mirror of
https://github.com/siderolabs/talos.git
synced 2026-04-13 17:51:09 +02:00
b4aa5189d4
This is the official v1.10.0-alpha.0 release. Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
1.7 MiB
1.7 MiB
Talos 1.10.0-alpha.0 (2024-12-23)
Welcome to the v1.10.0-alpha.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
cgroups v1
Talos Linux no longer supports cgroupsv1 when running in non-container mode.
The kernel argument talos.unified_cgroup_hierarchy is now ignored.
Driver Rebind
Talos 1.10 now supports a new machine config document named PCIDriverRebindConfig that allows rebinding the driver of a PCI device to a different target driver.
See the documentation for more information.
Component Updates
- Linux: 6.12.6
- CNI plugins: 1.6.1
Talos is built with Go 1.23.4.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Dmitry Sharshakov
- Nico Berlee
- Utku Ozdemir
- Alexis La Goutte
- Andrew Symington
- Christian Luetke-Stetzkamp
- Devin Buhl
- Justin Garrison
- KillianCdP
- Marcel Hamer
- PRIHLOP
- Skyler Mäntysaari
- Tine Jozelj
- sflotat2607
Changes
63 commits
bd85bd5b7fix: fixFailed to initialize SELinux labeling handleudev error73c82e3e5feat: bring Linux 6.12.6, CNI plugins 1.6.1c12b52491docs: document Kubernetes service registry incompat with K8s 1.32a5660ed77feat: pcirebind controller4c3261626docs: fix several typosfb3675321fix: dashboard crash on CPU datadec0185c8chore: reduce memory usage for secureboot functionscee6c60a0fix: make talosctl time work with PTP time syncf75604313chore: support gcr.io auth for cache and image gen6ef2596dadocs: improve Hetzner documentation7d39b9ec2feat: remove cgroupsv1 in non-container mode8003536c7fix: restore previous disk serial fetching03116ef9bchore: prepare for Talos 1.1000682fdd6docs: activate 1.9 docs as defaultbea05f5c9docs: update deploying-cilium.md284ab1179feat: support link altnames/aliases5bfd829bfdocs: fix 'containter' typo8d151b771docs: clarify TALOSCONFIG for AWS0ef19171ffix: renovate typoc568adc7dfix: renovate configec2e24fd9fix: match MAC addresses case-insensitive (nocloud)41a0c440achore: rekres for renovate changesa49bb9ee4feat: update Linux to 6.12.5b15917eccchore: add more debugging logs for META and volumes2b1b326f0docs: mention different paths for OpenEBS9470e842ftest: cleanup failed Kubernetes podsc9c685150fix: node identity flip590c01657feat: update containerd to v2.0.118fa5a258docs: update image-cache doc for isoab5bb6884fix: generate and serve registries with port58236066dfix: support image cache on VFAT USB sticke193a5071fix: image cache integration test08ee400fdtest: fix flaky test NodeAddressSortd45e8d1d1feat: update Kubernetes to 1.32.0136b12912chore: drop semicolon for supporting vfat filesystems3e9e027eftest: add an option to boot from an USB stickef8c3e3b3docs: fix typo in multus.mdd54414addfix: authorization config gencce72cfe8docs: replace deprecated Hetzner server plans81805103dchore: enable proper parallel usage of TestDepthe1b824ebadocs: update ceph-with-rook.md470b75563fix: use mtu network option for podman61b1489a0fix: order volume config by the requested sizebc3039acdfeat: update runc to 1.2.330016a0a8fix: avoid nil-pointer-panic inRegistriesConfigControllerfe0457152fix: power on the machine on reboot request in qemu power api10da553efdocs: build what's new for 1.9d946ccae3feat: update Linux to 6.12.4707a77bf6test: fix user namespace test, TPM2 fixesc3537b2f5feat: update Linux to 6.12.3cb4d9d673docs: fix a few mistakes in release notesc4724fc97chore: add integration tests for image-cache07220fe7ffix: install iptables-nft to the host14841750bchore: add version compatibility for Talos 1.10852baf819feat: support vlan/bond in v1, vlan in v2 for noclouddd61ad861fix: lock provisioning order of user disk partitionsd0773ff09chore: update Go to 1.23.47d6507189feat: implement new address sorting algorithm9081506d6feat: add process scheduling options77e9db4abtest: use two workers in qemu tests by default5a4bdf62afeat: update Kubernetes to 1.32.0-rc.1d99bcc950chore: refactor mergeDNSServers func0cde08d8bdocs: add Turing RK1 docs to Single Board Computer section
Changes from siderolabs/pkgs
17 commits
9051c9afeat: update Linux to 6.12.66695012chore: rekres to simplify.kres.yamldefaults611ca38chore: rekres to bring renovate under kresa4c4215fix: drop cgroupsv1 controllers28c909dfeat: update Linux firmware to 20241210c40a9e9feat: update Linux to 6.12.5d54ca83feat: update containerd to v2.0.186e3755fix: add CONFIG_INTEL_MEI_GSC_PROXY as module8c31321feat: update ZFS to 2.2.7605f493feat: update runc to v1.2.31a55529feat: update Linux to 6.12.452ba9a5feat: update Linux 6.12.39cf35befeat: build host iptables with nftables support71003a3feat: update Go to 1.23.45b4d402feat: build dvb kernel modules and CX23885b330af9chore: bring in KSPP recommendationsf81b190feat: kernel driver support for RK3588 devices (Turing RK1)
Changes from siderolabs/tools
Dependency Changes
- github.com/containernetworking/plugins v1.6.0 -> v1.6.1
- github.com/foxboron/go-uefi fab4fdf2f2f3 -> 19dc140271bf
- github.com/opencontainers/runc v1.2.2 -> v1.2.3
- github.com/siderolabs/go-blockdevice/v2 v2.0.7 -> v2.0.8
- github.com/siderolabs/pkgs v1.9.0-12-g9576b97 -> v1.10.0-alpha.0-16-g9051c9a
- github.com/siderolabs/talos/pkg/machinery v1.9.0 -> v1.9.0-alpha.3
- github.com/siderolabs/tools v1.9.0-1-geaad82f -> v1.10.0-alpha.0
- golang.org/x/net v0.32.0 -> v0.33.0
Previous release can be found at v1.9.0
Talos 1.9.0-alpha.3 (2024-11-25)
Welcome to the v1.9.0-alpha.3 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
AppArmor
Talos Linux starting with v1.9 will ship with SELinux LSM enabled by default. If you need to use AppArmor LSM add the following to the machine configuration:
machine:
install:
extraKernelArgs:
- -selinux
- lsm=lockdown,capability,yama,apparmor,bpf
- apparmor=1
Auditd
Talos Linux now starts a auditd service by default.
Logs can be read with talosctl logs auditd.
talosctl cgroups
The talosctl cgroups command has been added to the talosctl tool.
This command allows you to view the cgroup resource consumption and limits for a machine, e.g.
talosctl cgroups --preset memory.
Device Selectors
Talos now supports matching on permanent hardware (MAC) address of the network interfaces. This is specifically useful to match bond members, as they change their hardware addresses when they become part of the bond.
Direct Rendering Manager (DRM)
Starting with Talos 1.9, the i915 and amdgpu DRM drivers will be dropped from the Talos squashfs.
There will be new system extensions named i915 and amdgpu that would contain both the drivers and firmware packaged together.
Upgrades via Image Factory will automatically include the new extensions if previously i915-ucode or amdgpu-firmware were used.
Registry Mirrors
In versions before Talos 1.9, there was a discrepancy between the way Talos itself and CRI plugin resolves registry mirrors: Talos will never fall back to the default registry if endpoints are configured, while CRI plugin will.
Note: Talos Linux pulls images for the
installer,kubelet,etcd, while all workload images are pulled by the CRI plugin.
In Talos 1.9 this was fixed, so that by default an upstream registry is used as a fallback in all cases, while new registry mirror
configuration option .skipFallback can be used to disable this behavior both for Talos and CRI plugin.
talosctl disks
The command talosctl disks was removed, please use talosctl get disks, talosctl get systemdisk, and talosctl get blockdevices instead.
talosctl wipe
The new command talosctl wipe disk allows to wipe a disk or a partition which is not used as a volume.
udevd
Talos previously used eudev to provide udevd, now it uses systemd-udevd instead.
Component Updates
- Linux: 6.6.60
- containerd: 2.0.0
- Flannel: 0.26.0
- Kubernetes: 1.32.0-beta.0
- runc: 1.2.1
Talos is built with Go 1.23.3.
