> For the complete documentation index, see [llms.txt](https://docs.platform9.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.platform9.com/managed-kubernetes/overview/pmk-release-notes/release-notes.md).

# PMK Release 5.17 Release Notes

Discover the latest enhancements in Platform9 Managed Kubernetes (PMK) version 5.17. This release supports Kubernetes v1.36.

## Release Summary

The Platform9 Managed Kubernetes (PMK) version 5.17 release is now generally available with active support for Kubernetes **v1.36**

## PMK 5.17.0 Release Highlights (Released 2026-08-25)

#### New Features

<mark style="color:green;">`Added`</mark> Added active support for Kubernetes **1.36**

#### Feature Updates

<mark style="color:$success;">`Updated`</mark> Updated Etcd from 3.5.26 to 3.6.13.

#### Bug Fixes

<mark style="color:orange;">`Fixed`</mark>  Security vulnerabilities:

1. CVE-2025-68121: crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption.
2. CVE-2026-33186: gRPC-Go has an authorization bypass via missing leading slash in :path.
3. CVE-2020-14343: Improper Input Validation in PyYAML.

<mark style="color:orange;">`Fixed`</mark>  int32 to int64 format for myASN and peerASN of BGPPeer metallb.

#### Deprecations, Feature Removal and EOL information

{% hint style="danger" %}
**Platform9 supports only Ubuntu 24.04 with Cilium 1.18.4.**

The following OS and kernel combinations are not compatible with Cilium 1.18:

* Ubuntu 22.04 LTS GA kernel (5.15.0-67-generic). **Upgrade to Ubuntu 24.04** which provides 5.15.0-1090-kvm to ensure Cilium 1.18.4 compatibility.
* RHEL 8.10 with kernel 4.18.0-553.el8\_10.x86\_64.
  {% endhint %}

{% hint style="warning" %}
RHEL 8.10 is not compatible with Kubernetes 1.36 . RHEL 8.10 by default only supports cgroup v1 which was deprecated in Kubernetes 1.35 [See the Kubernetes cgroups docs for reference.](https://kubernetes.io/docs/concepts/architecture/cgroups/?utm_source=chatgpt.com#deprecation-of-cgroup-v1)
{% endhint %}

{% hint style="danger" %}
**Kubernetes 1.33 and lower EoL**

* All clusters must be upgraded to at **least Kubernetes v1.34** before upgrading from **PMK 5.16.x to PMK 5.17**
* **Kubernetes v1.33** and lower versions are marked as *End of Life* on **PMK 5.17**
  {% endhint %}

{% hint style="warning" %}
**Kubernetes 1.34 Deprecated**

* **Kubernetes v1.34** is marked as deprecated.
* New clusters should be created on **Kubernetes v1.35** or above. However, you can continue to create new clusters on Kubernetes v1.34 or above.
  {% endhint %}

For PMK **5.17** release, check the PMK support matrix here: [Managed Kubernetes Support Matrix](/managed-kubernetes/support/support/managed-kubernetes-support-matrix.md).

#### Known Issues

<mark style="color:blue;">`Known Limitation`</mark> ImageVolume (new in K8s 1.36, mounts an OCI image as a pod volume) conformance test — unsupported by bundled containerd 1.7.27; needs containerd 2.x

<mark style="color:blue;">`Known Issue`</mark> All links in the UI to point to still to the old documentation pages.

<mark style="color:blue;">`Known Issue`</mark> In the in-cluster monitoring addon, the Grafana dashboards report an error. Workaround is to use kubectl port-forward.

<mark style="color:blue;">`Known Issue`</mark> All existing and new AWS clusters in PMK must be configured with an `is_update`flag and restricted security group rules. Without this cluster updates (such as AMI updated) and upgrades may fail. Please reach out to Platform9 support for this configuration.

<mark style="color:blue;">`Known Issue`</mark> During PMK cluster upgrades, `pf9-kube` package uninstallation may be incomplete if workload containers are not stopped and removed. Please reach out to Platform9 support if this occurs.

<mark style="color:blue;">`Known Issue`</mark> On Rocky Linux 9 (tested on 9.2 and 9.4), Platform9's `pf9-kube` package installs `iptables-services` as a dependency. With recent updates to the upstream repositories, installation will fail due to a missing dependency on `iptables-legacy-*` packages.

