k3s v1.36.3+k3s1 released on 04-08-2026
k3s v1.36.3+k3s1 is out now. It embeds Kubernetes v1.36.3 and updates several bundled components, delivering upstream fixes and component bumps that matter to operators and homelab setups.
Check the k3s GitHub release and the upstream Kubernetes changelog for full details and component links.
What’s in this release
- Kubernetes upgraded to v1.36.3; notable embedded versions include Kine v0.16.3, Etcd v3.6.14-k3s1, containerd v2.3.2-k3s2, runc v1.4.2, Flannel v0.28.4, CoreDNS v1.14.6, Metrics-server v0.9.0 and Traefik v3.7.8.
- Traefik chart bumped to v40.x (Traefik v3.7.8 in k3s) with a breaking change that affects ingress-nginx migrations.
- dynamiclistener bumped to v0.9.0-rc.2 to add wildcard TLS SAN support (for example: –tls-san=*.example.com).
Upgrade notes
- Breaking change: the Traefik provider name has been renamed from
kubernetesIngressNginxtokubernetesIngressNGINX. Check and update provider names in Helm charts and Traefik configuration; see the Traefik v40.0.0 release notes for details. - Rollback: if the Traefik provider rename causes issues, roll back to your previous k3s release and restore the prior Traefik/chart configuration while you update provider names.
Share your experience after upgrading — report issues on the k3s GitHub or drop a note in the project Slack if you hit any unexpected behaviour.