User Namespaces
Talos Linux now supports running Kubernetes pods with user namespaces enabled. Refer to the documentation for more information.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitry Sharshakov
- Dmitriy Matrenichev
- Joakim Nohlgård
- Jean-Francois Roy
- Utku Ozdemir
- blablu
- Adolfo Ochagavía
- Alessio Moiso
- Dan Rue
- David Backeus
- Eddie Wang
- Florian Ströger
- Hexoplon
- Jakob Maležič
- KBAegis
- Mike Beaumont
- Nebula
- Nico Berlee
- OliviaBarrington
- Philip Schmid
- Philipp Kleber
- Remko Molier
- Robby Ciliberto
- Roman Ivanov
- Ryan Borstelmann
- Sam Stelfox
- Serge Logvinov
- Sergey Melnik
- Spencer Smith
- SpiReCZ
- Steven Cassamajor
- Steven Kreitzer
- Tim Jones
- Variant9
- adilTepe
- ekarlso
- naed3r
- nevermarine
- solidDoWant
- sophia-coldren
Changes
189 commits
af5d6b8c41fix: show SELinux labels on pseudo-fsf46922fa9achore: fix dockerfile warningsa13f82c594feat: udev: label device nodese899fb37fdfeat: label created files in /etc5f68c17edafeat: implement image cache configuration0ffb2187a3feat: registry proxy77cf84fb57feat: support generating iso with imagecache5de6275b8fchore: image cache generator improvements1a8cc5f8b2feat: add SELinux labels to volumes61b9129e0cfix: add directory entries and filemode to tarball4caeae21e5refactor: optimize flags and SetLabel6074a870adfeat: add e2fsprogs to talos rootfs7ffcf5b932docs: update getting startedc4c1a0d7c7fix: make vmware platform common code build on all archescc768037f8feat: implement block device wipe6fb518ae57fix: don't activate LVM volumes in agent mode0e3ed30723fix: no longer leakClosereader4dc58cfdf3chore: small fixesf400ae911bfix: small fixes for image cache generation93754b7de6fix: config and platform manifest generation95b2fc946efeat: image cache gene4c6186c63chore: remove i915/amdgpu drivers744ad12a6edocs: update replicated-local-storage-with-openebs.mdfd713e4514feat: add permanent hardware addr to device selectorsd55a96e8cbrefactor: remove SELinux client_u and client_r3a5b55fd22fix: allow CEL expressions config mergef1b15f580echore: remove replace for safchain/ethtoolf9697a9a07fix: register controlplane node with NoSchedule taint30f8b5a9f7fix: registry mirror fallback handling0f41e77434feat: allow for onlink directive (nocloud)e26d0043e0chore: code cleanup43fe3807a8feat: implement tracking of blockdevice secondaries8a7476c3aefix: install on non-empty disk8b4253d185feat: update etcd to v3.5.175a0fd5b882refactor: move early initialization functions to pre-initialize phase9916e2cd8achore: update pkgs/tools/extras for Go 1.23.320bbf02355docs: update vultr documentationaea98940b7fix: arch linux search paths and names for QEMU provisioner682718d4c9fix: use imager incoming version for extension validation9a02ecc49ffeat: rewrite install disk selector to use CEL expressionseba35f4413docs: add note about PSP in Rook-Ceph guide38b80fb1dadocs: add missing--talosconfigparameter to end of Hetzner guidea07f66c918docs: gcp: fix controlplane nodes tags4fe6dc8a0achore: clean dns code0290a38818release(v1.9.0-alpha.2): prepare releasea309f6aa57chore: fix nil pointer dereference in AWS uploader333737f176test: fix unpriviliged process runner test2001167058chore(ci): save support zip always after tests6a42c3b8edrelease(v1.9.0-alpha.1): prepare releasefb72e4b7b7fix(ci): skip test ifUserNamespacesSupportfeature gate is not set11380f933dfeat: display current CPU frequency on dashboardfbce267aeefeat: check bridged interfaces should not have addresses942962bf00docs: add docs on usernamespace support in k8s0406a05a98chore: update pkgs to ones built with gcc 14.22e127627dcdocs: add apparmor enablement release notesaa9311f3d8fix: install disk matcher error1800f81044fix: selinux handling and apparmor tests313bffadfbfeat: update Kubernetes to v1.32.0-beta.0bbfa144510feat: update containerd to v2.0.08e02b9fcbfdocs: update manual k8s upgrade docs474949dc77feat: add dm-cache dm-cache-smq kernel modules5112547d6bchore: generate support zip for crashdumpa867f85e4cfeat: label system socket and runtime files398f714cfffeat: update Linux 6.6.59, runc 1.2.105c620957cfeat: allow extra mounts for docker-basedtalosctl cluster createcedabeddf7chore: cleanup code61d363e1d0chore: update go-auditlib960a040491feat: start enabling SELinux7f3aaa21cdfix: update permissions for logging directories in /var0e6c983b84fix: mount /sys/kernel/security conditionally74b0e8c371fix: make route normalization keep family0a3761c22ffix: talosctl windows arm644b10c5328bchore: add Windows ARM64 build for talosctl9abf16108efeat: add auditd serviced464ca869fchore: drop runc memfd bind added in #9069b54d26c2c3fix: mount pseudo sub-mountpoints in init7aeb15f730chore: disable coredns cache for cluster domaind8b652150cdocs: add warning about NVMe bus path bug3e16ab135efeat: update Kubernetes to v1.32.0-alpha.30b8b356777feat: add BridgePort property to network machine configurationb379506259fix: use more correct condition to skip generating hosts files62ec7ec336refactor: replace the old v1 mount package with new one0ece13c623docs: update network-config.md (cont)93827f0485docs: update network-config.md423b1e5fb2fix: do not trim 0 from process SELinux label2136358d65feat: introduce metal agent mode0e15955fccchore: small refactoring66012a7f26feat: remove wrapperd and launch processes directly3a0a17ae66fix: prevent panic in nocloud platform codedc0c6acbd7refactor: remove unmaintained github.com/vishvananda/netlink78353f7918feat: add parsing of vlanNNNN:ethX style VLAN cmdline args9db7a36bfcfix: generation of SecureBoot isoc755b6d7e4fix: update the CRI sandbox image referencecec290b354feat: allow extensions to log to consoleb7801df827fix: wait for udevd to be running before activating LVMd4cb478a50docs: improve field description for BridgeSTP, BridgeVLAN7329824b24docs: add Mynewsdesk to ADOPTERS.mda13cf76a34chore: simplifyDNSUpstreamControllerandDNSUpstreamresource62d185473efix: talosctl process null character77d7368eaefeat: update containerd to v2.0.0-rc.6d39393879afix: rework the 'metal-iso' config acquisition1993afca9fchore: create /usr/etc in a different step8680351c13chore: move system extensions' udev rules3067f64c84feat: update Flannel to v0.26.08658d6865fdocs: typo in deploying cilium49bbadc4bfdocs: add documentation on performance tuning534b0ce183feat: update runc to 1.2.0 final2172535237docs: fix image factory links375e3da73ffeat: update Kubernetes to 1.32.0-alpha.29e6f64df04fix: improve error messages for invalid bridge/bond configuration7c8c72c2b2fix: correct error message for invalid ip=ead46997c9chore: rename tpm2.PCRExtent -> tpm2.PCRExtend867c4b8125docs: fix typo in prodnotes.md1b22df48a4chore: support debug shell for advanced developmentc14b446229feat: update Kubernetes to v1.32.0-alpha.129780d35a0test: add an integration test for verifying process parameters3d342af447fix: update incorrect alias for PCIDevice resourcef7d35a5e0brelease(v1.9.0-alpha.0): prepare releasee0434d77d7feat: update dependencies5c5a248861feat: add Talos 1.9 compatibility guaranteesbc4c21f41atest: add json logs test environment71faa32942docs: nvidia proprietary/oss hardware requirement59a78da42cchore: add proto-codec/codec7ff1cedfe3chore: update siderolabs/crypto module and return proper ALPNccbd5aed39feat: optionally decode hcloud userdata as base6434f652ce82feat: add well-known app.kubernetes.io labels to control-plane podsfc89dc2164fix: supportextra-diskswhen using isof2bff814dechore: add arm64 target for integration-test5853bb0ea4fix: json logging panica859cff364chore: use virtio driver for disks in arm64db248de88dchore(ci): add config for lldpd extension9f0de9f43dtest: update provision upgrade tests for Talos 1.939fe285e69fix: skip ram disksa9bff3a1d0test: skip no error test in Cilium4d902021bbfix: do not use pflag csv comma reader for config-patch5371788ce1fix: typo in documentation8a228ba6bcdocs: add egress documentation182325cb07test: skip lvm test if not enough user disks available519a48302efix: wipe system partitions correctly via kernel args0a2b4556c5fix: volume encryption with failing keyslots6affbd3182fix: update grpc-go the latest patch release77a4a4adc7fix: scaleway metadata7acadc0c8ffix: do not stop udevd before unmounting volumes6a081055b0feat: update Flannel to v0.25.72362f6d3eefix: improve container detectionb67bc73fd3fix: fix mdadm system extensionf08669c7a9feat: bring in lpfc kernel module driver6a014374befeat: enable QEDF driverf711907e03fix: make /var/run empty on reboots7d02eb60f4docs: fix typo in CloudStack docs74861573a7fix: multiple fixes for LVM activation74c12c20e0feat: replace eudev with systemd-udevd0a4df4ef84docs: fix nvidia CRI config exampleafc1e1a46adocs: fix typo in extraMounts directorya341bdb064fix: prevent file descriptors leaks to child processesdec653bfe1chore: better lvm2 tests908fd8789cfeat: support cgroup deep analysis intalosctlaa846cc186feat: add support for CI Network config in nocloud10f2539f23chore: disable cloud-images cron workflowb07a8b36b2chore: ignore more plugins for system containerd392c4798f0feat: prepare for Talos 1.9ea7bf9fb43docs: update storage.md4ab8dee69afix: build talosctl withouttcell_minimal2fa019bd97docs: enable 'edit on GitHub' linkd2ccbc2b15docs: update hetzner documentation for CCMd498f647cddocs: fix Kernel Self Protection Project (KSPP) references0ec75463eedocs: make Talos 1.8 current release9b77698cf2fix: update blockdevice library to v2.0.2e46227ab95docs: fix kubespan name inconsistency6b15ca19cdfix: audit and fix cgroup reservations32b5d01ed3chore: bump lvm26484581eb8feat: allow /sbin/ldconfig in extensions9fa08e8437chore: refactor testsd8ab4981b6feat: support lvm auto activation8166a58b36fix: filter out non-printable characters in process line806b6aaf52docs: add SECURITY.md7bd26df308docs: document/dev/net/tuncompatibility18daedb511fix: strategic merge patch delete for map keysf3370529acdocs: correct typo8d6884a8e2test: add a test for inline machine config trusted rootsd4a6d017dbfix: ignore invalid NTP responses869f8379f2feat: update default Kubernetes version to 1.31.1780a1f198afix: update CoreDNS health check79cd031588chore: account for resource sorting in dns upstream resourcee17fafaca2chore: dropactivateLogicalVolumessequencer stepa294b366f2fix: parse SideroLink API endpoint correctlya9269ac7b1fix: remove extra logging on ethtool ioctl failures5c6277d171feat: update etcd to 3.5.16c1ed2984b8docs: add what's new for Talos 1.8
