v1.34.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.
Version Release date Kubernetes Etcd Containerd Runc Metrics-server CoreDNS Ingress-Nginx Helm-controller Canal (Default) Calico Cilium Multus

v1.34.3+rke2r1

Dec 18 2025

v1.34.3

v3.6.6-k3s1

v2.1.5-k3s1

v1.4.0

v0.8.0

v1.13.1

v1.13.5-hardened2

v0.16.17

Flannel v0.27.4
Calico v3.31.2

v3.31.2

v1.18.4

v4.2.3

v1.34.2+rke2r1

Nov 20 2025

v1.34.2

v3.6.5-k3s1

v2.1.5-k3s1

v1.3.3

v0.8.0

v1.13.1

v1.13.4-hardened1

v0.16.16

Flannel v0.27.4
Calico v3.30.3

v3.30.4

v1.18.3

v4.2.3

v1.34.1+rke2r1

Sep 17 2025

v1.34.1

v3.6.4-k3s3

v2.1.4-k3s2

v1.3.1

v0.8.0

v1.12.3

v1.12.6-hardened1

v0.16.13

Flannel v0.27.3
Calico v3.30.3

v3.30.3

v1.18.1

v4.2.2

Release v1.34.3+rke2r1

This release updates Kubernetes to v1.34.3.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.34.2+rke2r1:

  • Remove NetworkManager check for nm-cloud.service (#9292)

  • Bump rke2-multus to v4.2.303 (#9326)

  • Bump rke2-coredns to 1.45.002 (#9333)

  • Update CNI to the latest versions (#9353)

  • Update to multus chart version v4.2.305 (#9357)

    • Update to CoreDNS chart 1.45.003 and Kubernetes Metrics Server chart 3.13.004 (#9368)

  • Update to v1.34.3 and Go v1.24.11 (#9388)

  • Bump traefik version (#9386)

  • Backports for 2025-12 (#9377)

  • Bump ingress-nginx and vsphere-csi (#9391)

  • Bump kine to v0.14.9 (#9406)

  • Bump klipper-helm to v0.9.12 (#9400)

  • Revert "Remove FlannelBackend from config" (#9421)

Charts Versions

| Component | Version | | — | — | | rke2-cilium | 1.18.401 | | rke2-canal | v3.31.2-build2025120500 | | rke2-calico | v3.31.200 | | rke2-calico-crd | v3.31.200 | | rke2-coredns | 1.45.003 | | rke2-ingress-nginx | 4.13.500 | | rke2-metrics-server | 3.13.004 | | rancher-vsphere-csi | 3.5.0-rancher200 | | rancher-vsphere-cpi | 1.12.100 | | harvester-cloud-provider | 0.2.1100 | | harvester-csi-driver | 0.1.2500 | | rke2-snapshot-controller | 4.0.003 | | rke2-snapshot-controller-crd | 4.0.003 | | rke2-snapshot-validation-webhook | 0.0.0 |

Release v1.34.2+rke2r1

This release updates Kubernetes to v1.34.2.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.34.1+rke2r1:

  • Bump harvester-cloud-provider chart to v0.2.11 with app image tag v0.2.5 (#8957)

  • Update traefik to v3.5.1, use new hardened image (#8970)

  • Bump rke2-ingress-nginx to v1.13.3-hardened1 (#8998)

  • Container runtime endpoint description and Docker warning (#8985)

  • Add calico envoy-proxy and envoy-ratelimit images (#9022)

  • Move dualstack to larger docker runners to prevent eviction failures (#9030)

  • Charts: Bump Harvester CSI driver 0.1.25 (#9038)

      • Support CSI Snapshot

  • Bump k3s (#9043)

  • Update to cilium v1.18.2 (#9075)

  • October 2025 bumps for canal, flannel and multus (#9100)

  • Update to CoreDNS chart 1.44.300 and Kubernetes Metrics Server chart 3.13.002 (#9089)

  • Bump images for go1.24.9 rebuild (#9103)

  • Add new kubeapiserver argument for cis-1.11 benchmark (#9118)

  • Bump traefik and ingress-nginx (#9127)

  • Bump helm-controller/klipper-helm (#9135)

  • Tests: update e2e tests to use images from the rancher org (#9158)

  • Bump k3s and backport uninstall fix (#9174)

  • Bump traefik to v3.5.4 and ingress-nginx to v1.13.4 (#9187)

  • Bump runc to v1.3.3 (#9192)

  • Improve PR Trivy Scanning Reports (#9238)

  • More backports for 2025-11 (#9244)

    • Update to multus chart version v4.2.300 (#9252)

  • Bump k3s and helm-controller (#9263)

  • Update k8s and Go (#9273)

  • Fix race condition with Calico startup on Windows (#9279)

  • Release race condition (#9294)

Charts Versions

| Component | Version | | — | — | | rke2-cilium | 1.18.300 | | rke2-canal | v3.30.3-build2025101500 | | rke2-calico | v3.30.401 | | rke2-calico-crd | v3.30.401 | | rke2-coredns | 1.44.300 | | rke2-ingress-nginx | 4.13.400 | | rke2-metrics-server | 3.13.002 | | rancher-vsphere-csi | 3.5.0-rancher100 | | rancher-vsphere-cpi | 1.12.100 | | harvester-cloud-provider | 0.2.1100 | | harvester-csi-driver | 0.1.2500 | | rke2-snapshot-controller | 4.0.003 | | rke2-snapshot-controller-crd | 4.0.003 | | rke2-snapshot-validation-webhook | 0.0.0 |

Release v1.34.1+rke2r1

This release updates Kubernetes to v1.34.1.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.33.4+rke2r1:

  • Bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 (#8841)

  • Bump cni charts and coredns (#8843)

  • Update k8s to v1.34, go to v1.24.6 (#8860)

  • Bump ingress-nginx v1v1.30.14+rke2r4.12.6-hardened1 (#8868)

  • Bump CNI chart latest version (#8887)

  • Update metrics-server chart 3.13.001 (#8903)

  • Update CoreDNS chart 1.43.302 (#8907)

  • Update to v1.34.1 and Go v1.24.6 (#8919)

  • Remove cloud-config arg from kubelet (#8927)

  • Bump vsphere cpi chart (#8938)

Charts Versions

| Component | Version | | — | — | | rke2-cilium | 1.18.103 | | rke2-canal | v3.30.3-build2025090900 | | rke2-calico | v3.30.300 | | rke2-calico-crd | v3.30.300 | | rke2-coredns | 1.43.302 | | rke2-ingress-nginx | 4.12.600 | | rke2-metrics-server | 3.13.001 | | rancher-vsphere-csi | 3.5.0-rancher100 | | rancher-vsphere-cpi | 1.12.100 | | harvester-cloud-provider | 0.2.1000 | | harvester-csi-driver | 0.1.2400 | | rke2-snapshot-controller | 4.0.003 | | rke2-snapshot-controller-crd | 4.0.003 | | rke2-snapshot-validation-webhook | 0.0.0 |