Skip to content

Commit 7c560bb

Browse files
dprodanov4dprodanov4
committed
[3.5.0] - update release notes and airgap images
1 parent 542f281 commit 7c560bb

File tree

5 files changed

+266
-84
lines changed

5 files changed

+266
-84
lines changed

‎asciidoc/edge-book/links.adoc‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
:link-rancher-extensions: https://ranchermanager.docs.rancher.com/{rancher-docs-version}/integrations-in-rancher/rancher-extensions
3939
:link-rancher-logging: https://ranchermanager.docs.rancher.com/{rancher-docs-version}/integrations-in-rancher/logging
4040

41-
:link-rancher-upstream-release: https://github.com/rancher/rancher/releases/tag/{release-tag-rancher}
41+
:link-rancher-upstream-release: https://prime.ribs.rancher.io/rancher/{release-tag-rancher}/rancher-images.txt
4242

4343
:link-cert-manager-installation: https://cert-manager.io/v1.15-docs/installation/helm/#installing-with-helm
4444

‎asciidoc/edge-book/releasenotes.adoc‎

Lines changed: 182 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
[#release-notes]
22

33
= Abstract
4-
:revdate: 2025-09-25
4+
:revdate: 2025-12-17
55
:page-revdate: {revdate}
66
ifdef::env-github[]
77
:imagesdir: ../images/
@@ -32,6 +32,187 @@ However, repeated entries are provided as a courtesy only. Therefore, if you are
3232

3333
NOTE: SUSE Edge z-stream releases are tightly integrated and thoroughly tested as a versioned stack. Upgrade of any individual components to a different versions to those listed above is likely to result in system downtime. While it's possible to run Edge clusters in untested configurations, it is not recommended, and it may take longer to provide resolution through the support channels.
3434

