v1.30.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.

Version Release date Kubernetes Kine SQLite Etcd Containerd Runc Flannel Metrics-server Traefik CoreDNS Helm-controller Local-path-provisioner

v1.30.8+k3s1

Dec 18 2024

v1.30.8

v0.13.5

3.46.1

v3.5.16-k3s1

v1.7.23-k3s2

v1.2.1

v0.25.7

v0.7.2

v2.11.10

v1.12.0

v0.16.5

v0.0.30

v1.30.7+k3s1

Dec 04 2024

v1.30.7

v0.13.5

3.46.1

v3.5.16-k3s1

v1.7.23-k3s2

v1.2.1

v0.25.7

v0.7.2

v2.11.10

v1.11.3

v0.16.5

v0.0.30

v1.30.6+k3s1

Oct 26 2024

v1.30.6

v0.13.2

3.46.1

v3.5.13-k3s1

v1.7.22-k3s1

v1.1.14

v0.25.6

v0.7.2

v2.11.10

v1.11.3

v0.16.5

v0.0.30

v1.30.5+k3s1

Sep 19 2024

v1.30.5

v0.12.0

3.44.0

v3.5.13-k3s1

v1.7.21-k3s2

v1.1.14

v0.25.6

v0.7.2

v2.11.8

v1.11.3

v0.16.4

v0.0.28

v1.30.4+k3s1

Aug 21 2024

v1.30.4

v0.11.11

3.44.0

v3.5.13-k3s1

v1.7.20-k3s1

v1.1.12

v0.25.4

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.28

v1.30.3+k3s1

Jul 31 2024

v1.30.3

v0.11.11

3.44.0

v3.5.13-k3s1

v1.7.17-k3s1

v1.1.12

v0.25.4

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.28

v1.30.2+k3s2

Jul 03 2024

v1.30.2

v0.11.9

3.44.0

v3.5.13-k3s1

v1.7.17-k3s1

v1.1.12

v0.25.4

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.27

v1.30.2+k3s1

Jun 25 2024

v1.30.2

v0.11.9

3.44.0

v3.5.13-k3s1

v1.7.17-k3s1

v1.1.12

v0.25.2

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.27

v1.30.1+k3s1

May 22 2024

v1.30.1

v0.11.8-0.20240430184817-f9ce6f8da97b

3.44.0

v3.5.9-k3s1

v1.7.15-k3s1

v1.1.12-k3s1

v0.24.2

v0.7.0

v2.10.7

v1.10.1

v0.16.1-0.20240502205943-2f32059d43e6

v0.0.26

v1.30.0+k3s1

May 10 2024

v1.30.0

v0.11.8

3.44.0

v3.5.9-k3s1

v1.7.15-k3s1

v1.1.12

v0.24.2

v0.7.0

v2.10.7

v1.10.1

v0.16.1

v0.0.26


Release v1.30.8+k3s1

This release updates Kubernetes to v1.30.8, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.7+k3s1:

  • Fix secrets-encrypt reencrypt timeout error (#11441)

  • Remove experimental from embedded-registry flag (#11445)

  • Update coredns to 1.12.0 (#11455)

  • Rework loadbalancer server selection logic (#11458)

    • The embedded client loadbalancer that handles connectivity to control-plane elements has been extensively reworked for improved performance, reliability, and observability.

  • Add node-internal-dns/node-external-dns address pass-through support … (#11465)

  • Update to v1.30.8-k3s1 and Go 1.22.9 (#11461)


Release v1.30.7+k3s1

This release updates Kubernetes to v1.30.7, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.6+k3s1:

  • Backport E2E GHA fixes (#11227)

  • Backports for 2024-11 (#11262)

  • Update flannel and base cni plugins version (#11248)

  • Bump to latest k3s-root version in scripts/version.sh (#11299)

  • More backports for 2024-11 (#11308)

  • Fix issue with loadbalancer failover to default server (#11325)

  • Update Kubernetes to v1.30.7-k3s1 (#11371)

  • Bump containerd to -k3s2 to fix rewrites (#11404)


Release v1.30.6+k3s1

This release updates Kubernetes to v1.30.6, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.5+k3s1:

