v1.30.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.

Version Release date Kubernetes Kine SQLite Etcd Containerd Runc Flannel Metrics-server Traefik CoreDNS Helm-controller Local-path-provisioner

v1.30.11k3s1

Mar 25 2025

v1.30.11

v0.13.9

3.46.1

v3.5.19-k3s1.30

v1.7.26-k3s1

v1.2.5

v0.25.7

v0.7.2

v2.11.20

v1.12.0

v0.16.6

v0.0.31

v1.30.10+k3s1

Feb 27 2025

v1.30.10

v0.13.9

3.46.1

v3.5.18-k3s1

v1.7.23-k3s2

v1.2.4-k3s1

v0.25.7

v0.7.2

v2.11.20

v1.12.0

v0.16.6

v0.0.31

v1.30.9+k3s1

Jan 28 2025

v1.30.9

v0.13.5

3.46.1

v3.5.16-k3s1

v1.7.23-k3s2

v1.2.4-k3s1

v0.25.7

v0.7.2

v2.11.18

v1.12.0

v0.16.5

v0.0.30

v1.30.8+k3s1

Dec 18 2024

v1.30.8

v0.13.5

3.46.1

v3.5.16-k3s1

v1.7.23-k3s2

v1.2.1

v0.25.7

v0.7.2

v2.11.10

v1.12.0

v0.16.5

v0.0.30

v1.30.7+k3s1

Dec 04 2024

v1.30.7

v0.13.5

3.46.1

v3.5.16-k3s1

v1.7.23-k3s2

v1.2.1

v0.25.7

v0.7.2

v2.11.10

v1.11.3

v0.16.5

v0.0.30

v1.30.6+k3s1

Oct 26 2024

v1.30.6

v0.13.2

3.46.1

v3.5.13-k3s1

v1.7.22-k3s1

v1.1.14

v0.25.6

v0.7.2

v2.11.10

v1.11.3

v0.16.5

v0.0.30

v1.30.5+k3s1

Sep 19 2024

v1.30.5

v0.12.0

3.44.0

v3.5.13-k3s1

v1.7.21-k3s2

v1.1.14

v0.25.6

v0.7.2

v2.11.8

v1.11.3

v0.16.4

v0.0.28

v1.30.4+k3s1

Aug 21 2024

v1.30.4

v0.11.11

3.44.0

v3.5.13-k3s1

v1.7.20-k3s1

v1.1.12

v0.25.4

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.28

v1.30.3+k3s1

Jul 31 2024

v1.30.3

v0.11.11

3.44.0

v3.5.13-k3s1

v1.7.17-k3s1

v1.1.12

v0.25.4

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.28

v1.30.2+k3s2

Jul 03 2024

v1.30.2

v0.11.9

3.44.0

v3.5.13-k3s1

v1.7.17-k3s1

v1.1.12

v0.25.4

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.27

v1.30.2+k3s1

Jun 25 2024

v1.30.2

v0.11.9

3.44.0

v3.5.13-k3s1

v1.7.17-k3s1

v1.1.12

v0.25.2

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.27

v1.30.1+k3s1

May 22 2024

v1.30.1

v0.11.8-0.20240430184817-f9ce6f8da97b

3.44.0

v3.5.9-k3s1

v1.7.15-k3s1

v1.1.12-k3s1

v0.24.2

v0.7.0

v2.10.7

v1.10.1

v0.16.1-0.20240502205943-2f32059d43e6

v0.0.26

v1.30.0+k3s1

May 10 2024

v1.30.0

v0.11.8

3.44.0

v3.5.9-k3s1

v1.7.15-k3s1

v1.1.12

v0.24.2

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.26

Release v1.30.11k3s1

This release updates Kubernetes to v1.30.11, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.10k3s1:

  • Revert “Add ability to pass configuration options to flannel backend” (#11869)

  • Backport Docker E2E testing PRs for 2025 March (#11886)