35+
[#release-notes-3-4-2]
36+
= Release 3.4.2
37+
38+
Availability Date: 17th December 2025
39+
40+
Full Support End Date: 20th March 2026
41+
42+
Maintenance Support End Date: 20th September 2027
43+
44+
EOL: 21st September 2027
45+
46+
Summary: SUSE Edge 3.4.2 is the second z-stream release in SUSE Edge 3.4 release stream
47+
48+
== New Features
49+
50+
* Updated to Rancher Prime 2.12.4 https://github.com/rancher/rancher/releases/tag/v2.12.4[Release Notes]
51+
* Updated to SUSE Security (Neuvector) 5.4.7 https://open-docs.neuvector.com/releasenotes/5x/#547-october-2025[Release Notes]
52+
* Updated to SUSE Storage (Longhorn) 1.9.2 https://longhorn.io/docs/1.9.2/important-notes/[Release Notes]
53+
* Edge Image Builder has been updated to 1.3.1, see https://github.com/suse-edge/edge-image-builder/blob/release-1.3/RELEASE_NOTES.md[Upstream Release Notes]
54+
* Updated Rancher Turtles, Kiwi Builder, NM Configurator, Metal3/IPA/Ironic versions
55+
56+
== Bug & Security Fixes
57+
58+
* SUSE Security (Neuvector) 5.4.7 contains several bugfixes https://open-docs.neuvector.com/releasenotes/5x/#bugs-fixed[Upstream Neuvector Bug Fixes]
59+
* SUSE Storage (Longhorn) 1.9.2 contains several bugfixes https://github.com/longhorn/longhorn/releases/tag/v1.9.2[Upstream Longhorn Bug Fixes]
60+
* EIB (edge-image-builder) 1.3.1 contains a fix for elemental cluster deletions https://github.com/suse-edge/edge-image-builder/issues/808[EIB Bug Fix]
61+
* Metal3 0.12.9 contains several bugfixes for LACP issue with some intel NICs and the addition of some environment variables to tune TLS cipher suite to overcome BMC issues.
62+
* NMC (nm-configurator) 0.3.5 contains several bugfixes https://github.com/suse-edge/nm-configurator/releases/tag/v0.3.5[NMC Bug Fixes]
63+
* Kiwi Builder 10.2.12.1 adds iptables as this is required when deploying RKE2
64+
65+
== Known Issues
66+
67+
[WARNING]
68+
====
69+
If deploying new clusters, please follow <<guides-kiwi-builder-images>> to build fresh images first as this is now the first step required to create clusters for both {x86-64} and {aarch64} architectures as well as management and downstream clusters.
70+
====
71+
72+
* When deploying via Edge Image Builder, `HelmChartConfigs` manifests may fail if they are put in the `kubernetes/manifests` configuration directory. Instead it is reccomended to place any `HelmChartConfigs` in `/var/lib/rancher/{rke2/k3s}/server/manifests/` using the EIB os-files interface, see <<mgmt-cluster-directory-structure>> for example. Failure to do this may cause nodes to stay in `NotReady` state on initial startup, as discussed in https://github.com/rancher/rke2/issues/8357[#8357 RKE2 issue]
73+
74+
* On RKE2/K3s 1.31, 1.32 and 1.33 versions, the directory `/etc/cni` being used to store CNI configurations may not trigger a notification of the files being written there to `containerd` due to certain conditions related to `overlayfs` (see the https://github.com/rancher/rke2/issues/8356[#8356 RKE2 issue]). This in turn results in the deployment of RKE2/K3s to get stuck waiting for the CNI to start, and the RKE2/K3s nodes to stay in `NotReady` state. This can be seen at node level with `kubectl describe node <affected_node>`:
75+
76+
[,bash]
77+
----
78+
Conditions:
79+
Type Status LastHeartbeatTime LastTransitionTime Reason Message
80+
---- ------ ----------------- ------------------ ------ -------
81+
