chore: prepare for Talos 1.14 release

Add compatibility, bump versions in upgrade & Image Factory tests.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
This commit is contained in:
Andrey Smirnov 2026-04-20 18:24:16 +04:00
parent ed9545d0db
commit c684ec60ea
No known key found for this signature in database
GPG Key ID: 322C6F63F594CE7C
128 changed files with 1676 additions and 120 deletions

View File

@ -1,6 +1,6 @@
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
#
# Generated on 2026-04-17T18:13:01Z by kres 15ff2fd.
# Generated on 2026-04-20T14:23:16Z by kres 41939c6.
concurrency:
group: ${{ github.head_ref || github.run_id }}
@ -2714,37 +2714,49 @@ jobs:
- name: ci-temp-release-tag
run: |
make ci-temp-release-tag
- name: factory-1.11-iso
- name: factory-1.12-iso
env:
FACTORY_BOOT_METHOD: iso
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.11.6
FACTORY_VERSION: v1.11.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-iso
KUBERNETES_VERSION: 1.34.3
FACTORY_UPGRADE_VERSION: v1.12.6
FACTORY_VERSION: v1.12.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-iso
KUBERNETES_VERSION: 1.35.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.11-image
- name: factory-1.12-image
env:
FACTORY_BOOT_METHOD: disk-image
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.11.6
FACTORY_VERSION: v1.11.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-image
KUBERNETES_VERSION: 1.34.3
FACTORY_UPGRADE_VERSION: v1.12.6
FACTORY_VERSION: v1.12.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-image
KUBERNETES_VERSION: 1.35.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.11-pxe
- name: factory-1.12-pxe
env:
FACTORY_BOOT_METHOD: ipxe
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_VERSION: v1.11.6
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-pxe
KUBERNETES_VERSION: 1.34.3
FACTORY_VERSION: v1.12.6
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-pxe
KUBERNETES_VERSION: 1.35.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.12-secureboot
env:
FACTORY_BOOT_METHOD: secureboot-iso
FACTORY_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE_VERSION: v1.12.6
FACTORY_VERSION: v1.12.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-secureboot
KUBERNETES_VERSION: 1.35.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.11-secureboot
@ -2759,16 +2771,16 @@ jobs:
KUBERNETES_VERSION: 1.34.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.10-secureboot
- name: factory-1.11-iso
env:
FACTORY_BOOT_METHOD: secureboot-iso
FACTORY_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_BOOT_METHOD: iso
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE_VERSION: v1.10.9
FACTORY_VERSION: v1.10.8
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.10-secureboot
KUBERNETES_VERSION: 1.33.7
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.11.6
FACTORY_VERSION: v1.11.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-iso
KUBERNETES_VERSION: 1.34.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.10-iso
@ -2783,18 +2795,6 @@ jobs:
KUBERNETES_VERSION: 1.33.7
run: |
sudo -E make e2e-image-factory
- name: factory-1.9-iso
env:
FACTORY_BOOT_METHOD: iso
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.9.6
FACTORY_VERSION: v1.9.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.9-iso
KUBERNETES_VERSION: 1.32.11
run: |
sudo -E make e2e-image-factory
- name: save artifacts
if: always()
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # version: v7.0.0

View File

@ -1,6 +1,6 @@
# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
#
# Generated on 2026-04-20T11:44:35Z by kres 4b58472-dirty.
# Generated on 2026-04-20T14:23:16Z by kres 41939c6.
concurrency:
group: ${{ github.head_ref || github.run_id }}
@ -70,37 +70,49 @@ jobs:
- name: ci-temp-release-tag
run: |
make ci-temp-release-tag
- name: factory-1.11-iso
- name: factory-1.12-iso
env:
FACTORY_BOOT_METHOD: iso
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.11.6
FACTORY_VERSION: v1.11.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-iso
KUBERNETES_VERSION: 1.34.3
FACTORY_UPGRADE_VERSION: v1.12.6
FACTORY_VERSION: v1.12.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-iso
KUBERNETES_VERSION: 1.35.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.11-image
- name: factory-1.12-image
env:
FACTORY_BOOT_METHOD: disk-image
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.11.6
FACTORY_VERSION: v1.11.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-image
KUBERNETES_VERSION: 1.34.3
FACTORY_UPGRADE_VERSION: v1.12.6
FACTORY_VERSION: v1.12.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-image
KUBERNETES_VERSION: 1.35.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.11-pxe
- name: factory-1.12-pxe
env:
FACTORY_BOOT_METHOD: ipxe
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_VERSION: v1.11.6
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-pxe
KUBERNETES_VERSION: 1.34.3
FACTORY_VERSION: v1.12.6
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-pxe
KUBERNETES_VERSION: 1.35.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.12-secureboot
env:
FACTORY_BOOT_METHOD: secureboot-iso
FACTORY_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE_VERSION: v1.12.6
FACTORY_VERSION: v1.12.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-secureboot
KUBERNETES_VERSION: 1.35.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.11-secureboot
@ -115,16 +127,16 @@ jobs:
KUBERNETES_VERSION: 1.34.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.10-secureboot
- name: factory-1.11-iso
env:
FACTORY_BOOT_METHOD: secureboot-iso
FACTORY_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_BOOT_METHOD: iso
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE_VERSION: v1.10.9
FACTORY_VERSION: v1.10.8
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.10-secureboot
KUBERNETES_VERSION: 1.33.7
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.11.6
FACTORY_VERSION: v1.11.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-iso
KUBERNETES_VERSION: 1.34.3
run: |
sudo -E make e2e-image-factory
- name: factory-1.10-iso
@ -139,18 +151,6 @@ jobs:
KUBERNETES_VERSION: 1.33.7
run: |
sudo -E make e2e-image-factory
- name: factory-1.9-iso
env:
FACTORY_BOOT_METHOD: iso
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE: "true"
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.9.6
FACTORY_VERSION: v1.9.5
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.9-iso
KUBERNETES_VERSION: 1.32.11
run: |
sudo -E make e2e-image-factory
- name: save artifacts
if: always()
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # version: v7.0.0

