3256 Commits

Author SHA1 Message Date
Andrey Smirnov
9dace93b59
feat: enable Pod Security Admission by default
As Talos 1.1 supports Kubernetes 1.22-1.24, we can finally enable Pod
Security Admission by default:

```yaml
apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- configuration:
    apiVersion: pod-security.admission.config.k8s.io/v1alpha1
    defaults:
      audit: restricted
      audit-version: latest
      enforce: baseline
      enforce-version: latest
      warn: restricted
      warn-version: latest
    exemptions:
      namespaces:
      - kube-system
      runtimeClasses: []
      usernames: []
    kind: PodSecurityConfiguration
  name: PodSecurity
  path: ""
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-11 15:36:04 +03:00
Noel Georgi
c382cb8cd2
docs: update vmware docs
Update VMWare docs to use `@` syntax to load files

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-11 16:22:21 +05:30
Tim Jones
da0e638f04
docs: stableize tools versioning
Ensure that the site generation tools are
up to date and match versions.

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-04-08 15:25:29 +02:00
Tim Jones
f2d2267e74
docs: use template for netlify redirects
Use a template for Netlify redirects so we
dont have to maintinan a static file manually.

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-04-08 14:41:35 +02:00
Tim Jones
88f1d8fcc0
docs: update sitemap to point to direct url
`talos.dev` redirects to `www.talos.dev` so this fix to
the sitemap removes the redirect when scraping.

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-04-08 09:57:49 +02:00
Noel Georgi
a6eebee36f
chore: update eudev
Update eudev

Ref: https://github.com/siderolabs/pkgs/pull/443

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-08 00:05:48 +05:30
Andrey Smirnov
0cb84e8c1a
fix: correctly parse tags out of images
Use the last `:` in the image reference.

Handle the case when no version was discovered.

See https://github.com/siderolabs/theila/issues/138

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-07 19:32:12 +03:00
Spencer Smith
17d09739f3
docs: enable nested arrow
This PR enables the little arrow that shows there's stuff underneath a
header on the sidebar.

Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2022-04-07 11:45:59 -04:00
Noel Georgi
1e4320b64e
chore: add support for rockpi 4A and 4B
Add support for RockPi 4A and 4B

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-06 23:35:16 +05:30
Steve Francis
d1869d948c
docs: update to Sidero Metal, mention clusterctl
People are searching talos docs for cluserctl, so mentioning in this page to point them towards Sidero Metal.

Signed-off-by: Steve Francis <steve.francis@talos-systems.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-06 16:45:57 +03:00
Andrey Smirnov
18d0038eca
fix: avoid panic in DHCPv6 operator on nil dereference
Log (lines for Talos v1):

```
[talos] operator panicked {"component": "controller-runtime", "controller": "network.OperatorSpecController", "stack": "github.com/talos-systems/talos/internal/app/machined/pkg/controllers/network.(*operatorRunState).runWithPanicHandler.func1\x5cn\x5ct/src/internal/app/machined/pkg/controllers/network/operator_spec.go:137\x5cnruntime.gopanic\x5cn\x5ct/toolchain/go/src/runtime/panic.go:1038\x5cnruntime.panicmem\x5cn\x5ct/toolchain/go/src/runtime/panic.go:221\x5cnruntime.sigpanic\x5cn\x5ct/toolchain/go/src/runtime/signal_unix.go:735\x5cngithub.com/talos-systems/talos/internal/app/machined/pkg/controllers/network/operator.(*DHCP6).parseReply\x5cn\x5ct/src/internal/app/machined/pkg/controllers/network/operator/dhcp6.go:145\x5cngithub.com/talos-systems/talos/internal/app/machined/pkg/controllers/network/operator.(*DHCP6).renew\x5cn\x5ct/src/internal/app/machined/pkg/controllers/network/operator/dhcp6.go:208\x5cngithub.com/talos-systems/talos/internal/app/machined/pkg/controllers/network/operator.(*DHCP6).Run\x5cn\x5ct/src
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-05 22:39:51 +03:00
William Ashton
9e3d438db4
docs: fix code fence formatting
This change fixes an issue where a code fence unintentionally included
the entire rest of the page.

Signed-off-by: William Ashton <William@AshtonFam.org>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-05 22:17:33 +03:00
Andrey Smirnov
b3f1bb2cff
fix: add support for FAT12/16 filesystems
This can be used when probing filesystems with config data in the
`metal-iso` case or in the `nocloud` platform.

