k3s-io/k3s v1.37.0+k3s1

on GitHub

This release updates Kubernetes to v1.37.0, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.36.3+k3s1:

• Bump mirrored-pause to 3.10.2 (#14339)
• Build(deps): bump the action-deps group with 14 updates (#14394)
• Bump dynamiclistener for atomic write fix (#14382)
• Bump helm-controller/klipper-helm (#14403)
• Simplify WriteSubnetFile cleanup and make atomic (#14405)
• Fix typo in snapshot prune event (#14410)
• Bump rancher/mirrored-coredns-coredns image version (#14415)
• Add updatecli manifest to bump Kubernetes across multiple release branches (#14402)
• Bump metrics-server to v0.9.0 (#14416)
• Updatecli: relax metrics-server semver filter et al. (#14429)
• Updatecli: add missing requiredEnv (#14434)
• Bump helm-controller and klipper-helm for --force-conflicts support (#14446)
• Bump k3s-io/kubernetes and Go references (#14457)
• Bump etcd to v3.6.14 (#14460)
• Fix production builds always enabling Go coverage instrumentation (#14465)
• Feat: support custom kubeconfig name (#14440)
  • Added --write-kubeconfig-name server flag to set the name for cluster, user and context in generated kubeconfig.
• Require node password informer sync before using cache (#14459)
• Bump helm-controller and klipper-helm (#14474)
• Enable unit tests (#14480)
• Fix: change sles to use slemicro rpms instead of microos (#14472)
• Tests: make rootless uidmap install robust against stale apt cache (#14490)
• Update stable channel to v1.36.3+k3s1 (#14492)
• Etcd client locking (#14488)
• Tests: Install rke2-multus-crd chart for multus e2e test (#14489)
• Filter large untemplated issues (#14435)
• Fix typo in spegel deferred store comment (#14485)
• Make explicit where coredns customizations should be made (#14503)
• Bump docker version in CI to 29 (#14506)
• Don't retag images for a registry they are already hosted by (#14484)
  • Fixed an issue where airgap image imports could fail with an "already exists" error, or accumulate duplicate image tags on every restart, when system-default-registry matched the registry the images were already tagged for.
• Tidy dockerfile and build stages (#14511)
• Add advertise-address to SANs before generating apiserver cert (#14516)
  • Fixed the apiserver serving certificate not including the value of --advertise-address in its subject alternative names.
• Bump Local Path Provisioner version (#14496)
• Bump containerd to v2.3.4-k3s1.36 (#14510)
• Bump kine to v0.16.4 for nats replay fix (#14521)
• Feat: Add Project Bluefin to adopters list (#14549)
• Bump k8s to v1.37 (#14509)
• Bump Traefik and bundle gateway-api crds (#14573)
• Bump rancher/mirrored-coredns-coredns image version (#14577)
• Bump critools to v1.37 (#14579)
• Bump gateway-api-crd version 3, which includes the keep annotation (#14586)
• Bump Traefik to v3.7.13 (#14606)
• Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14614)
• Bump google.golang.org/grpc to v1.83.2, not v1.82.2 (#14619)

Embedded Component Versions

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here