mirrors/talos
1
0
Fork 0
mirror of https://github.com/siderolabs/talos.git synced 2025-11-01 08:51:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
4,620 Commits 28 Branches 544 Tags
Commit Graph

298 Commits

Author SHA1 Message Date
Andrey Smirnov
d6c8067e15
docs: make 1.7 docs the default 
Activate after 1.7.0 release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-04-19 16:04:32 +04:00
Andrey Smirnov
0d20b637d6
feat: update Kubernetes to 1.30.0 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.30.0

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-04-18 14:54:42 +04:00
Andrey Smirnov
ea5b3ff0c2
feat: update Kubernetes to v1.30.0-rc.2 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.30.0-rc.2

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-04-12 14:05:39 +04:00
Dmitry Sharshakov
653f838b09
feat: support multiple Docker cluster in talosctl cluster create 
Dynamically map Kubernetes and Talos API ports to an available port on
the host, so every cluster gets its own unique set of parts.

As part of the changes, refactor the provision library and interfaces,
dropping old weird interfaces replacing with (hopefully) much more
descriprive names.

Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-04-04 21:21:39 +04:00
Noel Georgi
d320498a44
chore: bump dependencies 
Bump dependencies, bring in v1.30.0-rc.1 of k8s.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2024-04-03 12:25:10 +05:30
Noel Georgi
917043fb55
chore: bump tools, pkgs and extra to stable 
Bump tools, pkgs and extras to stable release.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2024-04-02 22:15:50 +05:30
Noel Georgi
f515741b52
chore: add equinix e2e-tests 
Add equinix e2e-tests.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2024-04-02 17:16:59 +05:30
Dmitriy Matrenichev
8dc4910c48
chore: enable "WG over GRPC" testing in siderolink agent tests 
Fixes https://github.com/siderolabs/talos/issues/8514
For https://github.com/siderolabs/talos/issues/8392

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
 2024-04-01 18:24:57 +03:00
Andrey Smirnov
a6b2f54564
feat: update Kubernetes to 1.30.0-rc.0, etcd to 3.5.13 
See:

* https://github.com/etcd-io/etcd/releases/tag/v3.5.13
* https://github.com/kubernetes/kubernetes/releases/tag/v1.30.0-rc.0

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-04-01 14:50:52 +04:00
Dmitriy Matrenichev
949ad11a2d
chore: import siderolink as siderolink-launch subcommand 
This PR ensures that we can test our siderolink communication using embedded siderolink-agent.
If `--with-siderolink` provided during `talos cluster create` talosctl will embed proper kernel string and setup `siderolink-agent` as a separate process. It should be used with combination of `--skip-injecting-config` and `--with-apply-config` (the latter will use newly generated IPv6 siderolink addresses which talosctl passes to the agent as a "pre-bind").

Fixes #8392

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
 2024-03-23 16:08:56 +03:00
Noel Georgi
ee51f04af3
chore: azure e2e 
Add code to support azure e2e

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2024-03-23 17:30:36 +05:30
Andrey Smirnov
1e9f866aca
feat: update Kubernetes to v1.30.0-beta.0 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.30.0-beta.0

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-03-13 15:35:44 +04:00
Andrey Smirnov
0b9b4da12a
feat: update Kubernetes to 1.30.0-alpha.3 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.30.0-alpha.3

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-02-29 14:36:09 +04:00
Noel Georgi
1364275926
chore: use proper talos_version_contract for TF tests 
Use proper `talos_version_contract` for TF tests.

Depends on: https://github.com/siderolabs/contrib/pull/36

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2024-02-22 22:35:10 +05:30
Andrey Smirnov
66f3ffdd4a
fix: ensure that Talos runs in a pod (container) 
Drop the Kubernetes manifests as static files clean up (this is only
needed for upgrades from 1.2.x).

Fix Talos handling of cgroup hierarchy: if started in container in a
non-root cgroup hiearachy, use that to handle proper cgroup paths.

