Skip to main content

v1.30.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.

VersionRelease dateKubernetesEtcdContainerdRuncMetrics-serverCoreDNSIngress-NginxHelm-controllerCanal (Default)CalicoCiliumMultus
v1.30.2+rke2r1Jul 01 2024v1.30.2v3.5.13-k3s1v1.7.17-k3s1v1.1.12v0.7.1v1.11.1v1.10.1-hardened1v0.16.1Flannel v0.25.4
Calico v3.28.0		v3.27.3v1.15.5v4.0.2
v1.30.1+rke2r1May 22 2024v1.30.1v3.5.9-k3s1v1.7.11-k3s2v1.1.12v0.7.1v1.11.1nginx-1.9.6-hardened1v0.16.1-0.20240502205943-2f32059d43e6Flannel v0.25.1
Calico v3.27.3		v3.27.3v1.15.5v4.0.2
v1.30.0+rke2r1May 09 2024v1.30.0v3.5.9-k3s1v1.7.11-k3s2v1.1.12v0.7.1v1.11.1nginx-1.9.6-hardened1v0.16.1Flannel v0.25.1
Calico v3.27.3		v3.27.3v1.15.4v4.0.2

Release v1.30.2+rke2r1​

This release updates Kubernetes to v1.30.2.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.1+rke2r1:​

  • Improve rke2-uninstall.ps1 script (#5779)
  • Add cilium no proxy e2e test (#5885)
  • Apply netpols async with retry (#5909)
  • Remove cisnetworkpolicy finalizer when controller is disabled (#5856)
  • Update cloud-provider image which now uses scratch as base (#5933)
    • Rke2-cloud-provider uses now scratch base image
  • Update flannel chart to fix vni error (#5953)
    • Use vni=4096 as default for rke2-flannel
  • Add a Kine fix when rke2 restart apiserver (#5931)
    • Fix apiserver delay to restart when apiserver is using kine
  • Fix incorrect wrangler package import (#6007)
  • Update channel server for may 2024 (#5951)
  • Add extra log in e2e tests (#5955)
  • Bump nginx to v1.10.1 (#6022)
  • Update rke2-killall.sh (#4111)
  • Changed systemctl command from 'restart' to 'try-restart' for fapolicyd in rke2-uninstall.sh (#5811)
  • Allow disabling injection of cluster config into HelmCharts (#6010)
    • Injection of cluster config variables into HelmChart resources found on disk can now be disabled per-chart by adding a rke2.cattle.io/inject-cluster-config: "false" annotation to HelmChart resources, or by setting the RKE2_INJECT_CLUSTER_CONFIG=false environment variable to disable it for all resources that do not set the annotation to false.
  • Bump multus and whereabouts version (#6015)
  • Bump flannel to v0.25.201 and canal to v3.28.0-build2024052800 (#6043)
  • Add ADR for branching strategy (#4078)
  • Add easy support for single node sqlite with kine (#5954)
    • New behavior when --disable-etcd is used without --server, rke2 will use sqlite as the default database
  • Bump harvester-cloud-provider v0.2.4 (#5980)
  • Bump K3s version for v1.30 (#6073)
  • Fix loadManifests function (#6058)
  • Bump K3s version for v1.30 (#6104)
  • Bump flannel version (#6116)
    • Bump flannel cni version to v0.25.3
  • Bump containerd to correctly built tag (#6126)
  • Improve rke2-uninstall.ps1 (#6098)
  • Update to the latest SR-IOV image versions (#5889)
  • Bump flannel image in rke2-canal (#6136)
  • Slim down E2E artifacts (#6097)
  • Add custom golang setup action for better caching (#6144)
  • Support MixedOS E2E local testing (#6137)
  • Use rancher/permissions dependency (#6138)
  • Bump K3s version for v1.30 (#6164)
  • Update flannel version to v0.25.4 (#6172)
    • Bump flannel to v0.25.4 to fix windows-vxlan issue
  • Update Kubernetes to v1.30.2 (#6191)
  • Fix drone pipeline (#6199)
  • Update drone build base image (#6206)
  • Bump K3s version for v1.30 to fix regression in agent's supervisor port (#6200)
  • Bump rke2-ingress-nginx chart to revert watchIngressWithoutClass default (#6216)
  • Update hardened kubernetes (#6225)
  • Bump K3s version for snapshot fix (#6230)
    • Fix issue that allowed multiple simultaneous snapshots to be allowed
  • Revert rke2-ingress-nginx bump back to v1.9.6 (#6238)
  • Reinstate newest rke2-ingress-nginx (#6253)
  • Pass install_type as a string in the mixedos e2e test (#6251)
  • Update calico image to v3.28.0-build20240625 (#6257)

Charts Versions​

ComponentVersion
rke2-cilium1.15.500
rke2-canalv3.28.0-build2024062503
rke2-calicov3.27.300
rke2-calico-crdv3.27.002
rke2-coredns1.29.002
rke2-ingress-nginx4.10.101
rke2-metrics-server3.12.002
rancher-vsphere-csi3.1.2-rancher400
rancher-vsphere-cpi1.7.001
harvester-cloud-provider0.2.400
harvester-csi-driver0.1.1700
rke2-snapshot-controller1.7.202
rke2-snapshot-controller-crd1.7.202
rke2-snapshot-validation-webhook1.7.302

Release v1.30.1+rke2r1​

This release updates Kubernetes to v1.30.1.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.0+rke2r1:​

Charts Versions​

ComponentVersion
rke2-cilium1.15.500
rke2-canalv3.27.3-build2024042301
rke2-calicov3.27.300
rke2-calico-crdv3.27.002
rke2-coredns1.29.002
rke2-ingress-nginx4.9.100
rke2-metrics-server3.12.002
rancher-vsphere-csi3.1.2-rancher400
rancher-vsphere-cpi1.7.001
harvester-cloud-provider0.2.300
harvester-csi-driver0.1.1700
rke2-snapshot-controller1.7.202
rke2-snapshot-controller-crd1.7.202
rke2-snapshot-validation-webhook1.7.302

Release v1.30.0+rke2r1​

This release is RKE2's first in the v1.30 line. This release updates Kubernetes to v1.30.0.

Before upgrading from earlier releases, be sure to read the Kubernetes Changelog

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.29.4+rke2r1:​

  • Update stable channel to v1.28.9+rke2r1 (#5870)
  • Add mixedos BGP e2e test (#5859)
  • Remove flannel-v6.4096 when rke2-killall.sh (#5795)
  • Update e2e test (#5880)
  • Bump k3s to 1.30 (#5888)
  • Move to fatal error for cis-1.23 profile value (#5781)
  • Remove cni parameter from agent config in e2e tests (#5881)
  • Add script to validate flannel versions (#5788)
  • Bump k3s to deprecate pod-infra-container-image (#5900)
  • Fix mixedosbgp e2e test (#5886)

Charts Versions​

ComponentVersion
rke2-cilium1.15.400
rke2-canalv3.27.3-build2024042301
rke2-calicov3.27.300
rke2-calico-crdv3.27.002
rke2-coredns1.29.002
rke2-ingress-nginx4.9.100
rke2-metrics-server3.12.002
rancher-vsphere-csi3.1.2-rancher400
rancher-vsphere-cpi1.7.001
harvester-cloud-provider0.2.300
harvester-csi-driver0.1.1700
rke2-snapshot-controller1.7.202
rke2-snapshot-controller-crd1.7.202
rke2-snapshot-validation-webhook1.7.302