  • Add int test for flannel-ipv6masq (#10903)

  • Bump Wharfie to v0.6.7 (#10975)

  • Add user path to runtimes search (#11003)

  • Add e2e test for advanced fields in services (#11022)

  • Launch private registry with init (#11047)

  • Backports for 2024-10 (#11061)

  • Allow additional Rootless CopyUpDirs through K3S_ROOTLESS_COPYUPDIRS (#11044)

  • Bump containerd to v1.7.22 (#11073)

  • Simplify svclb ds (#11083)

  • Add the nvidia runtime cdi (#11092)

  • Revert "Make svclb as simple as possible" (#11113)

  • Fixes "file exists" error from CNI bins when upgrading k3s (#11126)

  • Update to Kubernetes v1.30.6-k3s1 and Go 1.22.8 (#11162)


Release v1.30.5+k3s1

This release updates Kubernetes to v1.30.5, and fixes a number of issues. For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.4+k3s1:

  • Testing And Secrets-Encryption Backports for 2024-09 (#10801)

    • Update to newer OS images for install testing

    • Fix caching name for e2e vagrant box

    • Remove secrets encryption controller

    • Cover edge case when on new minor release for E2E upgrade test

    • Removes deprecated alpha Secrets Encryption metrics (deprecated in 1.30, removed in 1.31)

  • Update CNI plugins version (#10818)

  • Backports for 2024-09 (#10843)

  • Fix hosts.toml header var (#10872)

  • Update to v1.30.5-k3s1 and Go 1.22.6 (#10888)

  • Update Kubernetes to v1.30.5-k3s2 (#10909)


Release v1.30.4+k3s1

This release updates Kubernetes to v1.30.4, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.3+k3s1:

  • Bump docker/docker to v25.0.6 (#10649)

  • Backports for 2024-08 release cycle (#10664)

    • Use pagination when listing large numbers of resources

    • Fix multiple issues with servicelb

    • Remove deprecated use of wait. functions

    • Wire lasso metrics up to metrics endpoint

  • Backports for August 2024 (#10671)

  • Bump containerd to v1.7.20 (#10660)

  • Add tolerations support for DaemonSet pods (#10703)

    • New Feature: Users can now define Kubernetes tolerations for ServiceLB DaemonSet directly in the svccontroller.k3s.cattle.io/tolerations annotation on services.

  • Update to v1.30.4-k3s1 and Go 1.22.5 (#10721)


Release v1.30.3+k3s1

This release updates Kubernetes to v1.30.3, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.2+k3s2:

  • Update channel server for k3s2 (#10446)

  • Set correct release channel for e2e upgrade test (#10460)

  • Backports for 2024-07 release cycle (#10497)

    • Bump k3s-root to v0.14.0

    • Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7

    • Bump Local Path Provisioner version

    • Ensure remotedialer kubelet connections use kubelet bind address

    • Chore: Bump Trivy version

    • Add etcd s3 config secret implementation

  • July Test Backports (#10507)

  • Update to v1.30.3-k3s1 and Go 1.22.5 (#10536)

  • Fix issues loading data-dir value from env vars or dropping config files (#10596)


Release v1.30.2+k3s2

This release updates Kubernetes to v1.30.2, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.2+k3s1:

  • Update stable channel to v1.29.6+k3s1 (#10417)

  • Update flannel to v0.25.4 and fixed issue with IPv6 mask (#10422)


Release v1.30.2+k3s1

This release updates Kubernetes to v1.30.2, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.1+k3s1:

  • Fix bug when using tailscale config by file (#10074)

    • Fix bug when using vpn-auth-file in the agent

  • Add WithSkipMissing to not fail import on missing blobs (#10136)

  • Use fixed stream server bind address for cri-dockerd (#9975)

  • Switch stargz over to cri registry config_path (#9977)

  • Bump to containerd v1.7.17, etcd v3.5.13 (#10123)

  • Bump spegel version (#10118)

  • Fix issue installing artifacts from PR builds with multiple runs (#10122)

  • Fix issue with externalTrafficPolicy: Local for single-stack services on dual-stack nodes (#9963)

  • Update local-path-provisioner helper script (#9964)

  • Add support for svclb pod PriorityClassName (#10045)

    • ServiceLB now sets the priorityClassName on svclb pods to system-node-critical by default. This can be overridden on a per-service basis via the svccontroller.k3s.cattle.io/priorityclassname annotation.

