v1.31.0-rc1+rke2r1

Bump K8s to v1.31.0-k3s3 (#6665)

Signed-off-by: Derek Nola <[email protected]>

v1.30.4+rke2r1

This release updates Kubernetes to v1.30.4.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.3+rke2r1:

• • Bump rke2-coredns to add option to use nodelocal dns cache with cilium (#6432)
• Bump rke2-calico chart to v3.28.100 (#6489)
• Bump nginx to hardened2 (#6482)
• Update for CNI flannel, Cilium and Canal (#6515)
• Fix external etcd connection (#6465)
• Rke2 shell completion (#6460)
• Bump k3s and containerd (#6524)
• Fixed hns clean only in case of reboot (#6538)
• Bump harvester csi driver v0.1.18 (#6395)
  • Bump Harvester-csi-driver v0.1.18
• Bump containerd/crictl/runc versions (#6552)
• Fix kill all to not delete data dir (#6564)
• Add netpol template for traefik (#6570)
• Update Kubernetes to v1.30.4 (#6574)
• Fix windows airgap image packaging (#6585)
• Fixed Flannel chart to rightly disable nft (#6607)
• Bump ingress-nginx to v1.10.4-hardened2 (#6611)
• Fix traefik netpol port names (#6620)

Charts Versions

Component	Version
rke2-cilium	1.16.000
rke2-canal	v3.28.1-build2024080600
rke2-calico	v3.28.100
rke2-calico-crd	v3.28.100
rke2-coredns	1.29.004
rke2-ingress-nginx	4.10.401
rke2-metrics-server	3.12.002
rancher-vsphere-csi	3.3.0-rancher100
rancher-vsphere-cpi	1.8.000
harvester-cloud-provider	0.2.400
harvester-csi-driver	0.1.1800
rke2-snapshot-controller	1.7.202
rke2-snapshot-controller-crd	1.7.202
rke2-snapshot-validation-webhook	1.7.302

Packaged Component Versions

Component	Version
Kubernetes	v1.30.4
Etcd	v3.5.13-k3s1
Containerd	v1.7.20-k3s1
Runc	v1.1.12
Metrics-server	v0.7.1
CoreDNS	v1.11.1
Ingress-Nginx	v1.10.4-hardened2
Helm-controller	v0.16.1

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.25.5 Calico v3.28.1	Yes
Calico	v3.28.1	No
Cilium	v1.16.0	No
Multus	v4.0.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.30.4-rc3+rke2r1

Fix traefik netpol port names

Signed-off-by: Brad Davidson <[email protected]>

v1.30.4-rc2+rke2r1

Bump ingress-nginx to v1.10.4-hardened2 (#6611)

Signed-off-by: Derek Nola <[email protected]>

v1.29.8+rke2r1

This release updates Kubernetes to v1.29.8.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.29.7+rke2r1:

• Bump rke2-coredns to add option to use nodelocal dns cache with cilium (#6434)
• Bump rke2-calico chart to v3.28.100 (#6487)
• Bump nginx to hardened2 (#6481)
• Update for CNI flannel, Cilium and Canal (#6516)
• Fix external etcd connection (#6464)
• Rke2 shell completion (#6461)
• Bump k3s and containerd (#6525)
• Bump Harvester CSI driver v0.1.18 (#6394)
  • Bump Harvester-csi-driver v0.1.18
• Fixed hns clean only in case of reboot (#6539)
• Bump containerd/crictl/runc versions (#6553)
• Fix for kill all to not delete the data dir (#6562)
• Update Kubernetes to v1.29.8 (#6573)
• Fix windows airgap image packaging (#6586)
• Fixed Flannel chart to rightly disable nft (#6608)
• Bump ingress-nginx to v1.10.4-hardened2 (#6612)

Charts Versions

Component	Version
rke2-cilium	1.16.000
rke2-canal	v3.28.1-build2024080600
rke2-calico	v3.28.100
rke2-calico-crd	v3.28.100
rke2-coredns	1.29.004
rke2-ingress-nginx	4.10.401
rke2-metrics-server	3.12.002
rancher-vsphere-csi	3.3.0-rancher100
rancher-vsphere-cpi	1.8.000
harvester-cloud-provider	0.2.400
harvester-csi-driver	0.1.1800
rke2-snapshot-controller	1.7.202
rke2-snapshot-controller-crd	1.7.202
rke2-snapshot-validation-webhook	1.7.302

Packaged Component Versions

Component	Version
Kubernetes	v1.29.8
Etcd	v3.5.13-k3s1
Containerd	v1.7.20-k3s1
Runc	v1.1.12
Metrics-server	v0.7.1
CoreDNS	v1.11.1
Ingress-Nginx	v1.10.4-hardened2
Helm-controller	v0.15.10

