# K3s v1.37.0-rc1+k3s1

- Product: K3s (https://whatsnew.fyi/product/k3s)
- Vendor: SUSE
- Date: 2026-09-02
- Version: v1.37.0-rc1+k3s1
- Original notes: https://github.com/k3s-io/k3s/releases/tag/v1.37.0-rc1%2Bk3s1
- Permalink: https://whatsnew.fyi/product/k3s/releases/v1.37.0-rc1-k3s1
- Labels: Pre-release

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add firewall section to check-config.sh
- **added** — Enable secret encryption on existing clusters
- **changed** — Replace temporary etcd server with raw mvcc store access
- **changed** — Remove flannel external-ip annotations when disabled
- **changed** — Bump Traefik and CoreDNS to January 2025 versions
- **changed** — Bump local path provisioner to v0.0.34
- **changed** — Bump cni plugins
- **changed** — Bump spegel to v0.6.0
- **changed** — Bump kine to v0.14.10 for NATS conformance fixes
- **changed** — Bump coredns to 1.14.0
- **changed** — Update Traefik version to v3.6.7
- **changed** — Move to rootlesskit v2
- **changed** — Bump etcd to v3.6.7
- **changed** — Bump metrics-server to v0.8.1
- **changed** — Bump klipper-helm and klipper-lb images
- **changed** — Make artifact URL prefix configurable
- **changed** — Bump kine to v0.14.12
- **fixed** — Fix CVE-2025-54410: Update docker/docker to v25.0.13
- **fixed** — Fix atomic write in WriteSubnetFile
- **fixed** — Fix restart of control-plane-only nodes attempting to reconcile from local datastore
- **fixed** — Fix spegel filter for wildcards

##### What's Changed
* Expand docker upgrade test, sunset E2E upgrade test by @dereknola in https://github.com/k3s-io/k3s/pull/13338
* Add firewall section to check-config.sh by @dereknola in https://github.com/k3s-io/k3s/pull/13234
* Update golangci-lint and re-enable CI linting step by @brandond in https://github.com/k3s-io/k3s/pull/13343
* Fix PR lint checkout depth by @brandond in https://github.com/k3s-io/k3s/pull/13369
* Update stable channel to v1.34.3+k3s1 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13374
* Bump actions/download-artifact from 6 to 7 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13346
* Bump stable to 1.34 and add 1.35 by @brandond in https://github.com/k3s-io/k3s/pull/13373
* Enable secret encryption on existing clusters by @dereknola in https://github.com/k3s-io/k3s/pull/13370
* Bump Local Path Provisioner version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13387
* Use Get, not Head for channel page by @dereknola in https://github.com/k3s-io/k3s/pull/13402
* Fix typos in documentation by @oglok in https://github.com/k3s-io/k3s/pull/13411
* Bump actions/cache from 4 to 5 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13347
* Replace temporary etcd server with raw mvcc store access by @brandond in https://github.com/k3s-io/k3s/pull/13368
* Bump Traefik  and CoreDNS - Jan 2025 by @dereknola in https://github.com/k3s-io/k3s/pull/13424
* Remove flannel external-ip annotations when disabled by @brandond in https://github.com/k3s-io/k3s/pull/13431
* Bump local path provisioner to v0.0.34 by @dereknola in https://github.com/k3s-io/k3s/pull/13430
* [main] Publish GA images to staging registry by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13438
* Bump cni plugins by @brandond in https://github.com/k3s-io/k3s/pull/13439
* Fix atomic write in WriteSubnetFile by @luojiyin1987 in https://github.com/k3s-io/k3s/pull/13380
* Bump expr-lang/expr by @brandond in https://github.com/k3s-io/k3s/pull/13440
* Bump spegel to v0.6.0 by @brandond in https://github.com/k3s-io/k3s/pull/13198
* Update longhorn version in integration test from v1.4.0 to v1.10.1 by @brandond in https://github.com/k3s-io/k3s/pull/13443
* Bump kine to v0.14.10 for NATS conformance fixes by @brandond in https://github.com/k3s-io/k3s/pull/13441
* Remove download/generate from vulncheck by @brandond in https://github.com/k3s-io/k3s/pull/13445
* Bump to coredns 1.14.0 by @mgfritch in https://github.com/k3s-io/k3s/pull/13449
* Add Momentum Coach AI to K3S adopters list by @geoffreyPerrin in https://github.com/k3s-io/k3s/pull/13467
* Fix lines to satisfy lint and fix CI by @manuelbuil in https://github.com/k3s-io/k3s/pull/13475
* Update Traefik version to v3.6.7 by @manuelbuil in https://github.com/k3s-io/k3s/pull/13474
* Prevent caching on PR of golangci-lint entries by @dereknola in https://github.com/k3s-io/k3s/pull/13487
* Move to rootlesskit v2 by @dereknola in https://github.com/k3s-io/k3s/pull/13486
* Bump actions/stale from 10.1.0 to 10.1.1 by @dependabot[bot] in https://github.com/k3s-io/k3s/pull/13296
* Fix CVE-2025-54410: Update docker/docker to v25.0.13 by @rahulrairai59 in https://github.com/k3s-io/k3s/pull/13473
* Bump golang:alpine image version by @github-actions[bot] in https://github.com/k3s-io/k3s/pull/13345
* Update install tests with new images, add alma10 by @dereknola in https://github.com/k3s-io/k3s/pull/13489
* Bump etcd to v3.6.7 by @brandond in https://github.com/k3s-io/k3s/pull/13495
* Add Percona and Solanica to k3s adopters by @edithturn in https://github.com/k3s-io/k3s/pull/13510
* [main] Update to v1.35.0-k3s3 by @rafaelbreno in https://github.com/k3s-io/k3s/pull/13524
* Fix restart of control-plane-only nodes attempting to reconcile from local datastore by @brandond in https://github.com/k3s-io/k3s/pull/13534
* Fix spegel filter for wildcards by @brandond in https://github.com/k3s-io/k3s/pull/13527
* Add IPv6 loopback to kubelet-serving cert by @brandond in https://g

_[Truncated at 4000 characters — full notes: https://github.com/k3s-io/k3s/releases/tag/v1.37.0-rc1%2Bk3s1]_