メインコンテンツまでスキップ

v1.37.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.

VersionRelease dateKubernetesKineSQLiteEtcdContainerdRuncFlannelMetrics-serverTraefikCoreDNSHelm-controllerLocal-path-provisioner
v1.37.1+k3s1Sep 30 2026v1.37.1v0.17.13.53.4v3.7.1-k3s3v2.3.4-k3s1v1.4.2v0.28.4v0.9.0v3.7.13v1.14.7v0.17.9v0.0.37
v1.37.0+k3s1Sep 14 2026v1.37.0v0.17.03.53.4v3.7.1-k3s1v2.3.4-k3s1v1.4.2v0.28.4v0.9.0v3.7.13v1.14.7v0.17.7v0.0.37

Release v1.37.1+k3s1​

This release updates Kubernetes to v1.37.1, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.37.0+k3s1:​

  • Backports for 2026-09 (#14631)
    • Fix restore from compressed etcd snapshot #14528
    • Enable seccomp in riscv64 builds #14529
    • Use ginkgo CLI to run tests #14531
    • Bump k3s-io/api to v0.2.0 #14570
    • Servicelb multiple lbpools #14547
    • Close minio.Object after read #14580
    • Bump k3s-io/apis again #14589
    • Fix --flannel-cni-conf not reaching the embedded flannel #14598
    • Check-config: suppress colors when stdout is not a terminal #14595
    • Fix deploy controller not re-applying manifests when mtime is pinned to the epoch #14568
    • Bump etcd to v3.7.1-k3s3 for nonblocking logging support #14628
    • Bump kine to v0.17.1 #14627
  • Bump helm-controller (#14684)
  • Bump k3s-io/kubernetes and Go references (#14695)
  • Bump cadvisor to v0.60.5-k3s1 (#14698)
  • Reject anonymous access to supervisor router (spegel/pprof/metrics) (#14701)
  • Improve CA hash validation (#14705)

Release v1.37.0+k3s1​

This release updates Kubernetes to v1.37.0, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.36.3+k3s1:​

  • Bump mirrored-pause to 3.10.2 (#14339)
  • Build(deps): bump the action-deps group with 14 updates (#14394)
  • Bump dynamiclistener for atomic write fix (#14382)
  • Bump helm-controller/klipper-helm (#14403)
  • Simplify WriteSubnetFile cleanup and make atomic (#14405)
  • Fix typo in snapshot prune event (#14410)
  • Bump rancher/mirrored-coredns-coredns image version (#14415)
  • Add updatecli manifest to bump Kubernetes across multiple release branches (#14402)
  • Bump metrics-server to v0.9.0 (#14416)
  • Updatecli: relax metrics-server semver filter et al. (#14429)
  • Updatecli: add missing requiredEnv (#14434)
  • Bump helm-controller and klipper-helm for --force-conflicts support (#14446)
  • Bump k3s-io/kubernetes and Go references (#14457)
  • Bump etcd to v3.6.14 (#14460)
  • Fix production builds always enabling Go coverage instrumentation (#14465)
  • Feat: support custom kubeconfig name (#14440)
    • Added --write-kubeconfig-name server flag to set the name for cluster, user and context in generated kubeconfig.
  • Require node password informer sync before using cache (#14459)
  • Bump helm-controller and klipper-helm (#14474)
  • Enable unit tests (#14480)
  • Fix: change sles to use slemicro rpms instead of microos (#14472)
  • Tests: make rootless uidmap install robust against stale apt cache (#14490)
  • Update stable channel to v1.36.3+k3s1 (#14492)
  • Etcd client locking (#14488)
  • Tests: Install rke2-multus-crd chart for multus e2e test (#14489)
  • Filter large untemplated issues (#14435)
  • Fix typo in spegel deferred store comment (#14485)
  • Make explicit where coredns customizations should be made (#14503)
  • Bump docker version in CI to 29 (#14506)
  • Don't retag images for a registry they are already hosted by (#14484)
    • Fixed an issue where airgap image imports could fail with an "already exists" error, or accumulate duplicate image tags on every restart, when system-default-registry matched the registry the images were already tagged for.
  • Tidy dockerfile and build stages (#14511)
  • Add advertise-address to SANs before generating apiserver cert (#14516)
    • Fixed the apiserver serving certificate not including the value of --advertise-address in its subject alternative names.
  • Bump Local Path Provisioner version (#14496)
  • Bump containerd to v2.3.4-k3s1.36 (#14510)
  • Bump kine to v0.16.4 for nats replay fix (#14521)
  • Feat: Add Project Bluefin to adopters list (#14549)
  • Bump k8s to v1.37 (#14509)
  • Bump Traefik and bundle gateway-api crds (#14573)
  • Bump rancher/mirrored-coredns-coredns image version (#14577)
  • Bump critools to v1.37 (#14579)
  • Bump gateway-api-crd version 3, which includes the keep annotation (#14586)
  • Bump Traefik to v3.7.13 (#14606)
  • Bump google.golang.org/grpc to v1.83.2 for CVE-2026-84445 (#14614)
  • Bump google.golang.org/grpc to v1.83.2, not v1.82.2 (#14619)