Changes since v1.9.0-alpha.2
44 commits
af5d6b8c4fix: show SELinux labels on pseudo-fsf46922fa9chore: fix dockerfile warningsa13f82c59feat: udev: label device nodese899fb37ffeat: label created files in /etc5f68c17edfeat: implement image cache configuration0ffb2187afeat: registry proxy77cf84fb5feat: support generating iso with imagecache5de6275b8chore: image cache generator improvements1a8cc5f8bfeat: add SELinux labels to volumes61b9129e0fix: add directory entries and filemode to tarball4caeae21erefactor: optimize flags and SetLabel6074a870afeat: add e2fsprogs to talos rootfs7ffcf5b93docs: update getting startedc4c1a0d7cfix: make vmware platform common code build on all archescc768037ffeat: implement block device wipe6fb518ae5fix: don't activate LVM volumes in agent mode0e3ed3072fix: no longer leakClosereader4dc58cfdfchore: small fixesf400ae911fix: small fixes for image cache generation93754b7defix: config and platform manifest generation95b2fc946feat: image cache gene4c6186c6chore: remove i915/amdgpu drivers744ad12a6docs: update replicated-local-storage-with-openebs.mdfd713e451feat: add permanent hardware addr to device selectorsd55a96e8crefactor: remove SELinux client_u and client_r3a5b55fd2fix: allow CEL expressions config mergef1b15f580chore: remove replace for safchain/ethtoolf9697a9a0fix: register controlplane node with NoSchedule taint30f8b5a9ffix: registry mirror fallback handling0f41e7743feat: allow for onlink directive (nocloud)e26d0043echore: code cleanup43fe3807afeat: implement tracking of blockdevice secondaries8a7476c3afix: install on non-empty disk8b4253d18feat: update etcd to v3.5.175a0fd5b88refactor: move early initialization functions to pre-initialize phase9916e2cd8chore: update pkgs/tools/extras for Go 1.23.320bbf0235docs: update vultr documentationaea98940bfix: arch linux search paths and names for QEMU provisioner682718d4cfix: use imager incoming version for extension validation9a02ecc49feat: rewrite install disk selector to use CEL expressionseba35f441docs: add note about PSP in Rook-Ceph guide38b80fb1ddocs: add missing--talosconfigparameter to end of Hetzner guidea07f66c91docs: gcp: fix controlplane nodes tags4fe6dc8a0chore: clean dns code
Changes from siderolabs/crypto
Changes from siderolabs/discovery-api
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
3 commits
Changes from siderolabs/gen
3 commits
Changes from siderolabs/go-blockdevice
Changes from siderolabs/go-circular
Changes from siderolabs/go-cmd
3 commits
Changes from siderolabs/go-kubernetes
4 commits
Changes from siderolabs/grpc-proxy
2 commits
Changes from siderolabs/pkgs
46 commits
a463a50feat: add e2fsprogsbfd88f5chore: fix make kernel-menuconfig completelycee356echore: fix menuconfig builda5530cffeat: update Linux to 6.6.62, runc to 1.2.2ac329c9feat: enable CONFIG_INTEL_HFI_THERMAL + CONFIG_INTEL_TURBO_MAX_3567a14afix: do not build unneeded utilities and man for SELinux librariesb15a3d9feat: bump dependencies6bdba41feat: update Linux to 6.6.604699763feat: update gcc to 14.29a98f73feat: update containerd to v2.0.020e1e08feat: enable CONFIG_DM_CACHEdf45e16feat: update Linux to 6.6.592e733ccfeat: bump dependenciesc92e123fix: enable nvme and 2.5gbit ethernet on nanopi-r5sb160184feat: update runc to v1.2.1e9950d9chore: drop syslinuxfc2e8dcfeat: update containerd to v2.0.0-rc.638304a6feat: update Linux to 6.6.5884b8df8chore: do not use /usr/etc/udevc9282c8feat: update runc to 1.2.038ad08efix: default IOMMU mode to 'lazy'be92da0feat: update Linux to 6.6.57, update Linux firmware0b67a13feat: bump dependenciesdd5f928feat: update Linux 6.6.56 and protect /proc/memb1bf972feat: enable CONFIG_XFRM_STATISTICSc63beaefeat: update Linux to 6.6.54f474a55fix: libselinux: support running without /etc/selinuxba0341efix: systemd-udevd: search for config in /usr/etc2b193f1feat: add lpfc kernel module1adb946feat: enable QEDF driverdbbe3d0feat: update containerd to v2.0.0-rc.5f19590efeat: update Go to 1.23.2e2a561ffix: drop the LVM2 udev lvm ruleae205aafix: force LVM to use/runas state directory232a153feat: replace eudev with systemd-udevd40fb82afeat: add libselinux, libsepol, pcre2 and libcap6f40fbbfeat: update xfsprogs 6.10.1a1709c7feat: enable module unloading and memory hotplug (for NVIDIA UVM)2c5785bfeat: enable transparent huge pages in madvise modeca2e8c8fix: lvm2 modprobe path6b334a6feat: update Linux to 6.6.52e90ae7efeat: update Linux firmware to 2024090979a4f92feat: enable INET_DIAGc9f7eb9feat: update Linux to 6.6.51126b6a4fix: add mpt3sas UBSAN patchesa09bf93chore: drop UBSAN patch
Changes from siderolabs/proto-codec
3 commits
Changes from siderolabs/siderolink
Changes from siderolabs/tools
10 commits
e061b6ffeat: update dependencies2704b85feat: update Go to 1.23.33750064fix: update for musl with close_range0a443c6feat: update toolchain for gcc 14.263ecd80feat: bump depedendencies2058296feat: bump dependencies1151610feat: update Go to 1.23.29f2189bfix: bump gettext-tiny to the latest dev version95069d6feat: update Go to 1.23.1eec0656feat: replace gettext with gettext-tiny
Dependency Changes
- cloud.google.com/go/compute/metadata v0.5.0 -> v0.5.2
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.13.0 -> v1.16.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0 -> v1.8.0
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.1.0 -> v1.3.0
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.1.0 -> v1.3.0
- github.com/aws/aws-sdk-go-v2/config v1.27.33 -> v1.28.3
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.13 -> v1.16.19
- github.com/aws/aws-sdk-go-v2/service/kms v1.35.7 -> v1.37.5
- github.com/aws/smithy-go v1.20.4 -> v1.22.0
- github.com/containerd/containerd/api v1.8.0-rc.3 -> v1.8.0
- github.com/containerd/containerd/v2 v2.0.0-rc.4 -> v2.0.0
- github.com/containerd/errdefs v0.1.0 -> v1.0.0
- github.com/containerd/platforms v0.2.1 -> v1.0.0-rc.0
- github.com/containerd/typeurl/v2 v2.2.0 -> v2.2.3
- github.com/containernetworking/plugins v1.5.1 -> v1.6.0
- github.com/cosi-project/runtime v0.5.5 -> v0.7.1
- github.com/docker/cli v27.3.1 new
- github.com/docker/docker v27.2.0 -> v27.3.1
- github.com/elastic/go-libaudit/v2 v2.6.0 new
- github.com/fatih/color v1.17.0 -> v1.18.0
- github.com/florianl/go-tc v0.4.4 new
- github.com/foxboron/go-uefi e2076f0e58ca -> fab4fdf2f2f3
- github.com/fsnotify/fsnotify v1.7.0 -> v1.8.0
- github.com/google/cadvisor v0.50.0 -> v0.51.0
- github.com/google/cel-go v0.22.0 new
- github.com/gopacket/gopacket v1.2.0 -> v1.3.1
- github.com/hetznercloud/hcloud-go/v2 v2.13.1 -> v2.16.0
- github.com/klauspost/compress v1.17.9 -> v1.17.11
- github.com/klauspost/cpuid/v2 v2.2.8 -> v2.2.9
- github.com/linode/go-metadata v0.2.0 -> v0.2.1
- github.com/mdlayher/ethtool v0.1.0 -> v0.2.0
- github.com/opencontainers/runc v1.2.0-rc.3 -> v1.2.1
- github.com/rivo/tview fd649dbf1223 -> c76f7879f592
- github.com/safchain/ethtool v0.4.1 -> 4e3aff457298
- github.com/siderolabs/crypto v0.4.4 -> v0.5.0
- github.com/siderolabs/discovery-api v0.1.4 -> v0.1.5
- github.com/siderolabs/discovery-client v0.1.9 -> v0.1.10
- github.com/siderolabs/extras v1.8.0 -> v1.9.0-alpha.0-2-g78ba66b
- github.com/siderolabs/gen v0.5.0 -> v0.7.0
- github.com/siderolabs/go-blockdevice v0.4.7 -> v0.4.8
- github.com/siderolabs/go-blockdevice/v2 v2.0.2 -> v2.0.6
- github.com/siderolabs/go-circular v0.2.0 -> v0.2.1
- github.com/siderolabs/go-cmd v0.1.1 -> v0.1.3
- github.com/siderolabs/go-kubernetes v0.2.12 -> v0.2.16
- github.com/siderolabs/grpc-proxy v0.4.1 -> v0.5.1
- github.com/siderolabs/pkgs v1.8.0-8-gdf1a1a5 -> v1.9.0-alpha.0-45-ga463a50
- github.com/siderolabs/proto-codec v0.1.1 new
- github.com/siderolabs/siderolink v0.3.10 -> v0.3.11
- github.com/siderolabs/talos/pkg/machinery v1.8.0 -> v1.9.0-alpha.2
- github.com/siderolabs/tools v1.8.0-1-ga0c06c6 -> v1.9.0-alpha.0-9-ge061b6f
- github.com/thejerf/suture/v4 v4.0.5 new
- go.etcd.io/etcd/api/v3 v3.5.16 -> v3.5.17
- go.etcd.io/etcd/client/pkg/v3 v3.5.16 -> v3.5.17
- go.etcd.io/etcd/client/v3 v3.5.16 -> v3.5.17
- go.etcd.io/etcd/etcdutl/v3 v3.5.16 -> v3.5.17
- golang.org/x/net v0.29.0 -> v0.31.0
- golang.org/x/oauth2 v0.23.0 -> v0.24.0
- golang.org/x/sync v0.8.0 -> v0.9.0
- golang.org/x/sys v0.25.0 -> v0.27.0
- golang.org/x/term v0.24.0 -> v0.26.0
- golang.org/x/text v0.18.0 -> v0.20.0
- golang.org/x/time v0.6.0 -> v0.8.0
- google.golang.org/grpc v1.66.0 -> v1.68.0
- google.golang.org/protobuf v1.34.2 -> v1.35.1
- k8s.io/api v0.31.1 -> v0.32.0-beta.0
- k8s.io/apimachinery v0.31.1 -> v0.32.0-beta.0
- k8s.io/apiserver v0.31.1 -> v0.32.0-beta.0
- k8s.io/client-go v0.31.1 -> v0.32.0-beta.0
- k8s.io/component-base v0.31.1 -> v0.32.0-beta.0
- k8s.io/cri-api v0.32.0-alpha.0 -> v0.32.0-beta.0
- k8s.io/kube-scheduler v0.31.1 -> v0.32.0-beta.0
- k8s.io/kubectl v0.31.1 -> v0.32.0-beta.0
- k8s.io/kubelet v0.31.1 -> v0.32.0-beta.0
- k8s.io/pod-security-admission v0.31.1 -> v0.32.0-beta.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.70 -> v1.2.72
Previous release can be found at v1.8.0
Talos 1.9.0-alpha.2 (2024-11-08)
Welcome to the v1.9.0-alpha.2 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
AppArmor
Talos Linux starting with v1.9 will ship with SELinux LSM enabled by default. If you need to use AppArmor LSM add the following to the machine configuration:
machine:
install:
extraKernelArgs:
- -selinux
- lsm=lockdown,capability,yama,apparmor,bpf
- apparmor=1
Auditd
Talos Linux now starts a auditd service by default.
Logs can be read with talosctl logs auditd.
talosctl cgroups
The talosctl cgroups command has been added to the talosctl tool.
This command allows you to view the cgroup resource consumption and limits for a machine, e.g.
talosctl cgroups --preset memory.
udevd
Talos previously used udevd to provide udevd, now it uses systemd-udevd instead.
Component Updates
Linux: 6.6.59 containerd: 2.0.0 Flannel: 0.26.0 Kubernetes: 1.32.0-beta.0 runc: 1.2.1
Talos is built with Go 1.23.2.
