What's Changed
- Use crane to package non-core images by @dereknola in #9440
- Bump rke2-calico to v3.31.3 by @thomasferrandiz in #9452
- CNI bump Jan 2026 by @thomasferrandiz in #9463
- Bump alpine from 3.22 to 3.23 by @dependabot[bot] in #9345
- ADR about security-responder by @manuelbuil in #9006
- Remove Unnecessary GHA tools by @dereknola in #9447
- Bump Ingresses - 2026 Jan by @dereknola in #9479
- Bump snapshot controller and csi-snapshotter by @dereknola in #9491
- Bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 by @dependabot[bot] in #9431
- [master] Publish GA images to staging registry by @rafaelbreno in #9469
- chore: Bump containerd by @dereknola in #9497
- Add check-images build script, fix incorrect image by @dereknola in #9496
- rke2-coredns: Use k8s-style "IANA" names (RFC 6335) by @mgfritch in #9498
- Bump K3s version for main by @brandond in #9512
- [Windows] Adjust directory creation order in rke2-runtime image by @HarrisonWAffel in #9433
- Update to cilium v1.18.6 by @mgfritch in #9518
- Add retry when downloading kubectl in builds by @dereknola in #9520
- Bump Traefik version to v3.6.7 by @manuelbuil in #9539
- Sync chart and image versions with rancher/rke2-charts main by @Copilot in #9555
- Add e2e test for Calico in eBPF mode by @thomasferrandiz in #9417
- Add el10 for the install script by @vitorsavian in #9557
- Replace deprecated wait.Poll with wait.PollUntilContextTimeout by @luojiyin1987 in #9509
- Add path prefix support to
system-default-registryby @ngharo in #9404 - Consolidate vagrant network configuration for the extra interface in one script by @manuelbuil in #9570
- Bump etcd to v3.6.7 by @brandond in #9577
- [master] Update to v1.35.0-rke2r3 by @rafaelbreno in #9598
- Increase time-outs in calico ebpf test by @thomasferrandiz in #9590
- [master] Fix release arm64 by @rafaelbreno in #9603
- [master] Fix manifest and sync-prime steps by @rafaelbreno in #9612
- Revert accidental hardcode of klipper-helm tag by @brandond in #9622
- Fix setup-go cache key creation by @dereknola in #9576
- Bump K3s version for main by @brandond in #9632
- Bump ingress-nginx to v1.14.3-hardened1 by @dereknola in #9637
- Bump rancher/ecm-distro-tools from 0.61.0 to 0.61.1 by @dependabot[bot] in #9552
- [master] Bump stable channel to
v1.34.3+rke2r3by @rafaelbreno in #9651 - Install the kubectl version from stable defined in channels.yaml by @dereknola in #9652
- Update nightly images 2026 by @dereknola in #9615
- Bump Traefik and Snapshot controller by @dereknola in #9658
- Update to CoreDNS chart 1.45.201 by @mgfritch in #9639
- [master] Add
-e REGISTRYin Makefilein-docker-%by @rafaelbreno in #9620 - Remove cloud-config arg from kubelet for windows by @adonskoy in #9664
- Update Cilium chart to v1.19.0 by @rbrtbnfgl in #9669
- CNI bumps for the Feb 2026 release by @mgfritch in #9668
- Update to Kubernetes Metrics Server chart 3.13.007 by @mgfritch in #9666
- Bump ingress-nginx to v1.14.3-hardened2 by @dereknola in #9695
- fix: clarified the proper user docs location by @e-minguez in #9693
- [master] Update K8s to v1.35.1 and Go to v1.25.6 by @rafaelbreno in #9704
- Bump k3s/rke2-ccm/klipper-lb/klipper-helm by @brandond in #9707
- Bump aws-actions/configure-aws-credentials from 5 to 6 by @dependabot[bot] in #9670
- Ingress-Nginx to Traefik Docker Test by @dereknola in #9733
- Bump stable to
v1.34.4+rke2r1by @rafaelbreno in #9725 - Bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 by @dependabot[bot] in #9727
- Prevent manifest race in Ingress Migration test by @dereknola in #9742
- Update to cilium v1.19.1 by @mgfritch in #9740
- Change SLES 16 default installation to rpms by @vitorsavian in #9723
- Fix tarball ownership and permissions by @brandond in #9754
- Fix rke2 startup when embedded registry is enabled but not configured by @brandond in #9756
- Bump actions/stale from 10.1.1 to 10.2.0 by @dependabot[bot] in #9766
- Fix to only set the default for SLES 16 and not for SLEMicro 6.2 by @vitorsavian in #9769
- Prevent a node transform from agent/server to server/agent by @manuelbuil in #9729
- Fix package dev broken after dapper removal from rke2-packaging by @vitorsavian in #9798
- Align integration test and coverage file generation by @manuelbuil in #9799
- Bump Traefik to v3.6.9 by @manuelbuil in #9787
- [master] Update to v1.35.2 and Go v1.25.7 by @rafaelbreno in #9813
- Bump ETCD version to v3.6.7-k3s1-20260227 by @vitorsavian in #9823
- Bump k3s for etcd bootstrap fix by @brandond in #9784
- chore: Bump ingress-nginx 2026-Feb by @dereknola in #9828
- Reduce embedded registry peer wait from 60 seconds to 15 by @brandond in #9839
- Bump crictl, runc and containerd to build20260303 by @vitorsavian in #9853
- Bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #9845
- Bump rancher/ecm-distro-tools from 0.61.1 to 0.62.0 by @dependabot[bot] in #9846
