Skip to content

Releases

v1.34.13+rke2r1

v1.34.13+rke2r1

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Nov 02:23
v1.34.13+rke2r1
5f4b3c5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Warning

This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details

This release updates Kubernetes to v1.34.13.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.34.12+rke2r1:

  • Testing Backports - 2026 Oct (#11343)
  • Bump Traefik and gateway-api (#11370)
  • Build: bump containerd to v2.2.9 (#11375)
  • Bump Traefik v3.7.14 (#11417)
  • Bump HCP 0.2.16 (#11396)
  • Test: wait for all client pods before e2e connectivity checks (#11446)
  • Update vsphere-csi chart (#11435)
    • Updated the vsphere-cpi chart to 1.16.400 and the vsphere-csi chart to 3.7.3-rancher700.
  • Update ingress-nginx to chart 4.15.112 / image v1.15.1-prime15 (#11359)
  • Update CNIs and charts for 2026-11 Release Cycle (#11442)
  • Update Cilium chart to 1.20.300 (#11485)
  • Bump klipper-helm to v0.13.3-build20261014 (#11480)
  • Rke2-snapshot-controller: bump image to v8.7.0-build20261015 (#11464)
  • Update ingress-nginx to chart 4.15.113 / image v1.15.1-prime16 (#11489)
  • Update CNIs for 2026-10 Release Cycle (#11515)
  • Bump k3s and containerd (#11509)
  • Bump hardened containerd, runc, crictl and etcd images (#11562)
  • Update CNIs for 2026-10 Release Cycle (#11572)
  • Bump Traefik v3.7.16 (#11553)
  • Remove /run/flannel/subnet.env (#11538)
  • Bump snapshot-controller to v8.7.0-build20261021 (#11583)
  • Bump klipper-helm to v0.13.3-build20261021 (#11589)
  • Bump RKE2 CCM build tag (#11597)
  • Update CNIs for 2026-10 Release Cycle (#11616)
  • Add canal blackhole route cleanup to killall script (#11620)
  • Update ingress-nginx to chart 4.15.114 / image v1.15.1-prime17 (#11600)
  • Update Cilium chart to 1.20.400 (#11629)
  • Bump HCP 0.2.17 (#11643)
  • Charts: Bump Harvester CSI Driver to 0.1.33 (#11635)
    • Bump Harvester CSI Driver to v0.2.11 (chart 0.1.33), rebuilt with Go 1.26.10 for the October security update. Default configuration and CSI sidecar versions are unchanged.
  • Bump containerd to v2.2.10-k3s1-build20261028 (#11653)
  • Update Traefik chart to 40.1.022 (#11659)
  • Update to v1.34.13-rke2r1 and Go 1.26.10 (#11660)
  • Sync 1.34 rke2-uninstall script with other branches (#11668)
  • Support UpdateCLI on release-1.34 branch- #11523 (#11677)
  • Update ingress-nginx to chart 4.15.115 / image v1.15.1-prime18 (#11678)
  • Update vsphere-csi chart (#11679)

Charts Versions

Component Version
rke2-cilium 1.20.400
rke2-canal v3.32.2-build2026102200
rke2-calico v3.32.200
rke2-calico-crd v3.32.200
rke2-coredns 1.49.002
rke2-ingress-nginx 4.15.115
rke2-metrics-server 3.14.004
rke2-multus v4.3.118
rancher-vsphere-csi 3.8.0-rancher000
rancher-vsphere-cpi 1.16.600
harvester-cloud-provider 0.2.1700
harvester-csi-driver 0.1.3300
rke2-snapshot-controller 5.4.001
rke2-snapshot-controller-crd 5.4.001
rke2-traefik 40.1.022
rke2-traefik-crd 40.1.022

Packaged Component Versions

Component Version
Kubernetes v1.34.13
Etcd v3.6.14-k3s3
Containerd v2.2.10-k3s1
Runc v1.4.3
Metrics-server v0.9.0
CoreDNS v1.14.7
Ingress-Nginx v1.14.5-hardened2
Helm-controller v0.16.27
Traefik v3.7.16

Available CNIs

Component Version FIPS Compliant
Canal (Default) Flannel v0.28.10
Calico v3.32.2		 Yes
Calico v3.32.2 No
Cilium v1.20.4 No
Multus v4.3.1 No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

