RKE2 - v1.24.17+rke2r1

Security

This release updates Kubernetes to v1.24.17, and fixes a number of issues.

Important Note

If your server (control-plane) nodes were not started with the --token CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.

You may retrieve the token value from any server already joined to the cluster:

cat /var/lib/rancher/rke2/server/token

Changes since v1.24.16+rke2r1:

  • Sync Felix and calico-node datastore (#4578)
  • Update Calico and Flannel on Canal (#4566)
  • Update cilium to v1.14.0 (#4587)
  • Update to whereabouts v0.6.2 (#4593)
  • Windows fixes (#4674)
  • Bumping k3s version 1.24 (#4680)
  • Version bumps and backports for 2023-08 release (#4687)
  • Updated the embedded containerd to v1.7.3+k3s1
  • Updated the embedded runc to v1.1.8
  • Updated the embedded etcd to v3.5.9+k3s1
  • Security bump to docker/distribution
  • Fix static pod UID generation and cleanup
  • Fix default server address for rotate-ca command
  • Upgrade multus chart to v4.0.2-build2023081100 (#4682)
  • Update to 1.24.17 (#4689)
  • Bump K3s version for v1.24 (#4704)
  • Added a new --tls-san-security option. This flag defaults to false, but can be set to true to disable automatically adding SANs to the server's TLS certificate to satisfy any hostname requested by a client.
  • Add additional static pod cleanup during cluster reset (#4727)

Packaged Component Versions

| Component | Version |
| --------------- | --------------------------------------------------------------------------------------------------- |
| Kubernetes | v1.24.17 |
| Etcd | v3.5.9-k3s1 |
| Containerd | v1.7.3-k3s1 |
| Runc | v1.1.8 |
| Metrics-server | v0.6.3 |
| CoreDNS | v1.10.1 |
| Ingress-Nginx | 4.6.1 |
| Helm-controller | v0.15.4 |

Available CNIs

| Component | Version | FIPS Compliant |
| --------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------- |
| Canal (Default) | Flannel v0.22.1
Calico v3.26.1 | Yes |
| Calico | v3.26.1 | No |
| Cilium | v1.14.0 | No |
| Multus | v4.0.2 | No |

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:
- Open issues here
- Join our Slack channel
- Check out our documentation for guidance on how to get started.


Security

Security wording was detected, but no CVEs were found.

Details

date
Sept. 6, 2023, 6:29 p.m.
name
v1.24.17+rke2r1
type
Patch
👇
Register or login to:
  • 🔍View and search all RKE2 releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or