- Update PSA namespace exceptions by @dereknola in #9867
- Add
primeconfiguration by @dereknola in #9859 - update channel server to 1.34.5 by @briandowns in #9864
- Bump ingresses 2026 March by @dereknola in #9888
- Update to calico v3.31.4 by @mgfritch in #9773
- Bump snapshot crd for groupsnapshot v1beta2 by @dereknola in #9893
- Update to multus chart v4.2.403 by @mgfritch in #9886
- Update to CoreDNS chart 1.45.205 by @mgfritch in #9884
- Bump flannel with newer busybox image by @dereknola in #9930
- Bump K3s version for main by @brandond in #9925
- Update to canal v3.31.4-build2026031000 by @mgfritch in #9945
- Bump runc to v1.4.1 by @brandond in #9954
- Pass PRIME_REGISTRY env var to
make cisteps by @dereknola in #9962 - Add PRIME_REGISTRY passthrough to in-docker-XXXXX targets by @dereknola in #9972
- Bump actions/create-github-app-token from 2 to 3 by @dependabot[bot] in #9960
- Bump docker/login-action from 3 to 4 by @dependabot[bot] in #9874
- Add restorecon if selinux is installed in tar to fix wrong contexts by @vitorsavian in #9923
- Bump K3s version for main by @brandond in #9985
- Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #9847
- [master] Update to v1.35.3 by @rafaelbreno in #9994
- remove old data dirs after succesful start by @bashilias in #9977
- chore(ci): bump aquasecurity/trivy-action to v0.35.0 by @macedogm in #10002
- Bump ingress nginx to v1.14.5 by @vitorsavian in #10003
- [master] Pin GH Actions to commit sha by @macedogm in #10014
- [master] Add Install Trivy step by @rafaelbreno in #10027
- Fixed Flannel configuration for e2e tests by @rbrtbnfgl in #10034
- SHA by @cwayne18 in #10036
- Bump helm-controller and k3s by @brandond in #10044
- Add restorecon for /var/lib/rancher/rke2 when installing with tarball by @vitorsavian in #10039
- Update to flannel v0.28.2 by @mgfritch in #10050
- Bump rancher/ecm-distro-tools from 0.62.0 to 0.65.2 by @dependabot[bot] in #10020
- [master] Update stable to
v1.34.6+rke2r1by @rafaelbreno in #10061 - Bump nginx to fix kubegen by @vitorsavian in #10077
- Update GHA hash to the latest by @vitorsavian in #10083
- add checksum verification for 3rd party dependencies by @thomasferrandiz in #10081
- Bump ingress-chart to 4.14.503 by @vitorsavian in #10084
- Change default ingress controller to traefik, with support for detecting legacy default ingress-class by @brandond in #10037
- [master] Add INGRESS_IMAGES by @rafaelbreno in #10117
- Checksum verification in Dockerfile.windows, this ones gonna be a doo… by @cwayne18 in #10047
- Fix checksums in Dockerfile.windows by @thomasferrandiz in #10128
- test-suite: fix vault action failure by @mgfritch in #10135
- [master] Update stable channel to
v1.34.6+rke2r3by @rafaelbreno in #10139 - [master] Make releases immutable by @rafaelbreno in #10043
- Bump images to build20260410 by @vitorsavian in #10141
- Update to cilium v1.19.2 by @mgfritch in #10099
- CNI bumps for the Apr 2026 release by @mgfritch in #10133
- [master] charts: bump Harvester CSI Driver 0.1.28 by @Vicente-Cheng in #10109
- Update Traefik to v3.6.12 by @manuelbuil in #10158
- Update Flannel and Canal chart with updated images by @rbrtbnfgl in #10169
- Bump rke2-multus to v4.2.408 by @thomasferrandiz in #10173
- Update to Kubernetes Metrics Server chart 3.13.008 by @mgfritch in #10180
- Update to CoreDNS chart 1.45.208 by @mgfritch in #10131
- Bump ingress-nginx to fix CVEs by @vitorsavian in #10184
- Bump etcd for CVE reasons by @cwayne18 in #10195
- Bump to snapshot-controller v8.5.0 by @mgfritch in #10207
- Update to calico v3.31.5 by @mgfritch in #10219
- CNI bumps for the Apr 2026 release (part deux) by @mgfritch in #10220
- [master] K3s bump for 2026-04 by @brandond in #10208
- [master] Update to v1.35.4 and Go v1.25.9 by @rafaelbreno in #10235
- Bump Traefik v3.6.13 by @manuelbuil in #10238
- Update to cilium v1.19.3 by @mgfritch in #10240
- Update to CoreDNS chart 1.45.209 by @mgfritch in #10265
- Bump rke2-multus to v4.2.410 by @thomasferrandiz in #10272
- Add ADR about gateway-api bundle by @manuelbuil in #10104
- Bump k3s and klipper helm by @brandond in #10283
- Added updatecli automation for CNI update by @rbrtbnfgl in #10100
- Replace ingress-nginx with traefik in core image list by @brandond in #10269
- [master] Update stable to
v1.35.4+rke2r1by @rafaelbreno in #10292 - Update to Kubernetes v1.36.0 by @brandond in #10296
- [release-1.36] Update kubernetes image in Dockerfile to v1.36.0 by @rafaelbreno in #10299
New Contributors
- @luojiyin1987 made their first contribution in #9509
- @ngharo made their first contribution in #9404
- @adonskoy made their first contribution in #9664
- @e-minguez made their first contribution in #9693
- @bashilias made their first contribution in #9977
Full Changelog: v1.35.0+rke2r1...v1.36.0-rc1+rke2r1