  • Drop check for legacy traefik v1 chart (#9593)

    • K3s no longer automatically skips deploying traefik v2 if traefik v1 is present. All clusters should have been upgraded to v2 at some point over the last three years.

  • Update kube-router version to v2.1.2 (#10177)

  • Create ADR for branching strategy (#10147)

  • Bump minio-go to v7.0.70 (#10081)

  • Bump kine to v0.11.9 to fix pagination (#10082)

  • Update valid resolv conf (#9948)

  • Add missing kernel config check (#10100)

  • Git workflow file name correction (#10131)

    • None

  • Follow directory symlinks in auto deploying manifests (#9288) (#10049)

    • Symlinked sub-directories are now respected when scanning Auto-Deploying Manifests (AddOns)

  • Fix bug: allow helm controller set owner reference (#10048)

  • Fix go.mod (#10192)

  • Bump flannel version to v0.25.2 (#10146)

  • Test: add agent with auth file (#10119)

    • Fix bug when using vpn-auth-file in the agent

  • Add extra log in e2e tests (#10145)

  • Update channel server for may 2024 (#10137)

  • Bump klipper-helm image for tls secret support (#10187)

  • Updating the script binary_size_check to complete the command name by…​ (#9992)

  • Fix issue with k3s-etcd informers not starting (#10047)

  • Enable serving supervisor metrics (#10019)

    • --Enable-pprof can now be set on agents to enable the debug/pprof endpoints. When set, agents will listen on the supervisor port.

    • --Supervisor-metrics can now be set on servers to enable serving internal metrics on the supervisor endpoint; when set agents will listen on the supervisor port.

  • Bump alpine from 3.18 to 3.20 in /conformance (#10210)

  • Bump alpine from 3.18 to 3.20 in /package (#10211)

  • Bump ubuntu from 22.04 to 24.04 in /tests/e2e/scripts (#10040)

  • Bump Trivy version (#10039)

  • Fix netpol crash when node remains tainted uninitialized (#10073)

  • Fix issue caused by sole server marked as failed under load (#10241)

    • The embedded load-balancer will now fall back to trying all servers with health-checks ignored, if all servers have been marked unavailable due to failed health checks.

  • Add write-kubeconfig-group flag to server (#9233)

    • New flag in k3s server: --write-kubeconfig-group

  • Fix embedded mirror blocked by SAR RBAC and re-enable test (#10257)

  • Bump Local Path Provisioner version (#10268)

  • Fix: Use actual warningPeriod in certmonitor (#10271)

  • Fix bug that caused agents to bypass local loadbalancer (#10280)

  • Add ADR for support for etcd s3 config secret (#9364)

  • Add test for isValidResolvConf (#10302)

  • Add snapshot retention etcd-s3-folder fix (#10293)

  • Expand GHA golang caching to include newest release branch (#10307)

  • Fix race condition panic in loadbalancer.nextServer (#10318)

  • Fix typo, use rancher/permissions (#10296)

  • Update Kubernetes to v1.30.2 (#10349)

  • Fix agent supervisor port using apiserver port instead (#10352)

  • Fix issue that allowed multiple simultaneous snapshots to be allowed (#10372)


Release v1.30.1+k3s1

This release updates Kubernetes to v1.30.1, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.0+k3s1:


Release v1.30.0+k3s1

This release is K3S’s first in the v1.30 line. This release updates Kubernetes to v1.30.0.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.29.4+k3s1:

  • Kubernetes V1.30.0-k3s1 (#10063)

  • Update stable channel to v1.29.4+k3s1 (#10031)

  • Add E2E Split Server to Drone, support parallel testing in Drone (#9940)

  • Bump E2E opensuse leap to 15.6, fix btrfs test (#10057)

  • Remove deprecated pod-infra-container-image kubelet flag (#7409)

  • Fix e2e tests (#10061)