Policy).

For more details on what's new, see the Kubernetes release notes.

Changes since v1.31.4+k3s1:

• Fix rotateca validation failures when not touching default self-signed CAs (#​10710)
• Bump runc to v1.1.13 (#​10737)
• Update stable channel to v1.30.4+k3s1 (#​10739)
• Fix deploy latest commit on E2E tests (#​10725)
• Remove secrets encryption controller (#​10612)
• Update kubernetes to v1.31.0-k3s3 (#​10764)
• Bump traefik to v2.11.8 (#​10779)
• Update coredns to 1.11.3 and metrics-server to 0.7.2 (#​10760)
• Add trivy scanning to PR reports (#​10758)
• Cover edge case when on new minor release for E2E upgrade test (#​10781)
• Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 (#​10795)
• Update CNI plugins version (#​10798)
• Bump Sonobuoy version (#​10792)
• Fix /trivy action running against target branch instead of PR branch (#​10824)
• Launch private registry with init (#​10822)
• Add channel for v1.31 (#​10826)
• Bump containerd to v1.7.21, runc to v1.1.14 (#​10805)
• Bump helm-controller for skip-verify/plain-http and updated tolerations (#​10832)
• Tag PR image build as latest before scanning (#​10825)
• Only clean up containerd hosts dirs managed by k3s (#​10823)
• Remove otelgrpc pinned dependency (#​10799)
• Add node-internal-dns/node-external-dns address pass-through support (#​10852)
• Give good report if no CVEs found in trivy (#​10853)
• Fix hosts.toml header var (#​10870)
• Bump Trivy version (#​10863)
• Add int test for flannel-ipv6masq (#​10440)
• Bump Trivy version (#​10899)
• Update Kubernetes to v1.31.1-k3s3 (#​10911)
• Add MariaDB to CI (#​10724)
• Update stable channel tov1.30.5+k3s1 (#​10921)
• Use static CNI bin dir (#​10868)
  • K3s now uses a stable directory for CNI binaries, which simplifies the installation of additional CNI plugins.
• Breakup trivy scan and check comment author (#​10935)
• Fix getMembershipForUserInOrg call (#​10937)
• Check k3s-io organization membership not team membership for trivy scans (#​10940)
• Bump kine to v0.13.0 (#​10932)
  • Kine has been bumped to v0.13.0. This release includes changes that should enhance performance when using postgres as an external DB. The updated schema will be automatically used for new databases; to migrate to the new schema on existing databases, K3s can be started with the KINE_SCHEMA_MIGRATION=2 environment variable set.
• Fix trivy report download (#​10943)
• Trivy workflow: Specify GH_REPO env to use gh cli (#​10949)
• Bump Trivy version (#​10924)
• Bump traefik to chart 27.0.2 (#​10939)
• Pass Rancher's VEX report to Trivy to remove known false-positives CVEs (#​10956)
• Fix trivy vex line (#​10970)
• Add user path to runtimes search (#​10953)
  • Runtimes detection will now use $PATH
• Bump to new wharfie version (#​10971)
• Update README.md (#​10523)
• Remove trailing whitespace (#​9362)
• Bump kine to v0.13.2 (#​10978)
• Allow configuration of Rootlesskit's CopyUpDirs through an environment variable (#​10386)
  • Add new environment variable "K3S_ROOTLESS_COPYUPDIRS" to add folders to the Rootlesskit configuration.
• Fix race condition when multiple nodes reconcile S3 snapshots (#​10979)
• Bump Trivy version (#​10996)
• Add ca-cert rotation integration test, and fix ca-cert rotation (#​11013)
• Add e2e test which verifies traffic policies and firewall in services (#​10972)
• Update tcpproxy for import path change (#​11029)
• Bump Local Path Provisioner version (#​10862)
• Bump local-path-provisioner to v0.0.30 (#​11049)
• Bump helm-controller and klipper-helm (#​11060)
• Bump containerd to v1.7.22 (#​11067)
• Simplify svclb daemonset (#​10954)
  • Stop using klipper-lb as the image for svclb. Replace it with a simple busybox which just sleeps
