diff --git a/Documentation/api.md b/Documentation/api.md
index 2a8e97a4..1ee89119 100644
--- a/Documentation/api.md
+++ b/Documentation/api.md
@@ -39,8 +39,8 @@ GET http://matchbox.foo/ipxe?label=value
 
 ```
 #!ipxe
-kernel /assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp} coreos.first_boot=1 coreos.autologin
-initrd  /assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz
+kernel /assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp} coreos.first_boot=1 coreos.autologin
+initrd  /assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz
 boot
 ```
 
@@ -67,9 +67,9 @@ default=0
 timeout=1
 menuentry "CoreOS" {
 echo "Loading kernel"
-linuxefi "(http;matchbox.foo:8080)/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz" "coreos.autologin" "coreos.config.url=http://matchbox.foo:8080/ignition" "coreos.first_boot"
+linuxefi "(http;matchbox.foo:8080)/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz" "coreos.autologin" "coreos.config.url=http://matchbox.foo:8080/ignition" "coreos.first_boot"
 echo "Loading initrd"
-initrdefi "(http;matchbox.foo:8080)/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"
+initrdefi "(http;matchbox.foo:8080)/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"
 }
 ```
 
@@ -231,7 +231,7 @@ If you need to serve static assets (e.g. kernel, initrd), `matchbox` can serve a
 ```
 matchbox.foo/assets/
 └── coreos
-    └── 1235.9.0
+    └── 1298.7.0
         ├── coreos_production_pxe.vmlinuz
         └── coreos_production_pxe_image.cpio.gz
     └── 1153.0.0
diff --git a/Documentation/bootkube.md b/Documentation/bootkube.md
index 0964a4e2..39b30d4c 100644
--- a/Documentation/bootkube.md
+++ b/Documentation/bootkube.md
@@ -30,7 +30,7 @@ The [examples](../examples) statically assign IP addresses to libvirt client VMs
 Download the CoreOS image assets referenced in the target [profile](../examples/profiles).
 
 ```sh
-$ ./scripts/get-coreos stable 1235.9.0 ./examples/assets
+$ ./scripts/get-coreos stable 1298.7.0 ./examples/assets
 ```
 
 Add your SSH public key to each machine group definition [as shown](../examples/README.md#ssh-keys).
diff --git a/Documentation/deployment.md b/Documentation/deployment.md
index 86d0bf9f..daff7250 100644
--- a/Documentation/deployment.md
+++ b/Documentation/deployment.md
@@ -203,7 +203,7 @@ Certificate chain
 Download a recent CoreOS [release](https://coreos.com/releases/) with signatures.
 
 ```sh
-$ ./scripts/get-coreos stable 1235.9.0 .     # note the "." 3rd argument
+$ ./scripts/get-coreos stable 1298.7.0 .     # note the "." 3rd argument
 ```
 
 Move the images to `/var/lib/matchbox/assets`,
@@ -215,7 +215,7 @@ $ sudo cp -r coreos /var/lib/matchbox/assets
 ```
 /var/lib/matchbox/assets/
 ├── coreos
-│   └── 1235.9.0
+│   └── 1298.7.0
 │       ├── CoreOS_Image_Signing_Key.asc
 │       ├── coreos_production_image.bin.bz2
 │       ├── coreos_production_image.bin.bz2.sig
@@ -228,7 +228,7 @@ $ sudo cp -r coreos /var/lib/matchbox/assets
 and verify the images are acessible.
 
 ```sh
-$ curl http://matchbox.example.com:8080/assets/coreos/1235.9.0/
+$ curl http://matchbox.example.com:8080/assets/coreos/1298.7.0/
 <pre>...
 ```
 
diff --git a/Documentation/getting-started-docker.md b/Documentation/getting-started-docker.md
index 986116fc..d3a1097d 100644
--- a/Documentation/getting-started-docker.md
+++ b/Documentation/getting-started-docker.md
@@ -29,7 +29,7 @@ $ cd matchbox
 Download CoreOS image assets referenced by the `etcd-docker` [example](../examples) to `examples/assets`.
 
 ```sh
-$ ./scripts/get-coreos stable 1235.9.0 ./examples/assets
+$ ./scripts/get-coreos stable 1298.7.0 ./examples/assets
 ```
 
 For development convenience, add `/etc/hosts` entries for nodes so they may be referenced by name as you would in production.
diff --git a/Documentation/getting-started-rkt.md b/Documentation/getting-started-rkt.md
index aad3f52d..31a7eb82 100644
--- a/Documentation/getting-started-rkt.md
+++ b/Documentation/getting-started-rkt.md
@@ -30,7 +30,7 @@ $ cd matchbox
 Download CoreOS image assets referenced by the `etcd` [example](../examples) to `examples/assets`.
