This release updates Kubernetes to v1.33.11.
Important Note
If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.
You may retrieve the token value from any server already joined to the cluster:
cat /var/lib/rancher/rke2/server/tokenChanges since v1.33.10+rke2r3:
- Charts: bump Harvester CSI Driver 0.1.28 (#10112)
-
- Fix the race-condition issue during a huge pod respawn simultaneously
-
- Support both Harvester v1.7/v1.8 Cluster
-
- Support Backup
-
- Test-suite: fix vault action failure (#10138)
- Checksum verification for Dockerfiles (#10127)
- Make releases immutable (#10040)
- Bump images to build20260410 (#10145)
-
- Update to cilium v1.19.2 (#10151)
-
- CNI bumps for the Apr 2026 release (#10157)
- Update Flannel and Canal chart with updated images (#10172)
- Bump rke2-multus to v4.2.408 (#10176)
- Update Traefik to v3.6.12 (#10165)
-
- Update Kubernetes Metrics Server chart 3.13.008 (#10187)
-
- Update to CoreDNS chart 1.45.208 (#10193)
-
- Bump to snapshot-controller v8.5.0 (#10217)
-
- Update to calico v3.31.5 (#10227)
-
- CNI bumps for the Apr 2026 release (part deux) (#10231)
- K3s bump and backports for 2026-04 (#10228)
- Update to v1.33.11 and Go v1.25.9 (#10232)
- Bump ingress-nginx to fix CVEs (#10244)
- Bump Traefik v3.6.13 (#10249)
-
- Update to cilium v1.19.3 (#10254)
-
- Update to CoreDNS chart 1.45.209 (#10268)
- Bump k3s and klipper-helm (#10286)
Charts Versions
| Component | Version |
|---|---|
| rke2-cilium | 1.19.300 |
| rke2-canal | v3.31.5-build2026041500 |
| rke2-calico | v3.31.500 |
| rke2-calico-crd | v3.31.500 |
| rke2-coredns | 1.45.209 |
| rke2-ingress-nginx | 4.14.504 |
| rke2-metrics-server | 3.13.008 |
| rancher-vsphere-csi | 3.5.0-rancher200 |
| rancher-vsphere-cpi | 1.12.100 |
| harvester-cloud-provider | 0.2.1100 |
| harvester-csi-driver | 0.1.2800 |
| rke2-snapshot-controller | 4.2.003 |
| rke2-snapshot-controller-crd | 4.2.003 |
| rke2-snapshot-validation-webhook | 0.0.0 |
| rke2-traefik | 39.0.701 |
| rke2-traefik-crd | 39.0.701 |
Packaged Component Versions
| Component | Version |
|---|---|
| Kubernetes | v1.33.11 |
| Etcd | v3.6.7-k3s1 |
| Containerd | v2.2.3-k3s1 |
| Runc | v1.4.2 |
| Metrics-server | v0.8.1 |
| CoreDNS | v1.14.2 |
| Ingress-Nginx | v1.14.5-hardened2 |
| Helm-controller | v0.17.1 |
| Traefik | v3.6.13 |
Available CNIs
| Component | Version | FIPS Compliant |
|---|---|---|
| Canal (Default) | Flannel v0.28.4 Calico v3.31.5 | Yes |
| Calico | v3.31.5 | No |
| Cilium | v1.19.3 | No |
| Multus | v4.2.4 | No |
Helpful Links
As always, we welcome and appreciate feedback from our community of users. Please feel free to:
- Open issues here
- Join our Slack channel
- Check out our documentation for guidance on how to get started.