Skip to main content

v1.30.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.

VersionRelease dateKubernetesEtcdContainerdRuncMetrics-serverCoreDNSIngress-NginxHelm-controllerCanal (Default)CalicoCiliumMultus
v1.30.6+rke2r1Oct 30 2024v1.30.6v3.5.13-k3s1v1.7.22-k3s1v1.1.14v0.7.1v1.11.3v1.10.5-hardened3v0.16.5Flannel v0.25.7
Calico v3.28.2		v3.28.2v1.16.2v4.1.2
v1.30.5+rke2r1Sep 23 2024v1.30.5v3.5.13-k3s1v1.7.21-k3s2v1.1.14v0.7.1v1.11.1v1.10.4-hardened3v0.16.4Flannel v0.25.6
Calico v3.28.1		v3.28.1v1.16.1v4.1.0
v1.30.4+rke2r1Aug 26 2024v1.30.4v3.5.13-k3s1v1.7.20-k3s1v1.1.12v0.7.1v1.11.1v1.10.4-hardened2v0.16.1Flannel v0.25.5
Calico v3.28.1		v3.28.1v1.16.0v4.0.2
v1.30.3+rke2r1Aug 01 2024v1.30.3v3.5.13-k3s1v1.7.17-k3s1v1.1.12v0.7.1v1.11.1v1.10.1-hardened1v0.16.1Flannel v0.25.4
Calico v3.28.0		v3.27.3v1.15.5v4.0.2
v1.30.2+rke2r1Jul 01 2024v1.30.2v3.5.13-k3s1v1.7.17-k3s1v1.1.12v0.7.1v1.11.1v1.10.1-hardened1v0.16.1Flannel v0.25.4
Calico v3.28.0		v3.27.3v1.15.5v4.0.2
v1.30.1+rke2r1May 22 2024v1.30.1v3.5.9-k3s1v1.7.11-k3s2v1.1.12v0.7.1v1.11.1nginx-1.9.6-hardened1v0.16.1-0.20240502205943-2f32059d43e6Flannel v0.25.1
Calico v3.27.3		v3.27.3v1.15.5v4.0.2
v1.30.0+rke2r1May 09 2024v1.30.0v3.5.9-k3s1v1.7.11-k3s2v1.1.12v0.7.1v1.11.1nginx-1.9.6-hardened1v0.16.1Flannel v0.25.1
Calico v3.27.3		v3.27.3v1.15.4v4.0.2

Release v1.30.6+rke2r1​

This release updates Kubernetes to v1.30.6.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.5+rke2r1:​

  • Fixed windows CNI setup in case cni none is configured (#6832)
  • Fix e2e test bug in mixedosbgp (#6844)
  • Bump Calico v3.28.2 (#6879)
  • Add trivy scanning to PR reports (#6837)
  • Fix typo in dispatch workflow (#6895)
  • Bump coredns chart (#6903)
  • Fix uninstall for amazon linux 2 (#6919)
  • Update to Cilium v1.16.2 (#6938)
  • Bump traefik to chart 27.0.2 (#6958)
  • Update Canal to v3.28.2-build2024100300 and Flannel to v0.25.7 (#6972)
  • Bump containerd to v1.7.22 (#7002)
  • Ingress-nginx and rke2-cloud-provider bumps (#6992)
  • Bump csi snapshot charts (#7024)
  • Update multus to v4.1.2 (#7019)
  • Bump k3s (#7033)
  • Bump Harvester CSI driver v0.1.20 (#7048)
    • Bump Harvester-csi-driver v0.1.20
  • Bump K3s/CCM version (#7057)
  • Add org.opencontainers.image url and source labels to dockerfiles (#7063)
  • Bump CSI snapshot controller chart for CRD updates (#7069)
  • Rke2-runtime signing and manifests (#7089) (#7101)
  • Update hardened chart images (#7097)
  • October K8s patch (#7105)
  • Update crictl source image for CVE bump (#7115)
  • Bump coredns chart and image (#7085)
  • Fix hardened-flannel airgap image for rke2-flannel (#7120)
  • Fix release workflow (#7125)
  • Use buildkit (#7132)
  • Fix publish windows runtime (#7146)