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.25.5 Calico v3.28.1	Yes
Calico	v3.28.1	No
Cilium	v1.16.0	No
Multus	v4.0.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.29.8-rc2+rke2r1

Bump ingress-nginx to v1.10.4-hardened2 (#6612)

Signed-off-by: Derek Nola <[email protected]>

v1.28.13+rke2r1

This release updates Kubernetes to v1.28.13.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.28.12+rke2r1:

• Bump rke2-coredns to add option to use nodelocal dns cache with cilium (#6436)
• Bump rke2-calico chart to v3.28.100 (#6485)
• Bump nginx to hardened2 (#6480)
• Update for CNI flannel, Cilium and Canal (#6517)
• Fix external etcd connection (#6463)
• Rke2 shell completion (#6462)
• Bump k3s and containerd (#6526)
• Fixed hns clean only in case of reboot (#6540)
• Bump harvester csi driver v0.1.18 (#6393)
  • Bump Harvester-csi-driver v0.1.18
• Bump containerd/crictl/runc versions (#6554)
• Fix for kill all to not delete the data dir (#6563)
• Update Kubernetes to v1.28.13 (#6572)
• Fix windows airgap image packaging (#6587)
• Fixed Flannel chart to rightly disable nft (#6609)
• Bump ingress-nginx to v1.10.4-hardened2 (#6613)

Charts Versions

Component	Version
rke2-cilium	1.16.000
rke2-canal	v3.28.1-build2024080600
rke2-calico	v3.28.100
rke2-calico-crd	v3.28.100
rke2-coredns	1.29.004
rke2-ingress-nginx	4.10.401
rke2-metrics-server	3.12.002
rancher-vsphere-csi	3.3.0-rancher100
rancher-vsphere-cpi	1.8.000
harvester-cloud-provider	0.2.400
harvester-csi-driver	0.1.1800
rke2-snapshot-controller	1.7.202
rke2-snapshot-controller-crd	1.7.202
rke2-snapshot-validation-webhook	1.7.302

Packaged Component Versions

Component	Version
Kubernetes	v1.28.13
Etcd	v3.5.13-k3s1
Containerd	v1.7.20-k3s1
Runc	v1.1.12
Metrics-server	v0.7.1
CoreDNS	v1.11.1
Ingress-Nginx	v1.10.4-hardened2
Helm-controller	v0.15.10

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.25.5 Calico v3.28.1	Yes
Calico	v3.28.1	No
Cilium	v1.16.0	No
Multus	v4.0.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.28.13-rc2+rke2r1

Bump ingress-nginx to v1.10.4-hardened2 (#6613)

Signed-off-by: Derek Nola <[email protected]>

v1.27.16+rke2r2

This release updates Kubernetes to v1.27.16.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.27.16+rke2r1:

• Bump nginx to hardened2 (#6479)
• Update for CNI flannel, Cilium and Canal (#6518)
• Bump k3s and containerd (#6527)
• Fixed hns clean only in case of reboot (#6541)
• Bump containerd/crictl/runc versions (#6555)
• Fix for kill all to not delete the data dir (#6566)
• Fix windows airgap image packaging (#6588)
• Fixed Flannel chart to rightly disable nft (#6610)
• Bump ingress-nginx to v1.10.4-hardened2 (#6614)
• Shell completion and etcd connection fix (#6615)
• Update Kubernetes v1.27.16 to build 20240819 (#6589)
• Bump harvester csi driver v0.1.18 (#6618)
  • Bump Harvester-csi-driver v0.1.18

Charts Versions

Component	Version
rke2-cilium	1.16.000
rke2-canal	v3.28.1-build2024080600
rke2-calico	v3.27.300
rke2-calico-crd	v3.27.002
rke2-coredns	1.29.002
rke2-ingress-nginx	4.10.401
rke2-metrics-server	3.12.002
rancher-vsphere-csi	3.3.0-rancher100
rancher-vsphere-cpi	1.8.000
harvester-cloud-provider	0.2.400
harvester-csi-driver	0.1.1800
rke2-snapshot-controller	1.7.202
rke2-snapshot-controller-crd	1.7.202
rke2-snapshot-validation-webhook	1.7.302

Packaged Component Versions

Component	Version
Kubernetes	v1.27.16
Etcd	v3.5.13-k3s1
Containerd	v1.7.20-k3s1
Runc	v1.1.12
Metrics-server	v0.7.1
CoreDNS	v1.11.1
Ingress-Nginx	v1.10.4-hardened2
Helm-controller	v0.15.10

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.25.5 Calico v3.28.1	Yes
Calico	v3.27.3	No
Cilium	v1.16.0	No
Multus	v4.0.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.27.16-rc1+rke2r2

Bump Harvester CSI driver v0.1.18

Signed-off-by: Vicente Cheng <[email protected]>