Ready False Thu, 05 Jun 2025 17:41:28 +0000 Thu, 05 Jun 2025 14:38:16 +0000 KubeletNotReady container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized
82+
----
83+
84+
As a workaround, a tmpfs volume can be mounted at the `/etc/cni` directory before RKE2 starts. It avoids the usage of overlayfs which results in containerd missing notifications and the configs should get rewritten every time the node is restarted and the pods initcontainers run again. If using EIB, this can be a `04-tmpfs-cni.sh` script in the `custom/scripts` directory (as explained here[https://github.com/suse-edge/edge-image-builder/blob/release-1.2/docs/building-images.md#custom]) that looks like:
85+
86+
[,bash]
87+
----
88+
#!/bin/bash
89+
mkdir -p /etc/cni
90+
mount -t tmpfs -o mode=0700,size=5M tmpfs /etc/cni
91+
echo "tmpfs /etc/cni tmpfs defaults,size=5M,mode=0700 0 0" >> /etc/fstab
92+
----
93+
94+
* When onboarding remote hosts using Elemental, a race condition between `dbus.service` and `elemental-system-agent.service` might occur, resulting in `rancher-system-agent.service` on remote host to fail starting with errors similar to the one below. (see the https://github.com/suse-edge/edge-image-builder/issues/784[#784 Edge Image Builder issue] for details.)
95+
96+
[,bash]
97+
----
98+
Sep 19 19:38:07 elementalvm elemental-system-agent[3671]: time="2025-09-19T19:38:07Z" level=info msg="[6b20fe64c854da2639804884b34129bb8f718eb59578111da58d9de1509c24db_1:stderr]: Failed to restart rancher-system-agent.service: Message recipient disconnected from message bus without replying"
99+
----
100+
101+
As a workaround, a systemd override file can be created as below
102+
103+
[,bash]
104+
----
105+
[Unit]
106+
Wants=dbus.service network-online.target
107+
After=dbus.service network-online.target time-sync.target
108+
109+
[Service]
110+
ExecStartPre=/bin/bash -c 'echo "Waiting for dbus to become active..." | systemd-cat -p info -t elemental-system-agent; sleep 15; timeout 300 bash -c "while ! systemctl is-active --quiet dbus.service; do sleep 15; done"'
111+
----
112+
113+
and a custom script named `30a-copy-elemental-system-agent-override.sh` can be used to place the override to `/etc/systemd/system/elemental-system-agent.service.d` prior to EIB's https://github.com/suse-edge/edge-image-builder/blob/main/pkg/combustion/templates/31-elemental-register.sh.tpl[31-elemental-register.sh] script runs during the combustion phase.
114+
115+
[,bash]
116+
----
117+
#!/bin/bash
118+
119+
/bin/mkdir -p /etc/systemd/system/elemental-system-agent.service.d
120+
/bin/cp -f elemental-system-agent-override.conf /etc/systemd/system/elemental-system-agent.service.d/override.conf
121+
----
122+
123+
== Component Versions
124+
125+
The following table describes the individual components that make up the 3.4.1 release, including the version, the Helm chart version (if applicable), and from where the released artifact can be pulled in the binary format. Please follow the associated documentation for usage and deployment examples.
126+
127+
|======
128+
| Name | Version | Helm Chart Version | Artifact Location (URL/Image)
129+
| SUSE Linux Micro | 6.1 (latest) | N/A | https://www.suse.com/download/sle-micro/[SUSE Linux Micro Download Page] +
130+
SL-Micro.x86_64-6.1-Base-SelfInstall-GM.install.iso (sha256 70b9be28f2d92bc3b228412e4fc2b1d5026e691874b728e530b8063522158854) +
131+
SL-Micro.x86_64-6.1-Base-RT-SelfInstall-GM.install.iso (sha256 9ce83e4545d4b36c7c6a44f7841dc3d9c6926fe32dbff694832e0fbd7c496e9d) +
