fix(github-release): update dependency k3s-io/k3s to v1.28.4+k3s1

[henry-pa-bot[bot]]

This PR contains the following updates:

Package	Update	Change
k3s-io/k3s	patch	1.28.2+k3s1 -> 1.28.4+k3s1

---

Release Notes

k3s-io/k3s (k3s-io/k3s)

v1.28.4+k3s1: v1.28.4+k3s1

Compare Source

This release updates Kubernetes to v1.28.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.28.3+k3s2:

• Update channels latest to v1.27.7+k3s2 (#​8799)
• Add etcd status condition (#​8724)
  • Now the user can see the etcd status from each node in a simple way
• ADR for etcd status (#​8355)
• Wasm shims detection (#​8751)
  • Automatic discovery of WebAssembly runtimes
• Add warning for removal of multiclustercidr flag (#​8758)
• Improve dualStack log (#​8798)
• Optimize: Simplify and clean up Dockerfile (#​8244)
• Add: timezone info in image (#​8764)
  • • New timezone info in Docker image allows the use of spec.timeZone in CronJobs
• Bump kine to fix nats, postgres, and watch issues (#​8778)
  • Bumped kine to v0.11.0 to resolve issues with postgres and NATS, fix performance of watch channels under heavy load, and improve compatibility with the reference implementation.
• QoS-class resource configuration (#​8726)
  • Containerd may now be configured to use rdt or blockio configuration by defining rdt_config.yaml or blockio_config.yaml files.
• Add agent flag disable-apiserver-lb (#​8717)
  • Add agent flag disable-apiserver-lb, agent will not start load balance proxy.
• Force umount for NFS mount (like with longhorn) (#​8521)
• General updates to README (#​8786)
• Fix wrong warning from restorecon in install script (#​8871)
• Fix issue with snapshot metadata configmap (#​8835)
  • Omit snapshot list configmap entries for snapshots without extra metadata
• Skip initial datastore reconcile during cluster-reset (#​8861)
• Tweaked order of ingress IPs in ServiceLB (#​8711)
  • Improved ingress IP ordering from ServiceLB
• Disable helm CRD installation for disable-helm-controller (#​8702)
• More improves for K3s patch release docs (#​8800)
• Update install.sh sha256sum (#​8885)
• Add jitter to client config retry to avoid hammering servers when they are starting up (#​8863)
• Handle nil pointer when runtime core is not ready in etcd (#​8886)
• Bump dynamiclistener; reduce snapshot controller log spew (#​8894)
  • Bumped dynamiclistener to address a race condition that could cause a server to fail to sync its certificates into the Kubernetes secret
  • Reduced etcd snapshot log spam during initial cluster startup
• Remove depends_on for e2e step; fix cert rotate e2e (#​8906)
• Fix etcd snapshot S3 issues (#​8926)
  • Don't apply S3 retention if S3 client failed to initialize
  • Don't request metadata when listing S3 snapshots
  • Print key instead of file path in snapshot metadata log message
• Update to v1.28.4 and Go to v1.20.11 (#​8920)

Embedded Component Versions

Component	Version
Kubernetes	v1.28.4
Kine	v0.11.0
SQLite	3.42.0
Etcd	v3.5.9-k3s1
Containerd	v1.7.7-k3s1
Runc	v1.1.8
Flannel	v0.22.2
Metrics-server	v0.6.3
Traefik	v2.10.5
CoreDNS	v1.10.1
Helm-controller	v0.15.4
Local-path-provisioner	v0.0.24

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.28.4+k3s2: v1.28.4+k3s2

Compare Source

This release updates Kubernetes to v1.28.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.28.3+k3s2:

