update release-notes/v1.XX.X.md February 2026 (#470)

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Author: github-actions[bot]

docs/release-notes/v1.32.X.md

@@ -11,6 +11,7 @@ Before upgrading from earlier releases, be sure to read the Kubernetes [Urgent U
 
 | Version | Release date | Kubernetes | Etcd | Containerd | Runc | Metrics-server | CoreDNS | Ingress-Nginx | Helm-controller | Canal (Default) | Calico | Cilium | Multus |
 | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- |
+| [v1.32.11+rke2r3](v1.32.X.md#release-v13211rke2r3) | Feb 04 2026| [v1.32.11](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v13211) | [v3.5.26-k3s1](https://github.com/k3s-io/etcd/releases/tag/v3.5.26-k3s1) | [v2.1.5-k3s1](https://github.com/k3s-io/containerd/releases/tag/v2.1.5-k3s1) | [v1.4.0](https://github.com/opencontainers/runc/releases/tag/v1.4.0) | [v0.8.0](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.8.0) | [v1.14.1](https://github.com/coredns/coredns/releases/tag/v1.14.1) | [v1.14.3-hardened1](https://github.com/rancher/ingress-nginx/releases/tag/v1.14.3-hardened1) | [v0.16.17](https://github.com/k3s-io/helm-controller/releases/tag/v0.16.17) | [Flannel v0.28.0](https://github.com/flannel-io/flannel/releases/tag/v0.28.0)<br/>[Calico v3.31.3](https://docs.tigera.io/calico/latest/release-notes/#v3.31) | [v3.31.3](https://docs.tigera.io/calico/latest/release-notes/#v3.31) | [v1.18.6](https://github.com/cilium/cilium/releases/tag/v1.18.6) | [v4.2.3](https://github.com/k8snetworkplumbingwg/multus-cni/releases/tag/v4.2.3) |
 | [v1.32.11+rke2r1](v1.32.X.md#release-v13211rke2r1) | Dec 18 2025| [v1.32.11](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v13211) | [v3.5.25-k3s1](https://github.com/k3s-io/etcd/releases/tag/v3.5.25-k3s1) | [v2.1.5-k3s1](https://github.com/k3s-io/containerd/releases/tag/v2.1.5-k3s1) | [v1.4.0](https://github.com/opencontainers/runc/releases/tag/v1.4.0) | [v0.8.0](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.8.0) | [v1.13.1](https://github.com/coredns/coredns/releases/tag/v1.13.1) | [v1.13.5-hardened2](https://github.com/rancher/ingress-nginx/releases/tag/v1.13.5-hardened2) | [v0.16.17](https://github.com/k3s-io/helm-controller/releases/tag/v0.16.17) | [Flannel v0.27.4](https://github.com/flannel-io/flannel/releases/tag/v0.27.4)<br/>[Calico v3.31.2](https://docs.tigera.io/calico/latest/release-notes/#v3.31) | [v3.31.2](https://docs.tigera.io/calico/latest/release-notes/#v3.31) | [v1.18.4](https://github.com/cilium/cilium/releases/tag/v1.18.4) | [v4.2.3](https://github.com/k8snetworkplumbingwg/multus-cni/releases/tag/v4.2.3) |
 | [v1.32.10+rke2r1](v1.32.X.md#release-v13210rke2r1) | Nov 20 2025| [v1.32.10](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v13210) | [v3.5.21-k3s1](https://github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1) | [v2.1.5-k3s1](https://github.com/k3s-io/containerd/releases/tag/v2.1.5-k3s1) | [v1.3.3](https://github.com/opencontainers/runc/releases/tag/v1.3.3) | [v0.8.0](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.8.0) | [v1.13.1](https://github.com/coredns/coredns/releases/tag/v1.13.1) | [v1.13.4-hardened1](https://github.com/rancher/ingress-nginx/releases/tag/v1.13.4-hardened1) | [v0.16.16](https://github.com/k3s-io/helm-controller/releases/tag/v0.16.16) | [Flannel v0.27.4](https://github.com/flannel-io/flannel/releases/tag/v0.27.4)<br/>[Calico v3.30.3](https://docs.tigera.io/calico/latest/release-notes/#v3.30) | [v3.30.4](https://docs.tigera.io/calico/latest/release-notes/#v3.30) | [v1.18.3](https://github.com/cilium/cilium/releases/tag/v1.18.3) | [v4.2.3](https://github.com/k8snetworkplumbingwg/multus-cni/releases/tag/v4.2.3) |
 | [v1.32.9+rke2r1](v1.32.X.md#release-v1329rke2r1) | Sep 18 2025| [v1.32.9](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1329) | [v3.5.21-k3s1](https://github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1) | [v2.1.4-k3s2](https://github.com/k3s-io/containerd/releases/tag/v2.1.4-k3s2) | [v1.3.1](https://github.com/opencontainers/runc/releases/tag/v1.3.1) | [v0.8.0](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.8.0) | [v1.12.3](https://github.com/coredns/coredns/releases/tag/v1.12.3) | [v1.12.6-hardened1](https://github.com/rancher/ingress-nginx/releases/tag/v1.12.6-hardened1) | [v0.16.13](https://github.com/k3s-io/helm-controller/releases/tag/v0.16.13) | [Flannel v0.27.3](https://github.com/flannel-io/flannel/releases/tag/v0.27.3)<br/>[Calico v3.30.3](https://docs.tigera.io/calico/latest/release-notes/#v3.30) | [v3.30.3 ](https://docs.tigera.io/calico/latest/release-notes/#v3.30.3 ) | [v1.18.1](https://github.com/cilium/cilium/releases/tag/v1.18.1) | [v4.2.2](https://github.com/k8snetworkplumbingwg/multus-cni/releases/tag/v4.2.2) |
@@ -26,6 +27,76 @@ Before upgrading from earlier releases, be sure to read the Kubernetes [Urgent U
 
