feat!: update k3s-io/k3s to v1.26.0+k3s1

[renovate]

This PR contains the following updates:

Package	Update	Change
k3s-io/k3s	minor	v1.24.8+k3s1 -> v1.25.4+k3s1

---

Release Notes

k3s-io/k3s

v1.25.4+k3s1: v1.25.4+k3s1

Compare Source

This release updates Kubernetes to v1.25.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.25.3+k3s1:

• Add the gateway parameter in netplan (#​6292)
• Bumped dynamiclistener library to v0.3.5 (#​6300)
• Update kube-router to v1.5.1 with extra logging (#​6345)
• Update maintainers (#​6298)
• Bump testing to opensuse Leap 15.4 (#​6337)
• Update E2E docs with more info on ubuntu 22.04 (#​6316)
• Netpol test for podSelector & ingress (#​6247)
• Bump all alpine images to 3.16 (#​6334)
• Bump kine to v0.9.6 / sqlite3 v3.39.2 (CVE-2022-35737) (#​6317)
• Add hardened cluster and upgrade tests (#​6320)
• The bundled Traefik helm chart has been updated to v18.0.0 (#​6353)
• Mark v1.25.3+k3s1 as stable (#​6338)
• The embedded helm controller has been bumped to v0.13.0 (#​6294)
• Fixed an issue that would prevent the deploy controller from handling manifests that include resource types that are no longer supported by the apiserver. (#​6295)
• Replace fedora-coreos with fedora 36 for install tests (#​6315)
• Convert containerd config.toml.tmpl Linux template to v2 syntax (#​6267)
• Add test for node-external-ip config parameter (#​6359)
• Use debugger-friendly compile settings if DEBUG is set (#​6147)
• update e2e tests (#​6354)
• Remove unused vagrant development scripts (#​6395)
• The bundled Traefik has been updated to v2.9.4 / helm chart v18.3.0 (#​6397)
• None (#​6371)
• Fix incorrect defer usage (#​6296)
• Add snapshot restore e2e test (#​6396)
• Fix sonobouy tests on v1.25 (#​6399)
• Bump packaged component versions
• The packaged traefik helm chart has been bumped to v19.0.0, enabling ingressClass support by default.
• The packaged local-path-provisioner has been bumped to v0.0.23
• The packaged coredns has been bumped to v1.9.4 (#​6408)
• log kube-router version when starting netpol controller (#​6405)
• Add Kairos to ADOPTERS (#​6417)
• Update Flannel to 0.20.1 (#​6388)
• Avoid wrong config for flannel-external-ip and add warning if unencrypted backend (#​6403)
• Fix test-mods to allow for pinning version from k8s.io (#​6413)
• Fix for metrics-server in the multi-cloud cluster env (#​6386)
• K3s now indicates specifically which cluster-level configuration flags are out of sync when critical configuration differs between server nodes. (#​6409)
• Convert test output to JSON format (#​6410)
• Pull traefik helm chart directly from GH (#​6468)
• Nightly test fix (#​6475)
• Update to v1.25.4 (#​6477)
• Remove stuff which belongs in the windows executor implementation (#​6492)
• The packaged traefik helm chart has been bumped to 19.0.4 (#​6494)
• Move traefik chart repo again (#​6508)

Embedded Component Versions

Component	Version
Kubernetes	v1.25.4
Kine	v0.9.6
SQLite	3.39.2
Etcd	v3.5.3-k3s1
Containerd	v1.6.8-k3s1
Runc	v1.1.4
Flannel	v0.20.1
Metrics-server	v0.6.1
Traefik	v2.9.4
CoreDNS	v1.9.4
Helm-controller	v0.13.0
Local-path-provisioner	v0.0.23

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.25.3+k3s1: v1.25.3+k3s1

Compare Source

This release updates Kubernetes to v1.25.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.25.2+k3s1:

• E2E: Groundwork for PR runs (#​6131)
• Fix flannel for deployments of nodes which do not belong to the same network and connect using their public IP (#​6180)
• Mark v1.24.6+k3s1 as stable (#​6193)
• Add cluster reset test (#​6161)
• The embedded metrics-server version has been bumped to v0.6.1 (#​6151)
• The ServiceLB (klipper-lb) service controller is now integrated into the K3s stub cloud controller manager. (#​6181)
• Events recorded to the cluster by embedded controllers are now properly formatted in the service logs. (#​6203)
• Fix error dialing backend errors in apiserver network proxy (#​6216)
  • Fixed an issue with the apiserver network proxy that caused kubectl exec to occasionally fail with error dialing backend: EOF
  • Fixed an issue with the apiserver network proxy that caused kubectl exec and kubectl logs to fail when a custom kubelet port was used, and the custom port was blocked by firewall or security group rules.
• Fix the typo in the test (#​6183)
• Use setup-go action to cache dependencies (#​6220)
• Add journalctl logs to E2E tests (#​6224)
• The embedded Traefik version has been bumped to v2.9.1 / chart 12.0.0 (#​6223)
• Fix flakey etcd test (#​6232)
• Replace deprecated ioutil package (#​6230)
• Fix dualStack test (#​6245)
• Add ServiceAccount for svclb pods (#​6253)
• Update to v1.25.3-k3s1 (#​6269)
• Return ProviderID in URI format (#​6284)
• Corrected CCM RBAC to allow for removal of legacy service finalizer during upgrades. (#​6306)
• Added a new --flannel-external-ip flag. (#​6321)
  • When enabled, Flannel traffic will now use the nodes external IPs, instead of internal.
  • This is meant for use with distributed clusters that are not all on the same local network.

