v1.31.X
Upgrade Notice
Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.
| Version | Release date | Kubernetes | Etcd | Containerd | Runc | Metrics-server | CoreDNS | Ingress-Nginx | Helm-controller | Canal (Default) | Calico | Cilium | Multus |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| v1.31.2+rke2r1 | Oct 30 2024 | v1.31.2 | v3.5.13-k3s1 | v1.7.22-k3s1 | v1.1.14 | v0.7.1 | v1.11.3 | v1.10.5-hardened3 | v0.16.5 | Flannel v0.25.7 Calico v3.28.2 | v3.28.2 | v1.16.2 | v4.1.2 |
| v1.31.1+rke2r1 | Sep 23 2024 | v1.31.1 | v3.5.13-k3s1 | v1.7.21-k3s2 | v1.1.14 | v0.7.1 | v1.11.1 | v1.10.4-hardened3 | v0.16.4 | Flannel v0.25.6 Calico v3.28.1 | v3.28.1 | v1.16.1 | v4.1.0 |
| v1.31.0+rke2r1 | Sep 04 2024 | v1.31.0 | v3.5.13-k3s1 | v1.7.20-k3s1 | v1.1.13 | v0.7.1 | v1.11.1 | v1.10.4-hardened2 | v0.16.3 | Flannel v0.25.6 Calico v3.28.1 | v3.28.1 | v1.16.1 | v4.0.2 |
Release v1.31.2+rke2r1
This release updates Kubernetes to v1.31.2.
Important Note
If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.
You may retrieve the token value from any server already joined to the cluster:
cat /var/lib/rancher/rke2/server/token
Changes since v1.31.1+rke2r1:
- Fixed windows CNI setup in case cni none is configured (#6831)
- Fix e2e test bug in mixedosbgp (#6843)
- Add trivy scanning to PR reports (#6838)
- Bump Calico v3.28.2 (#6878)
- Fix typo in dispatch workflow (#6894)
- Bump coredns chart (#6904)
- Fix uninstall for amazon linux 2 (#6918)
- Update to Cilium v1.16.2 (#6937)
- Bump traefik to chart 27.0.2 (#6957)
- Bump crictl (#6975)
- Update Canal to v3.28.2-build2024100300 and Flannel to v0.25.7 (#6971)
- Ingress-nginx and rke2-cloud-provider bumps (#6991)
- Bump containerd to v1.7.22 (#7001)
- Bump crictl to v1.31.1-build20241011 (#7010)
- Bump csi snapshot charts (#7023)
- Update multus to v4.1.2 (#7018)
- Bump k3s (#7032)
- Bump Harvester CSI driver v0.1.20 (#7049)
- Bump Harvester-csi-driver v0.1.20
- Bump K3s/CCM version (#7056)
- Add org.opencontainers.image url and source labels to dockerfiles (#7062)
- October 2024 R2 update (#7066)
- Bump CSI snapshot controller chart for CRD updates (#7068)
- Rke2-runtime signing and manifests (#7089) (#7102)
- Update hardened chart images (#7098)
- October K8s patch (#7104)
- Bump coredns chart and image (#7084)
- Fix hardened-flannel airgap image for rke2-flannel (#7121)
- Fix release workflow (#7124)
- Use buildkit (#7133)
- Fix publish windows runtime (#7147)
Charts Versions
| Component | Version |
|---|---|
| rke2-cilium | 1.16.201 |
| rke2-canal | v3.28.2-build2024101601 |
| rke2-calico | v3.28.200 |
| rke2-calico-crd | v3.28.200 |
| rke2-coredns | 1.33.002 |
| rke2-ingress-nginx | 4.10.501 |
| rke2-metrics-server | 3.12.004 |
| rancher-vsphere-csi | 3.3.1-rancher100 |
| rancher-vsphere-cpi | 1.9.000 |
| harvester-cloud-provider | 0.2.600 |
| harvester-csi-driver | 0.1.2000 |
| rke2-snapshot-controller | 3.0.601 |
| rke2-snapshot-controller-crd | 3.0.601 |
| rke2-snapshot-validation-webhook | 1.9.001 |
Release v1.31.1+rke2r1
This release updates Kubernetes to v1.31.1.
Important Note
If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.
