v1.33.3+rke2r1

This release updates Kubernetes to v1.33.3.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.33.2+rke2r1:

• Update Canal chart to latest version (#8529)
• Prepend defaults to extra kube args (#8513)
• Bump multus and whereabouts chart (#8536)
• Update Kubernetes Metrics Server chart 3.12.203 (#8555)
• Change structure and set namespace for ctr command (#8545)
• Bump ingress-nginx to v1.12.4-hardened1 (#8568)
• Charts: Bump Harvester CSI driver 0.1.24 (#8507)
  • • Support online resize
  • • Support external storage
• Allow for zypper remove 104 code on uninstall (#8579)
• • Fix snapshot controller backwards compatibility (#8591)
• Update flannel chart v0.27.100 (#8601)
• Backports for 2025-07 (#8606)
• Update K8s to v1.33.3 (#8625)
• Bump ingress-nginx to hardened2 (#8632)
• Update to cilium v1.17.6 (#8643)

Charts Versions

Component	Version
rke2-cilium	1.17.600
rke2-canal	v3.30.2-build2025071100
rke2-calico	v3.30.100
rke2-calico-crd	v3.30.100
rke2-coredns	1.42.302
rke2-ingress-nginx	4.12.401
rke2-metrics-server	3.12.203
rancher-vsphere-csi	3.3.1-rancher1000
rancher-vsphere-cpi	1.11.000
harvester-cloud-provider	0.2.1000
harvester-csi-driver	0.1.2400
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.33.3
Etcd	v3.5.21-k3s1
Containerd	v2.0.5-k3s2
Runc	v1.2.6
Metrics-server	v0.8.0
CoreDNS	v1.12.2
Ingress-Nginx	v1.12.4-hardened2
Helm-controller	v0.16.13

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.1 Calico v3.30.2	Yes
Calico	v3.30.1	No
Cilium	v1.17.6	No
Multus	v4.2.1	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.33.3-rc2+rke2r1

Update to cilium 1.17.600

Signed-off-by: Michael Fritch <mfritch@suse.com>
(cherry picked from commit eb7e627a530d534094e1ffa2fa3fd326427129ca)

v1.32.7+rke2r1

This release updates Kubernetes to v1.32.7.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.32.6+rke2r1:

• Update Canal chart to latest version (#8530)
• Prepend defaults to extra kube args (#8514)
• Bump multus and whereabouts chart (#8538)
• Update Kubernetes Metrics Server chart 3.12.203 (#8556)
• Change structure and set namespace for ctr command (#8543)
• Bump ingress-nginx to v1.12.4-hardened1 (#8569)
• Charts: Bump Harvester CSI driver 0.1.24 (#8506)
  • • Support online resize
  • • Support external storage
• Allow for zypper remove 104 code on uninstall (#8578)
• • Fix snapshot controller backwards compatibility (#8592)
• Update flannel chart v0.27.100 (#8602)
• Backports for 2025-07 (#8607)
• Update K8s to v1.32.7 (#8624)
• Bump ingress-nginx to hardened2 (#8635)
• Update to cilium v1.17.6 (#8644)

Charts Versions

Component	Version
rke2-cilium	1.17.600
rke2-canal	v3.30.2-build2025071100
rke2-calico	v3.30.100
rke2-calico-crd	v3.30.100
rke2-coredns	1.42.302
rke2-ingress-nginx	4.12.401
rke2-metrics-server	3.12.203
rancher-vsphere-csi	3.3.1-rancher900
rancher-vsphere-cpi	1.10.000
harvester-cloud-provider	0.2.1000
harvester-csi-driver	0.1.2400
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.32.7
Etcd	v3.5.21-k3s1
Containerd	v2.0.5-k3s2
Runc	v1.2.6
Metrics-server	v0.8.0
CoreDNS	v1.12.2
Ingress-Nginx	v1.12.4-hardened2
Helm-controller	v0.16.13

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.1 Calico v3.30.2	Yes
Calico	v3.30.1	No
Cilium	v1.17.6	No
Multus	v4.2.1	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.32.7-rc2+rke2r1

Update to cilium 1.17.600

Signed-off-by: Michael Fritch <mfritch@suse.com>
(cherry picked from commit eb7e627a530d534094e1ffa2fa3fd326427129ca)

v1.31.11+rke2r1

This release updates Kubernetes to v1.31.11.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.31.10+rke2r1:

• Use custom golang setup for integration tests (#8464)
• Update Canal chart to latest version (#8531)
• Prepend defaults to extra kube args (#8515)
• Bump multus and whereabouts chart (#8540)
• Update Kubernetes Metrics Server chart 3.12.203 (#8557)
• Change structure and set namespace for ctr command (#8544)
• Bump ingress-nginx to v1.12.4-hardened1 (#8570)
• Charts: Bump Harvester CSI driver 0.1.24 (#8505)
  • • Support online resize
  • • Support external storage
• Allow for zypper remove 104 code on uninstall (#8581)
• • Fix snapshot controller backwards compatibility (#8593)
• Update flannel chart v0.27.100 (#8603)
• Backports for 2025-07 (#8608)
• Update K8s to v1.31.11 (#8623)
• Bump ingress-nginx to hardened2 (#8634)
• Update to cilium v1.17.6 (#8645)

Charts Versions

Component	Version
rke2-cilium	1.17.600
rke2-canal	v3.30.2-build2025071100
rke2-calico	v3.30.100
rke2-calico-crd	v3.30.100
rke2-coredns	1.42.302
rke2-ingress-nginx	4.12.401
rke2-metrics-server	3.12.203
rancher-vsphere-csi	3.3.1-rancher900
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.1000
harvester-csi-driver	0.1.2400
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.31.11
Etcd	v3.5.21-k3s1
Containerd	v2.0.5-k3s2
Runc	v1.2.6
Metrics-server	v0.8.0
CoreDNS	v1.12.2
Ingress-Nginx	v1.12.4-hardened2
Helm-controller	v0.16.13

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.1 Calico v3.30.2	Yes
Calico	v3.30.1	No
Cilium	v1.17.6	No
Multus	v4.2.1	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.31.11-rc2+rke2r1

Update to cilium 1.17.600

Signed-off-by: Michael Fritch <mfritch@suse.com>
(cherry picked from commit eb7e627a530d534094e1ffa2fa3fd326427129ca)

v1.30.14+rke2r2

This release updates Kubernetes to v1.30.14.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.14+rke2r1:

• Use custom golang setup for integration tests (#8453)
• Update Canal chart to latest version (#8532)
• Bump multus and whereabouts chart (#8542)
• Update Kubernetes Metrics Server chart 3.12.203 (#8558)
• Bump ingress-nginx to v1.12.4-hardened1 (#8571)
• Update shell completion command to new structure (#8575)
• Charts: Bump Harvester CSI driver 0.1.24 (#8504)
  • • Support online resize
  • • Support external storage
• Allow for zypper remove 104 code on uninstall (#8580)
• • Fix snapshot controller backwards compatibility (#8594)
• Update flannel chart v0.27.100 (#8604)
• Backports for 2025-07 (#8609)
• Update K8s to v1.30.14 r2 (#8622)
• Bump ingress-nginx to hardened2 (#8633)
• Update to cilium v1.17.6 (#8646)

Charts Versions

Component	Version
rke2-cilium	1.17.600
rke2-canal	v3.30.2-build2025071100
rke2-calico	v3.30.100
rke2-calico-crd	v3.30.100
rke2-coredns	1.42.302
rke2-ingress-nginx	4.12.401
rke2-metrics-server	3.12.203
rancher-vsphere-csi	3.3.1-rancher900
rancher-vsphere-cpi	1.9.100
harvester-cloud-provider	0.2.1000
harvester-csi-driver	0.1.2400
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-snapshot-validation-webhook	0.0.0

Packaged Component Versions

Component	Version
Kubernetes	v1.30.14
Etcd	v3.5.21-k3s1
Containerd	v1.7.27-k3s1
Runc	v1.2.6
Metrics-server	v0.8.0
CoreDNS	v1.12.2
Ingress-Nginx	v1.12.4-hardened2
Helm-controller	v0.16.13

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.1 Calico v3.30.2	Yes
Calico	v3.30.1	No
Cilium	v1.17.6	No
Multus	v4.2.1	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

v1.30.14-rc2+rke2r2

Update to cilium 1.17.600

Signed-off-by: Michael Fritch <mfritch@suse.com>
(cherry picked from commit eb7e627a530d534094e1ffa2fa3fd326427129ca)

v1.33.3-rc1+rke2r1

Update K8s to v1.33.3 (#8625)

v1.32.7-rc1+rke2r1

Update K8s to v1.32.7 (#8624)