Skip to content

v1.34.1+k3s1

Choose a tag to compare

View all tags
@brooksn brooksn released this 22 Sep 21:38
v1.34.1+k3s1
24fc436
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This release updates Kubernetes to v1.34.1. This is the first k3s release in the 1.34 release line.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.33.0+k3s1:

  • Update certification renew alert to 120 days (#12232)
    • Renew alert for certification will be 120 days
  • Add anonymous-auth to flags gated on empty authorization-config value (#12246)
  • Add CLI flag and config file for s3 bucket lookup type (#12247)
  • Add support for conditional image tarball imports (#12237)
  • Implement certificate check with file-oriented view and usage types (#12226)
    • Implement certificate check with file-oriented view and usage types
  • Add generation for kube-scheduler and kube-controller-manager certs (#12285)
  • Flannel: Use custom type for network mode (IPv4, IPv6, dual-stack) (#12240)
  • Bump kine and enable sqlite dbstat (#12293)
  • Docs: Remove references to deprecated Vagrantfile (#12252)
  • Bump wharfie to v0.7.0 (#12322)
  • Fix authorization-config/authentication-config handling (#12338)
  • Fix secretsencrypt race conditions (#12351)
  • Remove references to master node-role label and taints/tolerations (#12395)
  • WAdd Uffizzi as adopter (#12348)
  • Fix secrets encryption rotation timeout causing false failures (#12392)
  • Improve shebang of bash completion script (#12303)
  • Add GHCR image publishing to K3s release (#12389)
  • Convert all nightly conformance to golang test framework (#12422)
  • Fix: error on distros without VERSION_ID on /etc/os-release (#12440)
  • Fix K3s not validating datastore connection when no token is set (#12396)
  • Add new topologySpreadConstraints to coredns (#12434)
  • Fix conformance labeling on CI, no tty (#12450)
  • Switch from endpoints to endpointslices (#12420)
  • Define missing top level permissions in CI (#12469)
  • Bump dynamiclistener to v0.7.0 (#12481)
  • Fix sqlite-etcd migration (#12482)
  • Update network components (#12502)
  • Fix Nightly Conformance (#12527)
  • Fix: Remove unused legacy certificates (#12541)
    • Clean up client-kube-proxy.crt and client-k3s-controller.crt certificate files on start
  • Add etcdmigration e2e test (#12528)
  • Docs: Fix broken links in markdown documentation (#12550)
  • Bump alpine from 3.21 to 3.22 in /package (#12429)
  • Add usage description for etcd-snapshot (#12557)
  • Update to new CRDs (#12580)
  • Add basic fuzz test + Enable codeql on GHA (#12596)
  • Refac shell completion to a better command structure (#12590)
    • K3s completion shell command will now be separate to specific subcommands for bash and zsh
  • Add retry around common timeout for hardened docker test (#12601)
  • Update kine and use config defaults helper (#12599)
  • Bump helm-controller and image (#12630)
  • Bump alpine version in Dockerfile.local (#12644)
  • Enable branch protection checks for openssf (#12640)
  • Emit certs OK event on startup, if no certs need renewal (#12645)
  • Update metric help to be more descriptive. (#12654)
  • Remove master toleration from manifests (#12663)
    • Tolerations for the node-role.kubernetes.io/master taint have been removed from packaged manifests. The master label and taint have been unused by upstream Kubernetes since 1.26, and are now being removed from K3s as well.
  • Bump cri-dockerd to v0.3.19-k3s1 (#12649)
  • Fix a couple of small nits in README (#12665)
  • Add retention flag specific for s3 (#12669)
  • Refactor: replace go-bindata with native embed package (#12676)
  • Bump k3s-io/api to fix etcdsnapshotfile status columns (#12685)
  • Fix completion command in e2e (#12693)
  • Fix fallback DNS for IMDS and IPV6-only (#12692)
    • K3s no longer falls back to google DNS (8.8.8.8) as the upstream nameserver when the GCP instance metadata IP is configured as nameserver in the host's resolv.conf.
    • K3s now includes an IPv6 address for google DNS when the host's resolv.conf does not contain a valid upstream nameserver.
  • Fix --docker with --container-runtime-endpoint (#12705)
  • Fix PID tracking for Nightly Conformance (#12714)
  • Bump coredns to 1.12.3 (#12724)
  • Bump Local Path Provisioner version (#12710)
  • Bump metrics-server to v0.8.0 (#12726)
  • Fix cert startup check events (#12744)
  • Bump rancher libs: wrangler/lasso/remotedialer (#12784)
  • Wire cri-dockerd --log-level=debug up to k3s --debug flag (#12755)
  • Fix spegel logging and startup sequence (#12796)
  • Do not bootstrap etcd-only nodes from existing supervisor (#12754)
  • Add retry on etcd MemberAdd timeout (#12815)
  • Bump containerd to v2.1.4 (#12788)
  • Retry CRD creation in case of conflict (#12814)
  • Bump actions/checkout from 4 to 5 (#12773)
  • Wire up kine metrics (#12831)
  • Fix etcd join timeout handling (#12833)
  • Wire up remotedialer metrics (#12832)
  • Bump k3s-root to v0.15.0 (#12853)
    • The bundled userspace binaries are now built from the buildroot 2025.02 LTS branch.
    • The bundled nft binary now supports json output, required for compatibility with kube-proxy's nft proxier.
  • Update to Kubernetes v1.34 (#12854)
  • Add opencontainers/runc pin to v1.3.1 (#12864)
  • Move data dir into position before creating CNI symlinks (#12876)
  • Update to v1.34.1 and Go 1.24.6 (#12896)

Embedded Component Versions

Component Version
Kubernetes v1.34.1
Kine v0.14.0
SQLite 3.50.4
Etcd v3.6.4-k3s3
Containerd v2.1.4-k3s2
Runc v1.3.1
Flannel v0.27.0
Metrics-server v0.8.0
Traefik v3.3.6
CoreDNS v1.12.3
Helm-controller v0.16.13
Local-path-provisioner v0.0.32

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

Assets 21
Loading