Loading

v1.34.13-rc3+rke2r1

v1.34.13-rc3+rke2r1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Nov 20:24
v1.34.13-rc3+rke2r1
5f4b3c5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • [Release-1.34] Support UpdateCLI on release-1.34 branch- #11523 by @dereknola in #11677
  • [release-1.34] Update ingress-nginx to chart 4.15.115 / image v1.15.1-prime18 by @eio-github-actions-power-enhancer[bot] in #11678
  • [release-1.34] Update vsphere-csi chart by @eio-github-actions-power-enhancer[bot] in #11679

Full Changelog: v1.34.13-rc2+rke2r1...v1.34.13-rc3+rke2r1

Contributors

dereknola
Loading

v1.37.2+rke2r1

v1.37.2+rke2r1 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Nov 02:34
v1.37.2+rke2r1
972ca61

This release updates Kubernetes to v1.37.2.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.37.1+rke2r1:

  • Testing Backports - 2026 Oct (#11340)
  • Bump rke2-security-responder (#11364)
  • Bump Traefik and gateway API (#11372)
  • Bump gateway API to 1.6.3 (#11384)
  • Build: bump containerd to v2.3.6 (#11374)
  • Bump Traefik v3.7.14 (#11411)
  • Bump rke2-security-responder (#11426)
  • Bump HCP 0.2.16 (#11399)
  • Test: wait for all client pods before e2e connectivity checks (#11449)
  • Update ingress-nginx to chart 4.15.112 / image v1.15.1-prime15 (#11362)
  • Update CNIs and charts for 2026-11 Release Cycle (#11432)
  • External cloud controllers should disable by default CCM (#11456)
  • Update vsphere charts (#11451)
  • Fix: add test/fix for disable cloud provider charts (#11468)
  • Update Cilium chart to 1.20.300 (#11482)
  • Bump klipper-helm to v0.13.3-build20261014 (#11477)
  • Rke2-snapshot-controller: bump image to v8.7.0-build20261015 (#11461)
  • Update ingress-nginx to chart 4.15.113 / image v1.15.1-prime16 (#11492)
  • Update CNIs for 2026-10 Release Cycle (#11512)
  • Bump k3s and containerd (#11506)
  • Testing Backports Late 2026 Oct (#11527)
  • Update hardened runtime images (#11521)
  • Update Canal chart to v3.32.2-build2026101201 (#11520)
  • Support UpdateCLI on release-1.37 branch (#11523)
  • Bump hardened containerd, runc, crictl and etcd images (#11560)
  • Update CNIs for 2026-10 Release Cycle (#11568)
  • Bump rke2-security-responder (#11557)
  • Bump Traefik v3.7.16 (#11547)
  • Remove /run/flannel/subnet.env (#11532)
  • Bump snapshot-controller to v8.7.0-build20261021 (#11577)
  • Bump klipper-helm to v0.13.3-build20261021 (#11586)
  • Update CNIs for 2026-10 Release Cycle (#11613)
  • Update ingress-nginx to chart 4.15.114 / image v1.15.1-prime17 (#11603)
  • Bump RKE2 CCM build tag (#11594)
  • Update Cilium chart to 1.20.400 (#11626)
  • Bump HCP 0.2.17 (#11642)
  • Charts: Bump Harvester CSI Driver to 0.1.33 (#11638)
    • Bump Harvester CSI Driver to v0.2.11 (chart 0.1.33), rebuilt with Go 1.26.10 for the October security update. Default configuration and CSI sidecar versions are unchanged.
  • Bump containerd to v2.3.7-k3s1-build20261028 (#11650)
  • Update Traefik chart to 42.1.301 (#11656)
  • Update to v1.37.2-rke2r1 and Go 1.26.10 (#11663)
  • Update ingress-nginx to chart 4.15.115 / image v1.15.1-prime18 (#11670)
  • Update vsphere-csi chart (#11671)

Charts Versions

Component Version
rke2-cilium 1.20.400
rke2-canal v3.32.2-build2026102200
rke2-calico v3.32.200
rke2-calico-crd v3.32.200
rke2-coredns 1.49.002
rke2-ingress-nginx 4.15.115
rke2-gateway-api-crd 1.6.300
rke2-metrics-server 3.14.004
rke2-multus v4.3.118
rancher-vsphere-csi 3.8.0-rancher000
rancher-vsphere-cpi 1.16.500
harvester-cloud-provider 0.2.1700
harvester-csi-driver 0.1.3300
rke2-security-responder 0.1.901
rke2-snapshot-controller 5.4.001
rke2-snapshot-controller-crd 5.4.001
rke2-traefik 42.1.301
rke2-traefik-crd 42.1.301