Charts Versions​

ComponentVersion
rke2-cilium1.16.201
rke2-canalv3.28.2-build2024101601
rke2-calicov3.28.200
rke2-calico-crdv3.28.200
rke2-coredns1.33.002
rke2-ingress-nginx4.10.501
rke2-metrics-server3.12.004
rancher-vsphere-csi3.3.0-rancher100
rancher-vsphere-cpi1.8.000
harvester-cloud-provider0.2.600
harvester-csi-driver0.1.2000
rke2-snapshot-controller3.0.601
rke2-snapshot-controller-crd3.0.601
rke2-snapshot-validation-webhook1.9.001

Release v1.30.5+rke2r1​

This release updates Kubernetes to v1.30.5.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.4+rke2r1:​

  • Update to cilium v1.16.1 (#6653)
  • Bump canal to v3.28.1-build20240827 (#6670)
  • Bump canal to v3.28.1-build20240830 (#6688)
  • 1.30 Bump harvester cloud provider v0.2.6 (#6631)
  • Update chart with CNI plugins on Flannel and Cilium (#6701)
  • Update cilium chart to 1.16.103 (#6715)
  • Bump multus chart to v4.1.000 (#6743)
  • Remove sriov images from airgap tarball (#6753)
  • Add ctr to shell completion (#6730)
  • Bump k3s/containerd/runc/ccm versions (#6763)
  • Bump charts and images to fix go CVE (#6782)
  • Bump hardened images (#6776)
  • Update Calico image for Canal with updated CNI plugins (#6794)
  • Bump ingress-nginx to v1.10.4-hardened3 (#6799)
  • Bump etcd and CCM builds (#6803)
  • September K8s patch (#6811)
  • Update cilium e2e test (#6815)

Charts Versions​

ComponentVersion
rke2-cilium1.16.104
rke2-canalv3.28.1-build2024091100
rke2-calicov3.28.100
rke2-calico-crdv3.28.100
rke2-coredns1.29.006
rke2-ingress-nginx4.10.402
rke2-metrics-server3.12.003
rancher-vsphere-csi3.3.0-rancher100
rancher-vsphere-cpi1.8.000
harvester-cloud-provider0.2.600
harvester-csi-driver0.1.1800
rke2-snapshot-controller1.7.202
rke2-snapshot-controller-crd1.7.202
rke2-snapshot-validation-webhook1.7.302

Release v1.30.4+rke2r1​

This release updates Kubernetes to v1.30.4.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.3+rke2r1:​

    • Bump rke2-coredns to add option to use nodelocal dns cache with cilium (#6432)
  • Bump rke2-calico chart to v3.28.100 (#6489)
  • Bump nginx to hardened2 (#6482)
  • Update for CNI flannel, Cilium and Canal (#6515)
  • Fix external etcd connection (#6465)
  • Rke2 shell completion (#6460)
  • Bump k3s and containerd (#6524)
  • Fixed hns clean only in case of reboot (#6538)
  • Bump harvester csi driver v0.1.18 (#6395)
    • Bump Harvester-csi-driver v0.1.18
  • Bump containerd/crictl/runc versions (#6552)
  • Fix kill all to not delete data dir (#6564)
  • Add netpol template for traefik (#6570)
  • Update Kubernetes to v1.30.4 (#6574)
  • Fix windows airgap image packaging (#6585)
  • Fixed Flannel chart to rightly disable nft (#6607)
  • Bump ingress-nginx to v1.10.4-hardened2 (#6611)
  • Fix traefik netpol port names (#6620)

Charts Versions​

ComponentVersion
rke2-cilium1.16.000
rke2-canalv3.28.1-build2024080600
rke2-calicov3.28.100
rke2-calico-crdv3.28.100
rke2-coredns1.29.004
rke2-ingress-nginx4.10.401
rke2-metrics-server3.12.002
rancher-vsphere-csi3.3.0-rancher100
rancher-vsphere-cpi1.8.000
harvester-cloud-provider0.2.400
harvester-csi-driver0.1.1800
rke2-snapshot-controller1.7.202
rke2-snapshot-controller-crd1.7.202
rke2-snapshot-validation-webhook1.7.302

