v1.28.6+k3s2

This release updates Kubernetes to v1.28.6, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Important Notes

Addresses the runc CVE: CVE-2024-21626 by updating runc to v1.1.12.

Changes since v1.28.5+k3s1:

• Add a retry around updating a secrets-encrypt node annotations (#9125)
• Wait for taint to be gone in the node before starting the netpol controller (#9175)
• Etcd condition (#9181)
• Backports for 2024-01 (#9203)
• Pin opa version for missing dependency chain (#9216)
• Added support for env *_PROXY variables for agent loadbalancer (#9206)
• Etcd node is nil (#9228)
• Update to v1.28.6 and Go 1.20.13 (#9260)
• Use ipFamilyPolicy: RequireDualStack for dual-stack kube-dns (#9269)
• Backports for 2024-01 k3s2 (#9336)
  • Bump runc to v1.1.12 and helm-controller to v0.15.7
  • Fix handling of bare hostname or IP as endpoint address in registries.yaml
• Bump helm-controller to fix issue with ChartContent (#9346)

Embedded Component Versions

Component	Version
Kubernetes	v1.28.6
Kine	v0.11.0
SQLite	3.42.0
Etcd	v3.5.9-k3s1
Containerd	v1.7.11-k3s2
Runc	v1.1.12-k3s1
Flannel	v0.22.2
Metrics-server	v0.6.3
Traefik	v2.10.5
CoreDNS	v1.10.1
Helm-controller	v0.15.8
Local-path-provisioner	v0.0.24

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here