User Namespaces
Talos Linux now supports running Kubernetes pods with user namespaces enabled. Refer to the documentation for more information.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Dmitry Sharshakov
- Joakim Nohlgård
- Jean-Francois Roy
- Utku Ozdemir
- blablu
- Adolfo Ochagavía
- Dan Rue
- David Backeus
- Eddie Wang
- Florian Ströger
- Hexoplon
- Jakob Maležič
- KBAegis
- Mike Beaumont
- Nebula
- Nico Berlee
- Philip Schmid
- Philipp Kleber
- Remko Molier
- Robby Ciliberto
- Ryan Borstelmann
- Serge Logvinov
- Spencer Smith
- Steven Cassamajor
- Tim Jones
- adilTepe
- ekarlso
- naed3r
- nevermarine
- solidDoWant
Changes
144 commits
a309f6aa57chore: fix nil pointer dereference in AWS uploader333737f176test: fix unpriviliged process runner test2001167058chore(ci): save support zip always after tests6a42c3b8edrelease(v1.9.0-alpha.1): prepare releasefb72e4b7b7fix(ci): skip test ifUserNamespacesSupportfeature gate is not set11380f933dfeat: display current CPU frequency on dashboardfbce267aeefeat: check bridged interfaces should not have addresses942962bf00docs: add docs on usernamespace support in k8s0406a05a98chore: update pkgs to ones built with gcc 14.22e127627dcdocs: add apparmor enablement release notesaa9311f3d8fix: install disk matcher error1800f81044fix: selinux handling and apparmor tests313bffadfbfeat: update Kubernetes to v1.32.0-beta.0bbfa144510feat: update containerd to v2.0.08e02b9fcbfdocs: update manual k8s upgrade docs474949dc77feat: add dm-cache dm-cache-smq kernel modules5112547d6bchore: generate support zip for crashdumpa867f85e4cfeat: label system socket and runtime files398f714cfffeat: update Linux 6.6.59, runc 1.2.105c620957cfeat: allow extra mounts for docker-basedtalosctl cluster createcedabeddf7chore: cleanup code61d363e1d0chore: update go-auditlib960a040491feat: start enabling SELinux7f3aaa21cdfix: update permissions for logging directories in /var0e6c983b84fix: mount /sys/kernel/security conditionally74b0e8c371fix: make route normalization keep family0a3761c22ffix: talosctl windows arm644b10c5328bchore: add Windows ARM64 build for talosctl9abf16108efeat: add auditd serviced464ca869fchore: drop runc memfd bind added in #9069b54d26c2c3fix: mount pseudo sub-mountpoints in init7aeb15f730chore: disable coredns cache for cluster domaind8b652150cdocs: add warning about NVMe bus path bug3e16ab135efeat: update Kubernetes to v1.32.0-alpha.30b8b356777feat: add BridgePort property to network machine configurationb379506259fix: use more correct condition to skip generating hosts files62ec7ec336refactor: replace the old v1 mount package with new one0ece13c623docs: update network-config.md (cont)93827f0485docs: update network-config.md423b1e5fb2fix: do not trim 0 from process SELinux label2136358d65feat: introduce metal agent mode0e15955fccchore: small refactoring66012a7f26feat: remove wrapperd and launch processes directly3a0a17ae66fix: prevent panic in nocloud platform codedc0c6acbd7refactor: remove unmaintained github.com/vishvananda/netlink78353f7918feat: add parsing of vlanNNNN:ethX style VLAN cmdline args9db7a36bfcfix: generation of SecureBoot isoc755b6d7e4fix: update the CRI sandbox image referencecec290b354feat: allow extensions to log to consoleb7801df827fix: wait for udevd to be running before activating LVMd4cb478a50docs: improve field description for BridgeSTP, BridgeVLAN7329824b24docs: add Mynewsdesk to ADOPTERS.mda13cf76a34chore: simplifyDNSUpstreamControllerandDNSUpstreamresource62d185473efix: talosctl process null character77d7368eaefeat: update containerd to v2.0.0-rc.6d39393879afix: rework the 'metal-iso' config acquisition1993afca9fchore: create /usr/etc in a different step8680351c13chore: move system extensions' udev rules3067f64c84feat: update Flannel to v0.26.08658d6865fdocs: typo in deploying cilium49bbadc4bfdocs: add documentation on performance tuning534b0ce183feat: update runc to 1.2.0 final2172535237docs: fix image factory links375e3da73ffeat: update Kubernetes to 1.32.0-alpha.29e6f64df04fix: improve error messages for invalid bridge/bond configuration7c8c72c2b2fix: correct error message for invalid ip=ead46997c9chore: rename tpm2.PCRExtent -> tpm2.PCRExtend867c4b8125docs: fix typo in prodnotes.md1b22df48a4chore: support debug shell for advanced developmentc14b446229feat: update Kubernetes to v1.32.0-alpha.129780d35a0test: add an integration test for verifying process parameters3d342af447fix: update incorrect alias for PCIDevice resourcef7d35a5e0brelease(v1.9.0-alpha.0): prepare releasee0434d77d7feat: update dependencies5c5a248861feat: add Talos 1.9 compatibility guaranteesbc4c21f41atest: add json logs test environment71faa32942docs: nvidia proprietary/oss hardware requirement59a78da42cchore: add proto-codec/codec7ff1cedfe3chore: update siderolabs/crypto module and return proper ALPNccbd5aed39feat: optionally decode hcloud userdata as base6434f652ce82feat: add well-known app.kubernetes.io labels to control-plane podsfc89dc2164fix: supportextra-diskswhen using isof2bff814dechore: add arm64 target for integration-test5853bb0ea4fix: json logging panica859cff364chore: use virtio driver for disks in arm64db248de88dchore(ci): add config for lldpd extension9f0de9f43dtest: update provision upgrade tests for Talos 1.939fe285e69fix: skip ram disksa9bff3a1d0test: skip no error test in Cilium4d902021bbfix: do not use pflag csv comma reader for config-patch5371788ce1fix: typo in documentation8a228ba6bcdocs: add egress documentation182325cb07test: skip lvm test if not enough user disks available519a48302efix: wipe system partitions correctly via kernel args0a2b4556c5fix: volume encryption with failing keyslots6affbd3182fix: update grpc-go the latest patch release77a4a4adc7fix: scaleway metadata7acadc0c8ffix: do not stop udevd before unmounting volumes6a081055b0feat: update Flannel to v0.25.72362f6d3eefix: improve container detectionb67bc73fd3fix: fix mdadm system extensionf08669c7a9feat: bring in lpfc kernel module driver6a014374befeat: enable QEDF driverf711907e03fix: make /var/run empty on reboots7d02eb60f4docs: fix typo in CloudStack docs74861573a7fix: multiple fixes for LVM activation74c12c20e0feat: replace eudev with systemd-udevd0a4df4ef84docs: fix nvidia CRI config exampleafc1e1a46adocs: fix typo in extraMounts directorya341bdb064fix: prevent file descriptors leaks to child processesdec653bfe1chore: better lvm2 tests908fd8789cfeat: support cgroup deep analysis intalosctlaa846cc186feat: add support for CI Network config in nocloud10f2539f23chore: disable cloud-images cron workflowb07a8b36b2chore: ignore more plugins for system containerd392c4798f0feat: prepare for Talos 1.9ea7bf9fb43docs: update storage.md4ab8dee69afix: build talosctl withouttcell_minimal2fa019bd97docs: enable 'edit on GitHub' linkd2ccbc2b15docs: update hetzner documentation for CCMd498f647cddocs: fix Kernel Self Protection Project (KSPP) references0ec75463eedocs: make Talos 1.8 current release9b77698cf2fix: update blockdevice library to v2.0.2e46227ab95docs: fix kubespan name inconsistency6b15ca19cdfix: audit and fix cgroup reservations32b5d01ed3chore: bump lvm26484581eb8feat: allow /sbin/ldconfig in extensions9fa08e8437chore: refactor testsd8ab4981b6feat: support lvm auto activation8166a58b36fix: filter out non-printable characters in process line806b6aaf52docs: add SECURITY.md7bd26df308docs: document/dev/net/tuncompatibility18daedb511fix: strategic merge patch delete for map keysf3370529acdocs: correct typo8d6884a8e2test: add a test for inline machine config trusted rootsd4a6d017dbfix: ignore invalid NTP responses869f8379f2feat: update default Kubernetes version to 1.31.1780a1f198afix: update CoreDNS health check79cd031588chore: account for resource sorting in dns upstream resourcee17fafaca2chore: dropactivateLogicalVolumessequencer stepa294b366f2fix: parse SideroLink API endpoint correctlya9269ac7b1fix: remove extra logging on ethtool ioctl failures5c6277d171feat: update etcd to 3.5.16c1ed2984b8docs: add what's new for Talos 1.8
Changes since v1.9.0-alpha.1
3 commits
Changes from siderolabs/crypto
Changes from siderolabs/discovery-api
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
Changes from siderolabs/gen
3 commits
Changes from siderolabs/go-blockdevice
Changes from siderolabs/go-circular
Changes from siderolabs/go-cmd
3 commits
Changes from siderolabs/go-kubernetes
3 commits
Changes from siderolabs/grpc-proxy
2 commits
Changes from siderolabs/pkgs
38 commits
4699763feat: update gcc to 14.29a98f73feat: update containerd to v2.0.020e1e08feat: enable CONFIG_DM_CACHEdf45e16feat: update Linux to 6.6.592e733ccfeat: bump dependenciesc92e123fix: enable nvme and 2.5gbit ethernet on nanopi-r5sb160184feat: update runc to v1.2.1e9950d9chore: drop syslinuxfc2e8dcfeat: update containerd to v2.0.0-rc.638304a6feat: update Linux to 6.6.5884b8df8chore: do not use /usr/etc/udevc9282c8feat: update runc to 1.2.038ad08efix: default IOMMU mode to 'lazy'be92da0feat: update Linux to 6.6.57, update Linux firmware0b67a13feat: bump dependenciesdd5f928feat: update Linux 6.6.56 and protect /proc/memb1bf972feat: enable CONFIG_XFRM_STATISTICSc63beaefeat: update Linux to 6.6.54f474a55fix: libselinux: support running without /etc/selinuxba0341efix: systemd-udevd: search for config in /usr/etc2b193f1feat: add lpfc kernel module1adb946feat: enable QEDF driverdbbe3d0feat: update containerd to v2.0.0-rc.5f19590efeat: update Go to 1.23.2e2a561ffix: drop the LVM2 udev lvm ruleae205aafix: force LVM to use/runas state directory232a153feat: replace eudev with systemd-udevd40fb82afeat: add libselinux, libsepol, pcre2 and libcap6f40fbbfeat: update xfsprogs 6.10.1a1709c7feat: enable module unloading and memory hotplug (for NVIDIA UVM)2c5785bfeat: enable transparent huge pages in madvise modeca2e8c8fix: lvm2 modprobe path6b334a6feat: update Linux to 6.6.52e90ae7efeat: update Linux firmware to 2024090979a4f92feat: enable INET_DIAGc9f7eb9feat: update Linux to 6.6.51126b6a4fix: add mpt3sas UBSAN patchesa09bf93chore: drop UBSAN patch
Changes from siderolabs/proto-codec
3 commits
Changes from siderolabs/siderolink
Changes from siderolabs/tools
8 commits
3750064fix: update for musl with close_range0a443c6feat: update toolchain for gcc 14.263ecd80feat: bump depedendencies2058296feat: bump dependencies1151610feat: update Go to 1.23.29f2189bfix: bump gettext-tiny to the latest dev version95069d6feat: update Go to 1.23.1eec0656feat: replace gettext with gettext-tiny
Dependency Changes
- cloud.google.com/go/compute/metadata v0.5.0 -> v0.5.2
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.13.0 -> v1.16.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0 -> v1.8.0
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.1.0 -> v1.2.0
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.1.0 -> v1.2.0
