Update Kubernetes updates (main) (patch)

Sylva Renovate botrequested to merge
renovate/main-patch-kubernetes-updates into main

This MR contains the following updates:

Package Update Change
kubernetes/kubernetes patch 1.30.12 -> 1.30.14
kubernetes/kubernetes patch 1.31.8 -> 1.31.11
kubernetes/kubernetes patch 1.32.5 -> 1.32.7
rancher/rke2 patch 1.30.12+rke2r1 -> 1.30.14+rke2r2
rancher/rke2 patch 1.31.8+rke2r1 -> 1.31.11+rke2r1
rancher/rke2 patch 1.32.5+rke2r1 -> 1.32.7+rke2r1

Release Notes

kubernetes/kubernetes (kubernetes/kubernetes)

v1.30.14: Kubernetes v1.30.14

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

v1.30.13: Kubernetes v1.30.13

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

rancher/rke2 (rancher/rke2)

v1.30.14+rke2r2: v1.30.14+rke2r2

Compare Source

This release updates Kubernetes to v1.30.14.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.14+rke2r1:

  • Use custom golang setup for integration tests (#​8453)
  • Update Canal chart to latest version (#​8532)
  • Bump multus and whereabouts chart (#​8542)
  • Update Kubernetes Metrics Server chart 3.12.203 (#​8558)
  • Bump ingress-nginx to v1.12.4-hardened1 (#​8571)
  • Update shell completion command to new structure (#​8575)
  • Charts: Bump Harvester CSI driver 0.1.24 (#​8504)
      • Support online resize
      • Support external storage
  • Allow for zypper remove 104 code on uninstall (#​8580)
    • Fix snapshot controller backwards compatibility (#​8594)
  • Update flannel chart v0.27.100 (#​8604)
  • Backports for 2025-07 (#​8609)
  • Update K8s to v1.30.14 r2 (#​8622)
  • Bump ingress-nginx to hardened2 (#​8633)
  • Update to cilium v1.17.6 (#​8646)

Charts Versions

Component Version
rke2-cilium 1.17.600
rke2-canal v3.30.2-build2025071100
rke2-calico v3.30.100
rke2-calico-crd v3.30.100
rke2-coredns 1.42.302
rke2-ingress-nginx 4.12.401
rke2-metrics-server 3.12.203
rancher-vsphere-csi 3.3.1-rancher900
rancher-vsphere-cpi 1.9.100
harvester-cloud-provider 0.2.1000
harvester-csi-driver 0.1.2400
rke2-snapshot-controller 4.0.003
rke2-snapshot-controller-crd 4.0.003
rke2-snapshot-validation-webhook 0.0.0

Packaged Component Versions

Component Version
Kubernetes v1.30.14
Etcd v3.5.21-k3s1
Containerd v1.7.27-k3s1
Runc v1.2.6
Metrics-server v0.8.0
CoreDNS v1.12.2
Ingress-Nginx v1.12.4-hardened2
Helm-controller v0.16.13
Available CNIs
Component Version FIPS Compliant
Canal (Default) Flannel v0.27.1
Calico v3.30.2 		Yes
Calico v3.30.1 No
Cilium v1.17.6 No
Multus v4.2.1 No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

v1.30.14+rke2r1: v1.30.14+rke2r1

Compare Source

This release updates Kubernetes to v1.30.14.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.13+rke2r1:

Charts Versions

Component Version
rke2-cilium 1.17.401
rke2-canal v3.30.1-build2025061101
rke2-calico v3.30.100
rke2-calico-crd v3.30.100
rke2-coredns 1.42.302
rke2-ingress-nginx 4.12.201
rke2-metrics-server 3.12.202
rancher-vsphere-csi 3.3.1-rancher900
rancher-vsphere-cpi 1.9.100
harvester-cloud-provider 0.2.1000
harvester-csi-driver 0.1.2300
rke2-snapshot-controller 4.0.002
rke2-snapshot-controller-crd 4.0.002
rke2-snapshot-validation-webhook 0.0.0

Packaged Component Versions

Component Version
Kubernetes v1.30.14
Etcd v3.5.21-k3s1
Containerd v1.7.27-k3s1
Runc v1.2.6
Metrics-server v0.7.2
CoreDNS v1.12.2
Ingress-Nginx v1.12.2-hardened2
Helm-controller v0.16.11
Available CNIs
Component Version FIPS Compliant
Canal (Default) Flannel v0.27.0
Calico v3.30.1 		Yes
Calico v3.30.1 No
Cilium v1.17.4 No
Multus v4.2.1 No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

v1.30.13+rke2r1: v1.30.13+rke2r1

Compare Source

This release updates Kubernetes to v1.30.13.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.30.12+rke2r1:

Charts Versions

Component Version
rke2-cilium 1.17.301
rke2-canal v3.30.0-build2025051500
rke2-calico v3.30.001
rke2-calico-crd v3.30.001
rke2-coredns 1.42.000
rke2-ingress-nginx 4.12.103
rke2-metrics-server 3.12.201
rancher-vsphere-csi 3.3.1-rancher900
rancher-vsphere-cpi 1.9.100
harvester-cloud-provider 0.2.1000
harvester-csi-driver 0.1.2300
rke2-snapshot-controller 4.0.002
rke2-snapshot-controller-crd 4.0.002
rke2-snapshot-validation-webhook 0.0.0

Packaged Component Versions

Component Version
Kubernetes v1.30.13
Etcd v3.5.21-k3s1
Containerd v1.7.27-k3s1
Runc v1.2.6
Metrics-server v0.7.2
CoreDNS v1.12.1
Ingress-Nginx v1.12.1-hardened6
Helm-controller v0.16.10
Available CNIs
Component Version FIPS Compliant
Canal (Default) Flannel v0.26.7
Calico v3.30.0 		Yes
Calico v3.30.0 No
Cilium v1.17.3 No
Multus v4.2.0 No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by Sylva Renovate bot

Merge request reports