k3s v1.36.3+k3s1 released on 04-08-2026

k3s v1.36.3+k3s1 is out now. It upgrades the embedded Kubernetes to v1.36.3 and refreshes core components, delivering bug fixes, backports and general stability improvements for cluster operators and homelab admins.
See the k3s GitHub release notes or the official k3s documentation for full details and download links.
What’s in this release
- Embedded Kubernetes updated to v1.36.3 with component bumps including kine v0.16.3, etcd v3.6.14-k3s1, containerd v2.3.2-k3s2, runc v1.4.2, flannel v0.28.4, CoreDNS v1.14.6 and metrics-server v0.9.0.
- Traefik chart moved to the v40.x line and k3s now uses Traefik v3.7.8; the chart introduces a breaking change for ingress-nginx provider naming.
- dynamiclistener bumped to v0.9.0-rc.2 to add wildcard TLS SAN support (for example –tls-san=*.example.com); helm-controller and klipper-helm were also bumped and several image/version updates and fixes were applied.
Upgrade notes
- Breaking change: Traefik v40.x renames the ingress-nginx provider from
kubernetesIngressNginxtokubernetesIngressNGINX. Review any Traefik Helm values, manifests or automation that reference the provider name and follow the Traefik chart release notes for migration steps. - If a rollback is required, restore the previous k3s release (for example v1.36.2+k3s1) and any prior Traefik chart versions used by your cluster; verify manifests and automation before reapplying.
Share your upgrade experience or report issues on the k3s GitHub issues page or via the project Slack channel — feedback from users helps catch edge cases and improve follow-up fixes.