<mark style="color:blue;">`Known Issue`</mark> (On Rocky Linux 9) Users will need to install the legacy packages by running `dnf install iptables` or `dnf install iptables-utils` on workload cluster nodes. Since this is a recent upstream change, a solution will be provided in upcoming releases by packaging the required packages along with `pf9-kube` package.

<mark style="color:blue;">`Known Issue`</mark> AWS clusters using flannel CNI need to be updated to use port 2379 instead of 4001 from1.22 version onwards. Workaround is to go to the "Edit cluster" option on the UI and clicked on "Update cluster" without making any changes. This adds the 2379 ingress rule to the master ELB.

<mark style="color:blue;">`Known Issue`</mark> In some scenarios, after a node is removed from the qbert clusters, nodelet fails to cleanup the data. Workaround is to check and remove the `/var/opt/pf9/kube`directory if present, even after the node is deauthorized.

<mark style="color:blue;">`Known Issue`</mark> Cluster upgrade attempt is blocked on UI post a cluster upgrade failure due to nodes being in a converging/not converged state.

<mark style="color:blue;">`Known Issue`</mark> Kubelet authorization mode is marked set to AlwaysAllow instead of Webhook.

<mark style="color:blue;">`Known Issue`</mark> PMK Cloud provider created directly in Sunpike cannot be used to create qbert clusters. Qbert cloud providers will work to create both qbert and sunpike clusters. But cloud providers created directly in sunpike CANNOT be used to create qbert clusters. Please use the appropriate one based on your needs.

### Package Updates

#### PMK 5.17.0 Latest Kubernetes Components List

<table data-header-hidden><thead><tr><th width="187">Component</th><th width="172.265625">Kubernetes 1.36</th><th width="179.88671875">Kubernetes 1.35</th><th>Kubernetes 1.34</th></tr></thead><tbody><tr><td>KUBERNETES BUILD VERSION</td><td><strong>1.36.2-pmk.18</strong><br><mark style="color:green;"><strong><code>updated</code></strong></mark></td><td>1.35.1-pmk.<strong>10</strong><br><mark style="color:green;"><strong><code>updated</code></strong></mark></td><td>1.34.2-pmk.<strong>31</strong>  <mark style="color:green;"><strong><code>updated</code></strong></mark></td></tr><tr><td>CONTAINERD</td><td>1.7.27</td><td>1.7.27</td><td>1.7.27</td></tr><tr><td>RUNC</td><td>1.1.12</td><td>1.1.12</td><td>1.1.12</td></tr><tr><td>CORE-DNS</td><td>1.11.1</td><td>1.11.1</td><td>1.11.1</td></tr><tr><td>METRICS SERVER</td><td>0.6.4</td><td>0.6.4</td><td>0.6.4</td></tr><tr><td>METAL LB</td><td>0.14.9</td><td>0.14.9</td><td>0.14.9</td></tr><tr><td>KUBERNETES DASHBOARD</td><td>2.7.0</td><td>2.7.0</td><td>2.7.0</td></tr><tr><td>FLANNEL CNI</td><td>0.24.2</td><td>0.24.2</td><td>0.24.2</td></tr><tr><td>CALICO CNI </td><td>3.31.2 </td><td>3.31.2</td><td>3.31.2</td></tr><tr><td>CILIUM CNI</td><td>0.18.4</td><td>0.18.4</td><td>0.18.4</td></tr><tr><td>CILIUM CLI</td><td>0.18.4</td><td>0.18.4</td><td>0.18.4</td></tr><tr><td><strong>ETCD </strong><mark style="color:green;"><strong><code>updated</code></strong></mark></td><td><strong>3.6.13 </strong><mark style="color:green;"><strong><code>updated</code></strong></mark></td><td><strong>3.6.13 </strong><mark style="color:green;"><strong><code>updated</code></strong></mark></td><td><strong>3.6.13 </strong><mark style="color:green;"><strong><code>updated</code></strong></mark></td></tr><tr><td>CNI PLUGINS</td><td>1.4.0</td><td>1.4.0</td><td>1.4.0</td></tr><tr><td>ADVANCED NETWORKING OPERATOR (LUIGI)</td><td>0.5.8</td><td>0.5.8</td><td>0.5.8</td></tr><tr><td>MONITORING - PROMETHEUS OPERATOR </td><td>0.88.12</td><td>0.88.12</td><td>0.88.12</td></tr><tr><td>PROFILE AGENT</td><td>2.0.2</td><td>2.0.2</td><td>2.0.2</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.platform9.com/managed-kubernetes/overview/pmk-release-notes/release-notes.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.