v1.30.2+k3s1

This release updates Kubernetes to v1.30.2, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.1+k3s1:

• Fix bug when using tailscale config by file (#10074)
  • Fix bug when using vpn-auth-file in the agent
• Add WithSkipMissing to not fail import on missing blobs (#10136)
• Use fixed stream server bind address for cri-dockerd (#9975)
• Switch stargz over to cri registry config_path (#9977)
• Bump to containerd v1.7.17, etcd v3.5.13 (#10123)
• Bump spegel version (#10118)
• Fix issue installing artifacts from PR builds with multiple runs (#10122)
• Fix issue with externalTrafficPolicy: Local for single-stack services on dual-stack nodes (#9963)
• Update local-path-provisioner helper script (#9964)
• Add support for svclb pod PriorityClassName (#10045)
  • ServiceLB now sets the priorityClassName on svclb pods to system-node-critical by default. This can be overridden on a per-service basis via the svccontroller.k3s.cattle.io/priorityclassname annotation.
• Drop check for legacy traefik v1 chart (#9593)
  • K3s no longer automatically skips deploying traefik v2 if traefik v1 is present. All clusters should have been upgraded to v2 at some point over the last three years.
• Update kube-router version to v2.1.2 (#10177)
• Create ADR for branching strategy (#10147)
• Bump minio-go to v7.0.70 (#10081)
• Bump kine to v0.11.9 to fix pagination (#10082)
• Update valid resolv conf (#9948)
• Add missing kernel config check (#10100)
• Git workflow file name correction (#10131)
  • None
• Follow directory symlinks in auto deploying manifests (#9288) (#10049)
  • Symlinked sub-directories are now respected when scanning Auto-Deploying Manifests (AddOns)
• Fix bug: allow helm controller set owner reference (#10048)
• Fix go.mod (#10192)
• Bump flannel version to v0.25.2 (#10146)
• Test: add agent with auth file (#10119)
  • Fix bug when using vpn-auth-file in the agent
• Add extra log in e2e tests (#10145)
• Update channel server for may 2024 (#10137)
• Bump klipper-helm image for tls secret support (#10187)
• Updating the script binary_size_check to complete the command name by… (#9992)
• Fix issue with k3s-etcd informers not starting (#10047)
• Enable serving supervisor metrics (#10019)
  • --Enable-pprof can now be set on agents to enable the debug/pprof endpoints. When set, agents will listen on the supervisor port.
  • --Supervisor-metrics can now be set on servers to enable serving internal metrics on the supervisor endpoint; when set agents will listen on the supervisor port.
• Bump alpine from 3.18 to 3.20 in /conformance (#10210)
• Bump alpine from 3.18 to 3.20 in /package (#10211)
• Bump ubuntu from 22.04 to 24.04 in /tests/e2e/scripts (#10040)
• Bump Trivy version (#10039)
• Fix netpol crash when node remains tainted uninitialized (#10073)
• Fix issue caused by sole server marked as failed under load (#10241)
  • The embedded load-balancer will now fall back to trying all servers with health-checks ignored, if all servers have been marked unavailable due to failed health checks.
• Add write-kubeconfig-group flag to server (#9233)
  • New flag in k3s server: --write-kubeconfig-group
• Fix embedded mirror blocked by SAR RBAC and re-enable test (#10257)
• Bump Local Path Provisioner version (#10268)
• Fix: Use actual warningPeriod in certmonitor (#10271)
• Fix bug that caused agents to bypass local loadbalancer (#10280)
• Add ADR for support for etcd s3 config secret (#9364)
• Add test for isValidResolvConf (#10302)
• Add snapshot retention etcd-s3-folder fix (#10293)
• Expand GHA golang caching to include newest release branch (#10307)
• Fix race condition panic in loadbalancer.nextServer (#10318)
• Fix typo, use rancher/permissions (#10296)
• Update Kubernetes to v1.30.2 (#10349)
• Fix agent supervisor port using apiserver port instead (#10352)
• Fix issue that allowed multiple simultaneous snapshots to be allowed (#10372)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.2
Kine	v0.11.9
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.17-k3s1
Runc	v1.1.12
Flannel	v0.25.2
Metrics-server	v0.7.0
Traefik	v2.10.7
CoreDNS	v1.10.1
Helm-controller	v0.16.1
Local-path-provisioner	v0.0.27

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.2-rc3+k3s1

Replace 1-weight semaphore on snapshots with simple mutex

Fixes an issue where the semaphore wasn't permanently initialized
until a scheduled snapshot was taken, allowing multiple on-demand
snapshots to be taken until the first scheduled snapshot was triggered.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.29.6+k3s1

