v1.30.7+rke2r1

This release updates Kubernetes to v1.30.7.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.6+rke2r1:

• Backport E2E GHA fixes (#7176)
• Bump multus, cilium and flannel charts (#7199)
• Bump ingress-nginx to v1.10.5-hardened4 (#7186)
• Bump canal chart to v3.29.0 (#7221)
• Bump rke2-calico to v3.29.0 (#7231)
• Backport missing E2E PRs (#7204)
  • Refactor run_tests.sh script
  • Update to newer OS images for install testing
  • Add cleanup to e2e tests in vagrant env
  • Add e2e validation test for kine
• Bump vSphere CSI/CPI charts to 1.9.1 and 3.3.1-rancher700 (#7249)
• Update Flannel to v0.26.1 (#7258)
• Fix e2e ci by ignoring FOG warnings (#7269)
• Bump rke2-coredns to 1.33.005 (#7277)
• Backports for 2024-11 (#7290)
  • Bump etcd to 3.5.16
  • Bump containerd to v1.7.23
  • Fix issue on nodes with large datastores and slow disk that would cause RKE2 to fail to start due to the etcd defrag timing out after 30 seconds.
  • Fix issue where RKE2 killall script could remove data from pod volumes that failed to unmount correctly
• Update upstream version (#7319)
• Restore AWS node-name support and add IMDSv2 support (#7355)
• Bump containerd for image rewrite fix (#7378)
  • Bump containerd to v1.7.23-k3s2

Charts Versions

Component	Version
rke2-cilium	1.16.303
rke2-canal	v3.29.0-build2024110400
rke2-calico	v3.29.000
rke2-calico-crd	v3.29.000
rke2-coredns	1.33.005
rke2-ingress-nginx	4.10.502
rke2-metrics-server	3.12.004
rancher-vsphere-csi	3.3.1-rancher700
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.600
harvester-csi-driver	0.1.2000
rke2-snapshot-controller	3.0.601
rke2-snapshot-controller-crd	3.0.601
rke2-snapshot-validation-webhook	1.9.001

Packaged Component Versions

Component	Version
Kubernetes	v1.30.7
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.1.14
Metrics-server	v0.7.1
CoreDNS	v1.11.3
Ingress-Nginx	v1.10.5-hardened4
Helm-controller	v0.16.5

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.0 Calico v3.29.0	Yes
Calico	v3.29.0	No
Cilium	v1.16.3	No
Multus	v4.1.3	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.30.7-rc3+rke2r1

Bump containerd for image rewrite fix

Signed-off-by: Brad Davidson <[email protected]>

v1.29.11+rke2r1

This release updates Kubernetes to v1.29.11.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.29.10+rke2r1:

• Backport E2E GHA fixes (#7178)
• Bump multus, cilium and flannel charts (#7200)
• Bump ingress-nginx to v1.10.5-hardened4 (#7187)
• Bump canal chart to v3.29.0 (#7219)
• Bump rke2-calico to v3.29.0 (#7237)
• Backport missing E2E PRs (#7205)
  • Refactor run_tests.sh script
  • Update to newer OS images for install testing
  • Add cleanup to e2e tests in vagrant env
  • Add e2e validation test for kine
• Bump vSphere CSI/CPI charts to 1.9.1 and 3.3.1-rancher700 (#7250)
• Update Flannel to v0.26.1 (#7259)
• Fix e2e ci by ignoring FOG warnings (#7270)
• Bump rke2-coredns to 1.33.005 (#7275)
• Backports for 2024-11 (#7291)
  • Bump etcd to 3.5.16
  • Bump containerd to v1.7.23
  • Fix issue on nodes with large datastores and slow disk that would cause RKE2 to fail to start due to the etcd defrag timing out after 30 seconds.
  • Fix issue where RKE2 killall script could remove data from pod volumes that failed to unmount correctly
• Restore AWS node-name support and add IMDSv2 support (#7356)
• Update upstream and go versions (#7318)
• Bump containerd for image rewrite fix (#7379)
  • Bump containerd to v1.7.23-k3s2

Charts Versions

Component	Version
rke2-cilium	1.16.303
rke2-canal	v3.29.0-build2024110400
rke2-calico	v3.29.000
rke2-calico-crd	v3.29.000
rke2-coredns	1.33.005
rke2-ingress-nginx	4.10.502
rke2-metrics-server	3.12.004
rancher-vsphere-csi	3.3.1-rancher700
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.600
harvester-csi-driver	0.1.2000
rke2-snapshot-controller	3.0.601
rke2-snapshot-controller-crd	3.0.601
rke2-snapshot-validation-webhook	1.9.001