  • Backports for 2025-03 (#11921)

  • Bump klipper-lb to v0.4.13 (#11928)

  • Fix syncing empty list of apiserver addresses during initial startup (#11955)

  • Update to v1.30.11-k3s1 (#11959)

  • Fix skew test for release candidates (#11989)


Release v1.30.10+k3s1

This release updates Kubernetes to v1.30.10, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.9+k3s1:

  • Correct the k3s token command help (#11684)

  • Jan 2025 Testing Overhaul, E2E to Docker Migration, (#11725)

  • Backports for 2025-02 (#11737)

    • Align the CLI-reported default --etcd-snapshot-dir value with the actual one (server, etcd-snapshot commands).

    • Disable s3 transport transparent compression/decompression

    • Etcd snapshot backup/restore now supports loading s3 credentials from an AWS SDK shared credentials file.

    • The containerd config templates for linux and windows have been consolidated and are no longer os-specific.

    • Bump klipper-helm to v0.9.4

    • Bump klipper-lb to v0.4.10

    • Bump spegel to v0.0.30

    • Bump local-path-provisioner to v0.0.31

    • Bump kine to v0.13.8

    • Bump etcd to v3.5.18

    • Bump traefik to 2.11.20

  • Bump traefik to v2.11.20 (#11764)

  • Update to v1.30.10-k3s1 and Go 1.22.12 (#11786)

  • Render CNI dir config whenever vars are set (#11821)


Release v1.30.9+k3s1

This release updates Kubernetes to v1.30.9, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.8+k3s1:

  • Add guardrail for etcd-snapshot (#11394)

  • Backports for 2025-01https://github.com/k3s-io/k3s/pull/11567[(#11567)]

  • Add auto import images for containerd image store (#11561)

  • 2025 January Backports (#11589)

  • Load kernel modules for nft in agent setup (#11597)

  • Fix local password validation when bind-address is set (#11612)

  • Update to v1.30.9-k3s1 and Go 1.22.10https://github.com/k3s-io/k3s/pull/11618[(#11618)]

  • Remove local restriction for deferred node password validation (#11650)


Release v1.30.8+k3s1

This release updates Kubernetes to v1.30.8, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.7+k3s1:

  • Fix secrets-encrypt reencrypt timeout error (#11441)

  • Remove experimental from embedded-registry flag (#11445)

  • Update coredns to 1.12.0 (#11455)

  • Rework loadbalancer server selection logic (#11458)

    • The embedded client loadbalancer that handles connectivity to control-plane elements has been extensively reworked for improved performance, reliability, and observability.

  • Add node-internal-dns/node-external-dns address pass-through support … (#11465)

  • Update to v1.30.8-k3s1 and Go 1.22.9 (#11461)


Release v1.30.7+k3s1

This release updates Kubernetes to v1.30.7, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.6+k3s1:

  • Backport E2E GHA fixes (#11227)

  • Backports for 2024-11 (#11262)

  • Update flannel and base cni plugins version (#11248)

  • Bump to latest k3s-root version in scripts/version.sh (#11299)

  • More backports for 2024-11 (#11308)

  • Fix issue with loadbalancer failover to default server (#11325)

  • Update Kubernetes to v1.30.7-k3s1 (#11371)

  • Bump containerd to -k3s2 to fix rewrites (#11404)


Release v1.30.6+k3s1

This release updates Kubernetes to v1.30.6, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.5+k3s1:

  • Add int test for flannel-ipv6masq (#10903)

  • Bump Wharfie to v0.6.7 (#10975)

  • Add user path to runtimes search (#11003)

  • Add e2e test for advanced fields in services (#11022)

  • Launch private registry with init (#11047)

  • Backports for 2024-10 (#11061)

  • Allow additional Rootless CopyUpDirs through K3S_ROOTLESS_COPYUPDIRS (#11044)

  • Bump containerd to v1.7.22 (#11073)