132+
SL-Micro.x86_64-6.1-Base-GM.raw.xz (sha256 36e3efa55822113840dd76fdf6914e933a7b7e88a1dce5cb20c424ccf2fb4430) +
133+
SL-Micro.x86_64-6.1-Base-RT-GM.raw.xz (sha256 2ee66735da3e1da107b4878e73ae68f5fb7309f5ec02b5dfdb94e254fda8415e) +
134+
| SUSE Multi-Linux Manager | 5.0.5 | N/A | https://www.suse.com/download/suse-manager/[SUSE Multi-Linux Manager Download Page]
135+
| K3s | 1.33.5 | N/A | https://github.com/k3s-io/k3s/releases/tag/v1.33.5%2Bk3s1[Upstream K3s Release]
136+
| RKE2 | 1.33.5 | N/A | https://github.com/rancher/rke2/releases/tag/v1.33.5%2Brke2r1[Upstream RKE2 Release]
137+
s| SUSE Rancher Prime s| 2.12.4 s| 2.12.4 | https://charts.rancher.com/server-charts/prime/index.yaml[Rancher Prime Helm Repository] +
138+
https://prime.ribs.rancher.io/rancher/v2.12.4/rancher-images.txt[Rancher 2.12.4 Container Images]
139+
s| SUSE Storage (Longhorn) s| 1.9.2 s| 107.1.1+up1.9.2 | https://charts.rancher.io/index.yaml[Rancher Charts Helm Repository] +
140+
registry.suse.com/rancher/mirrored-longhornio-csi-attacher:v4.9.0-20250709 +
141+
registry.suse.com/rancher/mirrored-longhornio-csi-provisioner:v5.3.0-20250709 +
142+
registry.suse.com/rancher/mirrored-longhornio-csi-resizer:v1.14.0-20250709 +
143+
registry.suse.com/rancher/mirrored-longhornio-csi-snapshotter:v8.3.0-20250709 +
144+
registry.suse.com/rancher/mirrored-longhornio-csi-node-driver-registrar:v2.14.0-20250709 +
145+
registry.suse.com/rancher/mirrored-longhornio-livenessprobe:v2.16.0-20250709 +
146+
registry.suse.com/rancher/mirrored-longhornio-backing-image-manager:v1.9.2 +
147+
registry.suse.com/rancher/mirrored-longhornio-longhorn-engine:v1.9.2 +
148+
registry.suse.com/rancher/mirrored-longhornio-longhorn-instance-manager:v1.9.2 +
149+
registry.suse.com/rancher/mirrored-longhornio-longhorn-manager:v1.9.2 +
150+
registry.suse.com/rancher/mirrored-longhornio-longhorn-share-manager:v1.9.2 +
151+
registry.suse.com/rancher/mirrored-longhornio-longhorn-ui:v1.9.2 +
152+
registry.suse.com/rancher/mirrored-longhornio-support-bundle-kit:v0.0.61 +
153+
registry.suse.com/rancher/mirrored-longhornio-longhorn-cli:v1.9.2 +
154+
s| SUSE Security s| 5.4.7 s| 107.0.2+up2.8.9 | https://charts.rancher.io/index.yaml[Rancher Charts Helm Repository] +
155+
registry.suse.com/rancher/neuvector-controller:5.4.7 +
156+
registry.suse.com/rancher/neuvector-enforcer:5.4.7 +
157+
registry.suse.com/rancher/neuvector-manager:5.4.7 +
158+
registry.suse.com/rancher/neuvector-compliance-config:1.0.8 +
159+
registry.suse.com/rancher/neuvector-registry-adapter:0.1.8 +
160+
registry.suse.com/rancher/neuvector-scanner:6 +
161+
registry.suse.com/rancher/neuvector-updater:0.0.4
162+
s| Rancher Turtles (CAPI) s| 0.24.3 s| 304.0.7+up0.24.3 | registry.suse.com/edge/charts/rancher-turtles:304.0.7_up0.24.3 +
163+
registry.rancher.com/rancher/rancher/turtles:v0.24.3 +
164+
registry.rancher.com/rancher/cluster-api-metal3-controller:v1.10.2 +
165+
registry.rancher.com/rancher/cluster-api-metal3-ipam-controller:v1.10.2 +
166+
registry.suse.com/rancher/cluster-api-controller:v1.10.5 +
167+
registry.suse.com/rancher/cluster-api-provider-rke2-bootstrap:v0.20.1 +
168+
registry.suse.com/rancher/cluster-api-provider-rke2-controlplane:v0.20.1
169+
s| Rancher Turtles Airgap Resources s| 0.24.3 | 304.0.7+up0.24.3 | registry.suse.com/edge/charts/rancher-turtles-airgap-resources:304.0.7_up0.24.3
170+
s| Metal^3^ s| 0.12.9 | 304.0.19+up0.12.9 | registry.suse.com/edge/charts/metal3:304.0.19_up0.12.9 +
