k3s v1.37.2+k3s1 released on 03-11-2026
k3s v1.37.2+k3s1 is out now. It upgrades the embedded Kubernetes to v1.37.2 and includes a set of bundled component updates and backported fixes to improve stability and security.
Follow the k3s GitHub release and the project documentation for full details and upgrade instructions.
What’s in this release
- Embedded Kubernetes upgraded to v1.37.2, bringing the upstream fixes and stability updates from the Kubernetes changelog.
- Bundled component bumps for security and compatibility: containerd → v2.3.7-k3s1, Traefik → v3.7.15, Flannel → v0.28.10, Kine v0.17.1, Etcd v3.7.1-k3s3, runc v1.4.2, CoreDNS v1.14.7, metrics-server v0.9.0, helm-controller v0.17.9 and local-path-provisioner v0.0.37; gateway-api CRD packaged (1.6.301).
- Backports and targeted fixes addressing a range of issues: avoid systemd restart loops by waiting 60s for a default route, exclude kms-providers from apiserver readiness checks, fix local-path PV deletion under SELinux enforcing, implement etcd snapshot restrictions, report image list read errors during pre-pulls, fix etcd member removal when etcd is later disabled on an existing server, and resolve a proxy goroutine leak.
Upgrade notes
- Review the Kubernetes v1.37.2 changelog linked from the k3s release for upstream upgrade considerations and any API-level changes that may affect clusters.
- If you use service-account signing endpoints or local etcd management, check the related changes — k3s now omits default service-account key flags when a signing endpoint is configured, and there are updates to etcd snapshot handling and member removal behaviour that may affect existing servers.
Share how the upgrade went and any issues you encounter via the k3s GitHub issues or the project Slack — community feedback is appreciated.
