chore(deps): update dependency k3s-io/k3s to v1.35.3+k3s1

[renovate]

This PR contains the following updates:

Package	Update	Change
k3s-io/k3s	patch	v1.35.2+k3s1 → v1.35.3+k3s1

---

Release Notes

k3s-io/k3s (k3s-io/k3s)

v1.35.3+k3s1: v1.35.3+k3s1

Compare Source

This release updates Kubernetes to v1.35.3, and fixes a number of issues.

For more details on what's new, see the Kubernetes release notes.

Changes since v1.35.2+k3s1:

• • Bump to coredns 1.14.2 (#​13757)
• Save cluster state before reencyrpting secrets with newly created key (#​13771)
• Backports for 2026-03 (#​13789)
• Bump runc to v1.4.1 (#​13797)
• Bump Traefik helm chart version (#​13815)
• Bump cni plugins to v1.9.1 (#​13822)
• Simplify snapshot compress/decompress logic (#​13827)
• Update to v1.35.3-k3s1 and Go 1.25.7 (#​13835)
• Chore: Update Trivy version in Dockerfile.dapper (#​13851)
• • Update to flannel v0.28.2 (#​13868)

Embedded Component Versions

Component	Version
Kubernetes	v1.35.3
Kine	v0.14.14
SQLite	3.51.2
Etcd	v3.6.7-k3s1
Containerd	v2.2.2-k3s1
Runc	v1.4.1
Flannel	v0.28.2
Metrics-server	v0.8.1
Traefik	v3.6.10
CoreDNS	v1.14.2
Helm-controller	v0.16.17
Local-path-provisioner	v0.0.35

Helpful Links

As always, we welcome and appreciate feedback from our community of users. Please feel free to:

• Open issues here
• Join our Slack channel
• Check out our documentation for guidance on how to get started or to dive deep into K3s.
• Read how you can contribute here

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[autonomous-bancey]

Plan Result (generate_ansible_inventory)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (prod_twingate)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (test_vpn_gateway)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (prod_vpn_gateway)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (test_gameserver)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (prod_gameserver)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (prod_dns)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (tiny_virtual_machines)

⚠️ Resource Deletion will happen

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 2 to add, 0 to change, 2 to destroy.

• Replace
  • terraform_data.ansible["mariadb"]
  • terraform_data.k8s_ansible["tiny"]

Change Result (Click me)

  # terraform_data.ansible["mariadb"] is tainted, so must be replaced
-/+ resource "terraform_data" "ansible" {
      ~ id               = "152d3b33-9e1b-01a0-ff02-a85d2840d2a5" -> (known after apply)
        # (1 unchanged attribute hidden)
    }

  # terraform_data.k8s_ansible["tiny"] must be replaced
-/+ resource "terraform_data" "k8s_ansible" {
      ~ id               = "17c3f01e-7b46-766b-69d9-99212516dab6" -> (known after apply)
      ~ triggers_replace = {
          ~ k3s_playbook    = "752043d08dba7f4dec4cd0508a4ba7f6" -> "f03f2d894202d392eabbd7d8260b730d"
            # (2 unchanged attributes hidden)
        }
    }

Plan: 2 to add, 0 to change, 2 to destroy.