• Update channels latest to v1.27.7+k3s2 (#​8799)
• Add etcd status condition (#​8724)
  • Now the user can see the etcd status from each node in a simple way
• ADR for etcd status (#​8355)
• Wasm shims detection (#​8751)
  • Automatic discovery of WebAssembly runtimes
• Add warning for removal of multiclustercidr flag (#​8758)
• Improve dualStack log (#​8798)
• Optimize: Simplify and clean up Dockerfile (#​8244)
• Add: timezone info in image (#​8764)
  • • New timezone info in Docker image allows the use of spec.timeZone in CronJobs
• Bump kine to fix nats, postgres, and watch issues (#​8778)
  • Bumped kine to v0.11.0 to resolve issues with postgres and NATS, fix performance of watch channels under heavy load, and improve compatibility with the reference implementation.
• QoS-class resource configuration (#​8726)
  • Containerd may now be configured to use rdt or blockio configuration by defining rdt_config.yaml or blockio_config.yaml files.
• Add agent flag disable-apiserver-lb (#​8717)
  • Add agent flag disable-apiserver-lb, agent will not start load balance proxy.
• Force umount for NFS mount (like with longhorn) (#​8521)
• General updates to README (#​8786)
• Fix wrong warning from restorecon in install script (#​8871)
• Fix issue with snapshot metadata configmap (#​8835)
  • Omit snapshot list configmap entries for snapshots without extra metadata
• Skip initial datastore reconcile during cluster-reset (#​8861)
• Tweaked order of ingress IPs in ServiceLB (#​8711)
  • Improved ingress IP ordering from ServiceLB
• Disable helm CRD installation for disable-helm-controller (#​8702)
• More improves for K3s patch release docs (#​8800)
• Update install.sh sha256sum (#​8885)
• Add jitter to client config retry to avoid hammering servers when they are starting up (#​8863)
• Handle nil pointer when runtime core is not ready in etcd (#​8886)
• Bump dynamiclistener; reduce snapshot controller log spew (#​8894)
  • Bumped dynamiclistener to address a race condition that could cause a server to fail to sync its certificates into the Kubernetes secret
  • Reduced etcd snapshot log spam during initial cluster startup
• Remove depends_on for e2e step; fix cert rotate e2e (#​8906)
• Fix etcd snapshot S3 issues (#​8926)
  • Don't apply S3 retention if S3 client failed to initialize
  • Don't request metadata when listing S3 snapshots
  • Print key instead of file path in snapshot metadata log message
• Update to v1.28.4 and Go to v1.20.11 (#​8920)
• Remove s390x steps temporarily since runners are disabled (#​8983)
• Remove s390x from manifest (#​8998)

Embedded Component Versions

Component	Version
Kubernetes	v1.28.4
Kine	v0.11.0
SQLite	3.42.0
Etcd	v3.5.9-k3s1
Containerd	v1.7.7-k3s1
Runc	v1.1.8
Flannel	v0.22.2
Metrics-server	v0.6.3
Traefik	v2.10.5
CoreDNS	v1.10.1
Helm-controller	v0.15.4
Local-path-provisioner	v0.0.24

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.28.3+k3s1: v1.28.3+k3s1

Compare Source

This release updates Kubernetes to v1.28.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.28.2+k3s1:

• Fix error reporting (#​8250)
• Add context to flannel errors (#​8284)
• Update channel, September patch release (#​8397)
• Add missing link to drone in documentation (#​8295)
• Include the interface name in the error message (#​8346)
• Add extraArgs to vpn provider (#​8354)
  • Allow to pass extra args to the vpn provider
• Disable HTTP on main etcd client port (#​8402)
  • Embedded etcd no longer serves http requests on the client port, only grpc. This addresses a performance issue that could cause watch stream starvation under load. For more information, see https://github.com/etcd-io/etcd/issues/15402
• Server token rotation (#​8215)
• Fix issues with etcd member removal after reset (#​8392)
  • Fixed an issue that could cause k3s to attempt to remove members from the etcd cluster immediately following a cluster-reset/restore, if they were queued for removal at the time the snapshot was taken.
• Fix gofmt error (#​8439)
• Added advertise address integration test (#​8344)
• Added cluster reset from non bootstrap nodes on snapshot restore e2e test (#​8292)
• Fix .github regex to skip drone runs on gh action bumps (#​8433)
• Added error when cluster reset while using server flag (#​8385)
  • The user will receive a error when --cluster-reset with the --server flag
• Update kube-router (#​8423)
  • Update kube-router to v2.0.0-rc7 to fix performance issues
• Add SHA256 signatures of the install script (#​8312)
  • • Add SHA256 signatures of the install script.
• Add --image-service-endpoint flag (#​8279)
  • Add --image-service-endpoint flag to specify an external image service socket.
• Don't ignore assets in home dir if system assets exist (#​8458)
• Pass SystemdCgroup setting through to nvidia runtime options (#​8470)
  • Fixed issue that would cause pods using nvidia container runtime to be killed after a few seconds, when using newer versions of nvidia-container-toolkit.
• Improve release docs - updated (#​8414)
• Take IPFamily precedence based on order (#​8460)
• Fix spellcheck problem (#​8507)
• Network defaults are duplicated, remove one (#​8523)
• Fix slemicro check for selinux (#​8526)
• Update install.sh.sha256sum (#​8566)
• System agent push tags fix (#​8568)
• Fixed tailscale node IP dualstack mode in case of IPv4 only node (#​8524)
• Server Token Rotation (#​8265)
  • Users can now rotate the server token using k3s token rotate -t <OLD_TOKEN> --new-token <NEW_TOKEN>. After command succeeds, all server nodes must be restarted with the new token.
• E2E Domain Drone Cleanup (#​8579)
• Bump containerd to v1.7.7-k3s1 (#​8604)
• Bump busybox to v1.36.1 (#​8602)
• Migrate to using custom resource to store etcd snapshot metadata (#​8064)
• Switch build target from main.go to a package. (#​8342)
• Use IPv6 in case is the first configured IP with dualstack (#​8581)
• Bump traefik, golang.org/x/net, google.golang.org/grpc (#​8624)
• Update kube-router package in build script (#​8630)
• Add etcd-only/control-plane-only server test and fix control-plane-only server crash (#​8638)
• Use version.Program not K3s in token rotate logs (#​8653)
• [Windows Port (#​7259)
• Fix CloudDualStackNodeIPs feature-gate inconsistency (#​8667)
• Re-enable etcd endpoint auto-sync (#​8675)
• Manually requeue configmap reconcile when no nodes have reconciled snapshots (#​8683)
• Update to v1.28.3 and Go to v1.20.10 (#​8682)
• Fix s3 snapshot restore (#​8729)

Embedded Component Versions

Component	Version
Kubernetes	v1.28.3
Kine	v0.10.3
SQLite	3.42.0
Etcd	v3.5.9-k3s1
Containerd	v1.7.7-k3s1
Runc	v1.1.8
Flannel	v0.22.2
Metrics-server	v0.6.3
Traefik	v2.10.5
CoreDNS	v1.10.1
Helm-controller	v0.15.4
Local-path-provisioner	v0.0.24

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

v1.28.3+k3s2: v1.28.3+k3s2

Compare Source

This release updates Kubernetes to v1.28.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.28.3+k3s1:

• Restore selinux context systemd unit file (#​8593)
• Update channel to v1.27.7+k3s1 (#​8753)
• Bump Sonobuoy version (#​8710)
• Bump Trivy version (#​8739)
• Fix: Access outer scope .SystemdCgroup (#​8761)
  • Fixed failing to start with nvidia-container-runtime
• Upgrade traefik chart to v25.0.0 (#​8771)
• Update traefik to fix registry value (#​8792)
• Don't use iptables-save/iptables-restore if it will corrupt rules (#​8795)

Embedded Component Versions

Component	Version
Kubernetes	v1.28.3
Kine	v0.10.3
SQLite	3.42.0
Etcd	v3.5.9-k3s1
Containerd	v1.7.7-k3s1
Runc	v1.1.8
Flannel	v0.22.2
Metrics-server	v0.6.3
Traefik	v2.10.5
CoreDNS	v1.10.1
Helm-controller	v0.15.4
Local-path-provisioner	v0.0.24

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[henry-pa-bot[bot]]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ COPYPASTE	jscpd	yes		no	1.21s
✅ REPOSITORY	git_diff	yes		no	0.02s
✅ REPOSITORY	secretlint	yes		no	1.36s
✅ YAML	prettier	2		0	0.45s
✅ YAML	yamllint	2		0	0.25s

See detailed report in MegaLinter reports Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by