Andrey Smirnov
9bf23e5162
feat: update Kubernetes to 1.24.0-rc.0
...
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-rc.0
Go modules are not updated due to missing tags:
https://github.com/kubernetes/kubernetes/issues/109565
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-20 16:53:51 +03:00
Andrey Smirnov
9dace93b59
feat: enable Pod Security Admission by default
...
As Talos 1.1 supports Kubernetes 1.22-1.24, we can finally enable Pod
Security Admission by default:
```yaml
apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- configuration:
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
defaults:
audit: restricted
audit-version: latest
enforce: baseline
enforce-version: latest
warn: restricted
warn-version: latest
exemptions:
namespaces:
- kube-system
runtimeClasses: []
usernames: []
kind: PodSecurityConfiguration
name: PodSecurity
path: ""
```
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-11 15:36:04 +03:00
Andrey Smirnov
1ed1f73e51
test: bump CAPI to 1.1.3
...
This probably fixes the incompatibility with 1.24.0-beta.0.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 22:50:16 +03:00
Andrey Smirnov
2ee1d2c720
feat: update Kuberentes to 1.24.0-beta.0
...
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-beta.0
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 18:06:56 +03:00
Andrey Smirnov
ca8b9c0a3a
feat: update Kubernetes to 1.24.0-alpha.4
...
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-alpha.4
Fix some incompatibilities around dropped flags/API versions.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 22:59:07 +03:00
Andrey Smirnov
e0eee7fcc6
test: use clusterctl.yaml overrides after org rename
...
`clusterctl init` can't follow redirects.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-24 14:13:22 +03:00
Andrey Smirnov
883d401f9f
chore: rename github organization to siderolabs
...
Go module import paths still use talos-systems, packages use new
siderolabs name.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-23 21:07:46 +03:00
Tim Jones
d1294d014f
chore: add day-two tests for e2e-qemu
...
Uses Sidero Labs d2ctl to install a small sample of
common cluster services to ensure the Talos cluster
is capable.
Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-03-22 20:53:07 +01:00
Andrey Smirnov
9d69fb6b40
feat: update Kubernetes to 1.23.5
...
Note: some Go modules are not tagged yet, see https://github.com/kubernetes/kubernetes/issues/108763
See https://github.com/kubernetes/kubernetes/releases/tag/v1.23.5
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-17 14:45:46 +03:00
Andrey Smirnov
09efa62f68
chore: re-enable kexec and default to UEFI booting in tests
...
Fixes #4947
It turns out there's something related to boot process in BIOS mode
which leads to initramfs corruption on later `kexec`.
Booting via GRUB is always successful.
Problem with kexec was confirmed with:
* direct boot via QEMU
* QEMU boot via iPXE (bundled with QEMU)
The root cause is not known, but the only visible difference is the
placement of RAMDISK with UEFI and BIOS boots:
```
[ 0.005508] RAMDISK: [mem 0x312dd000-0x34965fff]
```
or:
```
[ 0.003821] RAMDISK: [mem 0x711aa000-0x747a7fff]
```
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-02 21:52:18 +03:00
Andrey Smirnov
b2bf3117ff
feat: implement extension services
...
Fixes #4694
User services run alongside with Talos system services.
Every user service container root filesystem should be already present
in the Talos root filesystem.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-02-22 23:11:20 +03:00
Andrey Smirnov
0fe34b3581
feat: update Kubernetes to 1.23.4
...
See https://github.com/kubernetes/kubernetes/releases/tag/v1.23.4
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-02-17 23:50:34 +03:00
Andrey Smirnov
0da370dfef
test: unlock CABPT/CACPPT provider versions
...
We should always test latest versions of our providers.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-02-10 00:14:15 +03:00
Andrey Smirnov
e47387e419
chore: bump CAPI to 1.0.4
...
This release contains cert-manager download fix.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-02-03 18:19:42 +03:00
Noel Georgi
151c9df091
chore: add CSI tests for e2e-qemu
...
Add tests for using rook as CSI for e2e-qemu
Allow specifying cpu/memory for workers
Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-01-27 20:06:10 +05:30
Andrey Smirnov
0bf161dffb
test: add integration test for system extensions
...
This verifies system extensions via the gVisor system extension.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-01-26 23:29:15 +03:00
Andrey Smirnov
85782faa24
feat: update Kubernetes to 1.23.3
...
Also bumps some dependencies and updates Talos version we use in the
upgrade tests.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-01-26 17:59:21 +03:00
Florian Klink
a50c42980f
fix: use #!/usr/bin/env bash as shebang instead of #!/bin/bash
...