View File

@ -1849,39 +1849,51 @@ spec:
artifactName: talos-artifacts
artifactPath: _out
- name: ci-temp-release-tag
- name: factory-1.11-iso
- name: factory-1.12-iso
command: e2e-image-factory
withSudo: true
environment:
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-iso
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-iso
FACTORY_BOOT_METHOD: iso
FACTORY_VERSION: v1.11.5
FACTORY_VERSION: v1.12.5
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
KUBERNETES_VERSION: 1.34.3
KUBERNETES_VERSION: 1.35.3
FACTORY_UPGRADE: true
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.11.6
- name: factory-1.11-image
FACTORY_UPGRADE_VERSION: v1.12.6
- name: factory-1.12-image
command: e2e-image-factory
withSudo: true
environment:
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-image
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-image
FACTORY_BOOT_METHOD: disk-image
FACTORY_VERSION: v1.11.5
FACTORY_VERSION: v1.12.5
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
KUBERNETES_VERSION: 1.34.3
KUBERNETES_VERSION: 1.35.3
FACTORY_UPGRADE: true
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.11.6
- name: factory-1.11-pxe
FACTORY_UPGRADE_VERSION: v1.12.6
- name: factory-1.12-pxe
command: e2e-image-factory
withSudo: true
environment:
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-pxe
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-pxe
FACTORY_BOOT_METHOD: ipxe
FACTORY_VERSION: v1.11.6
FACTORY_VERSION: v1.12.6
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
KUBERNETES_VERSION: 1.34.3
KUBERNETES_VERSION: 1.35.3
- name: factory-1.12-secureboot
command: e2e-image-factory
withSudo: true
environment:
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.12-secureboot
FACTORY_BOOT_METHOD: secureboot-iso
FACTORY_VERSION: v1.12.5
FACTORY_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
KUBERNETES_VERSION: 1.35.3
FACTORY_UPGRADE: true
FACTORY_UPGRADE_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE_VERSION: v1.12.6
- name: factory-1.11-secureboot
command: e2e-image-factory
withSudo: true
@ -1894,18 +1906,18 @@ spec:
FACTORY_UPGRADE: true
FACTORY_UPGRADE_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE_VERSION: v1.11.6
- name: factory-1.10-secureboot
- name: factory-1.11-iso
command: e2e-image-factory
withSudo: true
environment:
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.10-secureboot
FACTORY_BOOT_METHOD: secureboot-iso
FACTORY_VERSION: v1.10.8
FACTORY_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
KUBERNETES_VERSION: 1.33.7
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.11-iso
FACTORY_BOOT_METHOD: iso
FACTORY_VERSION: v1.11.5
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
KUBERNETES_VERSION: 1.34.3
FACTORY_UPGRADE: true
FACTORY_UPGRADE_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
FACTORY_UPGRADE_VERSION: v1.10.9
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.11.6
- name: factory-1.10-iso
command: e2e-image-factory
withSudo: true
@ -1918,18 +1930,6 @@ spec:
FACTORY_UPGRADE: true
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.10.9
- name: factory-1.9-iso
command: e2e-image-factory
withSudo: true
environment:
GITHUB_STEP_NAME: ${{ github.job}}-factory-1.9-iso
FACTORY_BOOT_METHOD: iso
FACTORY_VERSION: v1.9.5
FACTORY_SCHEMATIC: 376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
KUBERNETES_VERSION: 1.32.11
FACTORY_UPGRADE: true
FACTORY_UPGRADE_SCHEMATIC: cf9b7aab9ed7c365d5384509b4d31c02fdaa06d2b3ac6cc0bc806f28130eff1f
FACTORY_UPGRADE_VERSION: v1.9.6
- name: save-talos-logs
conditions:
- always

View File

@ -1287,10 +1287,10 @@ FROM scratch AS proto-docs-build
COPY --from=generate-build-clean /api/docs/api.md /api.md
FROM scratch AS docs
COPY --from=docs-build /tmp/configuration/ /website/content/v1.13/reference/configuration/
COPY --from=docs-build /tmp/cli.md /website/content/v1.13/reference/
COPY --from=docs-build /tmp/schemas /website/content/v1.13/schemas/
COPY --from=proto-docs-build /api.md /website/content/v1.13/reference/
COPY --from=docs-build /tmp/configuration/ /website/content/v1.14/reference/configuration/
COPY --from=docs-build /tmp/cli.md /website/content/v1.14/reference/
COPY --from=docs-build /tmp/schemas /website/content/v1.14/schemas/
COPY --from=proto-docs-build /api.md /website/content/v1.14/reference/
# The talosctl-cni-bundle builds the CNI bundle for talosctl.