Release v1.30.3+rke2r1​

This release updates Kubernetes to v1.30.3.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.2+rke2r1:​

  • Update stable channel to v1.28.11+rke2r1 (#6277)
  • Update Vagrantfile of a few e2e tests (#6274)
  • GHA Migration (#6062)
  • Bump multus to v4.0.206 (#6353)
  • Version bumps and backports for 2024-07 release cycle (#6317)
  • Bump vsphere csi chart to 3.3.0-rancher100 and cpi to 1.8.000 (#6341)
  • Fix secrets for commit id uploads (#6366)
  • Update Kubernetes to v1.30.3 (#6364)
  • Publish binaries in dapper (#6379)
  • Add missing package windows step in release (#6388)
  • Add manifest pipeline for rke2-runtime docker image (#6398)
  • Fix dispatch script (#6406)
  • Add traefik airgap image tarball (#6441)

Charts Versions​

ComponentVersion
rke2-cilium1.15.500
rke2-canalv3.28.0-build2024062503
rke2-calicov3.27.300
rke2-calico-crdv3.27.002
rke2-coredns1.29.002
rke2-ingress-nginx4.10.102
rke2-metrics-server3.12.002
rancher-vsphere-csi3.3.0-rancher100
rancher-vsphere-cpi1.8.000
harvester-cloud-provider0.2.400
harvester-csi-driver0.1.1700
rke2-snapshot-controller1.7.202
rke2-snapshot-controller-crd1.7.202
rke2-snapshot-validation-webhook1.7.302

Release v1.30.2+rke2r1​

This release updates Kubernetes to v1.30.2.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.1+rke2r1:​

  • Improve rke2-uninstall.ps1 script (#5779)
  • Add cilium no proxy e2e test (#5885)
  • Apply netpols async with retry (#5909)
  • Remove cisnetworkpolicy finalizer when controller is disabled (#5856)
  • Update cloud-provider image which now uses scratch as base (#5933)
    • Rke2-cloud-provider uses now scratch base image
  • Update flannel chart to fix vni error (#5953)
    • Use vni=4096 as default for rke2-flannel
  • Add a Kine fix when rke2 restart apiserver (#5931)
    • Fix apiserver delay to restart when apiserver is using kine
  • Fix incorrect wrangler package import (#6007)
  • Update channel server for may 2024 (#5951)
  • Add extra log in e2e tests (#5955)
  • Bump nginx to v1.10.1 (#6022)
  • Update rke2-killall.sh (#4111)
  • Changed systemctl command from 'restart' to 'try-restart' for fapolicyd in rke2-uninstall.sh (#5811)
  • Allow disabling injection of cluster config into HelmCharts (#6010)
    • Injection of cluster config variables into HelmChart resources found on disk can now be disabled per-chart by adding a rke2.cattle.io/inject-cluster-config: "false" annotation to HelmChart resources, or by setting the RKE2_INJECT_CLUSTER_CONFIG=false environment variable to disable it for all resources that do not set the annotation to false.
  • Bump multus and whereabouts version (#6015)
  • Bump flannel to v0.25.201 and canal to v3.28.0-build2024052800 (#6043)
  • Add ADR for branching strategy (#4078)
  • Add easy support for single node sqlite with kine (#5954)
    • New behavior when --disable-etcd is used without --server, rke2 will use sqlite as the default database
  • Bump harvester-cloud-provider v0.2.4 (#5980)
  • Bump K3s version for v1.30 (#6073)
  • Fix loadManifests function (#6058)
  • Bump K3s version for v1.30 (#6104)
  • Bump flannel version (#6116)
    • Bump flannel cni version to v0.25.3
  • Bump containerd to correctly built tag (#6126)
  • Improve rke2-uninstall.ps1 (#6098)
  • Update to the latest SR-IOV image versions (#5889)
  • Bump flannel image in rke2-canal (#6136)
  • Slim down E2E artifacts (#6097)
  • Add custom golang setup action for better caching (#6144)
  • Support MixedOS E2E local testing (#6137)
  • Use rancher/permissions dependency (#6138)
  • Bump K3s version for v1.30 (#6164)
  • Update flannel version to v0.25.4 (#6172)
    • Bump flannel to v0.25.4 to fix windows-vxlan issue
  • Update Kubernetes to v1.30.2 (#6191)
  • Fix drone pipeline (#6199)
  • Update drone build base image (#6206)
  • Bump K3s version for v1.30 to fix regression in agent's supervisor port (#6200)
  • Bump rke2-ingress-nginx chart to revert watchIngressWithoutClass default (#6216)
  • Update hardened kubernetes (#6225)
  • Bump K3s version for snapshot fix (#6230)
    • Fix issue that allowed multiple simultaneous snapshots to be allowed
  • Revert rke2-ingress-nginx bump back to v1.9.6 (#6238)
  • Reinstate newest rke2-ingress-nginx (#6253)
  • Pass install_type as a string in the mixedos e2e test (#6251)
  • Update calico image to v3.28.0-build20240625 (#6257)

