chore(deps): update dependency k3s-io/k3s to v1.28.11+k3s1 (release-1.28)

[renovate]

This PR contains the following updates:

Package	Update	Change
k3s-io/k3s	patch	v1.28.10+k3s1 -> v1.28.11+k3s1

---

Release Notes

k3s-io/k3s (k3s-io/k3s)

v1.28.11+k3s1: v1.28.11+k3s1

Compare Source

This release updates Kubernetes to v1.28.11, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.28.10+k3s1:

• Replace deprecated ruby function (#​10090)
• Fix bug when using tailscale config by file (#​10144)
• Bump flannel version to v0.25.2 (#​10221)
• Update kube-router version to v2.1.2 (#​10182)
• Improve tailscale test & add extra log in e2e tests (#​10213)
• Backports for 2024-06 release cycle (#​10258)
  • Add WithSkipMissing to not fail import on missing blobs
  • Use fixed stream server bind address for cri-dockerd
  • Switch stargz over to cri registry config_path
  • Bump to containerd v1.7.17, etcd v3.5.13
  • Bump spegel version
  • Fix issue with externalTrafficPolicy: Local for single-stack services on dual-stack nodes
  • ServiceLB now sets the priorityClassName on svclb pods to system-node-critical by default. This can be overridden on a per-service basis via the svccontroller.k3s.cattle.io/priorityclassname annotation.
  • Bump minio-go to v7.0.70
  • Bump kine to v0.11.9 to fix pagination
  • Update valid resolv conf
  • Add missing kernel config check
  • Symlinked sub-directories are now respected when scanning Auto-Deploying Manifests (AddOns)
  • Fix bug: allow helm controller set owner reference
  • Bump klipper-helm image for tls secret support
  • Fix issue with k3s-etcd informers not starting
  • --Enable-pprof can now be set on agents to enable the debug/pprof endpoints. When set, agents will listen on the supervisor port.
  • --Supervisor-metrics can now be set on servers to enable serving internal metrics on the supervisor endpoint; when set agents will listen on the supervisor port.
  • Fix netpol crash when node remains tained unintialized
  • The embedded load-balancer will now fall back to trying all servers with health-checks ignored, if all servers have been marked unavailable due to failed health checks.
• More backports for 2024-06 release cycle (#​10289)
• Add snapshot retention etcd-s3-folder fix (#​10315)
• Add test for isValidResolvConf (#​10302) (#​10331)
• Fix race condition panic in loadbalancer.nextServer (#​10323)
• Fix typo, use rancher/permissions (#​10299)
• Update Kubernetes to v1.28.11 (#​10347)
• Fix agent supervisor port using apiserver port instead (#​10355)
• Fix issue that allowed multiple simultaneous snapshots to be allowed (#​10377)

Embedded Component Versions

Component	Version
Kubernetes	v1.28.11
Kine	v0.11.9
SQLite	3.44.0
Etcd	v3.5.13-k3s1
Containerd	v1.7.17-k3s1.28
Runc	v1.1.12
Flannel	v0.25.2
Metrics-server	v0.7.0
Traefik	v2.10.7
CoreDNS	v1.10.1
Helm-controller	v0.15.10
Local-path-provisioner	v0.0.27

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.