v1.32.2+rke2r1

This release updates Kubernetes to v1.32.2.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.32.1+rke2r1:

• Update to cilium v1.16.6 (#7680)
• Charts: bump Harvester CSI Driver v0.1.23 (#7667)
  • Enhance the Harvester CSI controller affinity/anti-affinity
• Bump canal, flannel and multus charts (#7712)
• Update cilium to v1.17.0 (#7708)
• Update Calico and Canal to v3.29.2 (#7723)
• Bump k3s, containerd, traefik, etcd, crictl (#7738)
  • Update k3s to fix registry auth in containerd config template
  • Update containerd to v2.0.2
  • Update traefik to v3.3.2
  • Update etcd to v3.5.18
  • Update crictl to v1.32.0
  • Update rke2-ingress-nginx chart to fix typo in default backend image template
• Bump vsphere CSI to v3.3.1-rancher9 (#7734)
• Update to v1.32.2 and Go to 1.23.6 (#7760)
• Update version (#7769)
• Bump ingress-nginx to v1.12.0-hardened6 (#7773)
• Bump canal and flannel images to build20250218 (#7787)
• Sync images to Prime registry (#7799)
• Bump K3s version for release-1.32 (#7804)
• Bump containerd for go-cni deadlock fix (#7811)

Charts Versions

Component	Version
rke2-cilium	1.17.000
rke2-canal	v3.29.2-build2025021800
rke2-calico	v3.29.200
rke2-calico-crd	v3.29.101
rke2-coredns	1.36.102
rke2-ingress-nginx	4.12.005
rke2-metrics-server	3.12.200
rancher-vsphere-csi	3.3.1-rancher900
rancher-vsphere-cpi	1.10.000
harvester-cloud-provider	0.2.900
harvester-csi-driver	0.1.2300
rke2-snapshot-controller	4.0.002
rke2-snapshot-controller-crd	4.0.002
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.32.2
Etcd	v3.5.18-k3s1
Containerd	v2.0.2-k3s2
Runc	v1.2.4
Metrics-server	v0.7.2
CoreDNS	v1.12.0
Ingress-Nginx	v1.12.0-hardened6
Helm-controller	v0.16.6

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.4 Calico v3.29.2	Yes
Calico	v3.29.2	No
Cilium	v1.17.0	No
Multus	v4.1.4	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.32.2-rc4+rke2r1

Bump containerd for go-cni deadlock fix

Signed-off-by: Brad Davidson <[email protected]>

v1.32.2-rc3+rke2r1

Bump K3s version for release-1.32

Updates k3s: https://github.com/k3s-io/k3s/compare/ff6369579a12...63324382690e72ba182fc19452b2a0f4485a4535

Signed-off-by: Brad Davidson <[email protected]>

v1.31.6+rke2r1

This release updates Kubernetes to v1.31.6.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.31.5+rke2r1:

• Update to cilium v1.16.6 (#7681)
• Charts: bump Harvester CSI Driver v0.1.23 (#7668)
  • Enhance the Harvester CSI controller affinity/anti-affinity
• Bump canal, flannel and multus charts (#7713)
• Update cilium to v1.17.0 (#7709)
• Update Calico and Canal to v3.29.2 (#7724)
• Bump k3s, containerd, traefik, etcd, crictl (#7739)
  • Update k3s to fix registry auth in containerd config template
  • Update containerd to v2.0.2
  • Update traefik to v2.11.20
  • Update etcd to v3.5.18
  • Update crictl to v1.31.1
  • Update rke2-ingress-nginx chart to fix typo in default backend image template
• Bump vsphere CSI to v3.3.1-rancher9 (#7731)
• Update to v1.31.6 and Go to 1.22.12 (#7759)
• Bump ingress-nginx to v1.12.0-hardened6 (#7774)
• Bump canal and flannel images to build20250218 (#7788)
• Sync images to Prime registry (#7800)
• Bump K3s version for release-1.31 (#7805)
• Bump containerd for go-cni deadlock fix (#7812)

Charts Versions

Component	Version
rke2-cilium	1.17.000
rke2-canal	v3.29.2-build2025021800
rke2-calico	v3.29.200
rke2-calico-crd	v3.29.101
rke2-coredns	1.36.102
rke2-ingress-nginx	4.12.005
rke2-metrics-server	3.12.200
rancher-vsphere-csi	3.3.1-rancher900
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.900
harvester-csi-driver	0.1.2300
rke2-snapshot-controller	4.0.002
rke2-snapshot-controller-crd	4.0.002
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.31.6
Etcd	v3.5.18-k3s1
Containerd	v2.0.2-k3s2
Runc	v1.2.4
Metrics-server	v0.7.2
CoreDNS	v1.12.0
Ingress-Nginx	v1.12.0-hardened6
Helm-controller	v0.16.6

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.4 Calico v3.29.2	Yes
Calico	v3.29.2	No
Cilium	v1.17.0	No
Multus	v4.1.4	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.31.6-rc3+rke2r1