- github.com/aws/aws-sdk-go-v2/config v1.27.33 -> v1.28.1
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.13 -> v1.16.18
- github.com/aws/aws-sdk-go-v2/service/kms v1.35.7 -> v1.37.3
- github.com/aws/smithy-go v1.20.4 -> v1.22.0
- github.com/containerd/containerd/api v1.8.0-rc.3 -> v1.8.0
- github.com/containerd/containerd/v2 v2.0.0-rc.4 -> v2.0.0
- github.com/containerd/errdefs v0.1.0 -> v1.0.0
- github.com/containerd/platforms v0.2.1 -> v1.0.0-rc.0
- github.com/containerd/typeurl/v2 v2.2.0 -> v2.2.2
- github.com/containernetworking/plugins v1.5.1 -> v1.6.0
- github.com/cosi-project/runtime v0.5.5 -> v0.7.1
- github.com/docker/cli v27.3.1 new
- github.com/docker/docker v27.2.0 -> v27.3.1
- github.com/elastic/go-libaudit/v2 1df86e79cca7 new
- github.com/fatih/color v1.17.0 -> v1.18.0
- github.com/florianl/go-tc v0.4.4 new
- github.com/foxboron/go-uefi e2076f0e58ca -> fab4fdf2f2f3
- github.com/fsnotify/fsnotify v1.7.0 -> v1.8.0
- github.com/google/cadvisor v0.50.0 -> v0.51.0
- github.com/gopacket/gopacket v1.2.0 -> v1.3.0
- github.com/hetznercloud/hcloud-go/v2 v2.13.1 -> v2.15.0
- github.com/klauspost/compress v1.17.9 -> v1.17.11
- github.com/linode/go-metadata v0.2.0 -> v0.2.1
- github.com/mdlayher/ethtool v0.1.0 -> v0.2.0
- github.com/opencontainers/runc v1.2.0-rc.3 -> v1.2.1
- github.com/rivo/tview fd649dbf1223 -> c76f7879f592
- github.com/siderolabs/crypto v0.4.4 -> v0.5.0
- github.com/siderolabs/discovery-api v0.1.4 -> v0.1.5
- github.com/siderolabs/discovery-client v0.1.9 -> v0.1.10
- github.com/siderolabs/extras v1.8.0 -> v1.9.0-alpha.0-1-geab6e58
- github.com/siderolabs/gen v0.5.0 -> v0.7.0
- github.com/siderolabs/go-blockdevice v0.4.7 -> v0.4.8
- github.com/siderolabs/go-blockdevice/v2 v2.0.2 -> v2.0.3
- github.com/siderolabs/go-circular v0.2.0 -> v0.2.1
- github.com/siderolabs/go-cmd v0.1.1 -> v0.1.3
- github.com/siderolabs/go-kubernetes v0.2.12 -> v0.2.15
- github.com/siderolabs/grpc-proxy v0.4.1 -> v0.5.1
- github.com/siderolabs/pkgs v1.8.0-8-gdf1a1a5 -> v1.9.0-alpha.0-37-g4699763
- github.com/siderolabs/proto-codec v0.1.1 new
- github.com/siderolabs/siderolink v0.3.10 -> v0.3.11
- github.com/siderolabs/talos/pkg/machinery v1.8.0 -> v1.9.0-alpha.1
- github.com/siderolabs/tools v1.8.0-1-ga0c06c6 -> v1.9.0-alpha.0-7-g3750064
- golang.org/x/net v0.29.0 -> v0.30.0
- golang.org/x/sys v0.25.0 -> v0.26.0
- golang.org/x/term v0.24.0 -> v0.25.0
- golang.org/x/text v0.18.0 -> v0.19.0
- golang.org/x/time v0.6.0 -> v0.7.0
- google.golang.org/grpc v1.66.0 -> v1.67.1
- google.golang.org/protobuf v1.34.2 -> v1.35.1
- k8s.io/api v0.31.1 -> v0.32.0-beta.0
- k8s.io/apimachinery v0.31.1 -> v0.32.0-beta.0
- k8s.io/apiserver v0.31.1 -> v0.32.0-beta.0
- k8s.io/client-go v0.31.1 -> v0.32.0-beta.0
- k8s.io/component-base v0.31.1 -> v0.32.0-beta.0
- k8s.io/cri-api v0.32.0-alpha.0 -> v0.32.0-beta.0
- k8s.io/kube-scheduler v0.31.1 -> v0.32.0-beta.0
- k8s.io/kubectl v0.31.1 -> v0.32.0-beta.0
- k8s.io/kubelet v0.31.1 -> v0.32.0-beta.0
- k8s.io/pod-security-admission v0.31.1 -> v0.32.0-beta.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.70 -> v1.2.71
Previous release can be found at v1.8.0
Talos 1.9.0-alpha.1 (2024-11-08)
Welcome to the v1.9.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
AppArmor
Talos Linux starting with v1.9 will ship with SELinux LSM enabled by default. If you need to use AppArmor LSM add the following to the machine configuration:
machine:
install:
extraKernelArgs:
- -selinux
- lsm=lockdown,capability,yama,apparmor,bpf
- apparmor=1
Auditd
Talos Linux now starts a auditd service by default.
Logs can be read with talosctl logs auditd.
talosctl cgroups
The talosctl cgroups command has been added to the talosctl tool.
This command allows you to view the cgroup resource consumption and limits for a machine, e.g.
talosctl cgroups --preset memory.
udevd
Talos previously used udevd to provide udevd, now it uses systemd-udevd instead.
Component Updates
Linux: 6.6.59 containerd: 2.0.0 Flannel: 0.26.0 Kubernetes: 1.32.0-beta.0 runc: 1.2.1
Talos is built with Go 1.23.2.
User Namespaces
Talos Linux now supports running Kubernetes pods with user namespaces enabled. Refer to the documentation for more information.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Dmitry Sharshakov
- Joakim Nohlgård
- Jean-Francois Roy
- Utku Ozdemir
- blablu
- Adolfo Ochagavía
- Dan Rue
- David Backeus
- Eddie Wang
- Florian Ströger
- Hexoplon
- Jakob Maležič
- KBAegis
- Mike Beaumont
- Nebula
- Nico Berlee
- Philip Schmid
- Philipp Kleber
- Remko Molier
- Robby Ciliberto
- Ryan Borstelmann
- Serge Logvinov
- Spencer Smith
- Steven Cassamajor
- Tim Jones
- adilTepe
- ekarlso
- naed3r
- nevermarine
- solidDoWant
Changes
140 commits
fb72e4b7b7fix(ci): skip test ifUserNamespacesSupportfeature gate is not set11380f933dfeat: display current CPU frequency on dashboardfbce267aeefeat: check bridged interfaces should not have addresses942962bf00docs: add docs on usernamespace support in k8s0406a05a98chore: update pkgs to ones built with gcc 14.22e127627dcdocs: add apparmor enablement release notesaa9311f3d8fix: install disk matcher error1800f81044fix: selinux handling and apparmor tests313bffadfbfeat: update Kubernetes to v1.32.0-beta.0bbfa144510feat: update containerd to v2.0.08e02b9fcbfdocs: update manual k8s upgrade docs474949dc77feat: add dm-cache dm-cache-smq kernel modules5112547d6bchore: generate support zip for crashdumpa867f85e4cfeat: label system socket and runtime files398f714cfffeat: update Linux 6.6.59, runc 1.2.105c620957cfeat: allow extra mounts for docker-basedtalosctl cluster createcedabeddf7chore: cleanup code61d363e1d0chore: update go-auditlib960a040491feat: start enabling SELinux7f3aaa21cdfix: update permissions for logging directories in /var0e6c983b84fix: mount /sys/kernel/security conditionally74b0e8c371fix: make route normalization keep family0a3761c22ffix: talosctl windows arm644b10c5328bchore: add Windows ARM64 build for talosctl9abf16108efeat: add auditd serviced464ca869fchore: drop runc memfd bind added in #9069b54d26c2c3fix: mount pseudo sub-mountpoints in init7aeb15f730chore: disable coredns cache for cluster domaind8b652150cdocs: add warning about NVMe bus path bug3e16ab135efeat: update Kubernetes to v1.32.0-alpha.30b8b356777feat: add BridgePort property to network machine configurationb379506259fix: use more correct condition to skip generating hosts files62ec7ec336refactor: replace the old v1 mount package with new one0ece13c623docs: update network-config.md (cont)93827f0485docs: update network-config.md423b1e5fb2fix: do not trim 0 from process SELinux label2136358d65feat: introduce metal agent mode0e15955fccchore: small refactoring66012a7f26feat: remove wrapperd and launch processes directly3a0a17ae66fix: prevent panic in nocloud platform codedc0c6acbd7refactor: remove unmaintained github.com/vishvananda/netlink78353f7918feat: add parsing of vlanNNNN:ethX style VLAN cmdline args9db7a36bfcfix: generation of SecureBoot isoc755b6d7e4fix: update the CRI sandbox image referencecec290b354feat: allow extensions to log to consoleb7801df827fix: wait for udevd to be running before activating LVMd4cb478a50docs: improve field description for BridgeSTP, BridgeVLAN7329824b24docs: add Mynewsdesk to ADOPTERS.mda13cf76a34chore: simplifyDNSUpstreamControllerandDNSUpstreamresource62d185473efix: talosctl process null character77d7368eaefeat: update containerd to v2.0.0-rc.6d39393879afix: rework the 'metal-iso' config acquisition1993afca9fchore: create /usr/etc in a different step8680351c13chore: move system extensions' udev rules3067f64c84feat: update Flannel to v0.26.08658d6865fdocs: typo in deploying cilium49bbadc4bfdocs: add documentation on performance tuning534b0ce183feat: update runc to 1.2.0 final2172535237docs: fix image factory links375e3da73ffeat: update Kubernetes to 1.32.0-alpha.29e6f64df04fix: improve error messages for invalid bridge/bond configuration7c8c72c2b2fix: correct error message for invalid ip=ead46997c9chore: rename tpm2.PCRExtent -> tpm2.PCRExtend867c4b8125docs: fix typo in prodnotes.md1b22df48a4chore: support debug shell for advanced developmentc14b446229feat: update Kubernetes to v1.32.0-alpha.129780d35a0test: add an integration test for verifying process parameters3d342af447fix: update incorrect alias for PCIDevice resourcef7d35a5e0brelease(v1.9.0-alpha.0): prepare releasee0434d77d7feat: update dependencies5c5a248861feat: add Talos 1.9 compatibility guaranteesbc4c21f41atest: add json logs test environment71faa32942docs: nvidia proprietary/oss hardware requirement59a78da42cchore: add proto-codec/codec7ff1cedfe3chore: update siderolabs/crypto module and return proper ALPNccbd5aed39feat: optionally decode hcloud userdata as base6434f652ce82feat: add well-known app.kubernetes.io labels to control-plane podsfc89dc2164fix: supportextra-diskswhen using isof2bff814dechore: add arm64 target for integration-test5853bb0ea4fix: json logging panica859cff364chore: use virtio driver for disks in arm64db248de88dchore(ci): add config for lldpd extension9f0de9f43dtest: update provision upgrade tests for Talos 1.939fe285e69fix: skip ram disksa9bff3a1d0test: skip no error test in Cilium4d902021bbfix: do not use pflag csv comma reader for config-patch5371788ce1fix: typo in documentation8a228ba6bcdocs: add egress documentation182325cb07test: skip lvm test if not enough user disks available519a48302efix: wipe system partitions correctly via kernel args0a2b4556c5fix: volume encryption with failing keyslots6affbd3182fix: update grpc-go the latest patch release77a4a4adc7fix: scaleway metadata7acadc0c8ffix: do not stop udevd before unmounting volumes6a081055b0feat: update Flannel to v0.25.72362f6d3eefix: improve container detectionb67bc73fd3fix: fix mdadm system extensionf08669c7a9feat: bring in lpfc kernel module driver6a014374befeat: enable QEDF driverf711907e03fix: make /var/run empty on reboots7d02eb60f4docs: fix typo in CloudStack docs74861573a7fix: multiple fixes for LVM activation74c12c20e0feat: replace eudev with systemd-udevd0a4df4ef84docs: fix nvidia CRI config exampleafc1e1a46adocs: fix typo in extraMounts directorya341bdb064fix: prevent file descriptors leaks to child processesdec653bfe1chore: better lvm2 tests908fd8789cfeat: support cgroup deep analysis intalosctlaa846cc186feat: add support for CI Network config in nocloud10f2539f23chore: disable cloud-images cron workflowb07a8b36b2chore: ignore more plugins for system containerd392c4798f0feat: prepare for Talos 1.9ea7bf9fb43docs: update storage.md4ab8dee69afix: build talosctl withouttcell_minimal2fa019bd97docs: enable 'edit on GitHub' linkd2ccbc2b15docs: update hetzner documentation for CCMd498f647cddocs: fix Kernel Self Protection Project (KSPP) references0ec75463eedocs: make Talos 1.8 current release9b77698cf2fix: update blockdevice library to v2.0.2e46227ab95docs: fix kubespan name inconsistency6b15ca19cdfix: audit and fix cgroup reservations32b5d01ed3chore: bump lvm26484581eb8feat: allow /sbin/ldconfig in extensions9fa08e8437chore: refactor testsd8ab4981b6feat: support lvm auto activation8166a58b36fix: filter out non-printable characters in process line806b6aaf52docs: add SECURITY.md7bd26df308docs: document/dev/net/tuncompatibility18daedb511fix: strategic merge patch delete for map keysf3370529acdocs: correct typo8d6884a8e2test: add a test for inline machine config trusted rootsd4a6d017dbfix: ignore invalid NTP responses869f8379f2feat: update default Kubernetes version to 1.31.1780a1f198afix: update CoreDNS health check79cd031588chore: account for resource sorting in dns upstream resourcee17fafaca2chore: dropactivateLogicalVolumessequencer stepa294b366f2fix: parse SideroLink API endpoint correctlya9269ac7b1fix: remove extra logging on ethtool ioctl failures5c6277d171feat: update etcd to 3.5.16c1ed2984b8docs: add what's new for Talos 1.8