 
 ```sh
-$ ./scripts/get-coreos stable 1235.9.0 ./examples/assets
+$ ./scripts/get-coreos stable 1298.7.0 ./examples/assets
 ```
 
 ## Network
diff --git a/Documentation/kubernetes.md b/Documentation/kubernetes.md
index 1c711d1e..ea5e434d 100644
--- a/Documentation/kubernetes.md
+++ b/Documentation/kubernetes.md
@@ -24,7 +24,7 @@ The [examples](../examples) statically assign IP addresses to libvirt client VMs
 Download the CoreOS image assets referenced in the target [profile](../examples/profiles).
 
 ```sh
-$ ./scripts/get-coreos stable 1235.9.0 ./examples/assets
+$ ./scripts/get-coreos stable 1298.7.0 ./examples/assets
 ```
 
 Optionally, add your SSH public key to each machine group definition [as shown](../examples/README.md#ssh-keys).
diff --git a/Documentation/matchbox.md b/Documentation/matchbox.md
index ef4add2f..e9945c3b 100644
--- a/Documentation/matchbox.md
+++ b/Documentation/matchbox.md
@@ -64,8 +64,8 @@ Profiles reference an Ignition config, Cloud-Config, and/or generic config by na
   "ignition_id": "etcd.yaml",
   "generic_id": "some-service.cfg",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/Documentation/rktnetes.md b/Documentation/rktnetes.md
index 57c58b01..b29085d7 100644
--- a/Documentation/rktnetes.md
+++ b/Documentation/rktnetes.md
@@ -24,7 +24,7 @@ The [examples](../examples) statically assign IP addresses to libvirt client VMs
 Download the CoreOS image assets referenced in the target [profile](../examples/profiles).
 
 ```sh
-$ ./scripts/get-coreos stable 1235.9.0 ./examples/assets
+$ ./scripts/get-coreos stable 1298.7.0 ./examples/assets
 ```
 
 Optionally, add your SSH public key to each machine group definition [as shown](../examples/README.md#ssh-keys).
diff --git a/examples/README.md b/examples/README.md
index 78f41f86..5a598dc6 100644
--- a/examples/README.md
+++ b/examples/README.md
@@ -5,17 +5,17 @@ These examples network boot and provision machines into Container Linux clusters
 
 | Name       | Description | CoreOS Version | FS | Docs | 
 |------------|-------------|----------------|----|-----------|
-| simple | CoreOS with autologin, using iPXE | stable/1235.9.0 | RAM | [reference](https://coreos.com/os/docs/latest/booting-with-ipxe.html) |
-| simple-install | CoreOS Install, using iPXE | stable/1235.9.0 | RAM | [reference](https://coreos.com/os/docs/latest/booting-with-ipxe.html) |
-| grub | CoreOS via GRUB2 Netboot | stable/1235.9.0 | RAM | NA |
-| etcd3 | A 3 node etcd3 cluster with proxies | stable/1235.9.0 | RAM | None |
-| etcd3-install | Install a 3 node etcd3 cluster to disk | stable/1235.9.0 | Disk | None |
-| k8s | Kubernetes cluster with 1 master, 2 workers, and TLS-authentication | stable/1235.9.0 | Disk | [tutorial](../Documentation/kubernetes.md) |
-| k8s-install | Kubernetes cluster, installed to disk | stable/1235.9.0 | Disk | [tutorial](../Documentation/kubernetes.md) |
-| rktnetes | Kubernetes cluster with rkt container runtime, 1 master, workers, TLS auth (experimental) | stable/1235.9.0 | Disk | [tutorial](../Documentation/rktnetes.md) |
-| rktnetes-install | Kubernetes cluster with rkt container runtime, installed to disk (experimental) | stable/1235.9.0 | Disk | [tutorial](../Documentation/rktnetes.md) |
-| bootkube | iPXE boot a self-hosted Kubernetes cluster (with bootkube) | stable/1235.9.0 | Disk | [tutorial](../Documentation/bootkube.md) |
-| bootkube-install | Install a self-hosted Kubernetes cluster (with bootkube) | stable/1235.9.0 | Disk | [tutorial](../Documentation/bootkube.md) |
+| simple | CoreOS with autologin, using iPXE | stable/1298.7.0 | RAM | [reference](https://coreos.com/os/docs/latest/booting-with-ipxe.html) |
+| simple-install | CoreOS Install, using iPXE | stable/1298.7.0 | RAM | [reference](https://coreos.com/os/docs/latest/booting-with-ipxe.html) |