Bump containerd for go-cni deadlock fix

Signed-off-by: Brad Davidson <[email protected]>

v1.31.6-rc2+rke2r1

Bump K3s version for release-1.31

Updates k3s: https://github.com/k3s-io/k3s/compare/39b54b9fd34a...a7455eb9effc8ea26d54a63f8cf6129619866b5b

Signed-off-by: Brad Davidson <[email protected]>

v1.30.10+rke2r1

This release updates Kubernetes to v1.30.10.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.9+rke2r1:

• Update to cilium v1.16.6 (#7682)
• Charts: bump Harvester CSI Driver v0.1.23 (#7669)
  • Enhance the Harvester CSI controller affinity/anti-affinity
• Bump canal, flannel and multus charts (#7714)
• Update cilium to v1.17.0 (#7710)
• Update Calico and Canal to v3.29.2 (#7725)
• Bump k3s, traefik, etcd, crictl (#7740)
  • Update k3s to fix registry auth in containerd config template
  • Update traefik to v2.11.20
  • Update etcd to v3.5.18
  • Update crictl to v1.30.1
  • Update rke2-ingress-nginx chart to fix typo in default backend image template
• Bump vsphere CSI to v3.3.1-rancher9 (#7732)
• Update to v1.30.10 and Go to 1.22.12 (#7758)
• Bump ingress-nginx to v1.12.0-hardened6 (#7775)
• Bump canal and flannel images to build20250218 (#7789)
• Sync images to Prime registry (#7801)
• Bump K3s version for release-1.30 (#7806)

Charts Versions

Component	Version
rke2-cilium	1.17.000
rke2-canal	v3.29.2-build2025021800
rke2-calico	v3.29.200
rke2-calico-crd	v3.29.101
rke2-coredns	1.36.102
rke2-ingress-nginx	4.12.005
rke2-metrics-server	3.12.200
rancher-vsphere-csi	3.3.1-rancher900
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.900
harvester-csi-driver	0.1.2300
rke2-snapshot-controller	4.0.002
rke2-snapshot-controller-crd	4.0.002
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.30.10
Etcd	v3.5.18-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.4
Metrics-server	v0.7.2
CoreDNS	v1.12.0
Ingress-Nginx	v1.12.0-hardened6
Helm-controller	v0.16.6

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.4 Calico v3.29.2	Yes
Calico	v3.29.2	No
Cilium	v1.17.0	No
Multus	v4.1.4	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.30.10-rc2+rke2r1

Bump K3s version for release-1.30

Updates k3s: https://github.com/k3s-io/k3s/compare/d7469b84e3a6...b86a69470cd71af521a4b71499db74a600049f70

Signed-off-by: Brad Davidson <[email protected]>

v1.29.14+rke2r1

This release updates Kubernetes to v1.29.14.

Important Note
If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.29.13+rke2r1:

• Update to cilium v1.16.6 (#7683)
• Charts: bump Harvester CSI Driver v0.1.23 (#7670)
  • Enhance the Harvester CSI controller affinity/anti-affinity
• Update cilium to v1.17.0 (#7711)
• Bump canal, flannel and multus charts (#7715)
• Update Calico and Canal to v3.29.2 (#7727)
• Bump vsphere CSI to v3.3.1-rancher9 (#7733)
• Bump k3s, traefik, etcd, crictl (#7741)
  • Update k3s to fix registry auth in containerd config template
  • Update etcd to v3.5.18
  • Update crictl to v1.32.0
  • Update rke2-ingress-nginx chart to fix typo in default backend image template
• Update to v1.29.14 and Go to 1.22.12 (#7757)
• Bump ingress-nginx to v1.12.0-hardened6 (#7776)
• Bump canal and flannel images to build20250218 (#7790)
• Sync images to Prime registry (#7802)
• Bump K3s version for release-1.29 (#7807)

Charts Versions

Component	Version
rke2-cilium	1.17.000
rke2-canal	v3.29.2-build2025021800
rke2-calico	v3.29.200
rke2-calico-crd	v3.29.101
rke2-coredns	1.36.102
rke2-ingress-nginx	4.12.005
rke2-metrics-server	3.12.200
rancher-vsphere-csi	3.3.1-rancher900
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.900
harvester-csi-driver	0.1.2300
rke2-snapshot-controller	4.0.002
rke2-snapshot-controller-crd	4.0.002
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.29.14
Etcd	v3.5.18-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.4
Metrics-server	v0.7.2
CoreDNS	v1.12.0
Ingress-Nginx	v1.12.0-hardened6
Helm-controller	v0.15.16

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.26.4 Calico v3.29.2	Yes
Calico	v3.29.2	No
Cilium	v1.17.0	No
Multus	v4.1.4	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.29.14-rc2+rke2r1

Bump K3s version for release-1.29

Updates k3s: https://github.com/k3s-io/k3s/compare/f7995b3c1528...6873bccf9cb3221bd422f0f88c2cde6f9855ef70

Signed-off-by: Brad Davidson <[email protected]>