v1.36.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.
Version Release date Kubernetes Kine SQLite Etcd Containerd Runc Flannel Metrics-server Traefik CoreDNS Helm-controller Local-path-provisioner

v1.36.3+k3s1

Aug 04 2026

v1.36.3

v0.16.3

3.53.2

v3.6.14-k3s1

v2.3.2-k3s2

v1.4.2

v0.28.4

v0.9.0

v3.7.8

v1.14.6

v0.17.7

v0.0.36

v1.36.2+k3s1

Jun 24 2026

v1.36.2

v0.16.1

3.53.0

v3.6.12-k3s1

v2.3.2-k3s2

v1.4.2

v0.28.4

v0.8.1

v3.7.4

v1.14.4

v0.17.1

v0.0.36

v1.36.1+k3s1

May 20 2026

[v1.36.1](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#v1361)

[v0.15.0](https://github.com/k3s-io/kine/releases/tag/v0.15.0)

[3.53.0](https://sqlite.org/releaselog/3_53_0.html)

[v3.6.7-k3s1](https://github.com/k3s-io/etcd/releases/tag/v3.6.7-k3s1)

[v2.2.3-k3s1](https://github.com/k3s-io/containerd/releases/tag/v2.2.3-k3s1)

[v1.4.2](https://github.com/opencontainers/runc/releases/tag/v1.4.2)

[v0.28.4](https://github.com/flannel-io/flannel/releases/tag/v0.28.4)

[v0.8.1](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.8.1)

[v3.6.13](https://github.com/traefik/traefik/releases/tag/v3.6.13)

[v1.14.3](https://github.com/coredns/coredns/releases/tag/v1.14.3)

[v0.17.1](https://github.com/k3s-io/helm-controller/releases/tag/v0.17.1)

[v0.0.36](https://github.com/rancher/local-path-provisioner/releases/tag/v0.0.36)

v1.36.0+k3s1

May 06 2026

v1.36.0

v0.14.16

3.51.3

v3.6.7-k3s1

v2.2.3-k3s1

v1.4.2

v0.28.4

v0.8.1

v3.6.13

v1.14.2

v0.17.1

v0.0.35

Release v1.36.3+k3s1

This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details.

This release updates Kubernetes to v1.36.3, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.36.2+k3s1:

  • Bump dynamiclistener to v0.9.0-rc.2 for wildcard tls-san support (#14312)

    • Add support for wildcard domains in --tls-san (e.g. --tls-san=*.example.com).

  • July Testing Backports (#14328)

  • July K3s Build Rework + GHA bumps (#14332)

  • Backports for 2026-07 (#14348)

  • Bump mirrored-pause to 3.10.2 (#14389)

  • Bump Traefik to v3.7.7 (#14381)

  • More backports for 2026-07 (#14406)

  • Fix typo in snapshot prune event (#14411)

  • Bump rancher/mirrored-coredns-coredns image version (#14424)

  • Bump golang:alpine image version (#14432)

  • Bump rancher/mirrored-metrics-server image version (#14437)

  • Use new Traefik v3.7.8 (#14426)

  • Bump helm-controller and klipper-helm for --force-conflicts support (#14442)

  • Bump k3s-io/kubernetes and Go references (#14456)

  • Bump etcd to v3.6.14 (#14461)

  • Fix production builds always enabling Go coverage instrumentation (#14466)

  • Bump helm-controller and klipper-helm (#14475)

Release v1.36.2+k3s1

This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details.

This release updates Kubernetes to v1.36.2, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.36.1+k3s1:

  • Backport GitHub Action SHA pin updates from main (#14127)

  • Backports for 2026-06 (#14151)

  • Bump v3.7.4 Traefik (#14193)

  • More backports for 2026-06 (#14211)

  • Testing Backports 2026-06 (#14213)

  • Bump klipper-helm for CVE reasons (#14235) (#14236)

  • Bump containerd with the fix for []byte (#14243)

  • Update to v1.36.2-k3s1 and Go 1.26.4 (#14230)

  • Bump containerd to v2.3.2-k3s1 (#14254)

  • Bump cri-api and containerd for upstream env string fix (#14277)

Release v1.36.1+k3s1

This release updates Kubernetes to v1.36.1, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.36.0+k3s1:

  • Backports for 2026-05 (#14032)

  • Update rancher/local-path-provisioner image version (#14042)

  • Update to v1.36.1-k3s1 and Go 1.26.2 (#14051)

  • Bump klipper-helm image tag (#14055)

Release v1.36.0+k3s1

This release updates Kubernetes to v1.36.0, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.35.3+k3s1:

  • Add sipgate to the list of adopters (#13881)

  • Add Rocket Technologies to the list of adopters (#13890)

  • Make Dockerfile.test more secure (#13882)

  • Make tests/integration/Dockerfile.test more secure (#13883)

  • Secure the e2e yaml GHA (#13885)

  • Pin govulncheck GHA version (#13887)

  • Verify sha256sum for kubelet, vagrant zip and go binary (#13889)

  • Check the k3s-root sha256sum (#13888)

  • Fix reproducibility of embedded data tarball (#13875)

  • Fix S3 test to account for change to s3mock (#13906)

  • Bump runc/spegel/helm-controller/kine (#13909)

    • Bump runc to v1.4.2

    • Bump spegel to v0.6.0-k3s2

    • Bump helm-controller to v0.17.1

    • Bump kine to v0.14.16

  • Fix embedded executor VPN config injection (#13920)

  • Bump containerd to v2.2.3 (#13931)

  • Bump flannel to v0.28.4 (#13937)

  • Immutable release changes (#13902)

  • Bump Traefik to 3.6.13 (#13969)

  • Switch from draft to pre-release (#13951)

  • Fix SANs added from comma-separated node-external-ip list (#13989)

  • Fix docker dualstack test (#13994)

  • Bump klipper-helm image for revision check fix (#13995)

  • Bump upstream to v1.36 (#13986)

  • Fix kubectl exec when using docker (#14021)