+| grub | CoreOS via GRUB2 Netboot | stable/1298.7.0 | RAM | NA |
+| etcd3 | A 3 node etcd3 cluster with proxies | stable/1298.7.0 | RAM | None |
+| etcd3-install | Install a 3 node etcd3 cluster to disk | stable/1298.7.0 | Disk | None |
+| k8s | Kubernetes cluster with 1 master, 2 workers, and TLS-authentication | stable/1298.7.0 | Disk | [tutorial](../Documentation/kubernetes.md) |
+| k8s-install | Kubernetes cluster, installed to disk | stable/1298.7.0 | Disk | [tutorial](../Documentation/kubernetes.md) |
+| rktnetes | Kubernetes cluster with rkt container runtime, 1 master, workers, TLS auth (experimental) | stable/1298.7.0 | Disk | [tutorial](../Documentation/rktnetes.md) |
+| rktnetes-install | Kubernetes cluster with rkt container runtime, installed to disk (experimental) | stable/1298.7.0 | Disk | [tutorial](../Documentation/rktnetes.md) |
+| bootkube | iPXE boot a self-hosted Kubernetes cluster (with bootkube) | stable/1298.7.0 | Disk | [tutorial](../Documentation/bootkube.md) |
+| bootkube-install | Install a self-hosted Kubernetes cluster (with bootkube) | stable/1298.7.0 | Disk | [tutorial](../Documentation/bootkube.md) |
 
 ## Tutorials
 
diff --git a/examples/groups/bootkube-install/install.json b/examples/groups/bootkube-install/install.json
index 05a7c32d..e7ce3ce2 100644
--- a/examples/groups/bootkube-install/install.json
+++ b/examples/groups/bootkube-install/install.json
@@ -4,7 +4,7 @@
   "profile": "install-reboot",
   "metadata": {
     "coreos_channel": "stable",
-    "coreos_version": "1235.9.0",
+    "coreos_version": "1298.7.0",
     "ignition_endpoint": "http://matchbox.foo:8080/ignition",
     "baseurl": "http://matchbox.foo:8080/assets/coreos"
   }
diff --git a/examples/groups/etcd3-install/install.json b/examples/groups/etcd3-install/install.json
index 05a7c32d..e7ce3ce2 100644
--- a/examples/groups/etcd3-install/install.json
+++ b/examples/groups/etcd3-install/install.json
@@ -4,7 +4,7 @@
   "profile": "install-reboot",
   "metadata": {
     "coreos_channel": "stable",
-    "coreos_version": "1235.9.0",
+    "coreos_version": "1298.7.0",
     "ignition_endpoint": "http://matchbox.foo:8080/ignition",
     "baseurl": "http://matchbox.foo:8080/assets/coreos"
   }
diff --git a/examples/groups/k8s-install/install.json b/examples/groups/k8s-install/install.json
index 05a7c32d..e7ce3ce2 100644
--- a/examples/groups/k8s-install/install.json
+++ b/examples/groups/k8s-install/install.json
@@ -4,7 +4,7 @@
   "profile": "install-reboot",
   "metadata": {
     "coreos_channel": "stable",
-    "coreos_version": "1235.9.0",
+    "coreos_version": "1298.7.0",
     "ignition_endpoint": "http://matchbox.foo:8080/ignition",
     "baseurl": "http://matchbox.foo:8080/assets/coreos"
   }
diff --git a/examples/groups/rktnetes-install/install.json b/examples/groups/rktnetes-install/install.json
index 05a7c32d..e7ce3ce2 100644
--- a/examples/groups/rktnetes-install/install.json
+++ b/examples/groups/rktnetes-install/install.json
@@ -4,7 +4,7 @@
   "profile": "install-reboot",
   "metadata": {
     "coreos_channel": "stable",
-    "coreos_version": "1235.9.0",
+    "coreos_version": "1298.7.0",
     "ignition_endpoint": "http://matchbox.foo:8080/ignition",
     "baseurl": "http://matchbox.foo:8080/assets/coreos"
   }
diff --git a/examples/groups/simple-install/install.json b/examples/groups/simple-install/install.json
index 9cf40b8a..82338a6e 100644
--- a/examples/groups/simple-install/install.json
+++ b/examples/groups/simple-install/install.json
@@ -4,7 +4,7 @@
   "profile": "simple-install",
   "metadata": {
     "coreos_channel": "stable",
-    "coreos_version": "1235.9.0",
+    "coreos_version": "1298.7.0",
     "ignition_endpoint": "http://matchbox.foo:8080/ignition",
