v1.32.0-rc2+rke2r1

Validate single branch for tag

Handles case where tagged commit exists on multiple branches - such as when we branch for a new release and then immediately tag an RC.

Signed-off-by: Brad Davidson <[email protected]>

v1.32.0-rc1+rke2r1

Bump K3s version for release-1.32

Updates k3s: https://github.com/k3s-io/k3s/compare/124be7472bc2...68fbd1a6b543687f8a5a4e17ba857d82fc9dd25e

Signed-off-by: Brad Davidson <[email protected]>

v1.31.4+rke2r1

This release updates Kubernetes to v1.31.4.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.31.3+rke2r1:

• Update to Cilium v1.16.4 (#7325)
• Updated Calico version to v3.29.1 (#7351)
• Bump Harvester CSI driver v0.1.21 (#7283)
  • Bump Harvester-csi-driver v0.1.21
• Update k3s for loadbalancer improvements (#7397)
• Update Flannel and Canal version (#7406)
• Bump ingress-nginx to hardened6 (#7416)
• Bump dns-node-cache to 1.24.0 (#7418)
• Bump hardened k8s and build base (#7424)

Charts Versions

Component	Version
rke2-cilium	1.16.400
rke2-canal	v3.29.1-build2024121100
rke2-calico	v3.29.100
rke2-calico-crd	v3.29.100
rke2-coredns	1.36.102
rke2-ingress-nginx	4.10.503
rke2-metrics-server	3.12.004
rancher-vsphere-csi	3.3.1-rancher700
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.600
harvester-csi-driver	0.1.2100
rke2-snapshot-controller	3.0.601
rke2-snapshot-controller-crd	3.0.601
rke2-snapshot-validation-webhook	1.9.001

Packaged Component Versions

Component	Version
Kubernetes	v1.31.4
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.1.14
Metrics-server	v0.7.1
CoreDNS	v1.12.0
Ingress-Nginx	v1.10.5-hardened6
Helm-controller	v0.16.5

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.1 Calico v3.29.1	Yes
Calico	v3.29.1	No
Cilium	v1.16.4	No
Multus	v4.1.3	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.31.4-rc1+rke2r1

Bump hardened k8s and build base (#7424)

v1.30.8+rke2r1

This release updates Kubernetes to v1.30.8.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.7+rke2r1:

• Update to Cilium v1.16.4 (#7326)
• Updated Calico version to v3.29.1 (#7352)
• Bump harvester csi driver v0.1.21 (#7284)
  • Bump Harvester-csi-driver v0.1.21
• Update k3s for loadbalancer improvements (#7398)
• Update Flannel and Canal version (#7407)
• Bump ingress-nginx to hardened6 (#7415)
• Bump dns-node-cache to 1.24.0 (#7419)
• Bump hardened k8s and build base (#7425)

Charts Versions

Component	Version
rke2-cilium	1.16.400
rke2-canal	v3.29.1-build2024121100
rke2-calico	v3.29.100
rke2-calico-crd	v3.29.100
rke2-coredns	1.36.102
rke2-ingress-nginx	4.10.503
rke2-metrics-server	3.12.004
rancher-vsphere-csi	3.3.1-rancher700
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.600
harvester-csi-driver	0.1.2100
rke2-snapshot-controller	3.0.601
rke2-snapshot-controller-crd	3.0.601
rke2-snapshot-validation-webhook	1.9.001

Packaged Component Versions

Component	Version
Kubernetes	v1.30.8
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.1.14
Metrics-server	v0.7.1
CoreDNS	v1.12.0
Ingress-Nginx	v1.10.5-hardened6
Helm-controller	v0.16.5

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.1 Calico v3.29.1	Yes
Calico	v3.29.1	No
Cilium	v1.16.4	No
Multus	v4.1.3	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.30.8-rc1+rke2r1

Bump hardened k8s and build base (#7425)

v1.29.12+rke2r1

This release updates Kubernetes to v1.29.12.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.29.11+rke2r1:

• Update to Cilium v1.16.4 (#7327)
• Updated Calico version to v3.29.1 (#7353)
• Bump harvester csi driver v0.1.21 (#7285)
  • Bump Harvester-csi-driver v0.1.21
• Update k3s for loadbalancer improvements (#7399)
• Update Flannel and Canal version (#7408)
• Bump ingress-nginx to hardened6 (#7414)
• Bump dns-node-cache to 1.24.0 (#7420)
• Bump hardened k8s and build base (#7426)

Charts Versions

Component	Version
rke2-cilium	1.16.400
rke2-canal	v3.29.1-build2024121100
rke2-calico	v3.29.100
rke2-calico-crd	v3.29.100
rke2-coredns	1.36.102
rke2-ingress-nginx	4.10.503
rke2-metrics-server	3.12.004
rancher-vsphere-csi	3.3.1-rancher700
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.600
harvester-csi-driver	0.1.2100
rke2-snapshot-controller	3.0.601
rke2-snapshot-controller-crd	3.0.601
rke2-snapshot-validation-webhook	1.9.001

Packaged Component Versions

Component	Version
Kubernetes	v1.29.12
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.1.14
Metrics-server	v0.7.1
CoreDNS	v1.12.0
Ingress-Nginx	v1.10.5-hardened6
Helm-controller	v0.15.15

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.1 Calico v3.29.1	Yes
Calico	v3.29.1	No
Cilium	v1.16.4	No
Multus	v4.1.3	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.29.12-rc1+rke2r1

[v1.29] Bump hardened k8s and build base (#7426)

* Bump hardened k8s and build base

v1.31.3+rke2r1

This release updates Kubernetes to v1.31.3.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.31.2+rke2r1:

• Backport E2E GHA fixes (#7179)
• Bump multus, cilium and flannel charts (#7194)
• Bump ingress-nginx to v1.10.5-hardened4 (#7189)
• Bump canal chart to v3.29.0 (#7223)
• Bump rke2-calico to v3.29.0 (#7229)
• Backport missing E2E PRs (#7203)
  • Update to newer OS images for install testing
  • Add cleanup to e2e tests in vagrant env
  • Add e2e validation test for kine
• Bump vSphere CSI/CPI charts to 1.9.1 and 3.3.1-rancher700 (#7252)
• Update Flannel to v0.26.1 (#7257)
• Fix e2e ci by ignoring FOG warnings (#7268)
• Bump rke2-coredns to 1.33.005 (#7279)
• Backports for 2024-11 (#7289)
  • Bump etcd to 3.5.16
  • Bump containerd to v1.7.23
  • Fix issue on nodes with large datastores and slow disk that would cause RKE2 to fail to start due to the etcd defrag timing out after 30 seconds.
  • Fix issue where RKE2 killall script could remove data from pod volumes that failed to unmount correctly
• Update upstream version (#7320)
• Restore AWS node-name support and add IMDSv2 support (#7354)
• Bump containerd for image rewrite fix (#7377)
  • Bump containerd to v1.7.23-k3s2

Charts Versions

Component	Version
rke2-cilium	1.16.303
rke2-canal	v3.29.0-build2024110400
rke2-calico	v3.29.000
rke2-calico-crd	v3.29.000
rke2-coredns	1.33.005
rke2-ingress-nginx	4.10.502
rke2-metrics-server	3.12.004
rancher-vsphere-csi	3.3.1-rancher700
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.600
harvester-csi-driver	0.1.2000
rke2-snapshot-controller	3.0.601
rke2-snapshot-controller-crd	3.0.601
rke2-snapshot-validation-webhook	1.9.001

Packaged Component Versions

Component	Version
Kubernetes	v1.31.3
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.1.14
Metrics-server	v0.7.1
CoreDNS	v1.11.3
Ingress-Nginx	v1.10.5-hardened4
Helm-controller	v0.16.5

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.0 Calico v3.29.0	Yes
Calico	v3.29.0	No
Cilium	v1.16.3	No
Multus	v4.1.3	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.31.3-rc3+rke2r1

Bump containerd for image rewrite fix

Signed-off-by: Brad Davidson <[email protected]>