k3s - v1.29.2+k3s1

This release updates Kubernetes to v1.29.2, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.29.1+k3s2:

• Bump Local Path Provisioner version (#8953)
• Add ability to install K3s PR Artifact from GitHub (#9185)
• Adds INSTALL_K3S_PR option to install a build of K3s from any open PR with CI approval
• Bump Trivy version (#9237)
• Bump codecov/codecov-action from 3 to 4 (#9353)
• Update stable channel (#9388)
• Fix snapshot reconcile retry (#9318)
• Add check for etcd-snapshot-dir and fix panic in Walk (#9317)
• Bump CNI plugins to v1.4.0 (#9249)
• Fix issue with coredns node hosts controller (#9354)
• Fixed issue that could cause coredns pods to fail to start when the embedded helm controller is disabled, due to the configmap not being updated with node hosts entries.
• Fix on-demand snapshots on ipv6-only nodes (#9247)
• Bump flannel version (#9395)
• Bumped flannel to v0.24.2
• Build: Align drone base images (#8959)
• Changed how lastHeartBeatTime works in the etcd condition (#9263)
• Runtimes refactor using exec.LookPath (#9311)
• Directories containing runtimes need to be included in the $PATH environment variable for effective runtime detection.
• Bump cri-dockerd to fix compat with Docker Engine 25 (#9290)
• Add codcov secret for integration tests on Push (#9422)
• Allow executors to define containerd and cridockerd behavior (#9184)
• Update Kube-router to v2.0.1 (#9396)
• : Test_UnitApplyContainerdQoSClassConfigFileIfPresent (Created) (#8945)
• Readd k3s secrets-encrypt rotate-keys with correct support for KMSv2 GA (#9340)
• Fix iptables check when sbin isn't in user PATH (#9344)
• Don't create NodePasswordValidationFailed event if agent is disabled (#9312)
• The NodePasswordValidationFailed Events will no longer be emitted, if the agent is disabled.
• Expose rootless state dir under ~/.rancher/k3s/rootless (#9308)
• When running k3s in rootless mode, expose rootlesskit's state directory as ~/.rancher/k3s/rootless
• Expose rootless containerd socket directories for external access (#9309)
• Mount k3s rootless containerd & cri-dockerd socket directories to $XDG_RUNTIME_DIR/k3s/containerd and $XDG_RUNTIME_DIR/k3s/cri-dockerd respectively.
• Bump kine and set NotifyInterval to what the apiserver expects (#9349)
• Update Kubernetes to v1.29.2 (#9493)
• Fix drone publish for arm (#9503)
• Remove failing Drone step (#9517)
• Restore original order of agent startup functions (#9539)
• Fix netpol startup when flannel is disabled (#9571)

Embedded Component Versions

| Component | Version |
|---|---|
| Kubernetes | v1.29.2 |
| Kine | v0.11.4 |
| SQLite | 3.44.0 |
| Etcd | v3.5.9-k3s1 |
| Containerd | v1.7.11-k3s2 |
| Runc | v1.1.12-k3s1 |
| Flannel | v0.24.2 |
| Metrics-server | v0.6.3 |
| Traefik | v2.10.5 |
| CoreDNS | v1.10.1 |
| Helm-controller | v0.15.8 |
| Local-path-provisioner | v0.0.26 |

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:
- Open issues here
- Join our Slack channel
- Check out our documentation for guidance on how to get started or to dive deep into K3s.
- Read how you can contribute here