     "baseurl": "http://matchbox.foo:8080/assets/coreos"
   }
diff --git a/examples/profiles/bootkube-controller.json b/examples/profiles/bootkube-controller.json
index 5078c935..94b5d9da 100644
--- a/examples/profiles/bootkube-controller.json
+++ b/examples/profiles/bootkube-controller.json
@@ -2,8 +2,8 @@
   "id": "bootkube-controller",
   "name": "bootkube Ready Controller",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "root=/dev/sda1",
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
diff --git a/examples/profiles/bootkube-worker.json b/examples/profiles/bootkube-worker.json
index 7b63b4af..b7f57712 100644
--- a/examples/profiles/bootkube-worker.json
+++ b/examples/profiles/bootkube-worker.json
@@ -2,8 +2,8 @@
   "id": "bootkube-worker",
   "name": "bootkube Ready Worker",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "root=/dev/sda1",
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
diff --git a/examples/profiles/etcd3-gateway.json b/examples/profiles/etcd3-gateway.json
index 8ab3f7f1..55619f92 100644
--- a/examples/profiles/etcd3-gateway.json
+++ b/examples/profiles/etcd3-gateway.json
@@ -2,8 +2,8 @@
   "id": "etcd3-gateway",
   "name": "etcd3-gateway",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/etcd3.json b/examples/profiles/etcd3.json
index c6df3b80..5d16dd15 100644
--- a/examples/profiles/etcd3.json
+++ b/examples/profiles/etcd3.json
@@ -2,8 +2,8 @@
   "id": "etcd3",
   "name": "etcd3",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/grub.json b/examples/profiles/grub.json
index 88730ac1..c26bd9cd 100644
--- a/examples/profiles/grub.json
+++ b/examples/profiles/grub.json
@@ -2,8 +2,8 @@
   "id": "grub",
   "name": "CoreOS via GRUB2",
   "boot": {
-    "kernel": "(http;matchbox.foo:8080)/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["(http;matchbox.foo:8080)/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "(http;matchbox.foo:8080)/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["(http;matchbox.foo:8080)/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/install-reboot.json b/examples/profiles/install-reboot.json
index bbf47ea2..a603501a 100644
--- a/examples/profiles/install-reboot.json
+++ b/examples/profiles/install-reboot.json
@@ -2,8 +2,8 @@
   "id": "install-reboot",
   "name": "Install CoreOS and Reboot",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/install-shutdown.json b/examples/profiles/install-shutdown.json
index 41c87ac8..3d6a4386 100644
--- a/examples/profiles/install-shutdown.json
+++ b/examples/profiles/install-shutdown.json
@@ -2,8 +2,8 @@
   "id": "install-shutdown",
   "name": "Install CoreOS and Shutdown",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/k8s-controller.json b/examples/profiles/k8s-controller.json
index 4f714ae7..09c2093d 100644
--- a/examples/profiles/k8s-controller.json
+++ b/examples/profiles/k8s-controller.json
@@ -2,8 +2,8 @@
   "id": "k8s-controller",
   "name": "Kubernetes Controller",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "root=/dev/sda1",
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
diff --git a/examples/profiles/k8s-worker.json b/examples/profiles/k8s-worker.json
index ab4a8a64..9127ac67 100644
--- a/examples/profiles/k8s-worker.json
+++ b/examples/profiles/k8s-worker.json
@@ -2,8 +2,8 @@
   "id": "k8s-worker",
   "name": "Kubernetes Worker",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "root=/dev/sda1",
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
diff --git a/examples/profiles/simple-install.json b/examples/profiles/simple-install.json
index 5264858e..8360e350 100644
--- a/examples/profiles/simple-install.json
+++ b/examples/profiles/simple-install.json
@@ -2,8 +2,8 @@
   "id": "simple-install",
   "name": "Simple CoreOS Alpha Install",