View File

@ -118,7 +118,7 @@ KUBESTR_URL ?= https://github.com/kastenhq/kubestr/releases/download/$(KUBESTR_V
HELM_URL ?= https://get.helm.sh/helm-$(HELM_VERSION)-linux-amd64.tar.gz
CILIUM_CLI_URL ?= https://github.com/cilium/cilium-cli/releases/download/$(CILIUM_CLI_VERSION)/cilium-$(OPERATING_SYSTEM)-amd64.tar.gz
TESTPKGS ?= github.com/siderolabs/talos/...
RELEASES ?= v1.11.6 v1.12.0
RELEASES ?= v1.12.6 v1.13.0-rc.0
SHORT_INTEGRATION_TEST ?=
CUSTOM_CNI_URL ?=

View File

@ -57,15 +57,15 @@ type upgradeSpec struct {
const (
// These versions should be kept in sync with Makefile variable RELEASES.
previousRelease = "v1.11.6"
stableRelease = "v1.12.0" // or soon-to-be-stable
previousRelease = "v1.12.6"
stableRelease = "v1.13.0-rc.0" // or soon-to-be-stable
// The current version (the one being built on CI) is DefaultSettings.CurrentVersion.
// Command to find Kubernetes version for past releases:
//
// git show ${TAG}:pkg/machinery/constants/constants.go | grep KubernetesVersion
previousK8sVersion = "1.34.1" // constants.DefaultKubernetesVersion in the previousRelease
stableK8sVersion = "1.35.0" // constants.DefaultKubernetesVersion in the stableRelease
previousK8sVersion = "1.35.2" // constants.DefaultKubernetesVersion in the previousRelease
stableK8sVersion = "1.36.0-rc.1" // constants.DefaultKubernetesVersion in the stableRelease
currentK8sVersion = constants.DefaultKubernetesVersion
)

View File

@ -24,7 +24,7 @@ func TestFillDefaults(t *testing.T) {
t.Parallel()
arches := []string{"amd64", "arm64"}
versions := []string{"1.9.0", "1.10.0", "1.11.0", "1.12.0", "1.13.0"}
versions := []string{"1.9.0", "1.10.0", "1.11.0", "1.12.0", "1.13.0", "1.14.0"}
lastVersion := semver.MustParse(versions[len(versions)-1])

View File

@ -0,0 +1,22 @@
arch: amd64
platform: akamai
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 4453302272
diskFormat: raw
bootloader: dual-boot
outFormat: .gz

View File

@ -0,0 +1,22 @@
arch: arm64
platform: akamai
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 2355101696
diskFormat: raw
bootloader: sd-boot
outFormat: .gz

View File

@ -0,0 +1,22 @@
arch: amd64
platform: aws
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11736711168
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: aws
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 9638510592
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,23 @@
arch: amd64
platform: azure
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11736711168
diskFormat: vhd
diskFormatOptions: subformat=fixed,force_size
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,23 @@
arch: arm64
platform: azure
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 9638510592
diskFormat: vhd
diskFormatOptions: subformat=fixed,force_size
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: amd64
platform: cloudstack
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11736711168
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: cloudstack
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 9638510592
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: amd64
platform: digital-ocean
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11736711168
diskFormat: raw
bootloader: dual-boot
outFormat: .gz

View File

@ -0,0 +1,22 @@
arch: arm64
platform: digital-ocean
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 9638510592
diskFormat: raw
bootloader: sd-boot
outFormat: .gz

View File

@ -0,0 +1,23 @@
arch: amd64
platform: exoscale
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 13884194816
diskFormat: qcow2
diskFormatOptions: cluster_size=8k
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,23 @@
arch: arm64
platform: exoscale
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11785994240
diskFormat: qcow2
diskFormatOptions: cluster_size=8k
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: amd64
platform: gcp
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11736711168
diskFormat: raw
bootloader: dual-boot
outFormat: .tar.gz

View File

@ -0,0 +1,22 @@
arch: arm64
platform: gcp
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 9638510592
diskFormat: raw
bootloader: sd-boot
outFormat: .tar.gz

View File

@ -0,0 +1,22 @@
arch: amd64
platform: hcloud
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 4453302272
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: hcloud
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 2355101696
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,18 @@
arch: amd64
platform: metal
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: installer
outFormat: raw

View File

@ -0,0 +1,18 @@
arch: arm64
platform: metal
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: installer
outFormat: raw

View File

@ -0,0 +1,21 @@
arch: amd64
platform: metal
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: iso
isoOptions:
sdBootEnrollKeys: if-safe
bootloader: dual-boot
outFormat: raw

View File

@ -0,0 +1,21 @@
arch: arm64
platform: metal
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: iso
isoOptions:
sdBootEnrollKeys: if-safe
bootloader: sd-boot
outFormat: raw

View File

@ -0,0 +1,22 @@
arch: amd64
platform: metal
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 4453302272
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: metal
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 2355101696
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,18 @@
arch: amd64
platform: metal
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: uki
outFormat: raw

View File

@ -0,0 +1,18 @@
arch: arm64
platform: metal
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: uki
outFormat: raw

View File

@ -0,0 +1,22 @@
arch: amd64
platform: nocloud
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 4453302272
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: nocloud
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 2355101696
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: amd64
platform: opennebula
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 4453302272
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: opennebula
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 2355101696
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: amd64
platform: openstack
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 4453302272
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: openstack
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 2355101696
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,23 @@
arch: amd64
platform: oracle
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11736711168
diskFormat: qcow2
diskFormatOptions: cluster_size=8k
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,23 @@
arch: arm64
platform: oracle
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 9638510592
diskFormat: qcow2
diskFormatOptions: cluster_size=8k
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: amd64
platform: scaleway
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 4453302272
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: scaleway
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 2355101696
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,24 @@
arch: amd64
platform: metal
secureboot: true
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
secureboot:
secureBootSigner:
keyPath: /secureboot/uki-signing-key.pem
certPath: /secureboot/uki-signing-cert.pem
pcrSigner:
keyPath: /secureboot/pcr-signing-key.pem
output:
kind: installer
outFormat: raw