171+
registry.suse.com/edge/3.4/baremetal-operator:0.10.4 +
172+
registry.suse.com/edge/3.4/ironic:29.0.4.4 +
173+
registry.suse.com/edge/3.4/ironic-ipa-downloader:3.0.10 +
174+
| MetalLB | 0.14.9 | 304.0.0+up0.14.9 | registry.suse.com/edge/charts/metallb:304.0.0_up0.14.9 +
175+
registry.suse.com/edge/3.4/metallb-controller:v0.14.9 +
176+
registry.suse.com/edge/3.4/metallb-speaker:v0.14.9 +
177+
registry.suse.com/edge/3.4/frr:8.5.6 +
178+
registry.suse.com/edge/3.4/frr-k8s:v0.0.16 +
179+
registry.suse.com/edge/3.4/kube-rbac-proxy:0.18.1
180+
| Elemental | 1.7.3 | 1.7.3 | registry.suse.com/rancher/elemental-operator-chart:1.7.3 +
181+
registry.suse.com/rancher/elemental-operator-crds-chart:1.7.3 +
182+
registry.suse.com/rancher/elemental-operator:1.7.3
183+
| Elemental Dashboard Extension | 3.0.1 | 3.0.1 | link:https://github.com/rancher/ui-plugin-charts/tree/4.0.0/charts/elemental/3.0.1[Elemental Extension Helm Chart]
184+
s| Edge Image Builder s| 1.3.1 | N/A s| registry.suse.com/edge/3.4/edge-image-builder:1.3.1
185+
s| NM Configurator s| 0.3.5 | N/A s| https://github.com/suse-edge/nm-configurator/releases/tag/v0.3.5[NMConfigurator Upstream Release]
186+
| KubeVirt | 1.5.2 | 304.0.1+up0.6.0 | registry.suse.com/edge/charts/kubevirt:304.0.1_up0.6.0 +
187+
registry.suse.com/suse/sles/15.7/virt-operator:1.5.2 +
188+
registry.suse.com/suse/sles/15.7/virt-api:1.5.2 +
189+
registry.suse.com/suse/sles/15.7/virt-controller:1.5.2 +
190+
registry.suse.com/suse/sles/15.7/virt-exportproxy:1.5.2 +
191+
registry.suse.com/suse/sles/15.7/virt-exportserver:1.5.2 +
192+
registry.suse.com/suse/sles/15.7/virt-handler:1.5.2 +
193+
registry.suse.com/suse/sles/15.7/virt-launcher:1.5.2
194+
| KubeVirt Dashboard Extension | 1.3.2 | 304.0.3+up1.3.2 | registry.suse.com/edge/charts/kubevirt-dashboard-extension:304.0.3_up1.3.2
195+
| Containerized Data Importer | 1.62.0 | 304.0.1+up0.6.0 | registry.suse.com/edge/charts/cdi:304.0.1_up0.6.0 +
196+
registry.suse.com/suse/sles/15.7/cdi-operator:1.62.0 +
197+
registry.suse.com/suse/sles/15.7/cdi-controller:1.62.0 +
198+
registry.suse.com/suse/sles/15.7/cdi-importer:1.62.0 +
199+
registry.suse.com/suse/sles/15.7/cdi-cloner:1.62.0 +
200+
registry.suse.com/suse/sles/15.7/cdi-apiserver:1.62.0 +
201+
registry.suse.com/suse/sles/15.7/cdi-uploadserver:1.62.0 +
202+
registry.suse.com/suse/sles/15.7/cdi-uploadproxy:1.62.0
203+
| Endpoint Copier Operator | 0.3.0 | 304.0.1+up0.3.0 | registry.suse.com/edge/charts/endpoint-copier-operator:304.0.1_up0.3.0 +
204+
registry.suse.com/edge/3.4/endpoint-copier-operator:0.3.0
205+
| SR-IOV Network Operator | 1.5.0 | 304.0.2+up1.5.0 | registry.suse.com/edge/charts/sriov-network-operator:304.0.2_up1.5.0 +
206+
registry.suse.com/edge/charts/sriov-crd:304.0.2_up1.5.0
207+
| System Upgrade Controller | 0.16.0 | 107.0.0 | https://charts.rancher.io/index.yaml[Rancher Charts Helm Repository] +
208+
registry.suse.com/rancher/system-upgrade-controller:v0.16.0
209+
| Upgrade Controller | 0.1.1 | 304.0.1+up0.1.1 | registry.suse.com/edge/charts/upgrade-controller:304.0.1_up0.1.1 +
210+
registry.suse.com/edge/3.4/upgrade-controller:0.1.1 +
211+
registry.suse.com/edge/3.4/kubectl:1.33.4 +
212+
registry.suse.com/edge/3.4/release-manifest:3.4.2
213+
s| Kiwi Builder s| 10.2.12.1 | N/A s| registry.suse.com/edge/3.4/kiwi-builder:10.2.12.1
214+
|======
215+
35216
[#release-notes-3-4-1]
36217
= Release 3.4.1
37218

