k3s v1.34.11+k3s1 - Traefik Chart Provider Rename

k3s v1.34.11+k3s1 shipped on 27 August 2026. The tag moves the embedded Kubernetes tree to v1.34.11 and upgrades the packaged Traefik Helm chart to the v40 line. The operator break is the ingress-nginx provider key change from kubernetesIngressNginx to kubernetesIngressNGINX.

The full release notes and downloads are on the GitHub release page.

The notes open with a warning. This tag upgrades the Traefik chart to v40.x. Clusters that use that chart as an ingress-nginx migration path have to rename the provider. The old key is kubernetesIngressNginx. The new key is kubernetesIngressNGINX. The only difference is case on NGINX. A values overlay that still uses the old spelling will not apply that block after the chart upgrade.

The k3s project points at the Traefik Helm chart v40.0.0 notes for the rest of the chart delta. That chart tag records the same rename from providers.kubernetesIngressNginx to providers.kubernetesIngressNGINX. The k3s component table lists the Traefik binary at v3.7.8.

If Traefik is disabled on the cluster, the warning does not apply. If you keep custom Traefik values in Git, search for the old key before you upgrade servers. helm-controller applies packaged charts when the server starts. A missed rename means the new chart ignores the old key. Ingress then follows chart defaults, not the overlay you still think is in force.

Pull 14543 updates the tree to v1.34.11-k3s1 and the toolchain to Go 1.26.7. The previous k3s tag on this line is v1.34.10+k3s1. This is a patch on Kubernetes 1.34, not a new minor.

The k3s notes do not enumerate kubelet or apiserver commits. They send operators to the Kubernetes changelog since v1.34.10. Read that file if you need the upstream patch list. The component table also links Kubernetes v1.34.11 itself.

Go 1.26.7 is a build pin. It matters when you rebuild the k3s binary or when you compare module checksums. It does not by itself change cluster objects.

Pull 14520 bumps containerd to v2.2.7-k3s1. That is the CRI runtime on every node. Plan for a container runtime restart when the new binary comes up. The k3s notes do not list a CRI config schema change.

Pull 14494 bumps Local Path Provisioner. The embedded table sets local-path-provisioner to v0.0.37. Default storage class volumes used for job scratch, cache disks, or single node databases pick this up on upgrade. The notes do not describe a StorageClass API change.

Two other pulls are not an operator changelog. Pull 14519 backports test changes. Pull 14524 is titled Backports for 2026-08 with no itemized user facing notes. Treat both as internal.

The rest of the component table on the GitHub release page is a pin list. Kine stays at v0.16.4, SQLite at 3.53.4, and etcd at v3.6.14-k3s1. Those are the API datastore bits. This tag does not describe behavior changes for those pins.

This tag is not a prerelease, beta, or release candidate.

The documented break is the Traefik chart provider rename. Search Git, Helm values, and any Traefik overlay for kubernetesIngressNginx. Replace it with kubernetesIngressNGINX. Then read the Traefik Helm chart v40.0.0 notes for other chart edits on the v40 line.

Read the Kubernetes changelog since v1.34.10 before you move production control planes. The k3s notes treat that document as the source for upstream fixes in this patch.

If you are already on v1.34.10+k3s1, this is the next 1.34 k3s patch. The notes do not add extra migration steps beyond the Traefik key rename.