k3s-io/k3s v1.20.4+k3s1

on GitHub

This release updates Kubernetes to v1.20.4

For more details on what's new, see the Kubernetes release notes

Kubernetes v1.20.4 was released to address packaging issues with the v1.20.3 release; there are no corresponding K3s releases.

Known Issues

• K3s servers should always be upgraded before agents. Agents upgraded to this release before all servers have been upgraded will fail to start due to the issue described at #2996 (comment)

Changes since v1.20.2+k3s2:

• Upgrade Kubernetes to v1.20.4 (#2960)
• K3s servers now use appropriate HTTP response codes to node join failures caused by incorrect credentials (#2915)
• ServiceLB now adds IP addresses for all nodes running LB pods to the Service ingress IP list (#2909)
• K3s will now reliably enable CFS quotas when the cpu and cpuacct cgroup controllers are comounted (#2911)
• K3s nodes can now successfully join clusters when the cluster CA certificate is trusted by the OS CA bundle (#2743)
• K3s binary size has been reduced; time to first launch a new version of K3s should be reduced as well (#2905)
• K3s is now compiled with golang 1.15.8, resolving a common source of crashes on 32bit arm systems (#2896)
• Crictl will more reliably locate its config file when run by non-root users (#2894)
• The K3s systemd unit will successfully start with a missing EnvironmentFile (#2886 @AkihiroSuda)
• The K3s Network Policy Controller has been updated, offering improved performance and reliability of network policy enforcement (#2867)
• K3s containerd now supports AppArmor signal mediation (#2877)
• The K3s embedded userspace (k3s-root) has been updated to fix several BusyBox CVEs and allow use of the fuse-overlayfs snapshotter (#2862 #2847)
• K3s now supports cgroupv2 (#2844)
• Several regressions in rootless support have been resolved (#2846)
• Cadvisor statistics are no longer missing pod labels (#2836)
• Embedded etcd's Prometheus metrics can now be exposed beyond localhost (#2750 @yuriydzobak)
• The node.cloudprovider.kubernetes.io/uninitialized taint on new nodes is now cleared more reliably (#2843)
• Embedded etc snapshots can now be performed on-demand (#2819)
• K3s no longer validates containerd snapshotter functionality when not using the embedded containerd (#2800 @sonicaj)

Embedded Component Versions

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here