View File

@ -0,0 +1,24 @@
arch: arm64
platform: metal
secureboot: true
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
secureboot:
secureBootSigner:
keyPath: /secureboot/uki-signing-key.pem
certPath: /secureboot/uki-signing-cert.pem
pcrSigner:
keyPath: /secureboot/pcr-signing-key.pem
output:
kind: installer
outFormat: raw

View File

@ -0,0 +1,27 @@
arch: amd64
platform: metal
secureboot: true
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
secureboot:
secureBootSigner:
keyPath: /secureboot/uki-signing-key.pem
certPath: /secureboot/uki-signing-cert.pem
pcrSigner:
keyPath: /secureboot/pcr-signing-key.pem
output:
kind: iso
isoOptions:
sdBootEnrollKeys: if-safe
bootloader: sd-boot
outFormat: raw

View File

@ -0,0 +1,27 @@
arch: arm64
platform: metal
secureboot: true
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
secureboot:
secureBootSigner:
keyPath: /secureboot/uki-signing-key.pem
certPath: /secureboot/uki-signing-cert.pem
pcrSigner:
keyPath: /secureboot/pcr-signing-key.pem
output:
kind: iso
isoOptions:
sdBootEnrollKeys: if-safe
bootloader: sd-boot
outFormat: raw

View File

@ -0,0 +1,28 @@
arch: amd64
platform: metal
secureboot: true
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
secureboot:
secureBootSigner:
keyPath: /secureboot/uki-signing-key.pem
certPath: /secureboot/uki-signing-cert.pem
pcrSigner:
keyPath: /secureboot/pcr-signing-key.pem
output:
kind: image
imageOptions:
diskSize: 2355101696
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,28 @@
arch: arm64
platform: metal
secureboot: true
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
secureboot:
secureBootSigner:
keyPath: /secureboot/uki-signing-key.pem
certPath: /secureboot/uki-signing-cert.pem
pcrSigner:
keyPath: /secureboot/pcr-signing-key.pem
output:
kind: image
imageOptions:
diskSize: 2355101696
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,24 @@
arch: amd64
platform: metal
secureboot: true
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
secureboot:
secureBootSigner:
keyPath: /secureboot/uki-signing-key.pem
certPath: /secureboot/uki-signing-cert.pem
pcrSigner:
keyPath: /secureboot/pcr-signing-key.pem
output:
kind: uki
outFormat: raw

View File

@ -0,0 +1,24 @@
arch: arm64
platform: metal
secureboot: true
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
secureboot:
secureBootSigner:
keyPath: /secureboot/uki-signing-key.pem
certPath: /secureboot/uki-signing-cert.pem
pcrSigner:
keyPath: /secureboot/pcr-signing-key.pem
output:
kind: uki
outFormat: raw

View File

@ -0,0 +1,22 @@
arch: amd64
platform: upcloud
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11736711168
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: upcloud
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 9638510592
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: amd64
platform: vmware
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11736711168
diskFormat: ova
bootloader: dual-boot
outFormat: raw

View File

@ -0,0 +1,22 @@
arch: arm64
platform: vmware
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 9638510592
diskFormat: ova
bootloader: sd-boot
outFormat: raw

View File

@ -0,0 +1,22 @@
arch: amd64
platform: vultr
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/amd64/vmlinuz
initramfs:
path: /usr/install/amd64/initramfs.xz
sdStub:
path: /usr/install/amd64/systemd-stub.efi
sdBoot:
path: /usr/install/amd64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 11736711168
diskFormat: raw
bootloader: dual-boot
outFormat: .zst

View File

@ -0,0 +1,22 @@
arch: arm64
platform: vultr
secureboot: false
version: 1.14.0
input:
kernel:
path: /usr/install/arm64/vmlinuz
initramfs:
path: /usr/install/arm64/initramfs.xz
sdStub:
path: /usr/install/arm64/systemd-stub.efi
sdBoot:
path: /usr/install/arm64/systemd-boot.efi
baseInstaller:
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
output:
kind: image
imageOptions:
diskSize: 9638510592
diskFormat: raw
bootloader: sd-boot
outFormat: .zst

View File

@ -14,6 +14,7 @@ import (
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos111"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos112"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos113"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos114"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos12"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos13"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos14"
@ -76,6 +77,8 @@ func (v *KubernetesVersion) SupportedWith(target *TalosVersion) error {
minK8sVersion, maxK8sVersion = talos112.MinimumKubernetesVersion, talos112.MaximumKubernetesVersion
case talos113.MajorMinor: // upgrades to 1.13.x
minK8sVersion, maxK8sVersion = talos113.MinimumKubernetesVersion, talos113.MaximumKubernetesVersion
case talos114.MajorMinor: // upgrades to 1.14.x
minK8sVersion, maxK8sVersion = talos114.MinimumKubernetesVersion, talos114.MaximumKubernetesVersion
default:
return fmt.Errorf("compatibility with version %s is not supported", target.String())
}

