この文書は自動機械翻訳技術を使用して翻訳されています。正確な翻訳を提供するように努めておりますが、翻訳された内容の完全性、正確性、信頼性については一切保証いたしません。相違がある場合は、元の英語版英語が優先され、正式なテキストとなります。

v1.30.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.

Version

Release date

Kubernetes

Kine

SQLite

Etcd

Containerd

Runc

Flannel

Metrics-server

Traefik

CoreDNS

Helm-controller

Local-path-provisioner

Jul 26 2025

Jun 30 2025

May 23 2025

May 01 2025

Mar 25 2025

v3.5.19-k3s1.30

Feb 27 2025

Jan 28 2025

Dec 18 2024

Dec 04 2024

Oct 26 2024

Sep 19 2024

Aug 21 2024

Jul 31 2024

Jul 03 2024

Jun 25 2024

May 22 2024

v0.11.8-0.20240430184817-f9ce6f8da97b

v0.16.1-0.20240502205943-2f32059d43e6

May 10 2024

Release v1.30.14+k3s2

This release updates Kubernetes to v1.30.14, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.14+k3s1:

Add usage description for etcd-snapshot (#12571)
Build and push k3s image to GHCR (#12576)
GHA + Testing Backports (#12611)
Refac for shell completionhttps://github.com/k3s-io/k3s/pull/12633 [(#12633)]
- K3s completion shell command will now be separate to specific subcommands for bash and zsh
Backports for 2025-07 (#12643)
Update to v1.30.14-k3s2 and Go 1.23.10 (#12662)

Release v1.30.14+k3s1

This release updates Kubernetes to v1.30.14, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.13+k3s1:

Backports for 2025-06 (#12499)
Bump helm-controller (#12521)
Update network components (#12516)
Update to v1.30.14-k3s1 and Go 1.23.10 (#12532)

Release v1.30.13+k3s1

This release updates Kubernetes to v1.30.13, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.12+k3s1:

Testing backports for 2025 May (#12235)
Backports for May (#12316)
Backports for 2025-05 (#12333)
Fix authorization-config/authentication-config handling (#12347)
Fix secretsencrypt race conditions (#12358)
Update to v1.30.13-k3s1 and Go 1.23.8 (#12364)
Fix startup e2e test (#12372)

Release v1.30.12+k3s1

This release updates Kubernetes to v1.30.12, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.11+k3s1:

Improve readiness polling on node startup (#12035)
Fix issue caused by default authorization-mode apiserver arg (#12043)
Cleanup anonymous and named volumes for docker tests (#12077)
Add support for secretbox encryption provider with the k3s secrets-encrypt command (#12065)
- Users can now configure secrets encryption to use secretbox provider by setting the secrets-encryption-provider flag.
Add error in certificate check (#12099)
Backports for 2025-04 (#12106)
Bump kine for nats-server/v2 CVE-2025-30215 (#12143)
Drone Test Split and Reduction (#12149)
More backports for 2025-04 (#12169)
Fix handler panic when bootstrapper returns empty peer list (#12180)
Bump traefik to v2.11.24 (#12191)
Update to v1.30.12-k3s1 and Go 1.23.6 (#12208)

Release v1.30.11k3s1

This release updates Kubernetes to v1.30.11, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.10k3s1:

Revert “Add ability to pass configuration options to flannel backend” (#11869)
Backport Docker E2E testing PRs for 2025 March (#11886)
Backports for 2025-03 (#11921)
Bump klipper-lb to v0.4.13 (#11928)
Fix syncing empty list of apiserver addresses during initial startup (#11955)
Update to v1.30.11-k3s1 (#11959)
Fix skew test for release candidates (#11989)

Release v1.30.10+k3s1

This release updates Kubernetes to v1.30.10, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.9+k3s1:

Correct the k3s token command help (#11684)
Jan 2025 Testing Overhaul, E2E to Docker Migration, (#11725)
Backports for 2025-02 (#11737)
- Align the CLI-reported default --etcd-snapshot-dir value with the actual one (server, etcd-snapshot commands).
- Disable s3 transport transparent compression/decompression
- Etcd snapshot backup/restore now supports loading s3 credentials from an AWS SDK shared credentials file.
- The containerd config templates for linux and windows have been consolidated and are no longer os-specific.
- Bump klipper-helm to v0.9.4
- Bump klipper-lb to v0.4.10
- Bump spegel to v0.0.30
- Bump local-path-provisioner to v0.0.31
- Bump kine to v0.13.8
- Bump etcd to v3.5.18
- Bump traefik to 2.11.20
Bump traefik to v2.11.20 (#11764)
Update to v1.30.10-k3s1 and Go 1.22.12 (#11786)
Render CNI dir config whenever vars are set (#11821)

Release v1.30.9+k3s1

This release updates Kubernetes to v1.30.9, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.8+k3s1:

