This release updates Kubernetes to v1.26.6, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.26.5+k3s1:

• Update flannel version (#7648)
• Bump vagrant libvirt with fix for plugin installs (#7658)
• E2E and Dep Backports - June (#7693)
  • Bump docker go.mod #7681
  • Shortcircuit commands with version or help flags #7683
  • Add Rotation certification Check, remove func to restart agents #7097
  • E2E: Sudo for RunCmdOnNode #7686
• VPN integration (#7727)
• E2e: Private registry test (#7721)
• Fix spelling check (#7751)
• Remove unused libvirt config (#7757)
• Backport version bumps and bugfixes (#7717)
  • The bundled metrics-server has been bumped to v0.6.3, and now uses only secure TLS ciphers by default.
  • The coredns-custom ConfigMap now allows for *.override sections to be included in the .:53 default server block.
  • The K3s core controllers (supervisor, deploy, and helm) no longer use the admin kubeconfig. This makes it easier to determine from access and audit logs which actions are performed by the system, and which are performed by an administrative user.
  • Bumped klipper-lb image to v0.4.4 to resolve an issue that prevented access to ServiceLB ports from localhost when the Service ExternalTrafficPolicy was set to Local.
  • Make LB image configurable when compiling k3s
  • K3s now allows nodes to join the cluster even if the node password secret cannot be created at the time the node joins. The secret create will be retried in the background. This resolves a potential deadlock created by fail-closed validating webhooks that block secret creation, where the webhook is unavailable until new nodes join the cluster to run the webhook pod.
  • The bundled containerd's aufs/devmapper/zfs snapshotter plugins have been restored. These were unintentionally omitted when moving containerd back into the k3s multicall binary in the previous release.
  • The embedded helm controller has been bumped to v0.15.0, and now supports creating the chart's target namespace if it does not exist.
• Add format command on makefile (#7762)
• Fix logging and cleanup in Tailscale (#7782)
• Update Kubernetes to v1.26.6 (#7789)

Embedded Component Versions

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here