Changes since v1.9.0-alpha.0
68 commits
fb72e4b7bfix(ci): skip test ifUserNamespacesSupportfeature gate is not set11380f933feat: display current CPU frequency on dashboardfbce267aefeat: check bridged interfaces should not have addresses942962bf0docs: add docs on usernamespace support in k8s0406a05a9chore: update pkgs to ones built with gcc 14.22e127627ddocs: add apparmor enablement release notesaa9311f3dfix: install disk matcher error1800f8104fix: selinux handling and apparmor tests313bffadffeat: update Kubernetes to v1.32.0-beta.0bbfa14451feat: update containerd to v2.0.08e02b9fcbdocs: update manual k8s upgrade docs474949dc7feat: add dm-cache dm-cache-smq kernel modules5112547d6chore: generate support zip for crashdumpa867f85e4feat: label system socket and runtime files398f714cffeat: update Linux 6.6.59, runc 1.2.105c620957feat: allow extra mounts for docker-basedtalosctl cluster createcedabeddfchore: cleanup code61d363e1dchore: update go-auditlib960a04049feat: start enabling SELinux7f3aaa21cfix: update permissions for logging directories in /var0e6c983b8fix: mount /sys/kernel/security conditionally74b0e8c37fix: make route normalization keep family0a3761c22fix: talosctl windows arm644b10c5328chore: add Windows ARM64 build for talosctl9abf16108feat: add auditd serviced464ca869chore: drop runc memfd bind added in #9069b54d26c2cfix: mount pseudo sub-mountpoints in init7aeb15f73chore: disable coredns cache for cluster domaind8b652150docs: add warning about NVMe bus path bug3e16ab135feat: update Kubernetes to v1.32.0-alpha.30b8b35677feat: add BridgePort property to network machine configurationb37950625fix: use more correct condition to skip generating hosts files62ec7ec33refactor: replace the old v1 mount package with new one0ece13c62docs: update network-config.md (cont)93827f048docs: update network-config.md423b1e5fbfix: do not trim 0 from process SELinux label2136358d6feat: introduce metal agent mode0e15955fcchore: small refactoring66012a7f2feat: remove wrapperd and launch processes directly3a0a17ae6fix: prevent panic in nocloud platform codedc0c6acbdrefactor: remove unmaintained github.com/vishvananda/netlink78353f791feat: add parsing of vlanNNNN:ethX style VLAN cmdline args9db7a36bffix: generation of SecureBoot isoc755b6d7efix: update the CRI sandbox image referencecec290b35feat: allow extensions to log to consoleb7801df82fix: wait for udevd to be running before activating LVMd4cb478a5docs: improve field description for BridgeSTP, BridgeVLAN7329824b2docs: add Mynewsdesk to ADOPTERS.mda13cf76a3chore: simplifyDNSUpstreamControllerandDNSUpstreamresource62d185473fix: talosctl process null character77d7368eafeat: update containerd to v2.0.0-rc.6d39393879fix: rework the 'metal-iso' config acquisition1993afca9chore: create /usr/etc in a different step8680351c1chore: move system extensions' udev rules3067f64c8feat: update Flannel to v0.26.08658d6865docs: typo in deploying cilium49bbadc4bdocs: add documentation on performance tuning534b0ce18feat: update runc to 1.2.0 final217253523docs: fix image factory links375e3da73feat: update Kubernetes to 1.32.0-alpha.29e6f64df0fix: improve error messages for invalid bridge/bond configuration7c8c72c2bfix: correct error message for invalid ip=ead46997cchore: rename tpm2.PCRExtent -> tpm2.PCRExtend867c4b812docs: fix typo in prodnotes.md1b22df48achore: support debug shell for advanced developmentc14b44622feat: update Kubernetes to v1.32.0-alpha.129780d35atest: add an integration test for verifying process parameters3d342af44fix: update incorrect alias for PCIDevice resource
Changes from siderolabs/crypto
Changes from siderolabs/discovery-api
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
Changes from siderolabs/gen
3 commits
Changes from siderolabs/go-blockdevice
Changes from siderolabs/go-circular
Changes from siderolabs/go-cmd
3 commits
Changes from siderolabs/go-kubernetes
3 commits
Changes from siderolabs/grpc-proxy
2 commits
Changes from siderolabs/pkgs
38 commits
4699763feat: update gcc to 14.29a98f73feat: update containerd to v2.0.020e1e08feat: enable CONFIG_DM_CACHEdf45e16feat: update Linux to 6.6.592e733ccfeat: bump dependenciesc92e123fix: enable nvme and 2.5gbit ethernet on nanopi-r5sb160184feat: update runc to v1.2.1e9950d9chore: drop syslinuxfc2e8dcfeat: update containerd to v2.0.0-rc.638304a6feat: update Linux to 6.6.5884b8df8chore: do not use /usr/etc/udevc9282c8feat: update runc to 1.2.038ad08efix: default IOMMU mode to 'lazy'be92da0feat: update Linux to 6.6.57, update Linux firmware0b67a13feat: bump dependenciesdd5f928feat: update Linux 6.6.56 and protect /proc/memb1bf972feat: enable CONFIG_XFRM_STATISTICSc63beaefeat: update Linux to 6.6.54f474a55fix: libselinux: support running without /etc/selinuxba0341efix: systemd-udevd: search for config in /usr/etc2b193f1feat: add lpfc kernel module1adb946feat: enable QEDF driverdbbe3d0feat: update containerd to v2.0.0-rc.5f19590efeat: update Go to 1.23.2e2a561ffix: drop the LVM2 udev lvm ruleae205aafix: force LVM to use/runas state directory232a153feat: replace eudev with systemd-udevd40fb82afeat: add libselinux, libsepol, pcre2 and libcap6f40fbbfeat: update xfsprogs 6.10.1a1709c7feat: enable module unloading and memory hotplug (for NVIDIA UVM)2c5785bfeat: enable transparent huge pages in madvise modeca2e8c8fix: lvm2 modprobe path6b334a6feat: update Linux to 6.6.52e90ae7efeat: update Linux firmware to 2024090979a4f92feat: enable INET_DIAGc9f7eb9feat: update Linux to 6.6.51126b6a4fix: add mpt3sas UBSAN patchesa09bf93chore: drop UBSAN patch
Changes from siderolabs/proto-codec
3 commits
Changes from siderolabs/siderolink
Changes from siderolabs/tools
8 commits
3750064fix: update for musl with close_range0a443c6feat: update toolchain for gcc 14.263ecd80feat: bump depedendencies2058296feat: bump dependencies1151610feat: update Go to 1.23.29f2189bfix: bump gettext-tiny to the latest dev version95069d6feat: update Go to 1.23.1eec0656feat: replace gettext with gettext-tiny
Dependency Changes
- cloud.google.com/go/compute/metadata v0.5.0 -> v0.5.2
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.13.0 -> v1.16.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0 -> v1.8.0
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.1.0 -> v1.2.0
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.1.0 -> v1.2.0
- github.com/aws/aws-sdk-go-v2/config v1.27.33 -> v1.28.1
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.13 -> v1.16.18
- github.com/aws/aws-sdk-go-v2/service/kms v1.35.7 -> v1.37.3
- github.com/aws/smithy-go v1.20.4 -> v1.22.0
- github.com/containerd/containerd/api v1.8.0-rc.3 -> v1.8.0
- github.com/containerd/containerd/v2 v2.0.0-rc.4 -> v2.0.0
- github.com/containerd/errdefs v0.1.0 -> v1.0.0
- github.com/containerd/platforms v0.2.1 -> v1.0.0-rc.0
- github.com/containerd/typeurl/v2 v2.2.0 -> v2.2.2
- github.com/containernetworking/plugins v1.5.1 -> v1.6.0
- github.com/cosi-project/runtime v0.5.5 -> v0.7.1
- github.com/docker/cli v27.3.1 new
- github.com/docker/docker v27.2.0 -> v27.3.1
- github.com/elastic/go-libaudit/v2 1df86e79cca7 new
- github.com/fatih/color v1.17.0 -> v1.18.0
- github.com/florianl/go-tc v0.4.4 new
- github.com/foxboron/go-uefi e2076f0e58ca -> fab4fdf2f2f3
- github.com/fsnotify/fsnotify v1.7.0 -> v1.8.0
- github.com/google/cadvisor v0.50.0 -> v0.51.0
- github.com/gopacket/gopacket v1.2.0 -> v1.3.0
- github.com/hetznercloud/hcloud-go/v2 v2.13.1 -> v2.15.0
- github.com/klauspost/compress v1.17.9 -> v1.17.11
- github.com/linode/go-metadata v0.2.0 -> v0.2.1
- github.com/mdlayher/ethtool v0.1.0 -> v0.2.0
- github.com/opencontainers/runc v1.2.0-rc.3 -> v1.2.1
- github.com/rivo/tview fd649dbf1223 -> c76f7879f592
- github.com/siderolabs/crypto v0.4.4 -> v0.5.0
- github.com/siderolabs/discovery-api v0.1.4 -> v0.1.5
- github.com/siderolabs/discovery-client v0.1.9 -> v0.1.10
- github.com/siderolabs/extras v1.8.0 -> v1.9.0-alpha.0-1-geab6e58
- github.com/siderolabs/gen v0.5.0 -> v0.7.0
- github.com/siderolabs/go-blockdevice v0.4.7 -> v0.4.8
- github.com/siderolabs/go-blockdevice/v2 v2.0.2 -> v2.0.3
- github.com/siderolabs/go-circular v0.2.0 -> v0.2.1
- github.com/siderolabs/go-cmd v0.1.1 -> v0.1.3
- github.com/siderolabs/go-kubernetes v0.2.12 -> v0.2.15
- github.com/siderolabs/grpc-proxy v0.4.1 -> v0.5.1
- github.com/siderolabs/pkgs v1.8.0-8-gdf1a1a5 -> v1.9.0-alpha.0-37-g4699763
- github.com/siderolabs/proto-codec v0.1.1 new
- github.com/siderolabs/siderolink v0.3.10 -> v0.3.11
- github.com/siderolabs/talos/pkg/machinery v1.8.0 -> v1.9.0-alpha.0
- github.com/siderolabs/tools v1.8.0-1-ga0c06c6 -> v1.9.0-alpha.0-7-g3750064
- golang.org/x/net v0.29.0 -> v0.30.0
- golang.org/x/sys v0.25.0 -> v0.26.0
- golang.org/x/term v0.24.0 -> v0.25.0
- golang.org/x/text v0.18.0 -> v0.19.0
- golang.org/x/time v0.6.0 -> v0.7.0
- google.golang.org/grpc v1.66.0 -> v1.67.1
- google.golang.org/protobuf v1.34.2 -> v1.35.1
- k8s.io/api v0.31.1 -> v0.32.0-beta.0
- k8s.io/apimachinery v0.31.1 -> v0.32.0-beta.0
- k8s.io/apiserver v0.31.1 -> v0.32.0-beta.0
- k8s.io/client-go v0.31.1 -> v0.32.0-beta.0
- k8s.io/component-base v0.31.1 -> v0.32.0-beta.0
- k8s.io/cri-api v0.32.0-alpha.0 -> v0.32.0-beta.0
- k8s.io/kube-scheduler v0.31.1 -> v0.32.0-beta.0
- k8s.io/kubectl v0.31.1 -> v0.32.0-beta.0
- k8s.io/kubelet v0.31.1 -> v0.32.0-beta.0
- k8s.io/pod-security-admission v0.31.1 -> v0.32.0-beta.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.70 -> v1.2.71
Previous release can be found at v1.8.0
Talos 1.9.0-alpha.0 (2024-10-18)
Welcome to the v1.9.0-alpha.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
talosctl cgroups
The talosctl cgroups command has been added to the talosctl tool.