Add guardrail for etcd-snapshot (#11394)
Backports for 2025-01https://github.com/k3s-io/k3s/pull/11567[(#11567)]
Add auto import images for containerd image store (#11561)
2025 January Backports (#11589)
Load kernel modules for nft in agent setup (#11597)
Fix local password validation when bind-address is set (#11612)
Update to v1.30.9-k3s1 and Go 1.22.10https://github.com/k3s-io/k3s/pull/11618[(#11618)]
Remove local restriction for deferred node password validation (#11650)

Release v1.30.8+k3s1

This release updates Kubernetes to v1.30.8, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.7+k3s1:

Fix secrets-encrypt reencrypt timeout error (#11441)
Remove experimental from embedded-registry flag (#11445)
Update coredns to 1.12.0 (#11455)
Rework loadbalancer server selection logic (#11458)
- The embedded client loadbalancer that handles connectivity to control-plane elements has been extensively reworked for improved performance, reliability, and observability.
Add node-internal-dns/node-external-dns address pass-through support … (#11465)
Update to v1.30.8-k3s1 and Go 1.22.9 (#11461)

Release v1.30.7+k3s1

This release updates Kubernetes to v1.30.7, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.6+k3s1:

Backport E2E GHA fixes (#11227)
Backports for 2024-11 (#11262)
Update flannel and base cni plugins version (#11248)
Bump to latest k3s-root version in scripts/version.sh (#11299)
More backports for 2024-11 (#11308)
Fix issue with loadbalancer failover to default server (#11325)
Update Kubernetes to v1.30.7-k3s1 (#11371)
Bump containerd to -k3s2 to fix rewrites (#11404)

Release v1.30.6+k3s1

This release updates Kubernetes to v1.30.6, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.5+k3s1:

Add int test for flannel-ipv6masq (#10903)
Bump Wharfie to v0.6.7 (#10975)
Add user path to runtimes search (#11003)
Add e2e test for advanced fields in services (#11022)
Launch private registry with init (#11047)
Backports for 2024-10 (#11061)
Allow additional Rootless CopyUpDirs through K3S_ROOTLESS_COPYUPDIRS (#11044)
Bump containerd to v1.7.22 (#11073)
Simplify svclb ds (#11083)
Add the nvidia runtime cdi (#11092)
Revert "Make svclb as simple as possible" (#11113)
Fixes "file exists" error from CNI bins when upgrading k3s (#11126)
Update to Kubernetes v1.30.6-k3s1 and Go 1.22.8 (#11162)

Release v1.30.5+k3s1

This release updates Kubernetes to v1.30.5, and fixes a number of issues. For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.4+k3s1:

Testing And Secrets-Encryption Backports for 2024-09 (#10801)
- Update to newer OS images for install testing
- Fix caching name for e2e vagrant box
- Remove secrets encryption controller
- Cover edge case when on new minor release for E2E upgrade test
- Removes deprecated alpha Secrets Encryption metrics (deprecated in 1.30, removed in 1.31)
Update CNI plugins version (#10818)
Backports for 2024-09 (#10843)
Fix hosts.toml header var (#10872)
Update to v1.30.5-k3s1 and Go 1.22.6 (#10888)
Update Kubernetes to v1.30.5-k3s2 (#10909)

Release v1.30.4+k3s1

This release updates Kubernetes to v1.30.4, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.3+k3s1:

Bump docker/docker to v25.0.6 (#10649)
Backports for 2024-08 release cycle (#10664)
- Use pagination when listing large numbers of resources
- Fix multiple issues with servicelb
- Remove deprecated use of wait. functions
- Wire lasso metrics up to metrics endpoint
Backports for August 2024 (#10671)
Bump containerd to v1.7.20 (#10660)
Add tolerations support for DaemonSet pods (#10703)
- New Feature: Users can now define Kubernetes tolerations for ServiceLB DaemonSet directly in the svccontroller.k3s.cattle.io/tolerations annotation on services.
Update to v1.30.4-k3s1 and Go 1.22.5 (#10721)

Release v1.30.3+k3s1

This release updates Kubernetes to v1.30.3, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.2+k3s2:

Update channel server for k3s2 (#10446)
Set correct release channel for e2e upgrade test (#10460)
Backports for 2024-07 release cycle (#10497)
- Bump k3s-root to v0.14.0
- Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7
- Bump Local Path Provisioner version
- Ensure remotedialer kubelet connections use kubelet bind address
- Chore: Bump Trivy version
- Add etcd s3 config secret implementation
July Test Backports (#10507)
Update to v1.30.3-k3s1 and Go 1.22.5 (#10536)
Fix issues loading data-dir value from env vars or dropping config files (#10596)

Release v1.30.2+k3s2

This release updates Kubernetes to v1.30.2, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.2+k3s1:

Update stable channel to v1.29.6+k3s1 (#10417)
Update flannel to v0.25.4 and fixed issue with IPv6 mask (#10422)

