feat(github-release): update k3s-io/k3s to v1.35.3+k3s1

[renovate]

This PR contains the following updates:

Package	Update	Change
k3s-io/k3s	minor	v1.34.1+k3s1 → v1.35.3+k3s1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

k3s-io/k3s (k3s-io/k3s)

v1.35.3+k3s1: v1.35.3+k3s1

Compare Source

This release updates Kubernetes to v1.35.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.2+k3s1:

• • Bump to coredns 1.14.2 (#​13757)
• Save cluster state before reencyrpting secrets with newly created key (#​13771)
• Backports for 2026-03 (#​13789)
• Bump runc to v1.4.1 (#​13797)
• Bump Traefik helm chart version (#​13815)
• Bump cni plugins to v1.9.1 (#​13822)
• Simplify snapshot compress/decompress logic (#​13827)
• Update to v1.35.3-k3s1 and Go 1.25.7 (#​13835)
• Chore: Update Trivy version in Dockerfile.dapper (#​13851)
• • Update to flannel v0.28.2 (#​13868)

Embedded Component Versions

Component	Version
Kubernetes	v1.35.3
Kine	v0.14.14
SQLite	3.51.2
Etcd	v3.6.7-k3s1
Containerd	v2.2.2-k3s1
Runc	v1.4.1
Flannel	v0.28.2
Metrics-server	v0.8.1
Traefik	v3.6.10
CoreDNS	v1.14.2
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.35

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.35.2+k3s1: v1.35.2+k3s1

Compare Source

This release updates Kubernetes to v1.35.2, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.1+k3s1:

• Rootlesskit Revert + Test Fixes (#​13689)
• Backports for 2026-02 BONUS RELEASE (#​13690)
• Bump Traefik to v3.6.9 (#​13703)
• Update to v1.35.2-k3s1 and Go 1.25.7 (#​13707)

Embedded Component Versions

Component	Version
Kubernetes	v1.35.2
Kine	v0.14.12
SQLite	3.51.2
Etcd	v3.6.7-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.4.0
Flannel	v0.28.0
Metrics-server	v0.8.1
Traefik	v3.6.9
CoreDNS	v1.14.1
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.34

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.35.1+k3s1: v1.35.1+k3s1

Compare Source

This release updates Kubernetes to v1.35.1, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.0+k3s3:

• Bulk Backports 2026-02 (#​13564)
• Explicitly close mvcc backend to fix high CPU on initial etcd server after restart (#​13570)
• Backports for 2026-02 (#​13580)
• Bump kine for list/watch revision fixes (#​13576)
• Fix VPN node IP not being applied to kubelet (#​13560)
• • Bump to coredns 1.14.1 and metrics-server v0.8.1 (#​13608)
• Add registry prefix to image-list file (#​13602)
• Bump klipper-helm and klipper-lb images (#​13619)
• Fix removal of init node (#​13630)
• Update to v1.35.1-k3s1 and Go 1.25.6 (#​13637)

Embedded Component Versions

Component	Version
Kubernetes	v1.35.1
Kine	v0.14.11
SQLite	3.51.1
Etcd	v3.6.7-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.4.0
Flannel	v0.28.0
Metrics-server	v0.8.1
Traefik	v3.6.7
CoreDNS	v1.14.1
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.34

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.35.0+k3s3: v1.35.0+k3s3

Compare Source

This release updates Kubernetes to v1.35.0, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.0+k3s1:

• Add firewall section to check-config.sh (#​13390)
• Expand docker upgrade test, sunset E2E upgrade test (#​13398)
• Allow k3s secrets-encrypt enable on existing clusters (#​13403)
• Chore: Bump charts - Jan 2025 (#​13420)
• Bump local path provisioner to v0.0.34 (#​13426)
• Backports for 2026-01 (#​13446)
• Bump to coredns 1.14.0 (#​13451)
• Update Traefik version to v3.6.7 (#​13484)
• Bump etcd to v3.6.7 (#​13497)
• Update to v1.35.0-k3s3 (#​13523)
• Fix restart of control-plane-only nodes attempting to reconcile from local datastore (#​13535)