• Add the nvidia runtime cdi (#​11065)
  • Add nvidia cdi runtime to the list of supported and discoverable runtimes
• Bump Trivy version (#​11103)
• Rollback GHA to Ubuntu 22.04 (#​11111)
• Revert "Make svclb as simple as possible" (#​11109)
• Fix Github Actions for Ubuntu-24.04 (#​11112)
• Bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 (#​11105)
• Check the last 10 commits for upgrade E2E test (#​11086)
• Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 (#​11138)
• Fixes "file exists" error from CNI bins when upgrading k3s (#​11123)
• Reduce the number of GH api request for E2E nightly (#​11148)
• Update Kubernetes to v1.31.2-k3s1 and Go 1.22.8 (#​11163)
• Update stable channel to v1.30.6+k3s1 (#​11186)
• Fix timeout when defragmenting etcd on startup (#​11164)
• Capture all fedora atomic variants in install script (#​11170)
  • Allow easier installation of k3s on all variants of fedora atomic that use rpm-ostree
• Typo fixes in contributing.md (#​11201)
• Bump Trivy version (#​11206)
• Pin vagrant to older version to avoid known issue 13527 (#​11226)
• Set kine EmulatedETCDVersion from embedded etcd version (#​11221)
• Add nonroot-devices flag to agent CLI (#​11200)
  • Device_ownership_from_security_context can now be enabled in the containerd CRI config by setting the --nonroot-devices flag or config key.
• Bump runc to v1.2 (#​10896)
• Update flannel and base cni plugins version (#​11188)
• Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#​11236)
• Fix MustFindString returning override flags on external CLI commands (#​11237)
• Bump containerd to v1.7.23-k3s1 to fix registry rewrite token scopes (#​11238)
• Fix the "Standalone"-mode of oidc-login in the wrapped kubectl library (#​11266)
  • Fixes 'no Auth Provider found for name "oidc"' when using oidc-login in standalone mode.
• Bump K3s-root version to v0.14.1 (#​11282)
• Bump kine (#​11277)
• Bump kine for mysql connection close fix (#​11305)
• Fix handling of wrapped subcommands when run with a path (#​11306)
• Fix updatecli config for klipper and helm-controller (#​11290)
• Fix issue with loadbalancer failover to default server (#​11319)
• Update localstorage_int_test.go reference (#​11339)
  • Update localstorage_int_test.go reference in tests/integration/README.md
• Add to the output command to be consistent with the product command (#​11345)
• Allow install script to print error on failed binary download (#​11335)
• Remove the go toolchain line (#​11358)
• Add ubuntu 24.04 apt command for e2e test (#​11361)
• Bump Trivy version (#​11360)
• Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 (#​11364)
• Convert legacy docker tests from bash to golang (#​11357)
• Update Kubernetes to v1.31.3-k3s1 (#​11373)
• Fix Branch Name logic for Dependabot and UpdateCLI pushes to k3s-io (#​11376)
• Fix INSTALL_K3S_PR support (#​11383)
• Fix etcd backup/restore test and add guardrail for etcd-snapshot (#​11314)
• Bump containerd to -k3s2 to fix rewrites (#​11401)
• Fix opensuse-leap install test (#​11379)
• Fix secrets-encrypt reencrypt timeout error (#​11385)
• Rework loadbalancer server selection logic (#​11329)
• Remove experimental from embedded-registry flag (#​11443)
• Update stable channel to v1.31.3+k3s1 (#​11436)
• Fix agent tunnel address with dedicated supervisor port (#​11427)
• Update coredns to 1.12.0 (#​11387)
• Bump Trivy version (#​11430)
• Update to v1.31.4-k3s1 and Go 1.22.9 (#​11463)
• Bump alpine from 3.20 to 3.21 in /conformance (#​11433)
• Fix docker check warnings (#​11474)
• Update stable channel to v1.31.4+k3s1 (#​11483)
• V1.32.0+k3s1 (#​11478)
• Switch to using kubelet config file for all supported flags (#​10433)
• Load kernel modules for nft in agent setup (#​11527)