Release v1.30.2+k3s1

This release updates Kubernetes to v1.30.2, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.1+k3s1:

Fix bug when using tailscale config by file (#10074)
- Fix bug when using vpn-auth-file in the agent
Add WithSkipMissing to not fail import on missing blobs (#10136)
Use fixed stream server bind address for cri-dockerd (#9975)
Switch stargz over to cri registry config_path (#9977)
Bump to containerd v1.7.17, etcd v3.5.13 (#10123)
Bump spegel version (#10118)
Fix issue installing artifacts from PR builds with multiple runs (#10122)
Fix issue with externalTrafficPolicy: Local for single-stack services on dual-stack nodes (#9963)
Update local-path-provisioner helper script (#9964)
Add support for svclb pod PriorityClassName (#10045)
- ServiceLB now sets the priorityClassName on svclb pods to system-node-critical by default. This can be overridden on a per-service basis via the svccontroller.k3s.cattle.io/priorityclassname annotation.
Drop check for legacy traefik v1 chart (#9593)
- K3s no longer automatically skips deploying traefik v2 if traefik v1 is present. All clusters should have been upgraded to v2 at some point over the last three years.
Update kube-router version to v2.1.2 (#10177)
Create ADR for branching strategy (#10147)
Bump minio-go to v7.0.70 (#10081)
Bump kine to v0.11.9 to fix pagination (#10082)
Update valid resolv conf (#9948)
Add missing kernel config check (#10100)
Git workflow file name correction (#10131)
- None
Follow directory symlinks in auto deploying manifests (#9288) (#10049)
- Symlinked sub-directories are now respected when scanning Auto-Deploying Manifests (AddOns)
Fix bug: allow helm controller set owner reference (#10048)
Fix go.mod (#10192)
Bump flannel version to v0.25.2 (#10146)
Test: add agent with auth file (#10119)
- Fix bug when using vpn-auth-file in the agent
Add extra log in e2e tests (#10145)
Update channel server for may 2024 (#10137)
Bump klipper-helm image for tls secret support (#10187)
Updating the script binary_size_check to complete the command name by… (#9992)
Fix issue with k3s-etcd informers not starting (#10047)
Enable serving supervisor metrics (#10019)
- --Enable-pprof can now be set on agents to enable the debug/pprof endpoints. When set, agents will listen on the supervisor port.
- --Supervisor-metrics can now be set on servers to enable serving internal metrics on the supervisor endpoint; when set agents will listen on the supervisor port.
Bump alpine from 3.18 to 3.20 in /conformance (#10210)
Bump alpine from 3.18 to 3.20 in /package (#10211)
Bump ubuntu from 22.04 to 24.04 in /tests/e2e/scripts (#10040)
Bump Trivy version (#10039)
Fix netpol crash when node remains tainted uninitialized (#10073)
Fix issue caused by sole server marked as failed under load (#10241)
- The embedded load-balancer will now fall back to trying all servers with health-checks ignored, if all servers have been marked unavailable due to failed health checks.
Add write-kubeconfig-group flag to server (#9233)
- New flag in k3s server: --write-kubeconfig-group
Fix embedded mirror blocked by SAR RBAC and re-enable test (#10257)
Bump Local Path Provisioner version (#10268)
Fix: Use actual warningPeriod in certmonitor (#10271)
Fix bug that caused agents to bypass local loadbalancer (#10280)
Add ADR for support for etcd s3 config secret (#9364)
Add test for isValidResolvConf (#10302)
Add snapshot retention etcd-s3-folder fix (#10293)
Expand GHA golang caching to include newest release branch (#10307)
Fix race condition panic in loadbalancer.nextServer (#10318)
Fix typo, use rancher/permissions (#10296)
Update Kubernetes to v1.30.2 (#10349)
Fix agent supervisor port using apiserver port instead (#10352)
Fix issue that allowed multiple simultaneous snapshots to be allowed (#10372)

Release v1.30.1+k3s1

This release updates Kubernetes to v1.30.1, and fixes a number of issues.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.30.0+k3s1:

Replace deprecated ruby function in e2e tests (#10084)
Update channels with 1.30 (#10097)
Address 461 (#10112)
Update to v1.30.1-k3s1 and Go 1.22.2 (#10105)

Release v1.30.0+k3s1

This release is K3S’s first in the v1.30 line. This release updates Kubernetes to v1.30.0.

For more details on what’s new, see the Kubernetes release notes.

Changes since v1.29.4+k3s1:

Kubernetes V1.30.0-k3s1 (#10063)
Update stable channel to v1.29.4+k3s1 (#10031)
Add E2E Split Server to Drone, support parallel testing in Drone (#9940)
Bump E2E opensuse leap to 15.6, fix btrfs test (#10057)
Remove deprecated pod-infra-container-image kubelet flag (#7409)
Fix e2e tests (#10061)