 <br />
 
+## Release [v1.32.11+rke2r3](https://github.com/rancher/rke2/releases/tag/v1.32.11+rke2r3)
+<!-- v1.32.11+rke2r3 -->
+
+This release updates Kubernetes to v1.32.11.
+
+**Important Note**
+
+If your server (control-plane) nodes were not started with the `--token` CLI flag or config file key, a randomized token was generated during initial cluster startup. This key is used both for joining new nodes to the cluster, and for encrypting cluster bootstrap data within the datastore. Ensure that you retain a copy of this token, as is required when restoring from backup.
+
+You may retrieve the token value from any server already joined to the cluster:
+```bash
+cat /var/lib/rancher/rke2/server/token
+```
+
+### RKE2 v1.34 Upgrade Warning
+
+This warning targets users who perform upgrades by adding new nodes to the cluster, and removing old ones. If your etcd cluster membership is and has been consistent across versions, you should **NOT** be affected by this issue.
+
+RKE2 v1.34 and higher include etcd 3.6. Maintainers of the etcd project have indicated that there no safe path from etcd 3.5 to 3.6 except by upgrading to v3.5.26 first. 
+
+In mid December, the project [released an announcement](https://etcd.io/blog/2025/zombie_members_upgrade/) indicating that there is NO safe path from etcd 3.5 to 3.6 except by upgrading to v3.5.26 first. Failure to do so can cause the cluster to report “zombie members” (etcd nodes that were removed from the cluster some time ago) re-appearing and joining database consensus, ultimately causing the cluster to lose quorum. This updated blog post contradicts [previous announcements on this topic](https://etcd.io/blog/2025/upgrade_from_3.5_to_3.6_issue_followup/), which indicated that it was safe to upgrade from v3.5.20+ as long as nodes had been restarted at least once, to reconcile membership lists across internal storage layers.
+
+The January releases of RKE2 v1.32 and v1.33 will include etcd v3.5.26. All users should plan on upgrading to this patch release, prior to upgrading to v1.34 and v1.35.
+
+### Changes since v1.32.11+rke2r1:
+
+* Remove dapper + use crane [(#9445)](https://github.com/rancher/rke2/pull/9445)
+* Bump calico chart to v3.31.300 [(#9455)](https://github.com/rancher/rke2/pull/9455)
+* CNI bump Jan 2026 [(#9477)](https://github.com/rancher/rke2/pull/9477)
+* Bump Ingresses - 2026 Jan [(#9483)](https://github.com/rancher/rke2/pull/9483)
+* Bulk Backports - 2026 Jan [(#9495)](https://github.com/rancher/rke2/pull/9495)
+* Rke2-coredns: Use k8s-style "IANA" names (RFC 6335) [(#9506)](https://github.com/rancher/rke2/pull/9506)
+* K3s bump and backports for 2026-01 [(#9516)](https://github.com/rancher/rke2/pull/9516)
+* Adjust Windows directory creation order [(#9528)](https://github.com/rancher/rke2/pull/9528)
+* - Update to cilium v1.18.6 [(#9536)](https://github.com/rancher/rke2/pull/9536)
+* Bump Traefik version to v3.6.7 [(#9548)](https://github.com/rancher/rke2/pull/9548)
+* Update chart and container image versions [(#9561)](https://github.com/rancher/rke2/pull/9561)
+* Add e2e test for Calico in eBPF mode [(#9563)](https://github.com/rancher/rke2/pull/9563)
