k3s-io/k3s v1.22.2+k3s2

on GitHub

This release updates containerd to v1.5.7+k3s1 to address CVE-2021-41103 / GHSA-c2h3-6mxw-7mvq.

As v1.22 releases include a number of significant changes from previous versions, we will not make v1.22 available via the stable release channel until v1.22.3+k3s1 or later.

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes. Special attention should be paid to the removal of several beta Kubernetes APIs, as this is a breaking change for users with apiextensions.k8s.io/v1beta1 CustomResourceDefinition or networking.k8s.io/v1beta1 Ingress resources in their manifests.

Changes since K3s v1.22.2-k3s1

• The embedded containerd has been updated to v1.5.7+k3s1 to address CVE-2021-41103 (#4137)
• Enable the inheritance of settings for ipv6 (#4101)
• Fixed a regression introduced by #4088 that broke rootless support (#4129)
• The K3s docker image now works on cgroup v2 systems, and properly reaps terminated containerd shim processes. (#4088)

Known Issues:

• There is an issue that may cause unexpected behavior
  when removing servers running embedded etcd from the cluster. When removing servers with etcd from the
  cluster, ensure that the k3s service is stopped before using kubectl delete to remove the node
  from the Kubernetes and etcd cluster. You should do this one node at a time to ensure that your
  cluster does not lose quorum. Failure to follow this process may result in K3s on the deleted node
  crashing, restarting, and rejoining the cluster.

Embedded Component Versions

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here