Update Kubernetes updates (release-0.7) (patch)

This MR contains the following updates:

Package	Update	Change
kubernetes/kubernetes	patch	1.33.11 -> 1.33.13
rancher/rke2	patch	1.33.11+rke2r1 -> 1.33.13+rke2r1

---

Release Notes

kubernetes/kubernetes (kubernetes/kubernetes)

v1.33.13

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

v1.33.12

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

rancher/rke2 (rancher/rke2)

v1.31.14+rke2r2: v1.31.14+rke2r2

Compare Source

[!NOTE] v1.31.14+rke2r2 is a Prime-only release.

This release updates Kubernetes to v1.31.14.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.31.14+rke2r1:

• Update CNI to the latest versions (#​9356)
• Update to multus chart version v4.2.305 (#​9361)
• Update to CoreDNS chart 1.45.003 and Kubernetes Metrics Server chart 3.13.004 (#​9371)
• Bump ingress-nginx and vsphere-csi (#​9394)
• Builds broken by rke2-packaging changes (#​9943)
• Update to multus chart v4.2.403 (#​9934)
• Add Prime only changes to release workflow (#​9961)
• Update K8s to v1.31.14-rke2r2-build20260317 (#​9978)

Charts Versions

Component	Version
rke2-cilium	1.18.401
rke2-canal	v3.31.2-build2025120500
rke2-calico	v3.31.200
rke2-calico-crd	v3.31.200
rke2-coredns	1.45.003
rke2-ingress-nginx	4.13.500
rke2-metrics-server	3.13.004
rancher-vsphere-csi	3.5.0-rancher200
rancher-vsphere-cpi	1.12.100
harvester-cloud-provider	0.2.1100
harvester-csi-driver	0.1.2500
rke2-snapshot-controller	4.0.003
rke2-snapshot-controller-crd	4.0.003
rke2-traefik	27.0.204
rke2-traefik-crd	27.0.204

Packaged Component Versions

Component	Version
Kubernetes	v1.31.14
Etcd	v3.5.21-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.3.3
Metrics-server	v0.8.0
CoreDNS	v1.13.1
Ingress-Nginx
Helm-controller	v0.16.16

Available CNIs

Component	Version	FIPS Compliant
Canal (Default)	Flannel v0.27.4 Calico v3.31.2	Yes
Calico	v3.31.2	No
Cilium	v1.18.4	No
Multus	v4.2.4	No

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.