View File

@ -418,12 +418,45 @@ func TestKubernetesCompatibility113(t *testing.T) {
}
}
func TestKubernetesCompatibility114(t *testing.T) {
for _, tt := range []kubernetesVersionTest{
{
kubernetesVersion: "1.32.1",
target: "1.14.0",
},
{
kubernetesVersion: "1.33.1",
target: "1.14.0",
},
{
kubernetesVersion: "1.36.3",
target: "1.14.0-beta.0",
},
{
kubernetesVersion: "1.37.0-rc.0",
target: "1.14.7",
},
{
kubernetesVersion: "1.38.0-alpha.0",
target: "1.14.0",
expectedError: "version of Kubernetes 1.38.0-alpha.0 is too new to be used with Talos 1.14.0",
},
{
kubernetesVersion: "1.31.1",
target: "1.14.0",
expectedError: "version of Kubernetes 1.31.1 is too old to be used with Talos 1.14.0",
},
} {
runKubernetesVersionTest(t, tt)
}
}
func TestKubernetesCompatibilityUnsupported(t *testing.T) {
for _, tt := range []kubernetesVersionTest{
{
kubernetesVersion: "1.25.0",
target: "1.14.0-alpha.0",
expectedError: "compatibility with version 1.14.0-alpha.0 is not supported",
target: "1.15.0-alpha.0",
expectedError: "compatibility with version 1.15.0-alpha.0 is not supported",
},
{
kubernetesVersion: "1.25.0",

View File

@ -0,0 +1,28 @@
// This Source Code Form is subject to the terms of the Mozilla Public
// License, v. 2.0. If a copy of the MPL was not distributed with this
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
// Package talos114 provides compatibility constants for Talos 1.14.
package talos114
import (
"github.com/blang/semver/v4"
)
// MajorMinor is the major.minor version of Talos 1.14.
var MajorMinor = [2]uint64{1, 14}
// MinimumHostUpgradeVersion is the minimum version of Talos that can be upgraded to 1.14.
var MinimumHostUpgradeVersion = semver.MustParse("1.12.0")
// MaximumHostDowngradeVersion is the maximum (not inclusive) version of Talos that can be downgraded to 1.14.
var MaximumHostDowngradeVersion = semver.MustParse("1.16.0")
// DeniedHostUpgradeVersions are the versions of Talos that cannot be upgraded to 1.14.
var DeniedHostUpgradeVersions []semver.Version
// MinimumKubernetesVersion is the minimum version of Kubernetes is supported with 1.14.
var MinimumKubernetesVersion = semver.MustParse("1.32.0")
// MaximumKubernetesVersion is the maximum version of Kubernetes is supported with 1.14.
var MaximumKubernetesVersion = semver.MustParse("1.37.99")

View File

@ -16,6 +16,7 @@ import (
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos111"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos112"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos113"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos114"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos12"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos13"
"github.com/siderolabs/talos/pkg/machinery/compatibility/talos14"
@ -115,6 +116,9 @@ func (v *TalosVersion) UpgradeableFrom(host *TalosVersion) error {
case talos113.MajorMinor: // upgrades to 1.13.x
minHostUpgradeVersion, maxHostDowngradeVersion = talos113.MinimumHostUpgradeVersion, talos113.MaximumHostDowngradeVersion
deniedHostUpgradeVersions = talos113.DeniedHostUpgradeVersions
case talos114.MajorMinor: // upgrades to 1.14.x
minHostUpgradeVersion, maxHostDowngradeVersion = talos114.MinimumHostUpgradeVersion, talos114.MaximumHostDowngradeVersion
deniedHostUpgradeVersions = talos114.DeniedHostUpgradeVersions
default:
return fmt.Errorf("upgrades to version %s are not supported", v.version.String())
}

View File

@ -491,17 +491,58 @@ func TestTalosUpgradeCompatibility113(t *testing.T) {
}
}
func TestTalosUpgradeCompatibility114(t *testing.T) {
for _, tt := range []talosVersionTest{
{
host: "1.12.0",
target: "1.14.0",
},
{
host: "1.13.0-alpha.0",
target: "1.14.0",
},
{
host: "1.12.0",
target: "1.14.0-alpha.0",
},
{
host: "1.13.3",
target: "1.14.1",
},
{
host: "1.14.0-beta.0",
target: "1.14.0",
},
{
host: "1.14.5",
target: "1.14.3",
},
{
host: "1.11.0",
target: "1.14.0",
expectedError: `host version 1.11.0 is too old to upgrade to Talos 1.14.0`,
},
{
host: "1.16.0-alpha.0",
target: "1.14.0",
expectedError: `host version 1.16.0-alpha.0 is too new to downgrade to Talos 1.14.0`,
},
} {
runTalosVersionTest(t, tt)
}
}
func TestTalosUpgradeCompatibilityUnsupported(t *testing.T) {
for _, tt := range []talosVersionTest{
{
host: "1.5.0",
target: "1.15.0-alpha.0",
expectedError: `upgrades to version 1.15.0-alpha.0 are not supported`,
target: "1.16.0-alpha.0",
expectedError: `upgrades to version 1.16.0-alpha.0 are not supported`,
},
{
host: "1.4.0",
target: "1.14.0-alpha.0",
expectedError: `upgrades to version 1.14.0-alpha.0 are not supported`,
target: "1.15.0-alpha.0",
expectedError: `upgrades to version 1.15.0-alpha.0 are not supported`,
},
} {
runTalosVersionTest(t, tt)

