This release updates Kubernetes to v1.33.6.
Important Note
If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.
You may retrieve the token value from any server already joined to the cluster:
cat /var/lib/rancher/rke2/server/tokenChanges since v1.33.5+rke2r1:
- Bump harvester-cloud-provider chart to v0.2.11 with app image tag v0.2.5 (#8958)
- Update traefik to v3.5.1, use new hardened image (#8971)
- Bump rke2-ingress-nginx to v1.13.3-hardened1 (#8999)
- Container runtime endpoint description and Docker warning (#8986)
- Add calico
envoy-proxyandenvoy-ratelimitimages (#9023) - Move dualstack to larger docker runners to prevent eviction failures (#9031)
- Charts: Bump Harvester CSI driver 0.1.25 (#9037)
-
- Support CSI Snapshot
-
- Bump k3s (#9044)
- Update to cilium v1.18.2 (#9076)
- October 2025 bumps for canal, flannel and multus (#9098)
- Update to CoreDNS chart 1.44.300 and Kubernetes Metrics Server chart 3.13.002 (#9090)
- Bump images for go1.24.9 (#9104)
- Add new kubeapiserver argument for cis-1.11 benchmark (#9119)
- Bump traefik and ingress-nginx (#9128)
- Bump helm-controller/klipper-helm (#9136)
- Tests: update e2e tests to use images from the rancher org (#9159)
- Bump k3s and backport uninstall fixes (#9175)
- Bump traefik to v3.5.4 and ingress-nginx to v1.13.4 (#9188)
- Bump runc to v1.3.3 (#9193)
-
- Update to cilium v1.18.3 (#9219)
- Improve PR Trivy Scanning Reports (#9239)
- More backports for 2025-11 (#9251)
-
- Update to calico v3.30.4 (#9248)
-
- Update to multus chart version v4.2.300 (#9253)
-
- Update to calico v3.30.4 (#9260)
- Bump k3s and helm-controller (#9264)
- Update k8s and Go (#9272)
- Fix race condition with Calico startup on Windows (#9280)
- Release race condition (#9297)
Charts Versions
| Component | Version |
|---|---|
| rke2-cilium | 1.18.300 |
| rke2-canal | v3.30.3-build2025101500 |
| rke2-calico | v3.30.401 |
| rke2-calico-crd | v3.30.401 |
| rke2-coredns | 1.44.300 |
| rke2-ingress-nginx | 4.13.400 |
| rke2-metrics-server | 3.13.002 |
| rancher-vsphere-csi | 3.5.0-rancher100 |
| rancher-vsphere-cpi | 1.12.100 |
| harvester-cloud-provider | 0.2.1100 |
| harvester-csi-driver | 0.1.2500 |
| rke2-snapshot-controller | 4.0.003 |
| rke2-snapshot-controller-crd | 4.0.003 |
| rke2-snapshot-validation-webhook | 0.0.0 |
Packaged Component Versions
| Component | Version |
|---|---|
| Kubernetes | v1.33.6 |
| Etcd | v3.5.21-k3s1 |
| Containerd | v2.1.5-k3s1 |
| Runc | v1.3.3 |
| Metrics-server | v0.8.0 |
| CoreDNS | v1.13.1 |
| Ingress-Nginx | v1.13.4-hardened1 |
| Helm-controller | v0.16.16 |
Available CNIs
| Component | Version | FIPS Compliant |
|---|---|---|
| Canal (Default) | Flannel v0.27.4 Calico v3.30.3 | Yes |
| Calico | v3.30.4 | No |
| Cilium | v1.18.3 | No |
| Multus | v4.2.3 | No |
Helpful Links
As always, we welcome and appreciate feedback from our community of users. Please feel free to:
- Open issues here
- Join our Slack channel
- Check out our documentation for guidance on how to get started.