  • Simplify svclb ds (#11083)

  • Add the nvidia runtime cdi (#11092)

  • Revert "Make svclb as simple as possible" (#11113)

  • Fixes "file exists" error from CNI bins when upgrading k3s (#11126)

  • Update to Kubernetes v1.30.6-k3s1 and Go 1.22.8 (#11162)


Release v1.30.5+k3s1

This release updates Kubernetes to v1.30.5, and fixes a number of issues. For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.4+k3s1:

  • Testing And Secrets-Encryption Backports for 2024-09 (#10801)

    • Update to newer OS images for install testing

    • Fix caching name for e2e vagrant box

    • Remove secrets encryption controller

    • Cover edge case when on new minor release for E2E upgrade test

    • Removes deprecated alpha Secrets Encryption metrics (deprecated in 1.30, removed in 1.31)

  • Update CNI plugins version (#10818)

  • Backports for 2024-09 (#10843)

  • Fix hosts.toml header var (#10872)

  • Update to v1.30.5-k3s1 and Go 1.22.6 (#10888)

  • Update Kubernetes to v1.30.5-k3s2 (#10909)


Release v1.30.4+k3s1

This release updates Kubernetes to v1.30.4, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.3+k3s1:

  • Bump docker/docker to v25.0.6 (#10649)

  • Backports for 2024-08 release cycle (#10664)

    • Use pagination when listing large numbers of resources

    • Fix multiple issues with servicelb

    • Remove deprecated use of wait. functions

    • Wire lasso metrics up to metrics endpoint

  • Backports for August 2024 (#10671)

  • Bump containerd to v1.7.20 (#10660)

  • Add tolerations support for DaemonSet pods (#10703)

    • New Feature: Users can now define Kubernetes tolerations for ServiceLB DaemonSet directly in the svccontroller.k3s.cattle.io/tolerations annotation on services.

  • Update to v1.30.4-k3s1 and Go 1.22.5 (#10721)


Release v1.30.3+k3s1

This release updates Kubernetes to v1.30.3, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.2+k3s2:

  • Update channel server for k3s2 (#10446)

  • Set correct release channel for e2e upgrade test (#10460)

  • Backports for 2024-07 release cycle (#10497)

    • Bump k3s-root to v0.14.0

    • Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7

    • Bump Local Path Provisioner version

    • Ensure remotedialer kubelet connections use kubelet bind address

    • Chore: Bump Trivy version

    • Add etcd s3 config secret implementation

  • July Test Backports (#10507)

  • Update to v1.30.3-k3s1 and Go 1.22.5 (#10536)

  • Fix issues loading data-dir value from env vars or dropping config files (#10596)


Release v1.30.2+k3s2

This release updates Kubernetes to v1.30.2, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.2+k3s1:

  • Update stable channel to v1.29.6+k3s1 (#10417)

  • Update flannel to v0.25.4 and fixed issue with IPv6 mask (#10422)


Release v1.30.2+k3s1

This release updates Kubernetes to v1.30.2, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.1+k3s1:

  • Fix bug when using tailscale config by file (#10074)

    • Fix bug when using vpn-auth-file in the agent

  • Add WithSkipMissing to not fail import on missing blobs (#10136)

  • Use fixed stream server bind address for cri-dockerd (#9975)

  • Switch stargz over to cri registry config_path (#9977)

  • Bump to containerd v1.7.17, etcd v3.5.13 (#10123)

  • Bump spegel version (#10118)

  • Fix issue installing artifacts from PR builds with multiple runs (#10122)

  • Fix issue with externalTrafficPolicy: Local for single-stack services on dual-stack nodes (#9963)

  • Update local-path-provisioner helper script (#9964)

  • Add support for svclb pod PriorityClassName (#10045)

    • ServiceLB now sets the priorityClassName on svclb pods to system-node-critical by default. This can be overridden on a per-service basis via the svccontroller.k3s.cattle.io/priorityclassname annotation.

