k3s-io/k3s v1.36.5+k3s1

on GitHub

This release updates Kubernetes to v1.36.5, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.36.4+k3s1:

• Bump rancher/mirrored-coredns-coredns image version (#14534)
• Bump gateway-api and traefik image versions for K3s 1.36 (#14567)
  • Bump Traefik image to 3.7.12 and gateway-api to 1.6.1
• Bump Traefik to v3.7.13 (#14610)
• Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14620)
• Backports for 2026-09 (#14632)
  • Fix restore from compressed etcd snapshot #14528
  • Enable seccomp in riscv64 builds #14529
  • Use ginkgo CLI to run tests #14531
  • Bump k3s-io/api to v0.2.0 #14570
  • Servicelb multiple lbpools #14547
  • Close minio.Object after read #14580
  • Bump k3s-io/apis again #14589
  • Fix --flannel-cni-conf not reaching the embedded flannel #14598
  • Check-config: suppress colors when stdout is not a terminal #14595
  • Fix deploy controller not re-applying manifests when mtime is pinned to the epoch #14568
  • Bump etcd to v3.7.1-k3s3 for nonblocking logging support #14628
  • Bump kine to v0.17.1 #14627
• Require node password informer sync before using cache (#14673)
• Bump helm-controller (#14685)
• Bump k3s-io/kubernetes and Go references (#14694)
• Reject anonymous access to supervisor router (spegel/pprof/metrics) (#14702)
• Improve CA hash validation (#14706)

Embedded Component Versions

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here