Packaged Component Versions

Component Version
Kubernetes v1.37.2
Etcd v3.7.1-k3s3
Containerd v2.3.7-k3s1
Runc v1.4.3
Metrics-server v0.9.0
CoreDNS v1.14.7
Ingress-Nginx v1.14.5-hardened2
Helm-controller v0.17.9
Traefik v3.7.16

Available CNIs

Component Version FIPS Compliant
Canal (Default) Flannel v0.28.10
Calico v3.32.2		 Yes
Calico v3.32.2 No
Cilium v1.20.4 No
Multus v4.3.1 No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

Assets 78

v1.37.2-rc2+rke2r1

v1.37.2-rc2+rke2r1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Nov 23:54
v1.37.2-rc2+rke2r1
972ca61

What's Changed

  • [release-1.37] Update ingress-nginx to chart 4.15.115 / image v1.15.1-prime18 by @eio-github-actions-power-enhancer[bot] in #11670
  • [release-1.37] Update vsphere-csi chart by @eio-github-actions-power-enhancer[bot] in #11671

Full Changelog: v1.37.2-rc1+rke2r1...v1.37.2-rc2+rke2r1

Loading

v1.36.6+rke2r1

v1.36.6+rke2r1

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Nov 02:23
v1.36.6+rke2r1
5ee7cd3

Warning

Upstream ingress-nginx Retirement & Transition to Traefik
Because ingress-nginx was retired upstream as of March 2026, Traefik is now the default for new clusters starting in v1.36 (existing clusters will keep their current ingress upon upgrade to avoid breakage). This transition brings the following structural changes:

  • Airgapped Environments: The rke2-images-core tarball now contains Traefik images instead of ingress-nginx. The standalone rke2-images-traefik tarball has been removed. Users who must continue using ingress-nginx will now need to manually provide the rke2-images-ingress-nginx tarball.
  • Future Removal: The ingress-nginx chart will not receive any additional updates and will be completely removed in v1.37 for community users.
  • Prime Customers: Please refer to the official product documentation for specific Prime considerations.

This release updates Kubernetes to v1.36.6.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.36.5+rke2r1:

  • Testing Backports - 2026 Oct (#11341)
  • Bump Traefik and gateway-api (#11356)
    • Bump Traefik and gateway-api
  • Bump gateway API to 1.6.3 (#11386)
  • Build: bump containerd to v2.3.6 (#11377)
  • Bump Traefik v3.7.14 (#11413)
  • Test: wait for all client pods before e2e connectivity checks (#11448)
  • Bump HCP 0.2.16 (#11398)
  • Update vsphere-csi chart (#11433)
    • Updated the vsphere-cpi chart to 1.16.400 and the vsphere-csi chart to 3.7.3-rancher700.
  • Update ingress-nginx to chart 4.15.112 / image v1.15.1-prime15 (#11361)
  • Update CNIs and charts for 2026-11 Release Cycle (#11438)
  • External cloud controllers should disable by default CCM (#11457)
  • Fix: add test/fix for disable cloud provider charts (#11469)
  • Update Cilium chart to 1.20.300 (#11483)
  • Bump klipper-helm to v0.13.3-build20261014 (#11478)
  • Rke2-snapshot-controller: bump image to v8.7.0-build20261015 (#11462)
  • Update ingress-nginx to chart 4.15.113 / image v1.15.1-prime16 (#11491)
  • Update CNIs for 2026-10 Release Cycle (#11513)
  • Bump k3s and containerd (#11507)
  • Testing Backports Late 2026 Oct (#11528)
  • Support UpdateCLI on release-1.36 branch (#11526)
  • Bump hardened containerd, runc, crictl and etcd images (#11559)
  • Update CNIs for 2026-10 Release Cycle (#11570)
  • Bump Traefik v3.7.16 (#11549)
  • Remove /run/flannel/subnet.env (#11533)
  • Bump snapshot-controller to v8.7.0-build20261021 (#11579)
  • Bump klipper-helm to v0.13.3-build20261021 (#11587)
  • Bump RKE2 CCM build tag (#11595)
  • Update CNIs for 2026-10 Release Cycle (#11614)
  • Add canal blackhole route cleanup to killall script (#11618)
  • Update ingress-nginx to chart 4.15.114 / image v1.15.1-prime17 (#11598)
  • Update Cilium chart to 1.20.400 (#11627)
  • Bump HCP 0.2.17 (#11641)
  • Charts: Bump Harvester CSI Driver to 0.1.33 (#11637)
    • Bump Harvester CSI Driver to v0.2.11 (chart 0.1.33), rebuilt with Go 1.26.10 for the October security update. Default configuration and CSI sidecar versions are unchanged.
  • Bump containerd to v2.3.7-k3s1-build20261028 (#11651)
  • Update Traefik chart to 40.1.022 (#11657)
  • Update to v1.36.6-rke2r1 and Go 1.26.10 (#11662)
  • Update ingress-nginx to chart 4.15.115 / image v1.15.1-prime18 (#11673)
  • Update vsphere-csi chart (#11675)