This release updates Kubernetes to v1.29.6, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.29.5+k3s1:

• Fix bug when using tailscale config by file (#10142)
• Bump flannel version to v0.25.2 (#10220)
• Update kube-router version to v2.1.2 (#10181)
• Improve tailscale test & add extra log in e2e tests (#10212)
• Backports for 2024-06 release cycle (#10249)
  • Add WithSkipMissing to not fail import on missing blobs
  • Use fixed stream server bind address for cri-dockerd
  • Switch stargz over to cri registry config_path
  • Bump to containerd v1.7.17, etcd v3.5.13
  • Bump spegel version
  • Fix issue with externalTrafficPolicy: Local for single-stack services on dual-stack nodes
  • ServiceLB now sets the priorityClassName on svclb pods to system-node-critical by default. This can be overridden on a per-service basis via the svccontroller.k3s.cattle.io/priorityclassname annotation.
  • Bump minio-go to v7.0.70
  • Bump kine to v0.11.9 to fix pagination
  • Update valid resolv conf
  • Add missing kernel config check
  • Symlinked sub-directories are now respected when scanning Auto-Deploying Manifests (AddOns)
  • Fix bug: allow helm controller set owner reference
  • Bump klipper-helm image for tls secret support
  • Fix issue with k3s-etcd informers not starting
  • --Enable-pprof can now be set on agents to enable the debug/pprof endpoints. When set, agents will listen on the supervisor port.
  • --Supervisor-metrics can now be set on servers to enable serving internal metrics on the supervisor endpoint; when set agents will listen on the supervisor port.
  • Fix netpol crash when node remains tainted uninitialized
  • The embedded load-balancer will now fall back to trying all servers with health-checks ignored, if all servers have been marked unavailable due to failed health checks.
• More backports for 2024-06 release cycle (#10288)
• Add snapshot retention etcd-s3-folder fix (#10316)
• Add test for isValidResolvConf (#10302) (#10329)
• Fix race condition panic in loadbalancer.nextServer (#10322)
• Fix typo, use rancher/permissions (#10298)
• Expand GHA go caching to include newest release branch (#10334)
• Update Kubernetes to v1.29.6 (#10348)
• Fix agent supervisor port using apiserver port instead (#10354)
• Fix issue that allowed multiple simultaneous snapshots to be allowed (#10376)

Embedded Component Versions

Component	Version
Kubernetes	v1.29.6
Kine	v0.11.9
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.17-k3s1
Runc	v1.1.12
Flannel	v0.25.2
Metrics-server	v0.7.0
Traefik	v2.10.7
CoreDNS	v1.10.1
Helm-controller	v0.15.10
Local-path-provisioner	v0.0.27

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.29.6-rc3+k3s1

Replace 1-weight semaphore on snapshots with simple mutex

Fixes an issue where the semaphore wasn't permanently initialized
until a scheduled snapshot was taken, allowing multiple on-demand
snapshots to be taken until the first scheduled snapshot was triggered.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.28.11+k3s1

This release updates Kubernetes to v1.28.11, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.28.10+k3s1:

• Replace deprecated ruby function (#10090)
• Fix bug when using tailscale config by file (#10144)
• Bump flannel version to v0.25.2 (#10221)
• Update kube-router version to v2.1.2 (#10182)
• Improve tailscale test & add extra log in e2e tests (#10213)
• Backports for 2024-06 release cycle (#10258)
  • Add WithSkipMissing to not fail import on missing blobs
  • Use fixed stream server bind address for cri-dockerd
  • Switch stargz over to cri registry config_path
  • Bump to containerd v1.7.17, etcd v3.5.13
  • Bump spegel version
  • Fix issue with externalTrafficPolicy: Local for single-stack services on dual-stack nodes
  • ServiceLB now sets the priorityClassName on svclb pods to system-node-critical by default. This can be overridden on a per-service basis via the svccontroller.k3s.cattle.io/priorityclassname annotation.
  • Bump minio-go to v7.0.70
  • Bump kine to v0.11.9 to fix pagination
  • Update valid resolv conf
  • Add missing kernel config check
  • Symlinked sub-directories are now respected when scanning Auto-Deploying Manifests (AddOns)
  • Fix bug: allow helm controller set owner reference
  • Bump klipper-helm image for tls secret support
  • Fix issue with k3s-etcd informers not starting
  • --Enable-pprof can now be set on agents to enable the debug/pprof endpoints. When set, agents will listen on the supervisor port.
  • --Supervisor-metrics can now be set on servers to enable serving internal metrics on the supervisor endpoint; when set agents will listen on the supervisor port.
  • Fix netpol crash when node remains tainted uninitialized
  • The embedded load-balancer will now fall back to trying all servers with health-checks ignored, if all servers have been marked unavailable due to failed health checks.
• More backports for 2024-06 release cycle (#10289)
• Add snapshot retention etcd-s3-folder fix (#10315)
• Add test for isValidResolvConf (#10302) (#10331)
• Fix race condition panic in loadbalancer.nextServer (#10323)
• Fix typo, use rancher/permissions (#10299)
• Update Kubernetes to v1.28.11 (#10347)
• Fix agent supervisor port using apiserver port instead (#10355)
• Fix issue that allowed multiple simultaneous snapshots to be allowed (#10377)