Embedded Component Versions

Component	Version
Kubernetes	v1.25.3
Kine	v0.9.3
SQLite	3.36.0
Etcd	v3.5.3-k3s1
Containerd	v1.6.8-k3s1
Runc	v1.1.4
Flannel	v0.19.2
Metrics-server	v0.6.1
Traefik	v2.9.1
CoreDNS	v1.9.1
Helm-controller	v0.12.3
Local-path-provisioner	v0.0.21

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.25.2+k3s1: v1.25.2+k3s1

Compare Source

This release updates Kubernetes to v1.25.2, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.25.0+k3s1:

• Add k3s v1.25 to the release channel (#​6129)
• Restore original INSTALL_K3S_SKIP_DOWNLOAD behavior (#​6130)
• Add K3S Release Documentation (#​6135)
• Update to v1.25.1 (#​6140)
• Update to v1.25.2-k3s1 (#​6168)

Embedded Component Versions

Component	Version
Kubernetes	v1.25.2
Kine	v0.9.3
SQLite	3.36.0
Etcd	v3.5.3-k3s1
Containerd	v1.6.8-k3s1
Runc	v1.1.4
Flannel	v0.19.2
Metrics-server	v0.5.2
Traefik	v2.6.2
CoreDNS	v1.9.1
Helm-controller	v0.12.3
Local-path-provisioner	v0.0.21

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.25.0+k3s1: v1.25.0+k3s1

Compare Source

This release is K3S's first in the v1.25 line. This release updates Kubernetes to v1.25.0.

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.

Important Note: Kubernetes v1.25 removes the beta PodSecurityPolicy admission plugin. Please follow the upstream documentation to migrate from PSP if using the built-in PodSecurity Admission Plugin, prior to upgrading to v1.25.0+k3s1.

Changes since v1.24.4+k3s1:

• Update Kubernetes to v1.25.0 (#​6040)
• Remove --containerd flag from windows kubelet args (#​6028)
• E2E: Add support for CentOS 7 and Rocky 8 (#​6015)
• Convert install tests to run PR build of k3s (#​6003)
• CI: update Fedora 34 -> 35 (#​5996)
• Fix dualStack test and change ipv6 network prefix (#​6023)
• Fix e2e tests (#​6018)
• Update README.md (#​6048)
• Remove wireguard interfaces when deleting the cluster (#​6055)
• Add validation check to confirm correct golang version for Kubernetes (#​6050)
• Expand startup integration test (#​6030)
• Update go.mod version to 1.19 (#​6049)
• Usage of --cluster-secret, --no-deploy, and --no-flannel is no longer supported. Attempts to use these flags will cause fatal errors. See the docs for their replacement. (#​6069)
• Update Flannel version to fix older iptables version issue. (#​6090)
• The bundled version of runc has been bumped to v1.1.4 (#​6071)
• The embedded containerd version has been bumped to v1.6.8-k3s1 (#​6078)
• Fix deprecation message (#​6112)
• Added warning message for flannel backend additional options deprecation (#​6111)

Embedded Component Versions

Component	Version
Kubernetes	v1.25.0
Kine	v0.9.3
SQLite	3.36.0
Etcd	v3.5.3-k3s1
Containerd	v1.5.13-k3s2
Runc	v1.1.3
Flannel	v0.19.1
Metrics-server	v0.5.2
Traefik	v2.6.2
CoreDNS	v1.9.1
Helm-controller	v0.12.3
Local-path-provisioner	v0.0.21

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.24.9+k3s2: v1.24.9+k3s2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
❌ ANSIBLE	ansible-lint	yes		2	14.35s
✅ COPYPASTE	jscpd	yes		no	1.18s
✅ KUBERNETES	kubeval	2		0	0.46s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	secretlint	yes		no	0.97s
✅ YAML	prettier	3		0	0.5s
✅ YAML	yamllint	3		0	0.2s

See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by

[onedr0p]

This will be merged after Calico 3.24.6 is released.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.