Embedded Component Versions

Component	Version
Kubernetes	v1.35.0
Kine	v0.14.10
SQLite	3.51.1
Etcd	v3.6.7-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.4.0
Flannel	v0.28.0
Metrics-server	v0.8.0
Traefik	v3.6.7
CoreDNS	v1.14.0
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.34

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.35.0+k3s1: v1.35.0+k3s1

Compare Source

This release updates Kubernetes to v1.35.0, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.34.2+k3s1:

• Add id-token (#​13209)
• Fix windows build os (#​13201)
• Tunnel: handle pod IP reuse (#​13212)
  • Fix for clusters with few nodes and a lot of pod churn when webhooks are accessed using egress-selector
• Add multus e2e test (#​13216)
• Fix spegel sharing of imported images (#​13221)
• Bump opencontainers/selinux (#​13253)
• Update channels to 1.33.6 (#​13246)
• Remove remaining references to drone (#​13254)
• Bump actions/checkout from 5 to 6 (#​13256)
• Update busybox image version to 1.37.0 (#​13237)
• Update kube-router to v2.6.2 (#​13280)
• Consolidate test util functions (#​13281)
• Define DefaultHelmJobImage in K3s, overriding what helm-controller defaults to. (#​13258)
• Reorganize Executor interface to make CNI startup part of Executor implementation (#​13262)
• Bump kine and etcd (#​13297)
• Bump runc to v1.4.0 (#​13298)
• Bump kine to v0.14.8 (#​13303)
• Bump kube-router to v2.6.3-k3s1 (#​13304)
• Fix cross-platform image save (#​13311)
• Update to v1.34.3-k3s1 and Go 1.24.11 (#​13308)
• Bump kine to v0.14.9 (#​13314)
• Override DefaultHelmJob at build time (#​13351)
• Fix arm airgap platforms (#​13330)
• Bump actions/upload-artifact from 5 to 6 (#​13348)
• Update to kubernetes v1.35.0 and golang v1.25.5 (#​13334)

Embedded Component Versions

Component	Version
Kubernetes	v1.35.0
Kine	v0.14.9
SQLite	3.50.4
Etcd	v3.6.6-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.4.0
Flannel	v0.27.4
Metrics-server	v0.8.0
Traefik	v3.5.1
CoreDNS	v1.13.1
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.32

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.34.6+k3s1: v1.34.6+k3s1

Compare Source

This release updates Kubernetes to v1.34.6, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.34.5+k3s1:

• • Bump to coredns 1.14.2 (#​13758)
• Save cluster state before reencyrpting secrets with newly created key (#​13772)
• Backports for 2026-03 (#​13790)
• Bump runc to v1.4.1 (#​13798)
• Bump Traefik helm chart version (#​13812)
• Bump cni plugins to v1.9.1 (#​13823)
• Simplify snapshot compress/decompress logic (#​13828)
• Update to v1.34.6-k3s1 and Go 1.24.13 (#​13834)
• Chore: Update Trivy version in Dockerfile.dapper (#​13850)
• • Update to flannel v0.28.2 (#​13869)

Embedded Component Versions

Component	Version
Kubernetes	v1.34.6
Kine	v0.14.14
SQLite	3.51.2
Etcd	v3.6.7-k3s1
Containerd	v2.2.2-bd1.34
Runc	v1.4.1
Flannel	v0.28.2
Metrics-server	v0.8.1
Traefik	v3.6.10
CoreDNS	v1.14.2
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.35

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.34.5+k3s1: v1.34.5+k3s1

Compare Source

This release updates Kubernetes to v1.34.5, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.34.4+k3s1:

• Rootlesskit Revert + Test Fixes (#​13682)
• Backports for 2026-02 BONUS RELEASE (#​13691)
• Bump Traefik to v3.6.9 (#​13702)
• Update to v1.34.5-k3s1 and Go 1.24.13 (#​13706)

