feat(github-release): update k3s-io/k3s to v1.27.1+k3s1

[renovate]

This PR contains the following updates:

Package	Update	Change
k3s-io/k3s	minor	v1.26.3+k3s1 -> v1.27.1+k3s1

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

k3s-io/k3s

v1.27.1+k3s1: v1.27.1+k3s1

Compare Source

This release is K3S's first in the v1.27 line. This release updates Kubernetes to v1.27.1.

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.

Changes since v1.26.4+k3s1:

• Kubernetes 1.27.1 (#​7271)
• V1.27.1 CLI Deprecation (#​7311)
  • --flannel-backed=wireguard has been completely replaced with --flannel-backend=wireguard-native
  • The k3s etcd-snapshot command will now print a help message, to save a snapshot use: k3s etcd-snapshot save
  • The following flags will now cause fatal errors (with full removal coming in v1.28.0):
    • --flannel-backed=ipsec: replaced with --flannel-backend=wireguard-native see docs for more info.
    • Supplying multiple --flannel-backend values is no longer valid. Use --flannel-conf instead.
• Changed command -v redirection for iptables bin check (#​7315)
• Update channel server for april 2023 (#​7327)
• Bump cri-dockerd (#​7347)
• Cleanup help messages (#​7369)

Embedded Component Versions

Component	Version
Kubernetes	v1.27.1
Kine	v0.9.9
SQLite	3.39.2
Etcd	v3.5.7-k3s1
Containerd	v1.6.19-k3s1
Runc	v1.1.5
Flannel	v0.21.4
Metrics-server	v0.6.2
Traefik	v2.9.4
CoreDNS	v1.10.1
Helm-controller	v0.13.3
Local-path-provisioner	v0.0.24

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.26.4+k3s1: v1.26.4+k3s1

Compare Source

This release updates Kubernetes to v1.26.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.26.3+k3s1:

• Enhance k3s check-config (#​7091)
• Update stable channel to v1.25.8+k3s1 (#​7161)
• Drone Pipelines enhancement (#​7169)
• Fix_get_sha_url (#​7187)
• Improve Updatecli local-path-provisioner pipeline (#​7181)
• Improve workflow (#​7142)
• Improve Trivy configuration (#​7154)
• Bump Local Path Provisioner version (#​7167)
  • The bundled local-path-provisioner version has been bumped to v0.0.24
• Bump etcd to v3.5.7 (#​7170)
  • The embedded etcd version has been bumped to v3.5.7
• Bump runc to v1.1.5 (#​7171)
  • The bundled runc version has been bumped to v1.1.5
• Fix race condition caused by etcd advertising addresses that it does not listen on (#​7147)
  • Fixed a race condition during cluster reset that could cause the operation to hang and time out.
• Bump coredns to v1.10.1 (#​7168)
  • The bundled coredns version has been bumped to v1.10.1
• Don't apply hardened args to agent (#​7089)
• Upgrade helm-controller to v0.13.3 (#​7209)
• Improve Klipper Helm and Helm controller bumps (#​7146)
• Fix issue with stale connections to removed LB server (#​7194)
  • The client load-balancer that maintains connections to active server nodes now closes connections to servers when they are removed from the cluster. This ensures that agent components immediately reconnect to a current cluster member.
• Bump actions/setup-go from 3 to 4 (#​7111)
• Lock bootstrap data with empty key to prevent conflicts (#​7215)
  • When using an external datastore, K3s now locks the bootstrap key while creating initial cluster bootstrap data, preventing a race condition when multiple servers attempted to initialize the cluster simultaneously.
• Updated kube-router to move the default ACCEPT rule at the end of the chain (#​7218)
  • The embedded kube-router controller has been updated to fix a regression that caused traffic from pods to be blocked by any default drop/deny rules present on the host. Users should still confirm that any externally-managed firewall rules explicitly allow traffic to/from pod and service networks, but this returns the old behavior that was relied upon by some users.
• Add make commands to terraform automation and fix external dbs related issue (#​7159)
• Update klipper lb to v0.4.2 (#​7210)
• Add coreos and sle micro to selinux support (#​6945)
• Fix call for k3s-selinux versions in airgapped environments (#​7264)
• Update Kube-router ACCEPT rule insertion and install script to clean rules before start (#​7274)
  • The embedded kube-router controller has been updated to fix a regression that caused traffic from pods to be blocked by any default drop/deny rules present on the host. Users should still confirm that any externally-managed firewall rules explicitly allow traffic to/from pod and service networks, but this returns the old behavior that was relied upon by some users.
• Update to v1.26.4-k3s1 (#​7282)
• Bump golang:alpine image version (#​7292)
• Bump Sonobuoy version (#​7256)
• Bump Trivy version (#​7257)

Embedded Component Versions

Component	Version
Kubernetes	v1.26.4
Kine	v0.9.9
SQLite	3.39.2
Etcd	v3.5.7-k3s1
Containerd	v1.6.19-k3s1
Runc	v1.1.5
Flannel	v0.21.4
Metrics-server	v0.6.2
Traefik	v2.9.4
CoreDNS	v1.10.1
Helm-controller	v0.13.3
Local-path-provisioner	v0.0.24

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.