What rancher/rancher shipped
Written by FoxPlug from public releases; not affiliated with Rancher. An automatic summary of the public release, pull request and commit data of github.com/rancher/rancher. Rancher did not write it and does not use or endorse FoxPlug. Every line links to the public change it describes.
Get a weekly update like this for your product, free
Week of September 21, 2026
What shipped
- Released v2.15.2 with fixes for AD FS authentication issues that could occur during upgrades to v2.10.1 or later. Release
- Users can now select restore modes for etcd snapshots on imported RKE2/K3s and CAPRKE2 clusters through a new snapshotextrametadata handler. Pull request #57227
- Day2 Operations now supports certificate rotation through a new CertificateRotation CRD and controller, matching functionality from legacy provisioning. Pull request #56333
- Migrated the EKS handler from v1 to v2 with unit, integration, and validation testing. Pull request #57541
- Updated Fleet to v0.17.0-alpha.5. Pull request #57577
- OKTA LDAP provider setup now saves passwords immediately into a secret, consistent with Shibboleth behavior. Pull request #57212
- Implemented LDAP search functionality for the AD FS/SAML provider. Pull request #57021
- Added PodDisruptionBudget support to the Rancher Chart. Pull request #57560
- Improved SCC Operator Deployment security context with stricter pod and container-level security configurations. Pull request #57137
- Removed the audit log package's dependency on management data to allow auth packages to import audit logging without circular dependencies. Pull request #57603
Why it matters
This week shipped releases across multiple versions with authentication fixes, Day2 Operations enhancements for certificate rotation and restore modes, and security improvements. Several test infrastructure and dependency management improvements support ongoing stability and maintainability of the project.
Changelog entry
- Released v2.15.2 Release
- Released v2.14.6 Release
- Released v2.13.10 Release
- Released v2.12.14 Release
- Released v2.11.18 Release
- Add restore mode selection for etcd snapshot restores on imported RKE2/K3s and CAPRKE2 clusters Pull request #57227
- Add Day2 Operations support for certificate rotation Pull request #56333
- Migrate EKS handler from v1 to v2 Pull request #57541
- Update Fleet to v0.17.0-alpha.5 Pull request #57577
- Fix OKTA LDAP setup to save passwords immediately into a secret Pull request #57212
- Implement LDAP search for AD FS/SAML provider Pull request #57021
- Add PodDisruptionBudget support to Rancher Chart Pull request #57560
- Improve SCC Operator Deployment security context Pull request #57137
- Fix Helm4 wait flag to use string type instead of bool Pull request #57518
- Remove audit log package dependency on management data Pull request #57603
Rancher v2.15.2 released with AD FS authentication fixes. New features include etcd snapshot restore modes, certificate rotation for Day2 Ops, and improved security contexts for SCC deployments.
Rancher v2.15.2 is now available with critical AD FS authentication fixes for upgrades. This release brings Day2 Operations support for certificate rotation and etcd snapshot restore modes, enhanced security configurations for SCC deployments, and improved LDAP functionality for OKTA and AD FS providers. Updates also include Fleet v0.17.0-alpha.5 and PodDisruptionBudget support in the Rancher Chart.
Week of September 14, 2026
What shipped
- Fixed retry and recovery logic for failed deferred controller starts, addressing issue #54006. Pull request #57296
- Added deterministic check for last etcd node protection to manage pre-terminate annotations for etcd machines. Pull request #54202
- Added API type definitions for operation cancellation. Pull request #57392
- Updated Fleet to v0.14.11 in release/v2.13. Pull request #57436
- Updated Fleet to v0.13.16 in release/v2.12. Pull request #57437
- Updated Fleet to v0.16.2 in release/v2.15. Pull request #57440
- Updated Fleet to v0.15.7 in release/v2.14. Pull request #57438
- Updated Fleet to v0.12.20 in release/v2.11. Pull request #57439
- Fixed klipper repository URLs in image origins for v2.13 to reflect new k3s-io organization home. Pull request #57370
- Bumped remotedialer-proxy to stable v0.8.2 in release/v2.15. Pull request #57404
Why it matters
This week focused on stability improvements with controller retry fixes and etcd node protection logic, while updating core dependencies like Fleet across all supported release branches. Multiple klipper repository URL corrections ensure accurate artifact generation across releases.
Changelog entry
- Fix retry and recovery from failed deferred controller starts (#54006) Pull request #57296
- Add deterministic check for last etcd node protection (#53836) Pull request #54202
- Add operation cancellation API types (#54267) Pull request #57392
- Update Fleet to v0.14.11 (v2.13) Pull request #57436
- Update Fleet to v0.13.16 (v2.12) Pull request #57437
- Update Fleet to v0.16.2 (v2.15) Pull request #57440
- Update Fleet to v0.15.7 (v2.14) Pull request #57438
- Update Fleet to v0.12.20 (v2.11) Pull request #57439
- Fix klipper repository URLs in image origins (v2.13) Pull request #57370
- Fix klipper repository URLs in image origins (v2.14) Pull request #57369
- Fix klipper repository URLs in image origins (v2.15) Pull request #57368
- Bump remotedialer-proxy to v0.8.2 (v2.15) Pull request #57404
- Bump remotedialer-proxy to v0.7.6 (v2.14) Pull request #57403
- Bump remotedialer-proxy to v0.6.4 (v2.13) Pull request #57402
This week: fixed controller startup recovery, added etcd node protection checks, updated Fleet and remotedialer-proxy across release branches, corrected klipper repository references.
Rancher shipped stability and dependency updates this week: controller retry and recovery fixes for failed deferred starts, deterministic etcd node protection for safe machine termination, and Fleet updates across v2.11-v2.15. Also corrected klipper repository URLs reflecting the k3s-io organization move, ensuring accurate image origin tracking in release artifacts.