Small disk images by default are created with small bits FAT
filesystems.

See https://github.com/siderolabs/go-blockdevice/pull/59

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-05 18:14:04 +03:00
Andrey Smirnov
8619f95c5c
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-04 17:29:49 +03:00
Spencer Smith
8c4f720048
docs: override sitemap.xml to only include latest results
This PR overrides the sitemap to only include, for example, v1.0 results
if that's our specified latest version. This should fix Google's
indexing of our docs to only include the latest results.

Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2022-04-04 09:44:45 -04:00
Andrei Dobre
5192ba4e23
docs: fix a typo in QEMU VM setup guide
Fix a typo in the QEMU VM docs.

Signed-off-by: Andrei Dobre <andreidobre.web@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-04 16:17:44 +03:00
Andrey Smirnov
663e3e8796
refactor: change the stages for embed files generation
The main goal to avoid cache invalidation on `tag` changes: by pushing
the tag down the build after the generate step, avoid invalidating build
cache on each tag change (`-dirty`, rebasing, etc.)

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-04 16:02:19 +03:00
Andrey Smirnov
19bf12af07
fix: enable IPv6 in Docker-based Talos clusters
Docker by default disable IPv6 completely in the containers which breaks
SideroLink on Docker-based clusters, as SideroLink is using IPv6
addresses for the Wiregurard tunnel.

This change might break `talosctl cluster create` on host systems which
have IPv6 disabled completely, so provide a flag to revert this
behavior.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-01 20:28:12 +03:00
Spencer Smith
3889a58397
docs: update config.yaml, storage.md, digital-rebar.md
This PR is an omnibus edition of Steve's PRs. It includes three small
things to the docs:

- A change to config.toml to avoid redirects a bit better
- Updates to digital rebar doc that fixes a few links and typos.
- Updates for typos and wording of storage.md

Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2022-04-01 19:58:40 +03:00
Andrey Smirnov
25d19131d3
release(v1.1.0-alpha.0): prepare release
This is the official v1.1.0-alpha.0 release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
pkg/machinery/v1.1.0-alpha.0 v1.1.0-alpha.0
2022-04-01 18:23:19 +03:00
Andrey Smirnov
2ca5279e56
fix: retry manifest updates in upgrade-k8s
This showed up recently frequently in integration-provision tests
(might be related to Kubernetes upgrade), but anyways errors should be
retried.

Refactored the function to extract the retryable part.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-01 16:20:25 +03:00
Tim Jones
eeb756168f
feat: use kexec when resetting a node
In the case of a node being reset, using kexec greatly
speeds up the process. However, in the event the boot
partition is wiped, a full reboot is required.
Closes #4670

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-04-01 10:49:37 +02:00
Andrey Smirnov
1ed1f73e51
test: bump CAPI to 1.1.3
This probably fixes the incompatibility with 1.24.0-beta.0.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 22:50:16 +03:00
Andrey Smirnov
2ee1d2c720
feat: update Kuberentes to 1.24.0-beta.0
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-beta.0

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 18:06:56 +03:00
Andrey Smirnov
c26fa4ccc1
test: push GITHUB_TOKEN to the e2e-aws/gcp steps
This should avoid constant GitHub API rate limiting errors.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 16:55:55 +03:00
Tim Jones
95d900de77
feat: use kubeconfig env var
When interating with the kubeconfig it can be
expected that a user may have the KUBECONFIG
environment variable set, so we need to use
it when appropriate.
Closes #5091

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-03-31 15:30:26 +02:00
Serge Logvinov
0b407dd17e
feat: add dhcp-v6 NTP/DHCP-DUID
DHCP-v6 addons:
* DUID (client unique indentifier)
* apply NTP server list

DUID helps to keep you ipv6 after reboot.
NTPv6 helps to work in ipv6-only networks.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 16:09:23 +03:00
Spencer Smith
a140a6bad7
docs: update releases shortcode in upgrade guide
This PR moves to using % instead of < for the release shortcode. As far
as I understand it, doing so tells hugo it's not raw html and thus the
headers get rendered to the sidebar properly. We may want to switch the
other uses as well, but I'm not sure it would make any difference one
way or another.

Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2022-03-31 07:56:56 -04:00
Andrey Smirnov
12931dcedd
fix: align partitions on 1M boundary
Potentially fixes: #4985

See siderolabs/go-blockdevice#58 for details.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 14:36:13 +03:00
Noel Georgi
37f868e374
fix: validate empty TLS config for registries
Validate empty TLS config for registries

Fixes: #5262

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-31 14:31:59 +05:30
Andrey Smirnov
ca8b9c0a3a
feat: update Kubernetes to 1.24.0-alpha.4
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-alpha.4

Fix some incompatibilities around dropped flags/API versions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 22:59:07 +03:00
Andrey Smirnov
d9ec6b2151
chore: drop dirty from abbreviated tag
Otherwise `make generate` updates embeddable data file with `-dirty`
stuffix which we don't want.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 22:06:41 +03:00
Spencer Smith
08624fd0b1
docs: add banner to main page
This PR adds a banner to the splash to make it look a bit nicer.

Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2022-03-30 13:30:58 -04:00
Andrey Smirnov
fc23c7a595
test: bump versions for upgrade tests
Use 0.14 -> 1.0 -> master.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 18:59:48 +03:00
Andrey Smirnov
4bfe686105
feat: update runc to 1.1.1
Also drop kernel sound/PCMCIA, enable random trust CPU, update
for Jetson Nano u-boot.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 18:17:26 +03:00
Dmitriy Matrenichev
b315ed9532
chore: use go:embed instead of ldflags
Generate separate file for each variable and assign them during go build using go:embed instead of using ldflags -X.

Resolves #5138

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2022-03-30 18:15:48 +04:00
Andrey Smirnov
a5d64fc814
feat: update Flannel to 0.17.0
See https://github.com/flannel-io/flannel/releases/tag/v0.17.0

Flannel image was copied without any changes to `ghcr.io` to avoid
Docker Hub download limits.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 16:42:44 +03:00
Andrey Smirnov
6d6eb3f6a5
docs: fork docs for 1.1
Set up things for future 1.1 release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 16:01:55 +03:00
Andrew Rynhard
1d55f05d11
docs: update index page
Simplify the index page.

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 15:40:09 +03:00
Andrey Smirnov
ad6b7ec1a4
fix: enable etcd consistency on check startup
See:

- https://github.com/etcd-io/etcd/issues/13766
- https://github.com/kubernetes/kubeadm/issues/2676

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-29 22:53:32 +03:00
Spencer Smith
65a31f7531
docs: re-add GA token
This PR adds the Google Analytics token back. This _should_ ensure the
script is injected if the environment is "production". Once published,
if this doesn't work I'll troubleshoot further.

Signed-off-by: Spencer Smith <spencer.smith@talos-systems.com>
2022-03-29 14:07:07 -04:00
Andrey Smirnov
741c048320
docs: mark 1.0 docs as latest
Just moving pointers to 1.0.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-29 20:47:00 +03:00
Noel Georgi
e97433c8a3
docs: update jetson nano
Update jetson nano

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-29 22:22:05 +05:30
Noel Georgi
6665e0f00c
docs: code block copying
Enable code blocks copying

Ref: https://aaronluna.dev/blog/add-copy-button-to-code-blocks-hugo-chroma/

Supersedes #5235

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-29 19:16:44 +05:30
Tim Jones
c41f2b2167
docs: update whats-new-v1.0
Just a few small changes for readability
in the Whats New section.

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-03-29 15:11:34 +02:00
Andrey Smirnov
0a36fbbf3c
docs: add release notes for 1.0
Mostly reformatting and updating release notes for easier consumption.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-28 22:48:30 +03:00
Noel Georgi
bd0035f6a2
docs: add NVIDIA docs
Add NVIDIA docs

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-29 00:21:48 +05:30
Andrey Smirnov
efa3f28985
fix: correctly find partitions with config data (metal-iso)
Update `go-blockdevice` library:

- https://github.com/siderolabs/go-blockdevice/pull/56

Also add a note on the org rename to the release notes.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-28 20:34:30 +03:00
Suraj Shirvankar
9ebeec0d0e
docs: fix incorrect path for talosconfig
Fixes for Proxmox platform.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-28 18:20:59 +03:00
Daniel Höxtermann
9fef4540e1
docs: fix non-latest download links
Links were broken while moving from latest to the specific release.

Signed-off-by: Daniel Höxtermann <daniel@hxtm.dev>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-28 18:01:27 +03:00