Minor: k3s update from v1.26.3+k3s1 to v1.26.4+k3s1

[cguertin14]

This release updates Kubernetes to v1.26.4, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.26.3+k3s1:

• Enhance k3s check-config (#7091)
• Update stable channel to v1.25.8+k3s1 (#7161)
• Drone Pipelines enhancement (#7169)
• Fix_get_sha_url (#7187)
• Improve Updatecli local-path-provisioner pipeline (#7181)
• Improve workflow (#7142)
• Improve Trivy configuration (#7154)
• Bump Local Path Provisioner version (#7167)
  • The bundled local-path-provisioner version has been bumped to v0.0.24
• Bump etcd to v3.5.7 (#7170)
  • The embedded etcd version has been bumped to v3.5.7
• Bump runc to v1.1.5 (#7171)
  • The bundled runc version has been bumped to v1.1.5
• Fix race condition caused by etcd advertising addresses that it does not listen on (#7147)
  • Fixed a race condition during cluster reset that could cause the operation to hang and time out.
• Bump coredns to v1.10.1 (#7168)
  • The bundled coredns version has been bumped to v1.10.1
• Don't apply hardened args to agent (#7089)
• Upgrade helm-controller to v0.13.3 (#7209)
• Improve Klipper Helm and Helm controller bumps (#7146)
• Fix issue with stale connections to removed LB server (#7194)
  • The client load-balancer that maintains connections to active server nodes now closes connections to servers when they are removed from the cluster. This ensures that agent components immediately reconnect to a current cluster member.
• Bump actions/setup-go from 3 to 4 (#7111)
• Lock bootstrap data with empty key to prevent conflicts (#7215)
  • When using an external datastore, K3s now locks the bootstrap key while creating initial cluster bootstrap data, preventing a race condition when multiple servers attempted to initialize the cluster simultaneously.
• Updated kube-router to move the default ACCEPT rule at the end of the chain (#7218)
  • The embedded kube-router controller has been updated to fix a regression that caused traffic from pods to be blocked by any default drop/deny rules present on the host. Users should still confirm that any externally-managed firewall rules explicitly allow traffic to/from pod and service networks, but this returns the old behavior that was relied upon by some users.
• Add make commands to terraform automation and fix external dbs related issue (#7159)
• Update klipper lb to v0.4.2 (#7210)
• Add coreos and sle micro to selinux support (#6945)
• Fix call for k3s-selinux versions in airgapped environments (#7264)
• Update Kube-router ACCEPT rule insertion and install script to clean rules before start (#7274)
  • The embedded kube-router controller has been updated to fix a regression that caused traffic from pods to be blocked by any default drop/deny rules present on the host. Users should still confirm that any externally-managed firewall rules explicitly allow traffic to/from pod and service networks, but this returns the old behavior that was relied upon by some users.
• Update to v1.26.4-k3s1 (#7282)
• Bump golang:alpine image version (#7292)
• Bump Sonobuoy version (#7256)
• Bump Trivy version (#7257)

Embedded Component Versions

Component	Version
Kubernetes	v1.26.4
Kine	v0.9.9
SQLite	3.39.2
Etcd	v3.5.7-k3s1
Containerd	v1.6.19-k3s1
Runc	v1.1.5
Flannel	v0.21.4
Metrics-server	v0.6.2
Traefik	v2.9.4
CoreDNS	v1.10.1
Helm-controller	v0.13.3
Local-path-provisioner	v0.0.24

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here