Update Kubernetes updates (patch)

Sylva Renovate botrequested to merge
renovate/patch-kubernetes-updates into main

This MR contains the following updates:

Package Update Change
kubernetes/kubernetes patch 1.29.10 -> 1.29.11
kubernetes/kubernetes patch 1.30.6 -> 1.30.7
rancher/rke2 patch 1.29.10+rke2r1 -> 1.29.11+rke2r1
rancher/rke2 patch 1.30.6+rke2r1 -> 1.30.7+rke2r1

Release Notes

kubernetes/kubernetes (kubernetes/kubernetes)

v1.29.11: Kubernetes v1.29.11

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

rancher/rke2 (rancher/rke2)

v1.29.11+rke2r1: v1.29.11+rke2r1

Compare Source

This release updates Kubernetes to v1.29.11.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.29.10+rke2r1:

  • Backport E2E GHA fixes (#​7178)
  • Bump multus, cilium and flannel charts (#​7200)
  • Bump ingress-nginx to v1.10.5-hardened4 (#​7187)
  • Bump canal chart to v3.29.0 (#​7219)
  • Bump rke2-calico to v3.29.0 (#​7237)
  • Backport missing E2E MRs (#​7205)
    • Refactor run_tests.sh script
    • Update to newer OS images for install testing
    • Add cleanup to e2e tests in vagrant env
    • Add e2e validation test for kine
  • Bump vSphere CSI/CPI charts to 1.9.1 and 3.3.1-rancher700 (#​7250)
  • Update Flannel to v0.26.1 (#​7259)
  • Fix e2e ci by ignoring FOG warnings (#​7270)
  • Bump rke2-coredns to 1.33.005 (#​7275)
  • Backports for 2024-11 (#​7291)
    • Bump etcd to 3.5.16
    • Bump containerd to v1.7.23
    • Fix issue on nodes with large datastores and slow disk that would cause RKE2 to fail to start due to the etcd defrag timing out after 30 seconds.
    • Fix issue where RKE2 killall script could remove data from pod volumes that failed to unmount correctly
  • Restore AWS node-name support and add IMDSv2 support (#​7356)
  • Update upstream and go versions (#​7318)
  • Bump containerd for image rewrite fix (#​7379)
    • Bump containerd to v1.7.23-k3s2

Charts Versions

Component Version
rke2-cilium 1.16.303
rke2-canal v3.29.0-build2024110400
rke2-calico v3.29.000
rke2-calico-crd v3.29.000
rke2-coredns 1.33.005
rke2-ingress-nginx 4.10.502
rke2-metrics-server 3.12.004
rancher-vsphere-csi 3.3.1-rancher700
rancher-vsphere-cpi 1.9.100
harvester-cloud-provider 0.2.600
harvester-csi-driver 0.1.2000
rke2-snapshot-controller 3.0.601
rke2-snapshot-controller-crd 3.0.601
rke2-snapshot-validation-webhook 1.9.001

Packaged Component Versions

Component Version
Kubernetes v1.29.11
Etcd v3.5.16-k3s1
Containerd v1.7.23-k3s2
Runc v1.1.14
Metrics-server v0.7.1
CoreDNS v1.11.3
Ingress-Nginx v1.10.5-hardened4
Helm-controller v0.15.15
Available CNIs
Component Version FIPS Compliant
Canal (Default) Flannel v0.26.0
Calico v3.29.0 		Yes
Calico v3.29.0 No
Cilium v1.16.3 No
Multus v4.1.3 No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by Thomas Morin

Merge request reports