@@ -209,8 +390,6 @@ registry.suse.com/edge/3.4/release-manifest:3.4.1
209390
| Kiwi Builder | 10.2.12.0 | N/A | registry.suse.com/edge/3.4/kiwi-builder:10.2.12.0
210391
|======
211392

212-
213-
214393
[#release-notes-3-4-0]
215394
= Release 3.4.0
216395

‎asciidoc/edge-book/versions.adoc‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
// ============================================================================
2-
:revdate: 2025-10-15
2+
:revdate: 2025-12-17
33
:page-revdate: {revdate}
44
// Automatic Version Substitutions
55
//
@@ -10,7 +10,7 @@
1010
// ============================================================================
1111

1212
// == General Edge ==
13-
:version-edge: 3.4.1
13+
:version-edge: 3.4.2
1414
:version-edge-registry: 3.4
1515

1616
// == SUSE Linux Micro ==
@@ -25,7 +25,7 @@
2525
:version-mlm: 5.0.5
2626

2727
// == Edge Image Builder ==
28-
:version-eib: 1.3.0
28+
:version-eib: 1.3.1
2929
:version-eib-api-latest: 1.3
3030

3131
// KubeVirt
@@ -35,16 +35,16 @@
3535
:version-kubevirt-release: v1.5.2
3636

3737
// == Component Versions ==
38-
:version-rancher-prime: 2.12.2
38+
:version-rancher-prime: 2.12.4
3939
:version-cert-manager: 1.18.2
4040
:version-elemental-operator: 1.7.3
41-
:version-longhorn: 1.9.1
42-
:version-neuvector: 5.4.6
41+
:version-longhorn: 1.9.2
42+
:version-neuvector: 5.4.7
4343
:version-kubevirt: 1.5.2
4444
:version-endpoint-copier-operator: 0.3.0
4545
:version-suc: 0.16.0
46-
:version-nm-configurator: 0.3.4
47-
:version-fleet: 0.13.1
46+
:version-nm-configurator: 0.3.5
47+
:version-fleet: 0.13.5
4848
:version-cdi: 1.62.0
4949
:version-nvidia-device-plugin: 0.14.5
5050
:version-kiwi-builder: 10.2.12.0
@@ -58,8 +58,8 @@
5858
:release-tag-eib: release-1.3
5959
:release-tag-edge-charts: release-3.4
6060
:release-tag-telco-cloud: release-3.4
61-
:release-tag-fleet-examples: release-3.4.1
62-
:release-tag-rancher: v2.12.2
61+
:release-tag-fleet-examples: release-3.4.2
62+
:release-tag-rancher: v2.12.4
6363

6464

6565
// ============================================================================
@@ -80,19 +80,19 @@
8080
:version-elemental-operator-chart: 107.1.0+up1.7.3
8181
:version-elemental-operator-crds-chart: 107.1.0+up1.7.3
8282
:version-endpoint-copier-operator-chart: 304.0.1+up0.3.0
83-
:version-fleet-chart: 107.0.1+up0.13.1
83+
:version-fleet-chart: 107.0.5+up0.13.5
8484
:version-kubevirt-chart: 304.0.1+up0.6.0
8585
:version-kubevirt-dashboard-extension-chart: 304.0.2+up1.3.2
86-
:version-longhorn-chart: 107.1.0+up1.9.1
87-
:version-longhorn-crd-chart: 107.1.0+up1.9.1
88-
:version-longhorn-docs: 1.9.1
89-
:version-metal3-chart: 304.0.16+up0.12.6
86+
:version-longhorn-chart: 107.1.1+up1.9.2
87+
:version-longhorn-crd-chart: 107.1.1+up1.9.2
88+
:version-longhorn-docs: 1.9.2
89+
:version-metal3-chart: 304.0.19+up0.12.9
9090
:version-metallb-chart: 304.0.0+up0.14.9
91-
:version-neuvector-chart: 107.0.1+up2.8.8
92-
:version-neuvector-crd-chart: 107.0.1+up2.8.8
91+
:version-neuvector-chart: 107.0.2+up2.8.9
92+
:version-neuvector-crd-chart: 107.0.2+up2.8.9
9393
:version-neuvector-dashboard-extension-chart: 2.1.3
94-
:version-rancher-chart: 2.12.2
95-
:version-rancher-turtles-chart: 304.0.6+up0.24.0
94+
:version-rancher-chart: 2.12.4
95+
:version-rancher-turtles-chart: 304.0.7+up0.24.3
9696
:version-sriov-crd-chart: 304.0.2+up1.5.0
9797
:version-sriov-network-operator-chart: 304.0.2+up1.5.0
9898
:version-sriov-upstream: 1.5.0

0 commit comments

Comments
 (0)