vitobotta/hetzner-k3s v2.4.6

on GitHub

Fixes

• IMPORTANT: Fixed an issue that left password authentication enabled on all nodes of the cluster despite we use keys. See note on upgrading below.
• Fixed the format of the argument to force path style for bucket lookup in etcd backups to s3 - by @privatecoder
• Post k3s command now run as expected after k3s setup, by @privatecoder
• Autoscaled nodes now obey the grow_root_partition_automatically setting, by @privatecoder

Improvements

• When running a command or script on one or all nodes using the run command, we now print the total number of nodes affected together with the number successfully affected and the number of errors.
• Add new embedded_registry_mirror.# private_registry_config to configure registry mirrors for private registries in YAML format (see https://docs.k3s.io/installation/registry-mirror#enabling-registry-mirroring), by @sergioboi
• ip-query-server: include IP lb of Kubernetes API load balancer so it can be added to local firewall, by @leblancmeneses
• Use a configmap for the autoscaler config so we can have many more node pools. Prior to this change, we were using an environment variable which limited the length of the config. By @leblancmeneses
• Made NodePort range configurable and added ability to disable it altogether, by @privatecoder
• Added a check to abort creating the cluster if an SSH key with the expected fingerprint already exists with a different name form the cluster name, as that would cause issues with autoscaled nodes (see #731 for details). By @privatecoder

New

• Added option to create and set-up a cluster through their private-IPs using the skip-current-ip-validation option. See #727 for more details. By @privatecoder

Upgrading

In order to disable password authentication on all nodes, clone the repo locally then run:

hetzner-k3s run --config your-cluster.yaml --script scripts/2026-02-28-disable-ssh-password-auth.sh

If hetzner-k3s is useful to you or your company, please consider sponsoring its development.
Sponsorship helps ensure continued maintenance and new features. Thank you to our current sponsors! 🙏