View File

@ -25,6 +25,7 @@ type VersionContract struct {
// Well-known Talos version contracts.
var (
TalosVersionCurrent = (*VersionContract)(nil)
TalosVersion1_14 = &VersionContract{1, 14}
TalosVersion1_13 = &VersionContract{1, 13}
TalosVersion1_12 = &VersionContract{1, 12}
TalosVersion1_11 = &VersionContract{1, 11}

View File

@ -74,6 +74,36 @@ func TestContractCurrent(t *testing.T) {
assert.True(t, contract.KubeSpanMultidocConfig())
}
func TestContract1_14(t *testing.T) {
contract := config.TalosVersion1_14
assert.True(t, contract.PodSecurityAdmissionEnabled())
assert.True(t, contract.StableHostnameEnabled())
assert.True(t, contract.KubeletDefaultRuntimeSeccompProfileEnabled())
assert.False(t, contract.KubernetesAlternateImageRegistries())
assert.True(t, contract.KubernetesAllowSchedulingOnControlPlanes())
assert.True(t, contract.KubernetesDiscoveryBackendDisabled())
assert.True(t, contract.ApidExtKeyUsageCheckEnabled())
assert.True(t, contract.APIServerAuditPolicySupported())
assert.True(t, contract.KubeletManifestsDirectoryDisabled())
assert.True(t, contract.SecretboxEncryptionSupported())
assert.True(t, contract.DiskQuotaSupportEnabled())
assert.True(t, contract.KubePrismEnabled())
assert.True(t, contract.HostDNSEnabled())
assert.True(t, contract.UseRSAServiceAccountKey())
assert.True(t, contract.ClusterNameForWorkers())
assert.True(t, contract.HostDNSForwardKubeDNSToHost())
assert.True(t, contract.AddExcludeFromExternalLoadBalancer())
assert.True(t, contract.SecureBootEnrollEnforcementSupported())
assert.True(t, contract.VolumeConfigEncryptionSupported())
assert.True(t, contract.MultidocNetworkConfigSupported())
assert.True(t, contract.HideDisablePSP())
assert.True(t, contract.HideRBACAndKeyUsage())
assert.False(t, contract.PopulateClusterSANsFromEndpoint())
assert.True(t, contract.GrubUseUKICmdlineDefault())
assert.True(t, contract.KubeSpanMultidocConfig())
}
func TestContract1_13(t *testing.T) {
contract := config.TalosVersion1_13

View File

@ -0,0 +1,93 @@
version: v1alpha1
debug: false
persist: true
machine:
type: controlplane
token: d8cwfa.eyvpi0xwxyarbfid
ca:
crt: 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
key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJTURXbklEdVpSdlhQcW1tbSt6bk15SWMrdk53ZjdnYksvSmR3WC9iN2d1RQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K
certSANs: []
kubelet:
image: ghcr.io/siderolabs/kubelet:v1.28.0
defaultRuntimeSeccompProfileEnabled: true
disableManifestsDirectory: true
install:
wipe: false
grubUseUKICmdline: true
features:
diskQuotaSupport: true
kubePrism:
enabled: true
port: 7445
hostDNS:
enabled: true
forwardKubeDNSToHost: true
nodeLabels:
node.kubernetes.io/exclude-from-external-load-balancers: ""
cluster:
id: 0raF93qnkMvF-FZNuvyGozXNdLiT2FOWSlyBaW4PR-w=
secret: pofHbABZq7VXuObsdLdy/bHmz6hlMHZ3p8+6WKrv1ic=
controlPlane:
endpoint: https://base:6443
clusterName: base
network:
dnsDomain: cluster.local
podSubnets:
- 10.244.0.0/16
serviceSubnets:
- 10.96.0.0/12
token: inn7ol.u4ehnti8qyls9ymo
secretboxEncryptionSecret: 45yd2Ke+sytiICojDf8aibTfgt99nzJmO53cjDqrCto=
ca:
crt: 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
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUVZbFloNzVTUTZ6VUJFTUZ6em5pUzZuVVg3Q2VxQ013S3k0RTZHVEVFMGNvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFeXhvUi9JYklTZ3V2NG01azY2OFJTSzR6WDRjSHFoMlJHNVRCMEczenRtbnU0a1NHRUNWLwo2cmhCdzdHbE9KK2tjT3NEd0JNWGNGZ2dRVnBhQXM0MWF3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
aggregatorCA:
crt: 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
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlMblhpQ3hOWU1CWHpncjVuYmc3bnVtUWM2UGlHaXdmWUN2eFF3Tlhxc3dvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFVjNuRWNSZkZnWEEvTHRsbngvQ29ZTjdwcFAxK1V3UmhWMEpEajBPSitHWjZiTGtLRzlESgpRVWxpbEx5aVliemxJcGFEd2tRMG5ickVPK2hYUThFcVR3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
serviceAccount:
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlHVElBQjZZUzV0cFcrUnYxeDBPY09Jb1h0SXgzdGZteVFZNGxOWWRCbmpvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFQ3drbVVTUmtrbnlOc0NjTFJNUTlmZWx6cFY0dDdIdlNRcnp6ZGRvK2pWYmlqd2kwVVE1YQp0VW8vZkxQbDlBckVNOHNRWTVOSlgraVdxYjFkQWFXa2VnPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
apiServer:
image: registry.k8s.io/kube-apiserver:v1.28.0
admissionControl:
- name: PodSecurity
configuration:
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
defaults:
audit: restricted
audit-version: latest
enforce: baseline
enforce-version: latest
warn: restricted
warn-version: latest
exemptions:
namespaces:
- kube-system
runtimeClasses: []
usernames: []
kind: PodSecurityConfiguration
auditPolicy:
apiVersion: audit.k8s.io/v1
kind: Policy
rules:
- level: Metadata
controllerManager:
image: registry.k8s.io/kube-controller-manager:v1.28.0
proxy:
image: registry.k8s.io/kube-proxy:v1.28.0
scheduler:
image: registry.k8s.io/kube-scheduler:v1.28.0
discovery:
enabled: true
registries:
kubernetes:
disabled: true
service: {}
etcd:
ca:
crt: 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
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU03Q2VnMk1GQW5TM3ROMzV6QTc0aFZ3VElkTkthK0ZwUHlYVERCdU4wVFlvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFNmxTeTNTekRRRmdBTHNlSXR5UU1paTVaSVJkVTFGUmMzcEZ3b3g1QUE1VHdjZ0VVQ0xaNApwMTJSNGp3ZGozWXhqbmxLYW9GY3o3QVR5ME5mWTdMVWt3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
---
apiVersion: v1alpha1
kind: HostnameConfig
auto: stable

