If the end range reaches "max value", we need to drop it instead of
overflowing.
Fixes#12890
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 720a2148ab023d19f3653625d785d3568f983035)
Add advertisedNetworks filter to KubeSpan configuration that allows
filtering which additional networks (e.g., pod CIDRs) are advertised
over KubeSpan when advertiseKubernetesNetworks is enabled.
Signed-off-by: Daniil Kivenko <daniil.kivenko@p2p.org>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 70c6c2154e87d4a6748aebdfa2c50cbc97a0dd89)
Update pkgs with Linux 6.18.6 and dm-integrity module added.
Drops some crc kmods, as they are now compiled in.
See https://github.com/siderolabs/pkgs/pull/1447
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit b9e27ebe72c4302c416fd8efb007c3966004ddd6)
After changing `talsoctl images k8s-bundle and talos-bundle`
we stopped printing some of the images to release notes.
This fixes that issue.
Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
(cherry picked from commit 7416dca59378dc282e42ea30107cf40326cc593c)
Update to the final version for v1.12.0.
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 8d6a7a8677a5d1d61432fa94ca030351fd9852f2)
Update to the latest version.
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 845a0d09cd770a15db762ddda4d3d27f58656cfe)
s/default/k8s-bundle
s/source-bundle/talos-bundle
for UX consistency when generating lists of images used by talos.
Remove non-k8s images from k8s-bundle list.
Signed-off-by: Justin Garrison <justin.garrison@siderolabs.com>
(cherry picked from commit 51bcfb567915d2b27e4b5321e080220bc618086b)
Fix a typo and add a link to network configuration docs.
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit cd04c3dde70f604603fd7996c62adf5a17cfbd41)
Add a dummy config to make extension start successfully.
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit cf087c1e01bc1226049a57186f48b2e6b5739c5c)
Using the next LTS Linux for Talos 1.12.
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit dd6c1089c8f30d815c80ab10544a0fef27ddd14c)
Use the latest 1.35.0 version.
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 18f8ac369ba52f2640508134d3983f006f698129)
74d35900af0f6451426b70eec3b6db4b72eb993c was supposed to disable the k8s
tests on memory-restricted workers, but instead made the tests only run
on memory-restricted workers.
Signed-off-by: Laura Brehm <laurabrehm@hey.com>
(cherry picked from commit f489299b603a2aff0f292fa941ae8925fdda3492)
Kubernetes E2E tests have had a bump in memory usage, making running
these on 1GiB worker nodes unreliable.
Disable `talosctl health --run-e2e` in this case.
Signed-off-by: Laura Brehm <laurabrehm@hey.com>
(cherry picked from commit 74d35900af0f6451426b70eec3b6db4b72eb993c)
Update pkgs and tools version
Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
(cherry picked from commit 561cfb60c313a9bdc70ed2ff2729549bc8c50fcb)
Extracted from #12115
The idea is that kernel log can be delivered/persisted along with any
other service logs.
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit e715f387137fa566a4824c051b624e013a93c49f)
Add a changelog entry for the API Server Cipher Suites.
Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
(cherry picked from commit 9945ceef37b13bc6e93637dcf395a8c9019e60ed)
When set to `disk`, a full block device is used for the volume.
When `volumeType = "disk"`:
- Size specific settings are not allowed in the provisioning block (`minSize`, `maxSize`, `grow`).
Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
In certain situations, Talos's shutdown/reboot sequence hangs while
waiting for services/mounts to be gracefully stopped (see:
https://github.com/siderolabs/talos/issues/11775).
This patch adds a forceful mode to the reboot sequence (`talosctl reboot
--mode force`) that bypasses graceful userspace teardown and hard
reboots the machine.
Signed-off-by: Laura Brehm <laurabrehm@hey.com>
Allows for NVIDIA kernel modules to load on arm arch
Signed-off-by: Justin Garrison <justin.garrison@siderolabs.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>