   "boot": {
-    "kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/simple.json b/examples/profiles/simple.json
index 922c2cfc..ac750fd6 100644
--- a/examples/profiles/simple.json
+++ b/examples/profiles/simple.json
@@ -2,8 +2,8 @@
 	"id": "simple",
 	"name": "Simple CoreOS Alpha",
 	"boot": {
-		"kernel": "/assets/coreos/1235.9.0/coreos_production_pxe.vmlinuz",
-		"initrd": ["/assets/coreos/1235.9.0/coreos_production_pxe_image.cpio.gz"],
+		"kernel": "/assets/coreos/1298.7.0/coreos_production_pxe.vmlinuz",
+		"initrd": ["/assets/coreos/1298.7.0/coreos_production_pxe_image.cpio.gz"],
 		"args": [
 			"coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
 			"coreos.first_boot=yes",
diff --git a/examples/terraform/bootkube-install/bootkube.tf b/examples/terraform/bootkube-install/bootkube.tf
index ee3d2f75..c890d000 100644
--- a/examples/terraform/bootkube-install/bootkube.tf
+++ b/examples/terraform/bootkube-install/bootkube.tf
@@ -2,7 +2,7 @@
 module "profiles" {
   source = "../modules/profiles"
   matchbox_http_endpoint = "http://matchbox.example.com:8080"
-  coreos_version = "1235.9.0"
+  coreos_version = "1298.7.0"
 }
 
 // Install CoreOS to disk before provisioning
@@ -12,7 +12,7 @@ resource "matchbox_group" "default" {
   // No selector, matches all nodes
   metadata {
     coreos_channel = "stable"
-    coreos_version = "1235.9.0"
+    coreos_version = "1298.7.0"
     ignition_endpoint = "http://matchbox.example.com:8080/ignition"
     baseurl = "http://matchbox.example.com:8080/assets/coreos"
     ssh_authorized_key = "${var.ssh_authorized_key}"
diff --git a/examples/terraform/etcd3-install/etcd3.tf b/examples/terraform/etcd3-install/etcd3.tf
index 0f88d3cd..76865836 100644
--- a/examples/terraform/etcd3-install/etcd3.tf
+++ b/examples/terraform/etcd3-install/etcd3.tf
@@ -2,7 +2,7 @@
 module "profiles" {
   source = "../modules/profiles"
   matchbox_http_endpoint = "http://matchbox.example.com:8080"
-  coreos_version = "1235.9.0"
+  coreos_version = "1298.7.0"
 }
 
 // Install CoreOS to disk before provisioning
@@ -12,7 +12,7 @@ resource "matchbox_group" "default" {
   // No selector, matches all nodes
   metadata {
     coreos_channel = "stable"
-    coreos_version = "1235.9.0"
+    coreos_version = "1298.7.0"
     ignition_endpoint = "http://matchbox.example.com:8080/ignition"
     baseurl = "http://matchbox.example.com:8080/assets/coreos"
     ssh_authorized_key = "${var.ssh_authorized_key}"
diff --git a/scripts/devnet b/scripts/devnet
index d0601f2d..84e9da8b 100755
--- a/scripts/devnet
+++ b/scripts/devnet
@@ -10,7 +10,7 @@ DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 EXAMPLE=${2:-}
 BRIDGE=metal0
 COREOS_CHANNEL=stable
-COREOS_VERSION=1235.9.0
+COREOS_VERSION=1298.7.0
 MATCHBOX_ARGS=""
 
 ASSETS_DIR="${ASSETS_DIR:-$PWD/examples/assets}"
@@ -90,7 +90,7 @@ function create {
     --volume config,kind=host,source=$PWD/examples/etc/matchbox,readOnly=true \
     --mount volume=data,target=/var/lib/matchbox \
     $DATA_MOUNT \
-    quay.io/coreos/matchbox:latest -- -address=0.0.0.0:8080 -log-level=debug $MATCHBOX_ARGS
+    quay.io/coreos/matchbox:1cefbe5d9703f16c3428cd438f1639fd0e506ff9 -- -address=0.0.0.0:8080 -log-level=debug $MATCHBOX_ARGS
 
   echo "Starting dnsmasq to provide DHCP/TFTP/DNS services"
   rkt rm --uuid-file=/var/run/dnsmasq-pod.uuid > /dev/null 2>&1
diff --git a/scripts/get-coreos b/scripts/get-coreos
index c6bcedbf..463ce138 100755
--- a/scripts/get-coreos
+++ b/scripts/get-coreos
@@ -6,7 +6,7 @@ set -eou pipefail
 GPG=${GPG:-/usr/bin/gpg}
 
 CHANNEL=${1:-"stable"}
-VERSION=${2:-"1235.9.0"}
+VERSION=${2:-"1298.7.0"}
 DEST_DIR=${3:-"$PWD/examples/assets"}
 DEST=$DEST_DIR/coreos/$VERSION
 BASE_URL=https://$CHANNEL.release.core-os.net/amd64-usr/$VERSION