This release updates Kubernetes to v1.28.11.
Important Note
If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.
You may retrieve the token value from any server already joined to the cluster:
cat /var/lib/rancher/rke2/server/tokenChanges since v1.28.10+rke2r1:
- Improve rke2-uninstall.ps1 script (#5963)
- Update cloud-provider image which now uses scratch as base (#5933) (#5989)
- Add cilium no proxy e2e test (#5885) (#5969)
- Update flannel chart to fix vni error (#5953) (#5999)
- Add extra log in e2e tests (#6020)
- Bump flannel to v0.25.201 and canal to v3.28.0-build2024052800 (#6048)
- Add a Kine fix when rke2 restart apiserver (#6005)
- Bump multus and whereabouts version (#6015) (#6039)
- Bump harvester-cloud-provider v0.2.4 (#5982)
- Version bumps and backports for 2024-06 release cycle (#6082)
- Add easy support for single node sqlite with kine (#6071)
- Bump nginx to 1.10.1 (#6056)
- Bump K3s version for v1.28 (#6112)
- Bump containerd to correctly built tag (#6128)
- Bump flannel version (#6125)
- Update to the latest SR-IOV image versions (#6150)
- Bump flannel image in rke2-canal (#6153)
- Use
rancher/permissionsdependency (#6140) - Bump K3s version for v1.28 (#6166)
- Improve rke2-uninstall.ps1 (#6133)
- June Testing Backports (#6156)
- Fix loadManifests function
- Slim down E2E artifacts
- Support MixedOS E2E local testing
- Add custom golang setup action for better caching
- Update flannel version to v0.25.4 (#6178)
- Update kubernetes to v1.28.11 (#6189)
- Fix drone pipeline (#6197)
- Update drone build base image (#6204)
- Bump K3s version for v1.28 to fix regression in agent's supervisor port (#6202)
- Bump rke2-ingress-nginx chart to revert watchIngressWithoutClass default (#6218)
- Update hardened kubernetes (#6223)
- Bump K3s version for snapshot fix (#6232)
- Fix issue that allowed multiple simultaneous snapshots to be allowed
- Revert rke2-ingress-nginx bump back to v1.9.6 (#6243)
- Reinstate newest rke2-ingress-nginx (#6256)
- Update calico image to v3.28.0-build20240625 (#6259)
Charts Versions
| Component | Version |
|---|---|
| rke2-cilium | 1.15.500 |
| rke2-canal | v3.28.0-build2024062503 |
| rke2-calico | v3.27.300 |
| rke2-calico-crd | v3.27.002 |
| rke2-coredns | 1.29.002 |
| rke2-ingress-nginx | 4.10.101 |
| rke2-metrics-server | 3.12.002 |
| rancher-vsphere-csi | 3.1.2-rancher400 |
| rancher-vsphere-cpi | 1.7.001 |
| harvester-cloud-provider | 0.2.400 |
| harvester-csi-driver | 0.1.1700 |
| rke2-snapshot-controller | 1.7.202 |
| rke2-snapshot-controller-crd | 1.7.202 |
| rke2-snapshot-validation-webhook | 1.7.302 |
Packaged Component Versions
| Component | Version |
|---|---|
| Kubernetes | v1.28.11 |
| Etcd | v3.5.13-k3s1 |
| Containerd | v1.7.17-k3s1 |
| Runc | v1.1.12 |
| Metrics-server | v0.7.1 |
| CoreDNS | v1.11.1 |
| Ingress-Nginx | v1.10.1-hardened1 |
| Helm-controller | v0.15.10 |
Available CNIs
| Component | Version | FIPS Compliant |
|---|---|---|
| Canal (Default) | Flannel v0.25.4 Calico v3.28.0 | Yes |
| Calico | v3.27.3 | No |
| Cilium | v1.15.5 | No |
| Multus | v4.0.2 | No |
Helpful Links
As always, we welcome and appreciate feedback from our community of users. Please feel free to:
- Open issues here
- Join our Slack channel
- Check out our documentation for guidance on how to get started.