Embedded Component Versions

Component	Version
Kubernetes	v1.34.5
Kine	v0.14.12
SQLite	3.51.2
Etcd	v3.6.7-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.4.0
Flannel	v0.28.0
Metrics-server	v0.8.1
Traefik	v3.6.9
CoreDNS	v1.14.1
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.34

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.34.4+k3s1: v1.34.4+k3s1

Compare Source

This release updates Kubernetes to v1.34.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.34.3+k3s3:

• Explicitly close mvcc backend to fix high CPU on initial etcd server after restart (#​13571)
• Backports for 2026-02 (#​13581)
• Bump kine for list/watch revision fixes (#​13577)
• Fix VPN node IP not being applied to kubelet (#​13561)
• Bulk Backports 2026-02 (#​13565)
• • Bump to coredns 1.14.1 and metrics-server v0.8.1 (#​13609)
• Add registry prefix to image-list file (#​13601)
• Bump klipper-helm and klipper-lb images (#​13620)
• Fix removal of init node (#​13631)
• Update to v1.34.4-k3s1 and Go 1.24.12 (#​13636)

Embedded Component Versions

Component	Version
Kubernetes	v1.34.4
Kine	v0.14.11
SQLite	3.51.1
Etcd	v3.6.7-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.4.0
Flannel	v0.28.0
Metrics-server	v0.8.1
Traefik	v3.6.7
CoreDNS	v1.14.1
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.34

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.34.3+k3s3: v1.34.3+k3s3

Compare Source

This release updates Kubernetes to v1.34.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.34.3+k3s1:

• Add firewall section to check-config.sh (#​13391)
• Expand docker upgrade test, sunset E2E upgrade test (#​13399)
• Allow k3s secrets-encrypt enable on existing clusters (#​13404)
• Chore: Bump charts - Jan 2025 (#​13421)
• Bump local path provisioner to v0.0.34 (#​13427)
• Backports for 2026-01 (#​13447)
• Bump to coredns 1.14.0 (#​13452)
• Rootless ports: add support for udp (#​13460)
• Update Traefik version to v3.6.7 (#​13483)
• Bump etcd to v3.6.7 (#​13496)
• Update to v1.34.3-k3s3 and Go 1.24.11 (#​13522)
• Fix restart of control-plane-only nodes attempting to reconcile from local datastore (#​13536)

Embedded Component Versions

Component	Version
Kubernetes	v1.34.3
Kine	v0.14.10
SQLite	3.51.1
Etcd	v3.6.7-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.4.0
Flannel	v0.28.0
Metrics-server	v0.8.0
Traefik	v3.6.7
CoreDNS	v1.14.0
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.34

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.34.3+k3s1: v1.34.3+k3s1

Compare Source

This release updates Kubernetes to v1.34.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.34.2+k3s1:

• Update busybox to 1.37.0 (#​13241)
• Add multus e2e test (#​13264)
• Backports for 2025-12 (#​13251)
  • Add docker dualstack test
  • Fix windows build os
  • Fix for clusters with few nodes and a lot of pod churn when webhooks are accessed using egress-selector
  • Fix spegel sharing of imported images
  • Bump opencontainers/selinux
  • Remove remaining references to drone
  • Bump actions/checkout from 5 to 6
  • Reorganize Executor interface to make CNI startup part of Executor implementation
  • Bump kine and etcd
  • Bump runc to v1.4.0
  • Consolidate test util functions
  • Define DefaultHelmJobImage in K3s, overriding what helm-controller defaults to
  • Bump actions/setup-go from 5 to 6
• Fix tailscale setup in case of an already running configuration (#​13267)
• Update kube-router to v2.6.2 (#​13288)
• Update to v1.34.3-k3s1 and Go 1.24.11 (#​13306)
• Fix cross-platform image save (#​13310)
• Bump kine to v0.14.9 (#​13318)
• Fix arm airgap platforms (#​13331)
• Reuse airgap image release action (#​13337)
• Fix release workflow (#​13339)
• Combine airgap and binary publishing steps (#​13340)
• Validate collected release artifact list before uploading (#​13350)
• Override DefaultHelmJob at build time (#​13361)

