# Longhorn v1.13.0

> Storage & Data · 2026-09-29

A feature-rich release expands V2 Data Engine, scheduling, snapshots, metrics, and operational capabilities while fixing volume, backup, networking, resilience, and stability issues. Upgrade prerequisites need review, and the release includes a security fix plus opt-in resilience and CPU-management improvements that leave existing defaults unchanged.

## Action needed
- **[security]** CSI method-level request log secret sanitization
  - CSI method-level request logs no longer bypass secret sanitization. The fix is tracked in issue `13613`.

## Check if affected
- **[breaking]** Kubernetes version requirement for the `CSI external-provisioner`
  - Applies when installing or upgrading to Longhorn `v1.13.0`.
  - The `CSI external-provisioner` is upgraded to `v6.3.0`, so clusters must run Kubernetes `v1.34` or later before installing or upgrading to Longhorn `v1.13.0`.
- **[breaking]** Restrictions on older `V2 linked-clone volumes`
  - Applies if you use `V2 linked-clone volumes` created in Longhorn `v1.12.0` or earlier.
  - `V2 linked-clone volumes` created in Longhorn `v1.12.0` or earlier can only be detached or deleted.
- **[breaking]** V2 live upgrade support for Longhorn `v1.13.0`
  - Applicability is not stated in the release notes.
  - V2 live upgrade to Longhorn `v1.13.0` is supported only from Longhorn `v1.12.2`. Upgrades from `v1.12.0` or `v1.12.1`, or upgrades that do not meet the documented prerequisites, require all V2 volumes to be detached and their replicas stopped first.
- **[breaking]** Three-replica `longhorn-global-manager` Deployment
  - Applicability is not stated in the release notes.
  - The `longhorn-global-manager` Deployment is created with three replicas by default during installation and upgrade. At least one pod must be schedulable before an upgrade.
- **[breaking]** mTLS coverage for instance manager gRPC services
  - Applies if the `longhorn-grpc-tls` secret is configured.
  - mTLS covers all instance manager gRPC services, and every gRPC port requires a valid client certificate when the `longhorn-grpc-tls` secret is configured.

## Other recorded changes
- 118 (defect_corrected 78, added 28, value_changed 9, constraint_changed 2, default_changed 1)

[Full analysis](https://ratatosk.io/en/releases/longhorn/v1.13.0)

[Original release notes](https://github.com/longhorn/longhorn/releases/tag/v1.13.0)