Add a test for a simple TinK mode (Talos-in-Kubernetes).

Update the docs.

Fixes #8274

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-02-20 15:06:48 +04:00
Noel Georgi
f8b4ee82ae
chore: update extensions test 
Update extensions test to use strategic patches and use
`ExtensionServiceConfig` document.

Depends on: https://github.com/siderolabs/extensions/pull/320

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2024-02-15 23:50:05 +05:30
Andrey Smirnov
1366ce14a8
feat: update Kubernetes to v1.30.0-alpha.2 
Talos Linux 1.7.0 will ship with Kubernetes v1.30.0.

Drop some compatibility for Kubernetes < 1.25, as 1.25 is the minimum
supported version now.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-02-15 21:56:56 +04:00
Andrey Smirnov
fb5ad05551
feat: update Kubernetes default to 1.29.1 
See https://github.com/kubernetes/kubernetes/releases/v1.29.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2024-01-18 20:20:29 +04:00
Andrey Smirnov
e8758dcbad
chore: support http downloads for assets in talosctl cluster create 
This allows to pass direct URLs to Image Factory assets for disk
image/ISO/vmlinuz/initramfs, so that we can test Image Factory with
Talos.

Also add an integration test for Image Factory.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-12-25 18:58:25 +04:00
Andrey Smirnov
9a185a30f7
feat: update Kubernetes to v1.29.0 
See https://github.com/kubernetes/kubernetes/releases/v1.29.0

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-12-13 22:59:17 +04:00
Noel Georgi
0c86ca1cc6
chore: enable kubespan+firewall for cilium tests 
Enable kubespan and default block firewall with cilium tests.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-12-12 22:50:47 +05:30
Andrey Smirnov
4f9d3b975f
feat: update Kubernetes to v1.29.0-rc.2 
See https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-12-08 19:41:28 +04:00
Andrey Smirnov
36c8ddb5e1
feat: implement ingress firewall rules 
Fixes #4421

See documentation for details on how to use the feature.

With `talosctl cluster create`, firewall can be easily test with
`--with-firewall=accept|block` (default mode).

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-11-30 22:58:16 +04:00
Andrey Smirnov
db4e2539d4
feat: update Kubernetes 1.29.0-rc.1 and other bumps 
Bump Go modules, final tools and semi-final pkgs.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-11-29 18:29:52 +04:00
Andrey Smirnov
dff60069c0
feat: update Kubernetes to 1.29.0-alpha.3 
See https://github.com/kubernetes/kubernetes/releases/v1.29.0-alpha.3

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-11-03 14:22:40 +04:00
Andrey Smirnov
c1ee24465a
feat: update Kubernetes to v1.29.0-alpha.2 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.29.0-alpha.2

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-10-12 18:31:06 +04:00
Andrey Smirnov
2b548ad0d9
feat: update containerd to 1.7.x 
Also update Linux and other pkgs.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-09-28 16:33:57 +04:00
Andrey Smirnov
52caf07633
feat: update Kubernetes to 1.29.0-alpha.1 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.29.0-alpha.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-09-26 17:30:52 +04:00
Andrey Smirnov
390137447f
feat: enable KubePrism by default 
Fixes #7787

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-09-25 23:12:33 +04:00
Noel Georgi
9c2ba7c6fa
chore: add tests for chelsio drivers 
Add tests for Chelsio drivers and firmware.

Ref: https://github.com/siderolabs/extensions/pull/232

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-09-20 20:07:25 +05:30
Andrey Smirnov
efdee69658
feat: update Kubernetes to 1.28.2 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.28.2

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-09-18 22:32:32 +04:00
Nebula
e44875106e
docs: update deploying-cilium.md 
Update cilium docs. `kubeProxyReplacement=strict` is deprecated. From Cilium Helm Chart values

```text
Valid options are "true", "false", "disabled" (deprecated), "partial" (deprecated), "strict" (deprecated).
ref: https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/
kubeProxyReplacement: "false"
```

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-09-11 21:07:39 +02:00
Noel Georgi
b485108740
chore: e2e-aws cleanup 
Drop all hacky bash, depend on the `cluster_health` from TF code.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-09-05 23:31:55 +05:30
Andrey Smirnov
f7473e4778
feat: update default Kubernetes to 1.28.1 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.28.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-09-04 16:07:03 +04:00
Spencer Smith
af0cc70e37
test: update e2e-aws to use worker groups 
This PR updates the e2e-aws flow to use worker groups and an updated control plane variable setup.

Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
 2023-08-25 13:12:10 -04:00
Noel Georgi
6778ded29d
feat: add e2e-aws for nvidia extensions 
Add e2e tests for nvidia

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-08-24 17:43:36 +05:30
Noel Georgi
833895940b
chore: add tests for zfs extension 
Add tests for ZFS and btrfs extensions.
Also fix the e2e-aws cron pipeline.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-08-23 11:16:25 +05:30
Noel Georgi
6b0373ebef
chore: move bash tests to integration 
move extensions and secureboot tests to integration.
Makes it easier to test.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-08-17 19:58:35 +05:30
Andrey Smirnov
97b4e3e91c
feat: update Kubernetes to 1.28.0 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.28.0

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-08-15 22:05:49 +04:00
Noel Georgi
79ca1a3dfb
feat: e2e-aws using tf code 
e2e-aws using TF code.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-08-11 19:58:14 +05:30
Andrey Smirnov
969e8097ce
feat: update Kubernetes to 1.28.0-rc.1 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.28.0-rc.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
 2023-08-11 15:39:58 +04:00
Andrey Smirnov
87fe8f1a2a
feat: implement image generation profiles 
Support full configuration for image generation, including image
outputs, support most features (where applicable) for all image output
types, unify image generation process.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
 2023-08-02 19:13:44 +04:00
Noel Georgi
68e6b98f7d
feat: add security state resource 
Add security state resource that describes the state of Talos SecureBoot
and PCR signing key fingerprints.

The UKI fingerprint is currently not populated.

Fixes: #7514

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-07-31 22:02:08 +05:30
Noel Georgi
209c34801e
chore: drop with-secureboot talosctl flag 
The code picks up firmware files in the order it's defined. The
secureboot QEMU firmware files are defined first, so this flag is a
no-op. This was leftover from when `ovmfctl` was used.

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-07-31 17:33:12 +04:00
Andrey Smirnov
9b533e27cf
feat: update Kubernetes to 1.28.0-rc.0 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.28.0-rc.0

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
 2023-07-27 20:39:58 +04:00
Andrey Smirnov
4d96d642fd
feat: update default Kubernetes version to 1.28.0-beta.0 
See https://github.com/kubernetes/kubernetes/releases/tag/v1.28.0-beta.0

Go modules are not tagged yet, so skipped updating them.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
 2023-07-21 22:04:19 +04:00
Noel Georgi
170a73e161
chore: support creating qemu guest socket 
Support creating a qemu guest agent socket so we can test
`qemu-guest-agent` extension in CI.

Ref: https://github.com/siderolabs/extensions/pull/173#issuecomment-1611911106

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-07-21 22:46:13 +05:30
Dmitriy Matrenichev
5f34f5b41f
chore: rename api load balancer to KubePrism 
Closes #7432

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
 2023-07-14 15:23:53 +03:00
Noel Georgi
79365d9bac
feat: tpm2 based disk encryption 
Support disk encryption using tpm2 and pre-calculated signed PCR values.

Fixes: #7266

Signed-off-by: Noel Georgi <git@frezbo.dev>
 2023-07-12 20:41:28 +05:30
Andrey Smirnov
1c2f19b367
feat: update Kubernetes to 1.28.0-alpha.4 
The Go modules were not tagged for alpha.4, so using alpha.3 tag.

Talos 1.5 will ship with Kubernetes 1.28.0.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
 2023-07-11 15:40:24 +04:00