Embedded Component Versions

Component	Version
Kubernetes	v1.28.11
Kine	v0.11.9
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.17-k3s1.28
Runc	v1.1.12
Flannel	v0.25.2
Metrics-server	v0.7.0
Traefik	v2.10.7
CoreDNS	v1.10.1
Helm-controller	v0.15.10
Local-path-provisioner	v0.0.27

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.28.11-rc3+k3s1

Replace 1-weight semaphore on snapshots with simple mutex

Fixes an issue where the semaphore wasn't permanently initialized
until a scheduled snapshot was taken, allowing multiple on-demand
snapshots to be taken until the first scheduled snapshot was triggered.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.27.15+k3s1

This release updates Kubernetes to v1.27.15, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.27.14+k3s1:

• Replace deprecated ruby function (#10089)
• Fix bug when using tailscale config by file (#10143)
• Bump flannel version to v0.25.2 (#10222)
• Update kube-router version to v2.1.2 (#10183)
• Improve tailscale test & add extra log in e2e tests (#10214)
• Backports for 2024-06 release cycle (#10259)
  • Add WithSkipMissing to not fail import on missing blobs
  • Use fixed stream server bind address for cri-dockerd
  • Switch stargz over to cri registry config_path
  • Bump to containerd v1.7.17, etcd v3.5.13
  • Bump spegel version
  • Fix issue with externalTrafficPolicy: Local for single-stack services on dual-stack nodes
  • ServiceLB now sets the priorityClassName on svclb pods to system-node-critical by default. This can be overridden on a per-service basis via the svccontroller.k3s.cattle.io/priorityclassname annotation.
  • Bump minio-go to v7.0.70
  • Bump kine to v0.11.9 to fix pagination
  • Update valid resolv conf
  • Add missing kernel config check
  • Symlinked sub-directories are now respected when scanning Auto-Deploying Manifests (AddOns)
  • Fix bug: allow helm controller set owner reference
  • Bump klipper-helm image for tls secret support
  • Fix issue with k3s-etcd informers not starting
  • --Enable-pprof can now be set on agents to enable the debug/pprof endpoints. When set, agents will listen on the supervisor port.
  • --Supervisor-metrics can now be set on servers to enable serving internal metrics on the supervisor endpoint; when set agents will listen on the supervisor port.
  • Fix netpol crash when node remains tainted uninitialized
  • The embedded load-balancer will now fall back to trying all servers with health-checks ignored, if all servers have been marked unavailable due to failed health checks.
• More backports for 2024-06 release cycle (#10290)
• Add snapshot retention etcd-s3-folder fix (#10314)
• Add test for isValidResolvConf (#10302) (#10332)
• Fix race condition panic in loadbalancer.nextServer (#10324)
• Fix typo, use rancher/permissions (#10297)
• Update Kubernetes to v1.27.15 (#10346)
  • Update Kubernetes to v1.27.15
• Fix agent supervisor port using apiserver port instead (#10356)
• Fix issue that allowed multiple simultaneous snapshots to be allowed (#10378)

Embedded Component Versions

Component	Version
Kubernetes	v1.27.15
Kine	v0.11.9
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.17-k3s2.27
Runc	v1.1.12
Flannel	v0.25.2
Metrics-server	v0.7.0
Traefik	v2.10.7
CoreDNS	v1.10.1
Helm-controller	v0.15.10
Local-path-provisioner	v0.0.27

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.27.15-rc3+k3s1

Replace 1-weight semaphore on snapshots with simple mutex

Fixes an issue where the semaphore wasn't permanently initialized
until a scheduled snapshot was taken, allowing multiple on-demand
snapshots to be taken until the first scheduled snapshot was triggered.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.30.2-rc2+k3s1

Fix agent supervisor port using apiserver port instead

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.30.2-rc1+k3s1

Update Kubernetes to v1.30.2 (#10349)

Signed-off-by: Brooks Newberry <brooks@newberry.com>