+* Bump etcd to v3.5.26 [(#9581)](https://github.com/rancher/rke2/pull/9581)
+* Update to v1.32.11-rke2r3 [(#9594)](https://github.com/rancher/rke2/pull/9594)
+* Fix release arm64 [(#9599)](https://github.com/rancher/rke2/pull/9599)
+* Backport: Increase timeouts in calico eBPF test [(#9604)](https://github.com/rancher/rke2/pull/9604)
+* Fix undefined function [(#9613)](https://github.com/rancher/rke2/pull/9613)
+* Revert accidental hardcode of klipper-helm tag [(#9626)](https://github.com/rancher/rke2/pull/9626)
+* Bump K3s version for etcd reconcile fix [(#9631)](https://github.com/rancher/rke2/pull/9631)
+* Bump ingress-nginx to v1.14.3-hardened1 [(#9636)](https://github.com/rancher/rke2/pull/9636)
+
+
+## Charts Versions
+| Component | Version |
+| --- | --- |
+| rke2-cilium | [1.18.601](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-cilium/rke2-cilium-1.18.601.tgz) |
+| rke2-canal | [v3.31.3-build2026011900](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-canal/rke2-canal-v3.31.3-build2026011900.tgz) |
+| rke2-calico | [v3.31.300](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-calico/rke2-calico-v3.31.300.tgz) |
+| rke2-calico-crd | [v3.31.300](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-calico/rke2-calico-crd-v3.31.300.tgz) |
+| rke2-coredns | [1.45.008](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-coredns/rke2-coredns-1.45.008.tgz) |
+| rke2-ingress-nginx | [4.14.301](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-ingress-nginx/rke2-ingress-nginx-4.14.301.tgz) |
+| rke2-metrics-server | [3.13.006](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-metrics-server/rke2-metrics-server-3.13.006.tgz) |
+| rancher-vsphere-csi | [3.5.0-rancher200](https://github.com/rancher/rke2-charts/raw/main/assets/rancher-vsphere-csi/rancher-vsphere-csi-3.5.0-rancher200.tgz) |
+| rancher-vsphere-cpi | [1.12.100](https://github.com/rancher/rke2-charts/raw/main/assets/rancher-vsphere-cpi/rancher-vsphere-cpi-1.12.100.tgz) |
+| harvester-cloud-provider | [0.2.1100](https://github.com/rancher/rke2-charts/raw/main/assets/harvester-cloud-provider/harvester-cloud-provider-0.2.1100.tgz) |
+| harvester-csi-driver | [0.1.2500](https://github.com/rancher/rke2-charts/raw/main/assets/harvester-cloud-provider/harvester-csi-driver-0.1.2500.tgz) |
+| rke2-snapshot-controller | [4.2.000](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-snapshot-controller/rke2-snapshot-controller-4.2.000.tgz) |
+| rke2-snapshot-controller-crd | [4.2.000](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-snapshot-controller/rke2-snapshot-controller-crd-4.2.000.tgz) |
+| rke2-snapshot-validation-webhook | [0.0.0](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-snapshot-validation-webhook/rke2-snapshot-validation-webhook-0.0.0.tgz) |
+| rke2-traefik | [38.0.201](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-traefik/rke2-traefik-38.0.201.tgz) |
+| rke2-traefik-crd | [38.0.201](https://github.com/rancher/rke2-charts/raw/main/assets/rke2-traefik/rke2-traefik-crd-38.0.201.tgz) |
+
+
+-----
 ## Release [v1.32.11+rke2r1](https://github.com/rancher/rke2/releases/tag/v1.32.11+rke2r1)
 <!-- v1.32.11+rke2r1 -->