View File

@ -0,0 +1,51 @@
version: v1alpha1
debug: false
persist: true
machine:
type: worker
token: d8cwfa.eyvpi0xwxyarbfid
ca:
crt: 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
key: ""
certSANs: []
kubelet:
image: ghcr.io/siderolabs/kubelet:v1.28.0
defaultRuntimeSeccompProfileEnabled: true
disableManifestsDirectory: true
install:
wipe: false
grubUseUKICmdline: true
features:
diskQuotaSupport: true
kubePrism:
enabled: true
port: 7445
hostDNS:
enabled: true
forwardKubeDNSToHost: true
cluster:
id: 0raF93qnkMvF-FZNuvyGozXNdLiT2FOWSlyBaW4PR-w=
secret: pofHbABZq7VXuObsdLdy/bHmz6hlMHZ3p8+6WKrv1ic=
controlPlane:
endpoint: https://base:6443
clusterName: base
network:
dnsDomain: cluster.local
podSubnets:
- 10.244.0.0/16
serviceSubnets:
- 10.96.0.0/12
token: inn7ol.u4ehnti8qyls9ymo
ca:
crt: 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
key: ""
discovery:
enabled: true
registries:
kubernetes:
disabled: true
service: {}
---
apiVersion: v1alpha1
kind: HostnameConfig
auto: stable