Charts Versions

Component Version
rke2-cilium 1.20.400
rke2-canal v3.32.2-build2026102200
rke2-calico v3.32.200
rke2-calico-crd v3.32.200
rke2-coredns 1.49.002
rke2-ingress-nginx 4.15.115
rke2-metrics-server 3.14.004
rke2-multus v4.3.118
rancher-vsphere-csi 3.8.0-rancher000
rancher-vsphere-cpi 1.16.500
harvester-cloud-provider 0.2.1700
harvester-csi-driver 0.1.3300
rke2-snapshot-controller 5.4.001
rke2-snapshot-controller-crd 5.4.001
rke2-traefik 40.1.022
rke2-traefik-crd 40.1.022

Packaged Component Versions

Component Version
Kubernetes v1.36.6
Etcd v3.6.14-k3s3
Containerd v2.3.7-k3s1
Runc v1.4.3
Metrics-server v0.9.0
CoreDNS v1.14.7
Ingress-Nginx v1.14.5-hardened2
Helm-controller v0.17.9
Traefik v3.7.16

Available CNIs

Component Version FIPS Compliant
Canal (Default) Flannel v0.28.10
Calico v3.32.2		 Yes
Calico v3.32.2 No
Cilium v1.20.4 No
Multus v4.3.1 No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

Loading

v1.36.6-rc2+rke2r1

v1.36.6-rc2+rke2r1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Nov 00:24
v1.36.6-rc2+rke2r1
5ee7cd3

What's Changed

  • [release-1.36] Update ingress-nginx to chart 4.15.115 / image v1.15.1-prime18 by @eio-github-actions-power-enhancer[bot] in #11673
  • [release-1.36] Update vsphere-csi chart by @eio-github-actions-power-enhancer[bot] in #11675

Full Changelog: v1.36.6-rc1+rke2r1...v1.36.6-rc2+rke2r1

Loading

v1.35.10+rke2r1

v1.35.10+rke2r1

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Nov 02:04
v1.35.10+rke2r1
b9ef391

Warning

This release upgrades Traefik chart to v40.x which includes a breaking change for the ingress-nginx migration: the provider name changes from kubernetesIngressNginx to kubernetesIngressNGINX. Check https://github.com/traefik/traefik-helm-chart/releases/tag/v40.0.0 for more details

This release updates Kubernetes to v1.35.10.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.35.9+rke2r1:

  • Testing Backports - 2026 Oct (#11342)
  • Bump Traefik and gateway-api (#11369)
  • Bump gateway API to 1.6.3 (#11388)
  • Build: bump containerd to v2.2.9 (#11376)
  • Bump Traefik v3.7.14 (#11415)
  • Test: wait for all client pods before e2e connectivity checks (#11447)
  • Bump HCP 0.2.16 (#11397)
  • Update vsphere-csi chart (#11434)
    • Updated the vsphere-cpi chart to 1.16.400 and the vsphere-csi chart to 3.7.3-rancher700.
  • Update ingress-nginx to chart 4.15.112 / image v1.15.1-prime15 (#11360)
  • Update CNIs and charts for 2026-11 Release Cycle (#11440)
  • Update Cilium chart to 1.20.300 (#11484)
  • Bump klipper-helm to v0.13.3-build20261014 (#11479)
  • Rke2-snapshot-controller: bump image to v8.7.0-build20261015 (#11463)
  • Update ingress-nginx to chart 4.15.113 / image v1.15.1-prime16 (#11490)
  • Update CNIs for 2026-10 Release Cycle (#11514)
  • Bump k3s and containerd (#11508)
  • Testing Backports Late 2026 Oct (#11529)
  • Support UpdateCLI on release-1.35 branch (#11530)
  • Bump hardened containerd, runc, crictl and etcd images (#11558)
  • Update CNIs for 2026-10 Release Cycle (#11571)
  • Bump Traefik v3.7.16 (#11551)
  • Remove /run/flannel/subnet.env (#11537)
  • Bump snapshot-controller to v8.7.0-build20261021 (#11581)
  • Bump klipper-helm to v0.13.3-build20261021 (#11588)
  • Bump RKE2 CCM build tag (#11596)
  • Update CNIs for 2026-10 Release Cycle (#11615)
  • Add canal blackhole route cleanup to killall script (#11619)
  • Update ingress-nginx to chart 4.15.114 / image v1.15.1-prime17 (#11599)
  • Update Cilium chart to 1.20.400 (#11628)
  • Bump HCP 0.2.17 (#11640)
  • Charts: Bump Harvester CSI Driver to 0.1.33 (#11636)
    • Bump Harvester CSI Driver to v0.2.11 (chart 0.1.33), rebuilt with Go 1.26.10 for the October security update. Default configuration and CSI sidecar versions are unchanged.
  • Bump containerd to v2.2.10-k3s1-build20261028 (#11652)
  • Update Traefik chart to 40.1.022 (#11658)
  • Update to v1.35.10-rke2r1 and Go 1.26.10 (#11661)
  • Update ingress-nginx to chart 4.15.115 / image v1.15.1-prime18 (#11674)
  • Update vsphere-csi chart (#11676)

Charts Versions

Component Version
rke2-cilium 1.20.400
rke2-canal v3.32.2-build2026102200
rke2-calico v3.32.200
rke2-calico-crd v3.32.200
rke2-coredns 1.49.002
rke2-ingress-nginx 4.15.115
rke2-metrics-server 3.14.004
rke2-multus v4.3.118
rancher-vsphere-csi 3.8.0-rancher000
rancher-vsphere-cpi 1.16.500
harvester-cloud-provider 0.2.1700
harvester-csi-driver 0.1.3300
rke2-snapshot-controller 5.4.001
rke2-snapshot-controller-crd 5.4.001
rke2-traefik 40.1.022
rke2-traefik-crd 40.1.022

Packaged Component Versions

Component Version
Kubernetes v1.35.10
Etcd v3.6.14-k3s3
Containerd v2.2.10-k3s1
Runc v1.4.3
Metrics-server v0.9.0
CoreDNS v1.14.7
Ingress-Nginx v1.14.5-hardened2
Helm-controller v0.17.9
Traefik v3.7.16

Available CNIs

Component Version FIPS Compliant
Canal (Default) Flannel v0.28.10
Calico v3.32.2		 Yes
Calico v3.32.2 No
Cilium v1.20.4 No
Multus v4.3.1 No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

Loading

v1.35.10-rc2+rke2r1

v1.35.10-rc2+rke2r1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Nov 22:58
v1.35.10-rc2+rke2r1
b9ef391

What's Changed

  • [release-1.35] Update ingress-nginx to chart 4.15.115 / image v1.15.1-prime18 by @eio-github-actions-power-enhancer[bot] in #11674
  • [release-1.35] Update vsphere-csi chart by @eio-github-actions-power-enhancer[bot] in #11676

Full Changelog: v1.35.10-rc1+rke2r1...v1.35.10-rc2+rke2r1

Loading

v1.34.13-rc2+rke2r1

v1.34.13-rc2+rke2r1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Oct 18:41
v1.34.13-rc2+rke2r1
3f93c56

What's Changed

Full Changelog: v1.34.13-rc1+rke2r1...v1.34.13-rc2+rke2r1

Contributors

manuelbuil
Loading

v1.37.2-rc1+rke2r1

v1.37.2-rc1+rke2r1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Oct 15:38
v1.37.2-rc1+rke2r1
5db0ba0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Full Changelog: v1.37.1+rke2r1...v1.37.2-rc1+rke2r1

Contributors

brandond, cwayne18, and 8 other contributors
Loading