Skip to main content

v1.35.X

Upgrade Notice

Before upgrading from earlier releases, be sure to read the Kubernetes Urgent Upgrade Notes.

VersionRelease dateKubernetesKineSQLiteEtcdContainerdRuncFlannelMetrics-serverTraefikCoreDNSHelm-controllerLocal-path-provisioner
v1.35.5+k3s1May 20 2026v1.35.5v0.15.03.53.0v3.6.7-k3s1v2.2.3-k3s1v1.4.2v0.28.4v0.8.1v3.6.13v1.14.3v0.17.1v0.0.36
v1.35.4+k3s1Apr 27 2026v1.35.4v0.14.163.51.3v3.6.7-k3s1v2.2.3-k3s1v1.4.2v0.28.4v0.8.1v3.6.13v1.14.2v0.17.1v0.0.35
v1.35.3+k3s1Mar 28 2026v1.35.3v0.14.143.51.2v3.6.7-k3s1v2.2.2-k3s1v1.4.1v0.28.2v0.8.1v3.6.10v1.14.2v0.16.17v0.0.35
v1.35.2+k3s1Mar 04 2026v1.35.2v0.14.123.51.2v3.6.7-k3s1v2.1.5-k3s1v1.4.0v0.28.0v0.8.1v3.6.9v1.14.1v0.16.17v0.0.34
v1.35.1+k3s1Feb 12 2026v1.35.1v0.14.113.51.1v3.6.7-k3s1v2.1.5-k3s1v1.4.0v0.28.0v0.8.1v3.6.7v1.14.1v0.16.17v0.0.34
v1.35.0+k3s3Feb 03 2026v1.35.0v0.14.103.51.1v3.6.7-k3s1v2.1.5-k3s1v1.4.0v0.28.0v0.8.0v3.6.7v1.14.0v0.16.17v0.0.34
v1.35.0+k3s1Dec 23 2025v1.35.0v0.14.93.50.4v3.6.6-k3s1v2.1.5-k3s1v1.4.0v0.27.4v0.8.0v3.5.1v1.13.1v0.16.17v0.0.32

Release v1.35.5+k3s1​

This release updates Kubernetes to v1.35.5, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.4+k3s1:​

  • Backports for 2026-05 (#14033)
  • Update rancher/local-path-provisioner image version (#14043)
  • Update to v1.35.5-k3s1 and Go 1.25.9 (#14050)
  • Bump klipper-helm image tag (#14056)

Release v1.35.4+k3s1​

This release updates Kubernetes to v1.35.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.3+k3s1:​

  • Immutable release changes (#13901)
  • Backports for 2026-04 (#13929)
  • Bump flannel to v0.28.4 (#13939)
  • Bump traefik to 3.6.12 (#13928)
  • Update to v1.35.4-k3s1 and Go 1.25.9 (#13945)
  • Switch from draft to pre-release (#13950)
  • Bump Traefik to 3.6.13 (#13969) (#13970)
  • Fix SANs added from comma-separated node-external-ip list (#13990)
  • Bump klipper-helm image for revision check fix (#13996)

Release v1.35.3+k3s1​

This release updates Kubernetes to v1.35.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.2+k3s1:​

  • Bump to coredns 1.14.2 (#13757)
  • Save cluster state before reencrypting secrets with newly created key (#13771)
  • Backports for 2026-03 (#13789)
  • Bump runc to v1.4.1 (#13797)
  • Bump Traefik helm chart version (#13815)
  • Bump cni plugins to v1.9.1 (#13822)
  • Simplify snapshot compress/decompress logic (#13827)
  • Update to v1.35.3-k3s1 and Go 1.25.7 (#13835)
  • Chore: Update Trivy version in Dockerfile.dapper (#13851)
  • Update to flannel v0.28.2 (#13868)

Release v1.35.2+k3s1​

This release updates Kubernetes to v1.35.2, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.1+k3s1:​

  • Rootlesskit Revert + Test Fixes (#13689)
  • Backports for 2026-02 BONUS RELEASE (#13690)
  • Bump Traefik to v3.6.9 (#13703)
  • Update to v1.35.2-k3s1 and Go 1.25.7 (#13707)

Release v1.35.1+k3s1​

This release updates Kubernetes to v1.35.1, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.0+k3s3:​

  • Bulk Backports 2026-02 (#13564)
  • Explicitly close mvcc backend to fix high CPU on initial etcd server after restart (#13570)
  • Backports for 2026-02 (#13580)
  • Bump kine for list/watch revision fixes (#13576)
  • Fix VPN node IP not being applied to kubelet (#13560)
  • Bump to coredns 1.14.1 and metrics-server v0.8.1 (#13608)
  • Add registry prefix to image-list file (#13602)
  • Bump klipper-helm and klipper-lb images (#13619)
  • Fix removal of init node (#13630)
  • Update to v1.35.1-k3s1 and Go 1.25.6 (#13637)