View File

@ -0,0 +1,122 @@
version: v1alpha1
debug: false
persist: true
machine:
type: controlplane
token: d8cwfa.eyvpi0xwxyarbfid
ca:
crt: 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
key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJTURXbklEdVpSdlhQcW1tbSt6bk15SWMrdk53ZjdnYksvSmR3WC9iN2d1RQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K
certSANs:
- foo
- bar
kubelet:
image: ghcr.io/siderolabs/kubelet:v1.28.0
extraMounts:
- destination: /var/opt
type: bind
source: /var/opt
options:
- rshared
defaultRuntimeSeccompProfileEnabled: true
disableManifestsDirectory: true
install:
disk: /dev/vda
extraKernelArgs:
- foo=bar
- bar=baz
wipe: false
grubUseUKICmdline: true
sysctls:
foo: bar
features:
diskQuotaSupport: true
kubePrism:
enabled: true
port: 7445
hostDNS:
enabled: true
forwardKubeDNSToHost: true
nodeLabels:
node.kubernetes.io/exclude-from-external-load-balancers: ""
cluster:
id: 0raF93qnkMvF-FZNuvyGozXNdLiT2FOWSlyBaW4PR-w=
secret: pofHbABZq7VXuObsdLdy/bHmz6hlMHZ3p8+6WKrv1ic=
controlPlane:
endpoint: https://base:6443
localAPIServerPort: 5443
clusterName: base
network:
cni:
name: custom
urls:
- https://example.com/cni.yaml
dnsDomain: example.com
podSubnets:
- 10.244.0.0/16
serviceSubnets:
- 10.96.0.0/12
token: inn7ol.u4ehnti8qyls9ymo
secretboxEncryptionSecret: 45yd2Ke+sytiICojDf8aibTfgt99nzJmO53cjDqrCto=
ca:
crt: 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
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUVZbFloNzVTUTZ6VUJFTUZ6em5pUzZuVVg3Q2VxQ013S3k0RTZHVEVFMGNvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFeXhvUi9JYklTZ3V2NG01azY2OFJTSzR6WDRjSHFoMlJHNVRCMEczenRtbnU0a1NHRUNWLwo2cmhCdzdHbE9KK2tjT3NEd0JNWGNGZ2dRVnBhQXM0MWF3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
aggregatorCA:
crt: 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
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlMblhpQ3hOWU1CWHpncjVuYmc3bnVtUWM2UGlHaXdmWUN2eFF3Tlhxc3dvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFVjNuRWNSZkZnWEEvTHRsbngvQ29ZTjdwcFAxK1V3UmhWMEpEajBPSitHWjZiTGtLRzlESgpRVWxpbEx5aVliemxJcGFEd2tRMG5ickVPK2hYUThFcVR3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
serviceAccount:
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlHVElBQjZZUzV0cFcrUnYxeDBPY09Jb1h0SXgzdGZteVFZNGxOWWRCbmpvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFQ3drbVVTUmtrbnlOc0NjTFJNUTlmZWx6cFY0dDdIdlNRcnp6ZGRvK2pWYmlqd2kwVVE1YQp0VW8vZkxQbDlBckVNOHNRWTVOSlgraVdxYjFkQWFXa2VnPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
apiServer:
image: registry.k8s.io/kube-apiserver:v1.28.0
certSANs:
- foo
- bar
admissionControl:
- name: PodSecurity
configuration:
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
defaults:
audit: restricted
audit-version: latest
enforce: baseline
enforce-version: latest
warn: restricted
warn-version: latest
exemptions:
namespaces:
- kube-system
runtimeClasses: []
usernames: []
kind: PodSecurityConfiguration
auditPolicy:
apiVersion: audit.k8s.io/v1
kind: Policy
rules:
- level: Metadata
controllerManager:
image: registry.k8s.io/kube-controller-manager:v1.28.0
proxy:
image: registry.k8s.io/kube-proxy:v1.28.0
scheduler:
image: registry.k8s.io/kube-scheduler:v1.28.0
discovery:
enabled: true
registries:
kubernetes:
disabled: true
service: {}
etcd:
ca:
crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJmVENDQVNPZ0F3SUJBZ0lRVkNTWmFQU3Z0TlZTcjYrVkRyUks0akFLQmdncWhrak9QUVFEQWpBUE1RMHcKQ3dZRFZRUUtFd1JsZEdOa01CNFhEVEl6TVRBeE1qRXdORFl3T1ZvWERUTXpNVEF3T1RFd05EWXdPVm93RHpFTgpNQXNHQTFVRUNoTUVaWFJqWkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk9wVXN0MHN3MEJZCkFDN0hpTGNrRElvdVdTRVhWTlJVWE42UmNLTWVRQU9VOEhJQkZBaTJlS2Rka2VJOEhZOTJNWTU1U21xQlhNK3cKRTh0RFgyT3kxSk9qWVRCZk1BNEdBMVVkRHdFQi93UUVBd0lDaERBZEJnTlZIU1VFRmpBVUJnZ3JCZ0VGQlFjRApBUVlJS3dZQkJRVUhBd0l3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFkQmdOVkhRNEVGZ1FVejVmai9oZTZoUjhMCkFRTU5qTjgxNS8zV3B6d3dDZ1lJS29aSXpqMEVBd0lEU0FBd1JRSWdFWWcyTlp3NkExek02eURNWTRHN1JPVkwKc0JOU0VhSDd4VmVSalBSblAvZ0NJUURiYzFMNmI0SkU0MCtuUCtYNG5pZlB0QWp5REhhUzVMS0YzQWZkUkRWdApMUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU03Q2VnMk1GQW5TM3ROMzV6QTc0aFZ3VElkTkthK0ZwUHlYVERCdU4wVFlvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFNmxTeTNTekRRRmdBTHNlSXR5UU1paTVaSVJkVTFGUmMzcEZ3b3g1QUE1VHdjZ0VVQ0xaNApwMTJSNGp3ZGozWXhqbmxLYW9GY3o3QVR5ME5mWTdMVWt3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
allowSchedulingOnControlPlanes: true
---
apiVersion: v1alpha1
kind: RegistryMirrorConfig
name: ghcr.io
endpoints:
- url: https://ghcr.io.my-mirror.com
---
apiVersion: v1alpha1
kind: HostnameConfig
auto: stable

View File

@ -0,0 +1,75 @@
version: v1alpha1
debug: false
persist: true
machine:
type: worker
token: d8cwfa.eyvpi0xwxyarbfid
ca:
crt: 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
key: ""
certSANs:
- foo
- bar
kubelet:
image: ghcr.io/siderolabs/kubelet:v1.28.0
extraMounts:
- destination: /var/opt
type: bind
source: /var/opt
options:
- rshared
defaultRuntimeSeccompProfileEnabled: true
disableManifestsDirectory: true
install:
disk: /dev/vda
extraKernelArgs:
- foo=bar
- bar=baz
wipe: false
grubUseUKICmdline: true
sysctls:
foo: bar
features:
diskQuotaSupport: true
kubePrism:
enabled: true
port: 7445
hostDNS:
enabled: true
forwardKubeDNSToHost: true
cluster:
id: 0raF93qnkMvF-FZNuvyGozXNdLiT2FOWSlyBaW4PR-w=
secret: pofHbABZq7VXuObsdLdy/bHmz6hlMHZ3p8+6WKrv1ic=
controlPlane:
endpoint: https://base:6443
clusterName: base
network:
cni:
name: custom
urls:
- https://example.com/cni.yaml
dnsDomain: example.com
podSubnets:
- 10.244.0.0/16
serviceSubnets:
- 10.96.0.0/12
token: inn7ol.u4ehnti8qyls9ymo
ca:
crt: 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
key: ""
discovery:
enabled: true
registries:
kubernetes:
disabled: true
service: {}
---
apiVersion: v1alpha1
kind: RegistryMirrorConfig
name: ghcr.io
endpoints:
- url: https://ghcr.io.my-mirror.com
---
apiVersion: v1alpha1
kind: HostnameConfig
auto: stable

View File

@ -48,6 +48,7 @@ func TestConfigEncodingStability(t *testing.T) {
config.TalosVersion1_11,
config.TalosVersion1_12,
config.TalosVersion1_13,
config.TalosVersion1_14,
}
currentVersion := ensure.Value(semver.ParseTolerant(gendata.VersionTag))

Some files were not shown because too many files have changed in this diff Show More