Embedded Component Versions

Component	Version
Kubernetes	v1.32.0
Kine	v0.13.5
SQLite	3.46.1
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.1-k3s1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.12.0
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.31.4+k3s1: v1.31.4+k3s1

Compare Source

This release updates Kubernetes to v1.31.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.31.3+k3s1:

• Fix secrets-encrypt reencrypt timeout error (#​11442)
• Remove experimental from embedded-registry flag (#​11444)
• Rework loadbalancer server selection logic (#​11457)
  • The embedded client loadbalancer that handles connectivity to control-plane elements has been extensively reworked for improved performance, reliability, and observability.
• Update coredns to 1.12.0 (#​11454)
• Add node-internal-dns/node-external-dns address pass-through support … (#​11464)
• Update to v1.31.4-k3s1 and Go 1.22.9 (#​11462)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.4
Kine	v0.13.5
SQLite	3.46.1
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.12.0
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.31.3+k3s1: v1.31.3+k3s1

Compare Source

This release updates Kubernetes to v1.31.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.31.2+k3s1:

• Backport E2E GHA fixes (#​11230)
• Backports for 2024-11 (#​11261)
• Update flannel and base cni plugins version (#​11247)
• Bump to latest k3s-root version in scripts/version.sh (#​11302)
• More backports for 2024-11 (#​11307)
• Fix issue with loadbalancer failover to default server (#​11324)
• Update Kubernetes to v1.31.3-k3s1 (#​11372)
• Bump containerd to -k3s2 to fix rewrites (#​11403)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.3
Kine	v0.13.5
SQLite	3.46.1
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.11.3
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.31.2+k3s1: v1.31.2+k3s1

Compare Source

This release updates Kubernetes to v1.31.2, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.31.1+k3s1:

• Add int test for flannel-ipv6masq (#​10904)
• Bump Wharfie to v0.6.7 (#​10974)
• Add user path to runtimes search (#​11002)
• Add e2e test for advanced fields in services (#​11023)
• Launch private registry with init (#​11048)
• Backports for 2024-10 (#​11054)
• Allow additional Rootless CopyUpDirs through K3S_ROOTLESS_COPYUPDIRS (#​11041)
• Bump containerd to v1.7.22 (#​11072)
• Simplify svclb ds (#​11079)
• Add the nvidia runtime cdi (#​11093)
• Revert "Make svclb as simple as possible" (#​11118)
• Fixes "file exists" error from CNI bins when upgrading k3s (#​11125)
• Update Kubernetes to v1.31.2 (#​11155)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.2
Kine	v0.13.2
SQLite	3.46.1
Etcd	v3.5.13-k3s1
Containerd	v1.7.22-k3s1
Runc	v1.1.14
Flannel	v0.25.6
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.11.3
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.31.1+k3s1: v1.31.1+k3s1

Compare Source

This release updates Kubernetes to v1.31.1, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.31.0+k3s1:

• Testing And Secrets-Encryption Backports for 2024-09 (#​10802)
  • Remove secrets encryption controller
  • Cover edge case when on new minor release for E2E upgrade test
• Update CNI plugins version (#​10817)
• Backports for 2024-09 (#​10842)
• Fix hosts.toml header var (#​10871)
• Update Kubernetes to v1.31.1 (#​10895)
• Update Kubernetes to v1.31.1-k3s3 (#​10910)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.1
Kine	v0.12.0
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.21-k3s2
Runc	v1.1.14
Flannel	v0.25.6
Metrics-server	v0.7.2
Traefik	v2.11.8
CoreDNS	v1.11.3
Helm-controller	v0.16.4
Local-path-provisioner	v0.0.28

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.31.0+k3s1: v1.31.0+k3s1

Compare Source

This release is K3S's first in the v1.31 line. This release updates Kubernetes to v1.31.0.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.4+k3s1:

• Move test-compat docker test to GHA (#​10414)
• Check for bad token permissions when install via PR (#​10387)
• Bump k3s-root to v0.14.0 (#​10466)
  • The k3s bundled userspace has been bumped to a release based on buildroot 2024.02.3, addressing several CVEs in busybox and coreutils.
• Fix INSTALL_K3S_PR support (#​10472)
• Add data-dir to uninstall and killall scripts (#​10473)
• Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 (#​10400)
• Bump golang:alpine image version (#​10359)
• Bump Local Path Provisioner version (#​10394)
• Ensure remotedialer kubelet connections use kubelet bind address (#​10480)
  • Fixed an issue where setting the --bind-address flag to a non-loopback or wildcard address would prevent kubectl logs from working properly.
• Bump Trivy version (#​10339)
• Add etcd s3 config secret implementation (#​10340)
  • A proxy can now be configured for use when uploading etcd snapshots to a s3-compatible storage service. This overrides any proxy settings passed via environment variables.
  • Credentials and endpoint configuration for storing etcd snapshots on a s3-compatible storage service can now be read from a Secret, instead of passing them via the CLI or config file. See https://github.com/k3s-io/k3s/blob/master/docs/adrs/etcd-s3-secret.md for more information.
• For E2E upgrade test, automatically determine the channel to use (#​10461)
• Bump kine to v0.11.11 (#​10494)
• Fix loadbalancer reentrant rlock (#​10511)
  • Fixed an issue that could cause the agent loadbalancer to deadlock when the currently in-use server goes down.
• Don't use server value from config file for etcd-snapshot commands (#​10514)
  • The --server and --token flags for the k3s etcd-snapshot command have been renamed to --etcd-server and --etcd-token, to avoid unintentionally running snapshot management commands against a remote node when the cluster join address or token are present in a config file.
• Use pagination when listing large numbers of resources (#​10527)
• Fix multiple issues with servicelb (#​10552)
  • Fixed issue that caused ServiceLB to fail to create a daemonset for services with long names
  • Fixed issue that caused ServiceLB pods to crashloop on nodes with ipv6 disabled at the kernel level
• Enhance E2E Hardened option (#​10558)
• Allow Pprof and Superisor metrics in standalone mode (#​10576)
• Use higher QPS for secrets reencryption (#​10571)
• Fix issues loading data-dir value from env vars or dropin config files (#​10591)
• Remove deprecated use of wait. functions (#​10546)
• Wire lasso metrics up to metrics endpoint (#​10528)
• Update stable channel to v1.30.3+k3s1 (#​10647)
• Bump docker/docker to v25.0.6 (#​10642)
• Add a change for killall to not unmount server and agent directory (#​10403)
• Allow edge case OS rpm installs (#​10680)
• Bump containerd to v1.7.20 (#​10659)
• Update to newer OS images for install testing (#​10681)
• Bump helm-controller to v0.16.3 to drop Helm v2 support (#​10628)
• Add toleration support to ServiceLB DaemonSet (#​10687)
  • • New Feature: Users can now define Kubernetes tolerations for ServiceLB DaemonSet directly in the svccontroller.k3s.cattle.io/tolerations annotation on services.
• Fix: Add $SUDO prefix to transactional-update commands in install script (#​10531)
• Update to v1.30.3-k3s1 and Go 1.22.5 (#​10707)
• Fix caching name for e2e vagrant box (#​10695)
• Fix k3s-killall.sh support for custom data dir (#​10709)
• Adding MariaDB to README.md (#​10717)
• Bump Trivy version (#​10670)
• V1.31.0-k3s1 (#​10715)
• Update kubernetes to v1.31.0-k3s3 (#​10780)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.0
Kine	v0.12.0
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.20-k3s1
Runc	v1.1.12
Flannel	v0.25.4
Metrics-server	v0.7.0
Traefik	v2.10.7
CoreDNS	v1.10.1
Helm-controller	v0.16.3
Local-path-provisioner	v0.0.28

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.8+k3s1: v1.30.8+k3s1

Compare Source

This release updates Kubernetes to v1.30.8, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.7+k3s1:

• Fix secrets-encrypt reencrypt timeout error (#​11441)
• Remove experimental from embedded-registry flag (#​11445)
• Update coredns to 1.12.0 (#​11455)
• Rework loadbalancer server selection logic (#​11458)
  • The embedded client loadbalancer that handles connectivity to control-plane elements has been extensively reworked for improved performance, reliability, and observability.
• Add node-internal-dns/node-external-dns address pass-through support … (#​11465)
• Update to v1.30.8-k3s1 and Go 1.22.9 (#​11461)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.8
Kine	v0.13.5
SQLite	3.46.1
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.12.0
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.7+k3s1: v1.30.7+k3s1

Compare Source

This release updates Kubernetes to v1.30.7, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.6+k3s1:

• Backport E2E GHA fixes (#​11227)
• Backports for 2024-11 (#​11262)
• Update flannel and base cni plugins version (#​11248)
• Bump to latest k3s-root version in scripts/version.sh (#​11299)
• More backports for 2024-11 (#​11308)
• Fix issue with loadbalancer failover to default server (#​11325)
• Update Kubernetes to v1.30.7-k3s1 (#​11371)
• Bump containerd to -k3s2 to fix rewrites (#​11404)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.7
Kine	v0.13.5
SQLite	3.46.1
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.11.3
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.6+k3s1: v1.30.6+k3s1

Compare Source

This release updates Kubernetes to v1.30.6, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.5+k3s1:

• Add int test for flannel-ipv6masq (#​10903)
• Bump Wharfie to v0.6.7 (#​10975)
• Add user path to runtimes search (#​11003)
• Add e2e test for advanced fields in services (#​11022)
• Launch private registry with init (#​11047)
• Backports for 2024-10 (#​11061)
• Allow additional Rootless CopyUpDirs through K3S_ROOTLESS_COPYUPDIRS (#​11044)
• Bump containerd to v1.7.22 (#​11073)
• Simplify svclb ds (#​11083)
• Add the nvidia runtime cdi (#​11092)
• Revert "Make svclb as simple as possible" (#​11113)
• Fixes "file exists" error from CNI bins when upgrading k3s (#​11126)
• Update to Kubernetes v1.30.6-k3s1 and Go 1.22.8 (#​11162)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.6
Kine	v0.13.2
SQLite	3.46.1
Etcd	v3.5.13-k3s1
Containerd	v1.7.22-k3s1
Runc	v1.1.14
Flannel	v0.25.6
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.11.3
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.5+k3s1: v1.30.5+k3s1

Compare Source

This release updates Kubernetes to v1.30.5, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.4+k3s1:

• Testing And Secrets-Encryption Backports for 2024-09 (#​10801)
  • Update to newer OS images for install testing
  • Fix caching name for e2e vagrant box
  • Remove secrets encryption controller
  • Cover edge case when on new minor release for E2E upgrade test
  • Removes deprecated alpha Secrets Encryption metrics (deprecated in 1.30, removed in 1.31)
• Update CNI plugins version (#​10818)
• Backports for 2024-09 (#​10843)
• Fix hosts.toml header var (#​10872)
• Update to v1.30.5-k3s1 and Go 1.22.6 (#​10888)
• Update Kubernetes to v1.30.5-k3s2 (#​10909)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.5
Kine	v0.12.0
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.21-k3s2
Runc	v1.1.14
Flannel	v0.25.6
Metrics-server	v0.7.2
Traefik	v2.11.8
CoreDNS	v1.11.3
Helm-controller	v0.16.4
Local-path-provisioner	v0.0.28

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.4+k3s1: v1.30.4+k3s1

Compare Source

This release updates Kubernetes to v1.30.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.3+k3s1:

• Bump docker/docker to v25.0.6 (#​10649)
• Backports for 2024-08 release cycle (#​10664)
  • Use pagination when listing large numbers of resources
  • Fix multiple issues with servicelb
  • Remove deprecated use of wait. functions
  • Wire lasso metrics up to metrics endpoint
• Backports for August 2024 (#​10671)
• Bump containerd to v1.7.20 (#​10660)
• Add tolerations support for DaemonSet pods (#​10703)
  • New Feature: Users can now define Kubernetes tolerations for ServiceLB DaemonSet directly in the svccontroller.k3s.cattle.io/tolerations annotation on services.
• Update to v1.30.4-k3s1 and Go 1.22.5 (#​10721)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.4
Kine	v0.11.11
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.20-k3s1
Runc	v1.1.12
Flannel	v0.25.4
Metrics-server	v0.7.0
Traefik	v2.10.7
CoreDNS	v1.10.1
Helm-controller	v0.16.1
Local-path-provisioner	v0.0.28

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.3+k3s1: v1.30.3+k3s1

Compare Source

This release updates Kubernetes to v1.30.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.2+k3s2:

• Update channel server for k3s2 (#​10446)
• Set correct release channel for e2e upgrade test (#​10460)
• Backports for 2024-07 release cycle (#​10497)
  • Bump k3s-root to v0.14.0
  • Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7
  • Bump Local Path Provisioner version
  • Ensure remotedialer kubelet connections use kubelet bind address
  • Chore: Bump Trivy version
  • Add etcd s3 config secret implementation
• July Test Backports (#​10507)
• Update to v1.30.3-k3s1 and Go 1.22.5 (#​10536)
• Fix issues loading data-dir value from env vars or dropping config files (#​10596)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.3
Kine	v0.11.11
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.17-k3s1
Runc	v1.1.12
Flannel	v0.25.4
Metrics-server	v0.7.0
Traefik	v2.10.7
CoreDNS	v1.10.1
Helm-controller	v0.16.1
Local-path-provisioner	v0.0.28

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.2+k3s1: v1.30.2+k3s1

Compare Source

This release updates Kubernetes to v1.30.2, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.1+k3s1:

• Fix bug w

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.