This command allows you to view the cgroup resource consumption and limits for a machine, e.g.
talosctl cgroups --preset memory.
udevd
Talos previously used udevd to provide udevd, now it uses systemd-udevd instead.
Component Updates
Linux: 6.6.57 containerd: 2.0.0-rc.5 Flannel: 0.25.7
Talos is built with Go 1.23.2.
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
- Noel Georgi
- Dmitry Sharshakov
- Jean-Francois Roy
- Adolfo Ochagavía
- Dan Rue
- Eddie Wang
- Florian Ströger
- Hexoplon
- Mike Beaumont
- Philip Schmid
- Philipp Kleber
- Robby Ciliberto
- Ryan Borstelmann
- Serge Logvinov
- Spencer Smith
- Steven Cassamajor
- Tim Jones
- adilTepe
- ekarlso
- naed3r
Changes
72 commits
4529cf52drelease(v1.9.0-alpha.0): prepare releasee0434d77dfeat: update dependencies5c5a24886feat: add Talos 1.9 compatibility guaranteesbc4c21f41test: add json logs test environment71faa3294docs: nvidia proprietary/oss hardware requirement59a78da42chore: add proto-codec/codec7ff1cedfechore: update siderolabs/crypto module and return proper ALPNccbd5aed3feat: optionally decode hcloud userdata as base6434f652ce8feat: add well-known app.kubernetes.io labels to control-plane podsfc89dc216fix: supportextra-diskswhen using isof2bff814dchore: add arm64 target for integration-test5853bb0eafix: json logging panica859cff36chore: use virtio driver for disks in arm64db248de88chore(ci): add config for lldpd extension9f0de9f43test: update provision upgrade tests for Talos 1.939fe285e6fix: skip ram disksa9bff3a1dtest: skip no error test in Cilium4d902021bfix: do not use pflag csv comma reader for config-patch5371788cefix: typo in documentation8a228ba6bdocs: add egress documentation182325cb0test: skip lvm test if not enough user disks available519a48302fix: wipe system partitions correctly via kernel args0a2b4556cfix: volume encryption with failing keyslots6affbd318fix: update grpc-go the latest patch release77a4a4adcfix: scaleway metadata7acadc0c8fix: do not stop udevd before unmounting volumes6a081055bfeat: update Flannel to v0.25.72362f6d3efix: improve container detectionb67bc73fdfix: fix mdadm system extensionf08669c7afeat: bring in lpfc kernel module driver6a014374bfeat: enable QEDF driverf711907e0fix: make /var/run empty on reboots7d02eb60fdocs: fix typo in CloudStack docs74861573afix: multiple fixes for LVM activation74c12c20efeat: replace eudev with systemd-udevd0a4df4ef8docs: fix nvidia CRI config exampleafc1e1a46docs: fix typo in extraMounts directorya341bdb06fix: prevent file descriptors leaks to child processesdec653bfechore: better lvm2 tests908fd8789feat: support cgroup deep analysis intalosctlaa846cc18feat: add support for CI Network config in nocloud10f2539f2chore: disable cloud-images cron workflowb07a8b36bchore: ignore more plugins for system containerd392c4798ffeat: prepare for Talos 1.9ea7bf9fb4docs: update storage.md4ab8dee69fix: build talosctl withouttcell_minimal2fa019bd9docs: enable 'edit on GitHub' linkd2ccbc2b1docs: update hetzner documentation for CCMd498f647cdocs: fix Kernel Self Protection Project (KSPP) references0ec75463edocs: make Talos 1.8 current release9b77698cffix: update blockdevice library to v2.0.2e46227ab9docs: fix kubespan name inconsistency6b15ca19cfix: audit and fix cgroup reservations32b5d01edchore: bump lvm26484581ebfeat: allow /sbin/ldconfig in extensions9fa08e843chore: refactor testsd8ab4981bfeat: support lvm auto activation8166a58b3fix: filter out non-printable characters in process line806b6aaf5docs: add SECURITY.md7bd26df30docs: document/dev/net/tuncompatibility18daedb51fix: strategic merge patch delete for map keysf3370529adocs: correct typo8d6884a8etest: add a test for inline machine config trusted rootsd4a6d017dfix: ignore invalid NTP responses869f8379ffeat: update default Kubernetes version to 1.31.1780a1f198fix: update CoreDNS health check79cd03158chore: account for resource sorting in dns upstream resourcee17fafacachore: dropactivateLogicalVolumessequencer stepa294b366ffix: parse SideroLink API endpoint correctlya9269ac7bfix: remove extra logging on ethtool ioctl failures5c6277d17feat: update etcd to 3.5.16c1ed2984bdocs: add what's new for Talos 1.8
Changes from siderolabs/crypto
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
Changes from siderolabs/go-blockdevice
Changes from siderolabs/go-circular
Changes from siderolabs/go-kubernetes
Changes from siderolabs/grpc-proxy
2 commits
Changes from siderolabs/pkgs
25 commits
be92da0feat: update Linux to 6.6.57, update Linux firmware0b67a13feat: bump dependenciesdd5f928feat: update Linux 6.6.56 and protect /proc/memb1bf972feat: enable CONFIG_XFRM_STATISTICSc63beaefeat: update Linux to 6.6.54f474a55fix: libselinux: support running without /etc/selinuxba0341efix: systemd-udevd: search for config in /usr/etc2b193f1feat: add lpfc kernel module1adb946feat: enable QEDF driverdbbe3d0feat: update containerd to v2.0.0-rc.5f19590efeat: update Go to 1.23.2e2a561ffix: drop the LVM2 udev lvm ruleae205aafix: force LVM to use/runas state directory232a153feat: replace eudev with systemd-udevd40fb82afeat: add libselinux, libsepol, pcre2 and libcap6f40fbbfeat: update xfsprogs 6.10.1a1709c7feat: enable module unloading and memory hotplug (for NVIDIA UVM)2c5785bfeat: enable transparent huge pages in madvise modeca2e8c8fix: lvm2 modprobe path6b334a6feat: update Linux to 6.6.52e90ae7efeat: update Linux firmware to 2024090979a4f92feat: enable INET_DIAGc9f7eb9feat: update Linux to 6.6.51126b6a4fix: add mpt3sas UBSAN patchesa09bf93chore: drop UBSAN patch
Changes from siderolabs/proto-codec
3 commits
Changes from siderolabs/siderolink
Changes from siderolabs/tools
5 commits
Dependency Changes
- cloud.google.com/go/compute/metadata v0.5.0 -> v0.5.2
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.13.0 -> v1.15.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0 -> v1.8.0
- github.com/aws/aws-sdk-go-v2/config v1.27.33 -> v1.28.0
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.13 -> v1.16.17
- github.com/aws/aws-sdk-go-v2/service/kms v1.35.7 -> v1.37.2
- github.com/aws/smithy-go v1.20.4 -> v1.22.0
- github.com/containerd/containerd/v2 v2.0.0-rc.4 -> v2.0.0-rc.5
- github.com/containernetworking/plugins v1.5.1 -> v1.6.0
- github.com/cosi-project/runtime v0.5.5 -> v0.6.4
- github.com/docker/docker v27.2.0 -> v27.3.1
- github.com/gopacket/gopacket v1.2.0 -> v1.3.0
- github.com/klauspost/compress v1.17.9 -> v1.17.11
- github.com/mdlayher/ethtool v0.1.0 -> v0.2.0
- github.com/rivo/tview fd649dbf1223 -> c5e4fb24af13
- github.com/siderolabs/crypto v0.4.4 -> v0.5.0
- github.com/siderolabs/discovery-client v0.1.9 -> v0.1.10
- github.com/siderolabs/extras v1.8.0 -> v1.9.0-alpha.0-1-geab6e58
- github.com/siderolabs/go-blockdevice v0.4.7 -> v0.4.8
- github.com/siderolabs/go-blockdevice/v2 v2.0.2 -> v2.0.3
- github.com/siderolabs/go-circular v0.2.0 -> v0.2.1
- github.com/siderolabs/go-kubernetes v0.2.12 -> v0.2.13
- github.com/siderolabs/grpc-proxy v0.4.1 -> v0.5.1
- github.com/siderolabs/pkgs v1.8.0-8-gdf1a1a5 -> v1.9.0-alpha.0-24-gbe92da0
- github.com/siderolabs/proto-codec v0.1.1 new
- github.com/siderolabs/siderolink v0.3.10 -> v0.3.11
- github.com/siderolabs/talos/pkg/machinery v1.8.0 -> v1.8.1
- github.com/siderolabs/tools v1.8.0-1-ga0c06c6 -> v1.9.0-alpha.0-4-g2058296
- golang.org/x/net v0.29.0 -> v0.30.0
- golang.org/x/sys v0.25.0 -> v0.26.0
- golang.org/x/term v0.24.0 -> v0.25.0
- golang.org/x/text v0.18.0 -> v0.19.0
- golang.org/x/time v0.6.0 -> v0.7.0
- google.golang.org/grpc v1.66.0 -> v1.67.1
- google.golang.org/protobuf v1.34.2 -> v1.35.1
Previous release can be found at v1.8.0
Talos 1.8.0-alpha.2 (2024-09-02)
Welcome to the v1.8.0-alpha.2 release of Talos!