Charts Versions​

ComponentVersion
rke2-cilium1.15.500
rke2-canalv3.28.0-build2024062503
rke2-calicov3.27.300
rke2-calico-crdv3.27.002
rke2-coredns1.29.002
rke2-ingress-nginx4.10.101
rke2-metrics-server3.12.002
rancher-vsphere-csi3.1.2-rancher400
rancher-vsphere-cpi1.7.001
harvester-cloud-provider0.2.400
harvester-csi-driver0.1.1700
rke2-snapshot-controller1.7.202
rke2-snapshot-controller-crd1.7.202
rke2-snapshot-validation-webhook1.7.302

Release v1.30.1+rke2r1​

This release updates Kubernetes to v1.30.1.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.0+rke2r1:​

Charts Versions​

ComponentVersion
rke2-cilium1.15.500
rke2-canalv3.27.3-build2024042301
rke2-calicov3.27.300
rke2-calico-crdv3.27.002
rke2-coredns1.29.002
rke2-ingress-nginx4.9.100
rke2-metrics-server3.12.002
rancher-vsphere-csi3.1.2-rancher400
rancher-vsphere-cpi1.7.001
harvester-cloud-provider0.2.300
harvester-csi-driver0.1.1700
rke2-snapshot-controller1.7.202
rke2-snapshot-controller-crd1.7.202
rke2-snapshot-validation-webhook1.7.302

Release v1.30.0+rke2r1​

This release is RKE2's first in the v1.30 line. This release updates Kubernetes to v1.30.0.

Before upgrading from earlier releases, be sure to read the Kubernetes Changelog

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.29.4+rke2r1:​

  • Update stable channel to v1.28.9+rke2r1 (#5870)
  • Add mixedos BGP e2e test (#5859)
  • Remove flannel-v6.4096 when rke2-killall.sh (#5795)
  • Update e2e test (#5880)
  • Bump k3s to 1.30 (#5888)
  • Move to fatal error for cis-1.23 profile value (#5781)
  • Remove cni parameter from agent config in e2e tests (#5881)
  • Add script to validate flannel versions (#5788)
  • Bump k3s to deprecate pod-infra-container-image (#5900)
  • Fix mixedosbgp e2e test (#5886)

Charts Versions​

ComponentVersion
rke2-cilium1.15.400
rke2-canalv3.27.3-build2024042301
rke2-calicov3.27.300
rke2-calico-crdv3.27.002
rke2-coredns1.29.002
rke2-ingress-nginx4.9.100
rke2-metrics-server3.12.002
rancher-vsphere-csi3.1.2-rancher400
rancher-vsphere-cpi1.7.001
harvester-cloud-provider0.2.300
harvester-csi-driver0.1.1700
rke2-snapshot-controller1.7.202
rke2-snapshot-controller-crd1.7.202
rke2-snapshot-validation-webhook1.7.302