Release v1.35.0+k3s3​

This release updates Kubernetes to v1.35.0, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.0+k3s1:​

  • Add firewall section to check-config.sh (#13390)
  • Expand docker upgrade test, sunset E2E upgrade test (#13398)
  • Allow k3s secrets-encrypt enable on existing clusters (#13403)
  • Chore: Bump charts - Jan 2025 (#13420)
  • Bump local path provisioner to v0.0.34 (#13426)
  • Backports for 2026-01 (#13446)
  • Bump to coredns 1.14.0 (#13451)
  • Update Traefik version to v3.6.7 (#13484)
  • Bump etcd to v3.6.7 (#13497)
  • Update to v1.35.0-k3s3 (#13523)
  • Fix restart of control-plane-only nodes attempting to reconcile from local datastore (#13535)

Release v1.35.0+k3s1​

This release updates Kubernetes to v1.35.0, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.34.1+k3s1:​

  • Move data dir into position before creating CNI symlinks (#12871)
  • Fix netpol fatal error when changing node IP (#12891)
  • Bump dynamiclistener for stacked update fix (#12840)
  • Remove NetworkManager check for nm-cloud.service (#12889)
    • K3s can now deploy with nm-cloud-setup.service
  • Improve testing for cis-1.11 (#12912)
  • Fix IPv6 handling for loadbalancer addresses (#12921)
  • Fix multiple issues with server shutdown sequencing (#12913)
  • Fix CLI Help (#12899)
  • Fix etcd member promotion (#12938)
  • Fix install script raspi cmdline message (#12842)
    • Updated error message for memory cgroup detection to reference the correct cmdline.txt location (/boot/firmware/cmdline.txt) on Raspberry Pi running Raspberry Pi OS Bookworm or later.
  • Inclusive naming proposal (issue: #12110, Orlin Vasiliev) (#12383)
  • Bump spegel to v0.4.0 (#12943)
  • Fix kine metrics registration without --kine-tls (#12956)
  • Bump traefik to 3.5.1 (#12948)
  • Fix: default forward after override imports (#12980)
  • Fix handling of vendored dependencies in version script (#12993)
  • Fix helm controller apiserver address for bootstrap charts on ipv6-only nodes (#12990)
  • Create dynamic-cert-regenerate file in CA cert rotation handler (#12978)
  • Fix ability to rotate server token to an invalid format (#12989)
  • Drop calls to rand.Seed (#13014)
  • Create policy hint only when all variables defined (#12851)
  • Bump coredns to 1.13.1 (#12976)
  • Cleanup wording and decisions on various ADRs (#13068)
  • Postgresql nightly (#13069)
  • Rootless ports: add support for udp (#13073)
  • Update dispatch script (#13079)
  • Add docker dualstack test (#13070)
  • Fix invalid replaced versions (#13089)
  • Fix multiple issues with node controller and password secret cleanup (#13095)
  • Don't look at head for upgrade channel (#13130)
  • Bump remotedialer to fix deadlock on connection close (#13150)
  • Bump containerd to v2.1.5 (#13162)
  • Fix adding OwnerReferences to Nodes seen from initial list (#13164)
  • Add Prime assets upload (#13160)
  • Fix apiserver starting before remote etcd is up (#13165)
  • Fix tailscale setup in case of an already running configuration (#13106)
  • Bump klipper-helm and helm-controller (#13187)
  • Update to v1.34.2-k3s1 and Go 1.24.9 (#13204)
  • Fix windows build os (#13201)
  • Tunnel: handle pod IP reuse (#13212)
    • Fix for clusters with few nodes and a lot of pod churn when webhooks are accessed using egress-selector
  • Fix spegel sharing of imported images (#13221)
  • Bump opencontainers/selinux (#13253)
  • Remove remaining references to drone (#13254)
  • Update busybox image version to 1.37.0 (#13237)
  • Consolidate test util functions (#13281)
  • Define DefaultHelmJobImage in K3s, overriding what helm-controller defaults to. (#13258)
  • Reorganize Executor interface to make CNI startup part of Executor implementation (#13262)
  • Bump kine and etcd (#13297)
  • Bump runc to v1.4.0 (#13298)
  • Bump kube-router to v2.6.3-k3s1 (#13304)
  • Fix cross-platform image save (#13311)
  • Bump kine to v0.14.9 (#13314)
  • Override DefaultHelmJob at build time (#13351)
  • Fix arm airgap platforms (#13330)
  • Update to kubernetes v1.35.0 and golang v1.25.5 (#13334)