Embedded Component Versions

Component	Version
Kubernetes	v1.34.3
Kine	v0.14.9
SQLite	3.50.4
Etcd	v3.6.6-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.4.0
Flannel	v0.27.4
Metrics-server	v0.8.0
Traefik	v3.5.1
CoreDNS	v1.13.1
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.32

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.34.2+k3s1: v1.34.2+k3s1

Compare Source

This release updates Kubernetes to v1.34.2, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.34.1+k3s1:

• Bump traefik to 3.5.1 (#​12957)
• Fix garbled CLI (#​13032)
• Update flannel, kube-router and cni plugins (#​13040)
• Backports for 2025-10 (#​13057)
  • Fix netpol fatal error when changing node IP
  • Bump dynamiclistener for stacked update fix
  • Bump Klipper Helm and Helm Controller version
  • Fix IPv6 handling for loadbalancer addresses
  • Fix multiple issues with server shutdown sequencing
  • Fix etcd member promotion
  • Bump spegel to v0.4.0
  • Fix kine metrics registration without --kine-tls
  • Bump kine to v0.14.2
  • Fix: default forward after override imports
  • Fix handling of vendored dependencies in version script
  • Fix helm controller apiserver address for bootstrap charts on ipv6-only nodes
  • Create dynamic-cert-regenerate file in CA cert rotation handler
  • Fix ability to rotate server token to an invalid format
  • Drop calls to rand.Seed
  • Bump kine for postgres object count fix
  • Bump kine=v0.14.4, etcd=v3.6.5
  • Bump coredns to 1.13.1
• Update dispatch script (#​13078)
• Bump helm-controller/klipper-helm (#​13091)
• Backports for 2025-11 (#​13125)
• Inclusive naming proposal (#​13132)
• Migrate release pipelines into GitHub Actions (#​13119)
• Bump runc to v1.3.3 (#​13144)
• Add Prime assets upload (#​13159)
• More backports for 2025-11 (#​13177)
• Bump klipper-helm and helm-controller (#​13193)
• Update to v1.34.2-k3s1 and Go 1.24.9 (#​13199)
• Add id-token (#​13208)

Embedded Component Versions

Component	Version
Kubernetes	v1.34.2
Kine	v0.14.6
SQLite	3.50.4
Etcd	v3.6.5-k3s1
Containerd	v2.1.5-k3s1
Runc	v1.3.3
Flannel	v0.27.4
Metrics-server	v0.8.0
Traefik	v3.5.1
CoreDNS	v1.13.1
Helm-controller	v0.16.16
Local-path-provisioner	v0.0.32

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ REPOSITORY	git_diff	yes		no	no	0.26s
❌ REPOSITORY	secretlint	yes		1	no	37.15s
⚠️ YAML	prettier	2		1	2	0.5s
❌ YAML	yamllint	2		1	0	0.71s

Detailed Issues

❌ REPOSITORY / secretlint - 1 error

ansible/roles/xanmanning.k3s/documentation/configuration/2-node-ha-ext-datastore.md
  66:22  error  [PostgreSQLConnection] found PostgreSQL connection string: **********************************************************************  @secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-database-connection-string

ansible/roles/xanmanning.k3s/molecule/highavailabilitydb/converge.yml
  11:27  error  [PostgreSQLConnection] found PostgreSQL connection string: ***********************************************************************  @secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-database-connection-string

✖ 2 problems (2 errors, 0 warnings, 0 infos)

❌ YAML / yamllint - 1 error

cluster/apps/system-upgrade/controller/plans/k3s-server.yaml
  27:31     error    no new line character at the end of file  (new-line-at-end-of-file)

⚠️ YAML / prettier - 1 error

Checking formatting...
[warn] cluster/apps/system-upgrade/controller/plans/k3s-server.yaml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository