v1.34.1+rke2r1

This release updates Kubernetes to v1.34.1.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.33.4+rke2r1:

• Bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 (#8841)
• Bump cni charts and coredns (#8843)
• Update k8s to v1.34, go to v1.24.6 (#8860)
• Bump ingress-nginx v1v1.30.14+rke2r4.12.6-hardened1 (#8868)
• Bump CNI chart latest version (#8887)
• Update metrics-server chart 3.13.001 (#8903)
• Update CoreDNS chart 1.43.302 (#8907)
• Update to v1.34.1 and Go v1.24.6 (#8919)
• Remove cloud-config arg from kubelet (#8927)
• Bump vsphere cpi chart (#8938)

Charts Versions

Component	Version
rke2-cilium	1.18.103
rke2-canal	v3.30.3-build2025090900
rke2-calico	v3.30.300
rke2-calico-crd	v3.30.300
rke2-coredns	1.43.302
rke2-ingress-nginx	4.12.600
rke2-metrics-server	3.13.001
rancher-vsphere-csi	3.5.0-rancher100
rancher-vsphere-cpi	1.12.100
harvester-cloud-provider	0.2.1000
harvester-csi-driver	0.1.2400
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.34.1
Etcd	v3.6.4-k3s3
Containerd	v2.1.4-k3s2
Runc	v1.3.1
Metrics-server	v0.8.0
CoreDNS	v1.12.3
Ingress-Nginx	v1.12.6-hardened1
Helm-controller	v0.16.13

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.3 Calico v3.30.3	Yes
Calico	v3.30.3	No
Cilium	v1.18.1	No
Multus	v4.2.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.34.1-rc3+rke2r1

Bump vsphere cpi chart

Fixes issue with dnsPolicy

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.33.5+rke2r1

This release updates Kubernetes to v1.33.5.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.33.4+rke2r1:

• Added Calico new images (#8829)
• Added Cilium with wireguard e2e tests (#8814)
• CNI and coredns bumps for Sep 25 release (#8845)
• Bump k3s, containerd, runc (#8865)
• Bump crictl and cloud provider (#8862)
• Bump ingress-nginx v1.12.6-hardened1 (#8869)
• Bump CNI chart latest version (#8883)
• Update metrics-server chart 3.13.001 (#8904)
• Update CoreDNS chart 1.43.302 (#8908)
• Bump etcd (#8912)
• Update to v1.33.5 and Go to v1.24.6 (#8918)
• Bump vsphere charts (#8939)

Charts Versions

Component	Version
rke2-cilium	1.18.103
rke2-canal	v3.30.3-build2025090900
rke2-calico	v3.30.300
rke2-calico-crd	v3.30.300
rke2-coredns	1.43.302
rke2-ingress-nginx	4.12.600
rke2-metrics-server	3.13.001
rancher-vsphere-csi	3.5.0-rancher100
rancher-vsphere-cpi	1.12.100
harvester-cloud-provider	0.2.1000
harvester-csi-driver	0.1.2400
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.33.5
Etcd	v3.5.21-k3s1
Containerd	v2.1.4-k3s2
Runc	v1.3.1
Metrics-server	v0.8.0
CoreDNS	v1.12.3
Ingress-Nginx	v1.12.6-hardened1
Helm-controller	v0.16.13

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.3 Calico v3.30.3	Yes
Calico	v3.30.3	No
Cilium	v1.18.1	No
Multus	v4.2.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.33.5-rc2+rke2r1

Bump vsphere cpi chart

Fixes issue with dnsPolicy

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.32.9+rke2r1

This release updates Kubernetes to v1.32.9.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.32.8+rke2r1:

• Added Calico new images (#8830)
• Added Cilium with wireguard e2e tests (#8815)
• CNI and coredns bumps for Sep 25 release (#8847)
• Bump k3s, containerd, runc (#8866)
• Bump crictl and cloud provider (#8863)
• Bump ingress-nginx v1.12.6-hardened1 (#8870)
• Bump CNI chart latest version (#8884)
• Update metrics-server chart 3.13.001 (#8905)
• Update CoreDNS chart 1.43.302 (#8909)
• Bump etcd (#8911)
• Update to v1.32.9 and Go v1.23.12 (#8917)
• Bump vsphere charts (#8940)

Charts Versions

Component	Version
rke2-cilium	1.18.103
rke2-canal	v3.30.3-build2025090900
rke2-calico	v3.30.300
rke2-calico-crd	v3.30.300
rke2-coredns	1.43.302
rke2-ingress-nginx	4.12.600
rke2-metrics-server	3.13.001
rancher-vsphere-csi	3.5.0-rancher100
rancher-vsphere-cpi	1.12.100
harvester-cloud-provider	0.2.1000
harvester-csi-driver	0.1.2400
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.32.9
Etcd	v3.5.21-k3s1
Containerd	v2.1.4-k3s2
Runc	v1.3.1
Metrics-server	v0.8.0
CoreDNS	v1.12.3
Ingress-Nginx	v1.12.6-hardened1
Helm-controller	v0.16.13

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.3 Calico v3.30.3	Yes
Calico	v3.30.3	No
Cilium	v1.18.1	No
Multus	v4.2.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.32.9-rc2+rke2r1

Bump vsphere cpi chart

Fixes issue with dnsPolicy

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.31.13+rke2r1

This release updates Kubernetes to v1.31.13.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.31.12+rke2r1:

• Added Calico new images (#8831)
• Added Cilium with wireguard e2e tests (#8816)
• CNI and coredns bumps for Sep 25 release (#8849)
• Bump k3s, containerd, runc (#8867)
• Bump crictl and cloud provider (#8864)
• Bump ingress-nginx v1.12.6-hardened1 (#8871)
• Bump CNI chart latest version (#8885)
• Update metrics-server chart 3.13.001 (#8906)
• Update CoreDNS chart 1.43.302 (#8910)
• Bump etcd (#8913)
• Update to v1.31.13 and Go v1.23.12 (#8916)
• Bump vsphere charts (#8941)

Charts Versions

Component	Version
rke2-cilium	1.18.103
rke2-canal	v3.30.3-build2025090900
rke2-calico	v3.30.300
rke2-calico-crd	v3.30.300
rke2-coredns	1.43.302
rke2-ingress-nginx	4.12.600
rke2-metrics-server	3.13.001
rancher-vsphere-csi	3.5.0-rancher100
rancher-vsphere-cpi	1.12.100
harvester-cloud-provider	0.2.1000
harvester-csi-driver	0.1.2400
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.31.13
Etcd	v3.5.21-k3s1
Containerd	v2.1.4-k3s2
Runc	v1.3.1
Metrics-server	v0.8.0
CoreDNS	v1.12.3
Ingress-Nginx	v1.12.6-hardened1
Helm-controller	v0.16.13

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.3 Calico v3.30.3	Yes
Calico	v3.30.3	No
Cilium	v1.18.1	No
Multus	v4.2.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.31.13-rc2+rke2r1

Bump vsphere cpi chart

Fixes issue with dnsPolicy

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.34.1-rc2+rke2r1

Remove cloud-config arg from kubelet

Ref: https://github.com/kubernetes/kubernetes/pull/130161
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

v1.30.14+rke2r4

This release updates Kubernetes to v1.30.14.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.14+rke2r2:

• CNI Bumps for Aug 25 release (#8689)
• Bump rancher vsphere csi to 3.3.1-rancher10 (#8678)
• Update to cilium v1.18.000 (#8719)
• Bump ingress-nginx to v1.12.4-hardened6 (#8735)
• Update Kubernetes Metrics Server chart 3.13.000 (#8744)
• Add prime ribs index upload and cache invalidation (#8708)
• Publish prime-only assets (#8754)
• Update K8s to v1.30.14 r3 (#8770)
• Fix missing ECM config (#8775)
• Fix uploader authentication (#8780)
• Bump ingress-nginx to hardened7 (#8792)
• Add REGISTRY env into package windows images step (#8794)
• Remove docker login from publish-manifest-runtime (#8800)
• Bump coredns chart and image (#8736) (#8799)
• Bump runc 1.2.7 to fix CPU affinity issue (#8852)
• Update kubernetes (#8922)

Charts Versions

Component	Version
rke2-cilium	1.18.000
rke2-canal	v3.30.2-build2025073100
rke2-calico	v3.30.200
rke2-calico-crd	v3.30.200
rke2-coredns	1.43.101
rke2-ingress-nginx	4.12.404
rke2-metrics-server	3.13.000
rancher-vsphere-csi	3.3.1-rancher1000
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.1000
harvester-csi-driver	0.1.2400
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.30.14
Etcd	v3.5.21-k3s1
Containerd	v1.7.27-k3s1
Runc	v1.2.7
Metrics-server	v0.8.0
CoreDNS	v1.12.3
Ingress-Nginx	v1.12.4-hardened7
Helm-controller	v0.16.13

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.2 Calico v3.30.2	Yes
Calico	v3.30.2	No
Cilium	v1.18.0	No
Multus	v4.2.2	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.