k3s: Update dependency k3s-io/k3s to v1.31.4+k3s1

[renovate85-bot]

This PR contains the following updates:

Package	Update	Change	Pending
k3s-io/k3s	minor	v1.30.7+k3s1 -> v1.31.4+k3s1	v1.32.3+k3s1 (+6)

---

Release Notes

k3s-io/k3s (k3s-io/k3s)

v1.31.4+k3s1: v1.31.4+k3s1

Compare Source

This release updates Kubernetes to v1.31.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.31.3+k3s1:

• Fix secrets-encrypt reencrypt timeout error (#​11442)
• Remove experimental from embedded-registry flag (#​11444)
• Rework loadbalancer server selection logic (#​11457)
  • The embedded client loadbalancer that handles connectivity to control-plane elements has been extensively reworked for improved performance, reliability, and observability.
• Update coredns to 1.12.0 (#​11454)
• Add node-internal-dns/node-external-dns address pass-through support … (#​11464)
• Update to v1.31.4-k3s1 and Go 1.22.9 (#​11462)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.4
Kine	v0.13.5
SQLite	3.46.1
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.12.0
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.31.3+k3s1: v1.31.3+k3s1

Compare Source

This release updates Kubernetes to v1.31.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.31.2+k3s1:

• Backport E2E GHA fixes (#​11230)
• Backports for 2024-11 (#​11261)
• Update flannel and base cni plugins version (#​11247)
• Bump to latest k3s-root version in scripts/version.sh (#​11302)
• More backports for 2024-11 (#​11307)
• Fix issue with loadbalancer failover to default server (#​11324)
• Update Kubernetes to v1.31.3-k3s1 (#​11372)
• Bump containerd to -k3s2 to fix rewrites (#​11403)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.3
Kine	v0.13.5
SQLite	3.46.1
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.11.3
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.31.2+k3s1: v1.31.2+k3s1

Compare Source

This release updates Kubernetes to v1.31.2, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.31.1+k3s1:

• Add int test for flannel-ipv6masq (#​10904)
• Bump Wharfie to v0.6.7 (#​10974)
• Add user path to runtimes search (#​11002)
• Add e2e test for advanced fields in services (#​11023)
• Launch private registry with init (#​11048)
• Backports for 2024-10 (#​11054)
• Allow additional Rootless CopyUpDirs through K3S_ROOTLESS_COPYUPDIRS (#​11041)
• Bump containerd to v1.7.22 (#​11072)
• Simplify svclb ds (#​11079)
• Add the nvidia runtime cdi (#​11093)
• Revert "Make svclb as simple as possible" (#​11118)
• Fixes "file exists" error from CNI bins when upgrading k3s (#​11125)
• Update Kubernetes to v1.31.2 (#​11155)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.2
Kine	v0.13.2
SQLite	3.46.1
Etcd	v3.5.13-k3s1
Containerd	v1.7.22-k3s1
Runc	v1.1.14
Flannel	v0.25.6
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.11.3
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.31.1+k3s1: v1.31.1+k3s1

Compare Source

This release updates Kubernetes to v1.31.1, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.31.0+k3s1:

• Testing And Secrets-Encryption Backports for 2024-09 (#​10802)
  • Remove secrets encryption controller
  • Cover edge case when on new minor release for E2E upgrade test
• Update CNI plugins version (#​10817)
• Backports for 2024-09 (#​10842)
• Fix hosts.toml header var (#​10871)
• Update Kubernetes to v1.31.1 (#​10895)
• Update Kubernetes to v1.31.1-k3s3 (#​10910)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.1
Kine	v0.12.0
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.21-k3s2
Runc	v1.1.14
Flannel	v0.25.6
Metrics-server	v0.7.2
Traefik	v2.11.8
CoreDNS	v1.11.3
Helm-controller	v0.16.4
Local-path-provisioner	v0.0.28

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.31.0+k3s1: v1.31.0+k3s1

Compare Source

This release is K3S's first in the v1.31 line. This release updates Kubernetes to v1.31.0.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.4+k3s1:

• Move test-compat docker test to GHA (#​10414)
• Check for bad token permissions when install via PR (#​10387)
• Bump k3s-root to v0.14.0 (#​10466)
  • The k3s bundled userspace has been bumped to a release based on buildroot 2024.02.3, addressing several CVEs in busybox and coreutils.
• Fix INSTALL_K3S_PR support (#​10472)
• Add data-dir to uninstall and killall scripts (#​10473)
• Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 (#​10400)
• Bump golang:alpine image version (#​10359)
• Bump Local Path Provisioner version (#​10394)
• Ensure remotedialer kubelet connections use kubelet bind address (#​10480)
  • Fixed an issue where setting the --bind-address flag to a non-loopback or wildcard address would prevent kubectl logs from working properly.
• Bump Trivy version (#​10339)
• Add etcd s3 config secret implementation (#​10340)
  • A proxy can now be configured for use when uploading etcd snapshots to a s3-compatible storage service. This overrides any proxy settings passed via environment variables.
  • Credentials and endpoint configuration for storing etcd snapshots on a s3-compatible storage service can now be read from a Secret, instead of passing them via the CLI or config file. See https://github.com/k3s-io/k3s/blob/master/docs/adrs/etcd-s3-secret.md for more information.
• For E2E upgrade test, automatically determine the channel to use (#​10461)
• Bump kine to v0.11.11 (#​10494)
• Fix loadbalancer reentrant rlock (#​10511)
  • Fixed an issue that could cause the agent loadbalancer to deadlock when the currently in-use server goes down.
• Don't use server value from config file for etcd-snapshot commands (#​10514)
  • The --server and --token flags for the k3s etcd-snapshot command have been renamed to --etcd-server and --etcd-token, to avoid unintentionally running snapshot management commands against a remote node when the cluster join address or token are present in a config file.
• Use pagination when listing large numbers of resources (#​10527)
• Fix multiple issues with servicelb (#​10552)
  • Fixed issue that caused ServiceLB to fail to create a daemonset for services with long names
  • Fixed issue that caused ServiceLB pods to crashloop on nodes with ipv6 disabled at the kernel level
• Enhance E2E Hardened option (#​10558)
• Allow Pprof and Superisor metrics in standalone mode (#​10576)
• Use higher QPS for secrets reencryption (#​10571)
• Fix issues loading data-dir value from env vars or dropin config files (#​10591)
• Remove deprecated use of wait. functions (#​10546)
• Wire lasso metrics up to metrics endpoint (#​10528)
• Update stable channel to v1.30.3+k3s1 (#​10647)
• Bump docker/docker to v25.0.6 (#​10642)
• Add a change for killall to not unmount server and agent directory (#​10403)
• Allow edge case OS rpm installs (#​10680)
• Bump containerd to v1.7.20 (#​10659)
• Update to newer OS images for install testing (#​10681)
• Bump helm-controller to v0.16.3 to drop Helm v2 support (#​10628)
• Add toleration support to ServiceLB DaemonSet (#​10687)
  • • New Feature: Users can now define Kubernetes tolerations for ServiceLB DaemonSet directly in the svccontroller.k3s.cattle.io/tolerations annotation on services.
• Fix: Add $SUDO prefix to transactional-update commands in install script (#​10531)
• Update to v1.30.3-k3s1 and Go 1.22.5 (#​10707)
• Fix caching name for e2e vagrant box (#​10695)
• Fix k3s-killall.sh support for custom data dir (#​10709)
• Adding MariaDB to README.md (#​10717)
• Bump Trivy version (#​10670)
• V1.31.0-k3s1 (#​10715)
• Update kubernetes to v1.31.0-k3s3 (#​10780)

Embedded Component Versions

Component	Version
Kubernetes	v1.31.0
Kine	v0.12.0
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.20-k3s1
Runc	v1.1.12
Flannel	v0.25.4
Metrics-server	v0.7.0
Traefik	v2.10.7
CoreDNS	v1.10.1
Helm-controller	v0.16.3
Local-path-provisioner	v0.0.28

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.11+k3s1: v1.30.11+k3s1

Compare Source

This release updates Kubernetes to v1.30.11, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.10+k3s1:

• Revert "Add ability to pass configuration options to flannel backend" (#​11869)
• Backport Docker + E2E testing PRs for 2025 March (#​11886)
• Backports for 2025-03 (#​11921)
• Bump klipper-lb to v0.4.13 (#​11928)
• Fix syncing empty list of apiserver addresses during initial startup (#​11955)
• Update to v1.30.11-k3s1 (#​11959)
• Fix skew test for release candidates (#​11989)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.11
Kine	v0.13.9
SQLite	3.46.1
Etcd	v3.5.19-k3s1.30
Containerd	v1.7.26-k3s1
Runc	v1.2.5
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.20
CoreDNS	v1.12.0
Helm-controller	v0.16.6
Local-path-provisioner	v0.0.31

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.10+k3s1: v1.30.10+k3s1

Compare Source

This release updates Kubernetes to v1.30.10, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.9+k3s1:

• Correct the k3s token command help (#​11684)
• Jan 2025 Testing Overhaul, E2E to Docker Migration, (#​11725)
• Backports for 2025-02 (#​11737)
  • Align the CLI-reported default --etcd-snapshot-dir value with the actual one (server, etcd-snapshot commands).
  • Disable s3 transport transparent compression/decompression
  • Etcd snapshot backup/restore now supports loading s3 credentials from an AWS SDK shared credentials file.
  • The containerd config templates for linux and windows have been consolidated and are no longer os-specific.
  • Bump klipper-helm to v0.9.4
  • Bump klipper-lb to v0.4.10
  • Bump spegel to v0.0.30
  • Bump local-path-provisioner to v0.0.31
  • Bump kine to v0.13.8
  • Bump etcd to v3.5.18
  • Bump traefik to 2.11.20
• Bump traefik to v2.11.20 (#​11764)
• Update to v1.30.10-k3s1 and Go 1.22.12 (#​11786)
• Render CNI dir config whenever vars are set (#​11821)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.10
Kine	v0.13.9
SQLite	3.46.1
Etcd	v3.5.18-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.4-k3s1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.20
CoreDNS	v1.12.0
Helm-controller	v0.16.6
Local-path-provisioner	v0.0.31

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.30.9+k3s1: v1.30.9+k3s1

Compare Source

This release updates Kubernetes to v1.30.9, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.8+k3s1:

• Add guardrail for etcd-snapshot (#​11394)
• Backports for 2025-01 (#​11567)
• Add auto import images for containerd image store (#​11561)
• 2025 January Backports (#​11589)
• Load kernel modules for nft in agent setup (#​11597)
• Fix local password validation when bind-address is set (#​11612)
• Update to v1.30.9-k3s1 and Go 1.22.10 (#​11618)
• Remove local restriction for deferred node password validation (#​11650)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.9
Kine	v0.13.5
SQLite	3.46.1
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.4-k3s1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.18
CoreDNS	v1.12.0
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

What's Changed

• [release-1.30] Remove local restriction for deferred node password validation by @​brandond in https://github.com/k3s-io/k3s/pull/11650

Full Changelog: k3s-io/k3s@v1.30.9-rc1+k3s1...v1.30.9+k3s1

v1.30.8+k3s1: v1.30.8+k3s1

Compare Source

This release updates Kubernetes to v1.30.8, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.30.7+k3s1:

• Fix secrets-encrypt reencrypt timeout error (#​11441)
• Remove experimental from embedded-registry flag (#​11445)
• Update coredns to 1.12.0 (#​11455)
• Rework loadbalancer server selection logic (#​11458)
  • The embedded client loadbalancer that handles connectivity to control-plane elements has been extensively reworked for improved performance, reliability, and observability.
• Add node-internal-dns/node-external-dns address pass-through support … (#​11465)
• Update to v1.30.8-k3s1 and Go 1.22.9 (#​11461)

Embedded Component Versions

Component	Version
Kubernetes	v1.30.8
Kine	v0.13.5
SQLite	3.46.1
Etcd	v3.5.16-k3s1
Containerd	v1.7.23-k3s2
Runc	v1.2.1
Flannel	v0.25.7
Metrics-server	v0.7.2
Traefik	v2.11.10
CoreDNS	v1.12.0
Helm-controller	v0.16.5
Local-path-provisioner	v0.0.30

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

---

Configuration

📅 Schedule: Branch creation - "after 4am and before 10am on Monday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.