Packaged Component Versions

Component	Version
Kubernetes	v1.29.11
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.1.14
Metrics-server	v0.7.1
CoreDNS	v1.11.3
Ingress-Nginx	v1.10.5-hardened4
Helm-controller	v0.15.15

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.0 Calico v3.29.0	Yes
Calico	v3.29.0	No
Cilium	v1.16.3	No
Multus	v4.1.3	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.29.11-rc2+rke2r1

Bump containerd for image rewrite fix

Signed-off-by: Brad Davidson <[email protected]>

v1.29.11-rc1+rke2r1

update upstream and go versions (#7318)

v1.31.3-rc2+rke2r1

Move AWS hostname support behind new flag

For now, the new flag is automatically set when cloud-provider-name=aws, but this will be removed in the future following our normal deprecation timeline.

This also adds IMDSv2 support, and support for setting the hostname on windows.

Signed-off-by: Brad Davidson <[email protected]>
(cherry picked from commit de8240abc4298ba6bb2b3c5e38a561926cdc57ff)
Signed-off-by: Brad Davidson <[email protected]>

v1.31.3-rc1+rke2r1

update upstream version (#7320)

v1.30.7-rc2+rke2r1

Move AWS hostname support behind new flag

For now, the new flag is automatically set when cloud-provider-name=aws, but this will be removed in the future following our normal deprecation timeline.

This also adds IMDSv2 support, and support for setting the hostname on windows.

Signed-off-by: Brad Davidson <[email protected]>
(cherry picked from commit de8240abc4298ba6bb2b3c5e38a561926cdc57ff)
Signed-off-by: Brad Davidson <[email protected]>

v1.30.7-rc1+rke2r1

update upstream version (#7319)

v1.31.2+rke2r1

This release updates Kubernetes to v1.31.2.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.31.1+rke2r1:

• Fixed windows CNI setup in case cni none is configured (#6831)
• Fix e2e test bug in mixedosbgp (#6843)
• Add trivy scanning to PR reports (#6838)
• Bump Calico v3.28.2 (#6878)
• Fix typo in dispatch workflow (#6894)
• Bump coredns chart (#6904)
• Fix uninstall for amazon linux 2 (#6918)
• Update to Cilium v1.16.2 (#6937)
• Bump traefik to chart 27.0.2 (#6957)
• Bump crictl (#6975)
• Update Canal to v3.28.2-build2024100300 and Flannel to v0.25.7 (#6971)
• Ingress-nginx and rke2-cloud-provider bumps (#6991)
• Bump containerd to v1.7.22 (#7001)
• Bump crictl to v1.31.1-build20241011 (#7010)
• Bump csi snapshot charts (#7023)
• Update multus to v4.1.2 (#7018)
• Bump k3s (#7032)
• Bump Harvester CSI driver v0.1.20 (#7049)
  • Bump Harvester-csi-driver v0.1.20
• Bump K3s/CCM version (#7056)
• Add org.opencontainers.image url and source labels to dockerfiles (#7062)
• October 2024 R2 update (#7066)
• Bump CSI snapshot controller chart for CRD updates (#7068)
• Rke2-runtime signing and manifests (#7089) (#7102)
• Update hardened chart images (#7098)
• October K8s patch (#7104)
• Bump coredns chart and image (#7084)
• Fix hardened-flannel airgap image for rke2-flannel (#7121)
• Fix release workflow (#7124)
• Use buildkit (#7133)
• Fix publish windows runtime (#7147)

Charts Versions

Component	Version
rke2-cilium	1.16.201
rke2-canal	v3.28.2-build2024101601
rke2-calico	v3.28.200
rke2-calico-crd	v3.28.200
rke2-coredns	1.33.002
rke2-ingress-nginx	4.10.501
rke2-metrics-server	3.12.004
rancher-vsphere-csi	3.3.1-rancher100
rancher-vsphere-cpi	1.9.000
harvester-cloud-provider	0.2.600
harvester-csi-driver	0.1.2000
rke2-snapshot-controller	3.0.601
rke2-snapshot-controller-crd	3.0.601
rke2-snapshot-validation-webhook	1.9.001

Packaged Component Versions

Component	Version
Kubernetes	v1.31.2
Etcd	v3.5.13-k3s1
Containerd	v1.7.22-k3s1
Runc	v1.1.14
Metrics-server	v0.7.1
CoreDNS	v1.11.3
Ingress-Nginx	v1.10.5-hardened3
Helm-controller	v0.16.5

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.25.7 Calico v3.28.2	Yes
Calico	v3.28.2	No
Cilium	v1.16.2	No
Multus	v4.1.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.