You may retrieve the token value from any server already joined to the cluster:
cat /var/lib/rancher/rke2/server/token
Changes since v1.31.0+rke2r1:
- Bump canal to v3.28.1-build20240830 (#6687)
- Update chart with CNI plugins on Flannel and Cilium (#6700)
- Bump multus chart to v4.1.000 (#6745)
- Remove sriov images from airgap tarball (#6751)
- Add ctr to shell completion (#6731)
- Bump k3s/containerd/runc/ccm versions (#6762)
- Update cilium chart to
1.16.103(#6714) - Bump charts and images to fix go CVE (#6780)
- Bump hardened images (#6775)
- Update Calico image for Canal with updated CNI plugins (#6793)
- Bump ingress-nginx to v1.10.4-hardened3 (#6798)
- Bump etcd and CCM builds (#6802)
- September K8s patch (#6812)
- Update cilium e2e test (#6817)
Charts Versions
| Component | Version |
|---|---|
| rke2-cilium | 1.16.104 |
| rke2-canal | v3.28.1-build2024091100 |
| rke2-calico | v3.28.100 |
| rke2-calico-crd | v3.28.100 |
| rke2-coredns | 1.29.006 |
| rke2-ingress-nginx | 4.10.402 |
| rke2-metrics-server | 3.12.003 |
| rancher-vsphere-csi | 3.3.1-rancher100 |
| rancher-vsphere-cpi | 1.9.000 |
| harvester-cloud-provider | 0.2.600 |
| harvester-csi-driver | 0.1.1800 |
| rke2-snapshot-controller | 1.7.202 |
| rke2-snapshot-controller-crd | 1.7.202 |
| rke2-snapshot-validation-webhook | 1.7.302 |
Release v1.31.0+rke2r1
This release updates Kubernetes to v1.31.0.
Important Note
If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.
You may retrieve the token value from any server already joined to the cluster:
cat /var/lib/rancher/rke2/server/token
Changes since v1.30.4+rke2r1:
- Fix RoleBinding/ClusterRoleBinding subject growth (#6273)
- Improve agent logs dir default permissions (#6276)
- Refactor run_tests.sh script (#6280)
- Add e2e test about mixedos+flannel (#6063)
- Add
data-dirto uninstall and killall scripts (#6296) - Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 (#6246)
- Bump alpine from 3.19 to 3.20 (#6017)
- Add multiple ingress controller support + traefik (#5943)
- Bump multus to v4.0.206 (#6311)
- Rke2 shell completion (#6305)
- RKE2 now support shell completion
- Bump K3s version for master (#6315)
- Change fapolicyd rules to full replacement rather than append (#6309)
- Bump vsphere csi chart to 3.3.0-rancher100 and cpi to 1.8.000 (#6340)
- Upload tarball with merges to master and release branches (#6316)
- Add updatecli configuration to update vsphere cpi and csi charts (#5326)
- Fix secrets for commit id uploads (#6359)
- Fix secrets for commit id uploads (#6360)
- Publish binaries in dapper (#6375)
- Fix decompressing gh tool in Dockerfile (#6378)
- Fixing pat_username (#6383)
- Stage CNI (and harvester) images if avaliable for airgap (#6275)
- Add missing package windows step in release (#6387)
- Add manifest pipeline for rke2-runtime docker image (#6397)
- Fix dispatch script (#6405)
- Bump rke2-coredns to add option to use nodelocal dns cache with cilium Local Redirect Policy (#6372)
- Add traefik airgap image tarball (#6439)
- Support Amazon Linux 2 rpm installs (#6429)
- Update channel server for July 2024 release (#6450)
- Fix external etcd connection (#6355)
- Add netpol template for traefik (#6452)
- Bump rke2-calico chart to v3.28.100 (#6473)
- Bump ingress-nginx to hardened2 (#6448)
- Bump rke2-canal to v3.28.1-build2024080600 (#6496)
- Update flannel to v0.25.5 (#6498)
- Update Cilium to v1.16.0 (#6500)
- Bump k3s and containerd (#6523)
- Added check if the node is rebooted before the networks is deleted on windows (#6437)
- Modify rke2-killall.sh to handle RKE2_DATA_DIR (#6531)
- Bump Harvester CSI driver v0.1.18 (#6392)
- Bump Harvester-csi-driver v0.1.18
- Bump containerd/crictl/runc versions (#6551)
- Fix kill all script to not delete data dir (#6558)
- Fix traefik netpol annotation key (#6569)
- Fix windows airgap image packaging (#6580)
- Update to cilium v1.16.1 (#6577)
- Fixed Flannel chart to rightly disable nft (#6606)
- Bump ingress-nginx to v1.10.4-hardened2 (#6591)
- Fix traefik netpol port names (#6619)
- Update channel server for August 2024 release (#6642)
- Bump canal to v3.28.1-build20240827 (#6659)
- Bump runc to v1.1.13 (#6623)
- Update Kubernetes to v1.31.0 (#6625)
- Bump K8s to v1.31.0-k3s3 (#6665)
- Feat: bump harvester-cloud-provider to v0.2.6 (#6667)
Charts Versions
| Component | Version |
|---|---|
| rke2-cilium | 1.16.101 |
| rke2-canal | v3.28.1-build2024082701 |
| rke2-calico | v3.28.100 |
| rke2-calico-crd | v3.28.100 |
| rke2-coredns | 1.29.004 |
| rke2-ingress-nginx | 4.10.401 |
| rke2-metrics-server | 3.12.002 |
| rancher-vsphere-csi | 3.3.1-rancher100 |
| rancher-vsphere-cpi | 1.9.000 |
| harvester-cloud-provider | 0.2.600 |
| harvester-csi-driver | 0.1.1800 |
| rke2-snapshot-controller | 1.7.202 |
| rke2-snapshot-controller-crd | 1.7.202 |
| rke2-snapshot-validation-webhook | 1.7.302 |