  • Drop check for legacy traefik v1 chart (#9593)

    • K3s no longer automatically skips deploying traefik v2 if traefik v1 is present. All clusters should have been upgraded to v2 at some point over the last three years.

  • Update kube-router version to v2.1.2 (#10177)

  • Create ADR for branching strategy (#10147)

  • Bump minio-go to v7.0.70 (#10081)

  • Bump kine to v0.11.9 to fix pagination (#10082)

  • Update valid resolv conf (#9948)

  • Add missing kernel config check (#10100)

  • Git workflow file name correction (#10131)

    • None

  • Follow directory symlinks in auto deploying manifests (#9288) (#10049)

    • Symlinked sub-directories are now respected when scanning Auto-Deploying Manifests (AddOns)

  • Fix bug: allow helm controller set owner reference (#10048)

  • Fix go.mod (#10192)

  • Bump flannel version to v0.25.2 (#10146)

  • Test: add agent with auth file (#10119)

    • Fix bug when using vpn-auth-file in the agent

  • Add extra log in e2e tests (#10145)

  • Update channel server for may 2024 (#10137)

  • Bump klipper-helm image for tls secret support (#10187)

  • Updating the script binary_size_check to complete the command name by…​ (#9992)

  • Fix issue with k3s-etcd informers not starting (#10047)

  • Enable serving supervisor metrics (#10019)

    • --Enable-pprof can now be set on agents to enable the debug/pprof endpoints. When set, agents will listen on the supervisor port.

    • --Supervisor-metrics can now be set on servers to enable serving internal metrics on the supervisor endpoint; when set agents will listen on the supervisor port.

  • Bump alpine from 3.18 to 3.20 in /conformance (#10210)

  • Bump alpine from 3.18 to 3.20 in /package (#10211)

  • Bump ubuntu from 22.04 to 24.04 in /tests/e2e/scripts (#10040)

  • Bump Trivy version (#10039)

  • Fix netpol crash when node remains tainted uninitialized (#10073)

  • Fix issue caused by sole server marked as failed under load (#10241)

    • The embedded load-balancer will now fall back to trying all servers with health-checks ignored, if all servers have been marked unavailable due to failed health checks.

  • Add write-kubeconfig-group flag to server (#9233)

    • New flag in k3s server: --write-kubeconfig-group

  • Fix embedded mirror blocked by SAR RBAC and re-enable test (#10257)

  • Bump Local Path Provisioner version (#10268)

  • Fix: Use actual warningPeriod in certmonitor (#10271)

  • Fix bug that caused agents to bypass local loadbalancer (#10280)

  • Add ADR for support for etcd s3 config secret (#9364)

  • Add test for isValidResolvConf (#10302)

  • Add snapshot retention etcd-s3-folder fix (#10293)

  • Expand GHA golang caching to include newest release branch (#10307)

  • Fix race condition panic in loadbalancer.nextServer (#10318)

  • Fix typo, use rancher/permissions (#10296)

  • Update Kubernetes to v1.30.2 (#10349)

  • Fix agent supervisor port using apiserver port instead (#10352)

  • Fix issue that allowed multiple simultaneous snapshots to be allowed (#10372)


Release v1.30.1+k3s1

This release updates Kubernetes to v1.30.1, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.0+k3s1:


Release v1.30.0+k3s1

This release is K3S’s first in the v1.30 line. This release updates Kubernetes to v1.30.0.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.29.4+k3s1:

  • Kubernetes V1.30.0-k3s1 (#10063)

  • Update stable channel to v1.29.4+k3s1 (#10031)

  • Add E2E Split Server to Drone, support parallel testing in Drone (#9940)

  • Bump E2E opensuse leap to 15.6, fix btrfs test (#10057)

  • Remove deprecated pod-infra-container-image kubelet flag (#7409)

  • Fix e2e tests (#10061)