This will fix running these scripts on distros without /bin/bash, but
where bash is in $PATH, such as NixOS.
Currently, `make fmt` otherwise fails to run:
```
make[3]: Leaving directory '/home/flokli/dev/numtide/manifoldfinance/talos'
sh: ./hack/fix-artifacts.sh: /bin/bash: bad interpreter: No such file or directory
make[2]: *** [Makefile:163: local-fmt-protobuf] Error 126
make[2]: Leaving directory '/home/flokli/dev/numtide/manifoldfinance/talos'
make[1]: *** [Makefile:274: fmt-protobuf] Error 2
make[1]: Leaving directory '/home/flokli/dev/numtide/manifoldfinance/talos'
make: *** [Makefile:277: fmt] Error 2
```
Signed-off-by: Florian Klink <flokli@flokli.de>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-01-25 23:11:39 +03:00
Andrey Smirnov
f94c8c6e1c
feat: update Kubernetes to 1.23.2
...
See https://github.com/kubernetes/kubernetes/releases/tag/v1.23.2
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-01-20 22:12:03 +03:00
Spencer Smith
d8a2721e12
test: update CAPI components to latest
...
This PR updates to our latest point release for CACPPT to
ensure faster testing. It also pulls in a newer AWS provider.
Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2022-01-05 16:49:03 -05:00
Andrey Smirnov
80350861a2
feat: update Kubernetes to 1.23.1
...
See https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.23.md#changelog-since-v1230
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-12-16 22:13:24 +03:00
Spencer Smith
3af56bd2e7
test: update capi templates to v1beta1
...
This PR uplifts our E2E tests to use the latest CAPI templates and
providers
Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2021-12-14 15:41:23 -05:00
Andrey Smirnov
8e1d0bfb5f
feat: update Kubernetes to 1.23.0
...
See https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.23.md#changelog-since-v1220
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-12-08 18:51:11 +03:00
Andrey Smirnov
36c9a65ac0
feat: update deps and Kubernetes to 1.23.0-rc.1
...
Update Go modules to the latest versions including talos-systems/
released modules.
In preparation for 0.14-beta release.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-12-06 18:43:26 +03:00
Spencer Smith
6377f3df7b
test: uplift capi versions and templates
...
This PR will use the latest templates for v1alpha4 and the supporting
CAPI provider versions. We'll bump again when we land v1beta1
Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2021-12-03 09:39:25 -05:00
Andrey Smirnov
f3149780e6
feat: update Kubernetes to 1.23.0-rc.0
...
Still no proper tags for Kubernetes modules (known issue upstream).
Also bump dependencies.
Closes #4605 closes #4606
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-11-29 16:22:46 +03:00
Artem Chernyshev
b4a406ae7c
test: pin cluster API templates version to tag v1alpha4
...
This should help us to go forward with breaking changes in the templates
repo.
Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
2021-11-24 17:48:56 +03:00
Andrey Smirnov
7c9b082f74
feat: update Kubernetes to 1.23.0-beta.0
...
Go modules were not tagged this time: https://github.com/kubernetes/kubernetes/issues/106529
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-11-18 16:50:46 +03:00
Andrey Smirnov
6dcce20e6f
test: set proper pod CIDR for Cilium tests
...
This fixes the issue with kubelet picking up wrong IP on restart, as
Talos doesn't know pod IPs (Cilium is using its own pod CIDR, it doesn't
look up Kubernetes settings).
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-11-15 23:50:00 +03:00
Alexey Palazhchenko
785161d19f
feat: update k8s to 1.23.0-alpha.4
...
See https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.23.md#v1230-alpha4
Closes #4495 .
Closes #4498 .
Closes #4499 .
Closes #4500 .
Closes #4501 .
Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@talos-systems.com>
2021-11-08 19:37:25 +00:00
Andrey Smirnov
6c297268ce
test: fix e2e k8s version
...
Prefix `v` shouldn't be there.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-10-22 18:08:18 +03:00
Andrey Smirnov
ae5af9d3fa
feat: update Kubernetes to 1.23.0-alpha.3
...
See https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.23.md#v1230-alpha3
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-10-22 14:59:41 +03:00
Spencer Smith
2258bc4918
test: update GCP e2e script to work with new templates
...
This PR updates the e2e scripts to work properly by updating the var
names as needed.
Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2021-10-21 16:39:10 -04:00
Spencer Smith
c8e404e356
test: update vars for AWS cluster
...
This PR updates to use the newest var setup from our capi templates.
Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2021-10-19 16:33:52 -04:00
Andrey Smirnov
68c420e3c9
feat: enable cluster discovery by default
...
This enables cluster discovery by default for Talos 0.14. KubeSpan is
not enabled by default.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-10-15 14:46:32 +03:00
Andrey Smirnov
9bd4838ac1
chore: stop using sonobuoy CLI
...
We already have (better) way to run short conformance tests via
`talosctl`.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-10-15 12:34:53 +03:00
Artem Chernyshev
877a2b6fc0
test: bump CAPI components to v1alpha4
...
Alpha versions of talos providers for now.
Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
2021-10-12 12:48:15 +03:00
Andrey Smirnov
96bccdd3b6
test: update CABPT provider to 0.3 release
...
Testing with new CABPT release.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-09-22 18:21:56 +03:00
Andrey Smirnov
9d803d75bf
chore: bump dependencies and drop firecracker support
...
Note: Talos can be still run under `Firecracker`, support for
Firecracker was only removed for `talosctl cluster create`.
Reason:
* code is untested/unmaintained, and probably doesn't work correctly
* firecracker Go SDK pulls lots of dependencies and it blocks CNI Go
module update
Bonus: `talosctl-linux-amd64` shrinks by 2 MiB.
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-09-20 17:13:34 +03:00
Andrey Smirnov
d943bb0e28
feat: update Kubernetes to 1.22.2
...
See https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-09-16 13:59:51 +03:00
Andrey Smirnov
57a77696ef
feat: update Kubernetes to 1.22.1
...
See https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md#changelog-since-v1220
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@talos-systems.com>
2021-08-23 09:58:02 +00:00
Alexey Palazhchenko
e030b2e8bb
chore: use k8s 1.21.3 in CAPI tests for now
...
Refs #4046 .
Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@talos-systems.com>
2021-08-10 13:28:37 -07:00
Alexey Palazhchenko
09d70b7eaf
feat: update Kubernetes to v1.22.0
...
Closes #3967 .
Closes #3997 .
Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@talos-systems.com>
2021-08-06 09:06:32 -07:00
Artem Chernyshev
55e17ccdd1
chore: bump dependencies
...
Fixes: https://github.com/talos-systems/talos/pull/3954 https://github.com/talos-systems/talos/pull/3955 https://github.com/talos-systems/talos/pull/3956 https://github.com/talos-systems/talos/pull/3957 https://github.com/talos-systems/talos/pull/3958 https://github.com/talos-systems/talos/pull/3959 https://github.com/talos-systems/talos/pull/3960 https://github.com/talos-systems/talos/pull/3961 https://github.com/talos-systems/talos/pull/3962 https://github.com/talos-systems/talos/pull/3963 https://github.com/talos-systems/talos/pull/3964
And update kubelet to 1.21.3.
Signed-off-by: Artem Chernyshev <artem.0xD2@gmail.com>
2021-07-19 06:06:01 -07:00
Alexey Palazhchenko
eea750de2c
chore: rename "join" type to "worker"
...
Closes #3413 .
Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@gmail.com>
2021-07-09 07:10:45 -07:00
Spencer Smith
2060ceaa0b
chore: add CAPI version to CI setup
...
This PR makes sure we pin to a known CAPI version because with the new
v0.4.x released, we'll fail until we support the v1alpha4 APIs.
Signed-off-by: Spencer Smith <robertspencersmith@gmail.com>
2021-06-25 10:44:07 -04:00
Spencer Smith
898673e8d3
chore: update e2e tests to use latest capi releases
...
This PR version bumps cacppt, cabpt, capa, capg, and cluster api itself
Signed-off-by: Spencer Smith <robertspencersmith@gmail.com>
2021-06-22 12:37:22 -07:00
Alexey Palazhchenko
42c16f67f4
chore: bump dependencies
...
Update k8s to 1.21.2.
See #3787 #3788 #3789 #3790 #3791 #3792 #3793 #3794 #3795 #3796 #3798 .
Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@gmail.com>
2021-06-21 07:05:41 -07:00
Alexey Palazhchenko
4fe6912143
test: better talosctl ls tests
...
Refs #3018 .
Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@gmail.com>
2021-05-20 03:29:21 -07:00
Andrey Smirnov
76e38b7b82
feat: update Kubernetes to 1.21.1
...
See https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md
Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-05-13 08:05:08 -07:00