This is a pre-release of Talos
Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:
cloud-images.jsontalosctlbinarieskernelinitramfsmetaliso and disk imagestalosctl-cni-bundle
All other release assets can be downloaded from Image Factory.
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Node Annotations
Talos Linux now supports configuring Kubernetes node annotations via machine configuration (.machine.nodeAnnotations) in a way similar to node labels.
Workload Apparmor Profile
Talos Linux can now apply the default AppArmor profiles to all workloads started via containerd, if the machine is installed with the AppArmor LSM enforced via the extraKernelArgs.
Eg:
machine:
install:
extraKernelArgs:
- security=apparmor
Bridge Interface
Talos Linux now support configuring 'vlan_filtering' for bridge interfaces.
CNI Plugins
Talos Linux now bundles by default the following standard CNI plugins:
bridgefirewallflannelhost-localloopbackportmap
The Talos bundled Flannel manifest was simplified to remove the install-cni step.
Diagnostics
Talos Linux now shows diagnostics information for common problems related to misconfiguration via talosctl health and Talos dashboard.
Extensions in Kubernetes Nodes
Talos Linux now publishes list of installed extensions as Kubernetes node labels/annotations.
The key format is extensions.talos.dev/<name> and the value is the extension version.
If the extension name is not valid as a label key, it will be skipped.
If the extension version is a valid label value, it will be put to the label; otherwise it will be put to the annotation.
For Talos machines booted of the Image Factory artifacts, this means that the schematic ID will be published as the annotation
extensions.talos.dev/schematic (as it is longer than 63 characters).
DNS Forwarding for CoreDNS pods
Usage of the host DNS resolver as upstream for Kubernetes CoreDNS pods is now enabled by default. You can disable it with:
machine:
features:
hostDNS:
enabled: true
forwardKubeDNSToHost: false
Please note that on running cluster you will have to kill CoreDNS pods for this change to apply.
The IP address used to forward DNS queries has changed to the fixed 169.254.116.108 address.
For those upgrading from Talos 1.7 with forwardKubeDNSToHost enabled, the old Kubernetes service
can be cleaned up with kubectl delete -n kube-system service host-dns.
Installer
Talos Linux installer now never wipes the system disk on upgrades, which means that the flag
--preserve is always set for talosctl upgrade.
talos.halt_if_installed kernel argument
Starting with Talos 1.8, ISO's generated from Boot Assets would have a new kernel argument talos.halt_if_installed which would pause the boot sequence until boot timeout if Talos is already installed on the disk.
ISO generated for pre 1.8 versions would not have this kernel argument.
This can be also explicitly enabled by setting talos.halt_if_installed=1 in kernel argument.
Slim Kubelet Image
Kubelet container image includes various utilities that kubelet might use to perform various tasks.
Starting with Kubernetes 1.31.0, kubelet image now includes less utilities, as the in-tree CSI plugins were
removed in Kubernetes 1.31.0. This reduces kubelet image size and potential attack surface.
For Kubernetes < 1.31.0, there will be two images built:
v1.x.y(default, fat)v1.x.y-slim(slim)
For Kubernetes >= 1.31.0, there will be same two images built, but the default tag would point to slim image:
v1.x.y(default, slim)v1.x.y-fat(fat)
Default Node Labels
Talos Linux on config generation now adds a label node.kubernetes.io/exclude-from-external-load-balancers by default for the control plane nodes.
PCI Devices
A list of PCI devices can now be obtained via PCIDevices resource, e.g. talosctl get pcidevices.
Metal images
Starting with Talos 1.8, console=ttyS0 kernel argument is removed from the metal images and installer. If running virtualized in QEMU (For eg: Proxmox), this can be added as an extra kernel argument if needed via Image Factory or using Imager.
This should fix slow boot or no console output issues on most bare metal hardware.
NVIDIA GPU Support
Starting with Talos 1.8.0, SideroLabs would ships extensions for both LTS and Production versions of NVIDIA extensions. For more details see the CHANGELOG of extensions.
Upgrades with an exisiting schematic id from Image Factory would keep the existing LTS version of the NVIDIA extension.
Platform Support
Talos Linux now supports Apache CloudStack platform.
kube-proxy
Talos Linux configures kube-proxy >= v1.31.0 to use 'nftables' backend by default.
Secure Boot
Talos Linux now can optionally include well-known UEFI (Microsoft) SecureBoot keys into the auto-enrollment UEFI database.
Custom Trusted Roots
Talos Linux now supports adding custom trusted roots (CA certificates) via TrustedRootsConfig configuration documents.
Device Extra Settle Timeout
Talos Linux now supports a kernel command line argument talos.device.settle_time=3m to set the device extra settle timeout to workaround issues with broken drivers.
Component Updates
Kubernetes: 1.31.0 Linux: 6.6.47 containerd: 2.0.0-rc.4 runc: 1.2.0-rc.2 etcd: 3.5.15 Flannel: 0.25.6 Flannel CNI plugin: 1.5.1 CoreDNS: 1.1.13
Talos is built with Go 1.22.6.
ZSTD Compression
Talos Linux now compresses kernel and initramfs using ZSTD. Linux arm64 kernel is now compressed (previously it was uncompressed).
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
- Noel Georgi
- Utku Ozdemir
- Artem Chernyshev
- Dmitry Sharshakov
- Justin Garrison
- Spencer Smith
- Steve Francis
- Bernard Gütermann
- Jean-Francois Roy
- Konrad Eriksson
- Serge Logvinov
- doctor_ew
- Amadeus Mader
- Andrew Rynhard
- Anthony ARNAUD
- Attila Oláh
- Birger J. Nordølum
- Caleb Woodbine
- Claus Albøge
- Daniel Höxtermann
- David Birks
- Dean
- Dennis Marttinen
- Eddie Zaneski
- Enrique Hernández Bello
- EricMa
- Evan Johnson
- Fabian Topfstedt
- Fredrik Lundhag
- George Gaál
- Grzegorz Rozniecki
- Grzegorz Rożniecki
- Igor Rzegocki
- Josia Scheytt
- Judah Rand
- Marcel Richter
- Marco Franssen
- Marcus Förster
- Matthias Riegler
- Matthieu Mottet
- Maxime Brunet
- Michael Trip
- Mike Beaumont
- Nick Meyer
- Nicklas Frahm
- Ole-Magnus Sæther
- Roman Ivanov
- Ron Olson
- Saravanan G
- Simon-Boyer
- Skyler Mäntysaari
- Steve Fan
- Steve Martinelli
- Steven Fackler
- Syoc
- Tim Jones
- USBAkimbo
- Will Bush
- cryptk
- darox
- dhaines-quera
- leppeK
- looklose
Changes
279 commits
6f7c3a8e5fix: build of talosctl on non-Linux archesf0a59cec7release(v1.8.0-alpha.2): prepare releasec8aed3be4fix: correctly add console args for ttyS0b453385bdfeat: support volume configuration, provisioning, etcb6b16b35fchore: pause sequencer when talos installed and iso bootedeade0a9f2chore: bring inuiomodules81f9fcd9cfix: report errors correctly when pulling, fix EEXISTb309e87b4docs: fix invalid input in field user_datac7474877adocs: kubeProxyReplacement from "disabled" to "false"be2ebf6b4chore: bump dependencies88601bff4chore: drop calico from interactive installer106c17d0bchore: aarch64 qemu local secureboot supportda6263506feat: update Flannel to v0.25.619a44c2b0chore: drop consolettyS0argument75cecb421feat: add Apache Cloudstack support951cf66fdfeat: add Cisco fnic driver2d3bc94bffix(ci): fix broken testsa9551b7cafix: host DNS access with firewall enabled4834a61a8feat: report SELinux labels8fe39eacbchore: move csi tests as go teste4f8cb854fix: merge extension service config files bymountPath5ba1df469chore: add java package to protos823480800fix: add missing host/nvme-rdma5b4b64979fix: bump go-smbios for broken SMIOS tablesf57d1f07efix: add NVMe target kernel modules5ff6cf82cfix: drop /opt mount for containers/tink3c0db34d8docs: update kubespan docs3041d9075fix: always handlePermissionDeniedin dashboard resource watches36f83eea9chore: make qemu check flag consistent with codefe52cb074chore: update protoc-gen-docee4290f68fix: bind HostDNS to 169.254.x link-local addressc312a46f6chore: restructure k8s component health checkse193e7db9docs: fix incorrect path for openebs in documentationbeadbac21docs: update Oracle Cloud Talos custom image docs6f969e364chore: improvecluster createUX on aarch6445cc8688achore: replaceifblocks withmin/maxfunctionsa5bd770bffix: retry with another upstream if the previous failed82e19f38adocs: add high-level overlay development guide872599c9achore: drop image assets from release3c36c41a9feat: provide device extra settle timeout9e348ef35feat: update Kubernetes to 1.31.061a1c946bfeat: bundle (some) CNI plugins with Talos core091da163bchore: support arm64 kexec from zboot kernel images73511c1efchore: fix release notes2bf924c7bfeat: update ISO VolumeID with Talos version9a33dce10docs: fix the VMWare docs12562c2d5docs: fix talos version in vmware.shee67da14cfeat: scaleway routed ipeba5dafb9fix: add dns-resolve-cache to the support bundled4f8100bddocs: fix default openebs folder60e163d54docs: fix typo in doc98d9abdd0chore(ci): fix cilium ci testsbeb9602e3chore: bump github.com/docker/docker to v27.1.1+incompatible0698a4921docs: aws getting started re-write4d7d7a589chore(ci): update nvidia integration tests60e901c1dchore: document slim kubelet image622d66a98chore: bump depsf9f5e0ef5chore: fix k8s tests2ac8d2274chore: supportunsupportedflag for mkfs9b9159d1edocs: update support matrix for nvidia drivers9d3415850fix: fix graph diffs in dashboard when node aliases are used9a126d70echore: generate deepcopy for SecureBootAssets typedff56d824chore: remove arch-specific etcd image tagc9f1dece5feat: update Kubernetes to 1.31.0-rc.149831c56fdocs: replace removed Cilium/kubeProxyReplacement value33a316369docs: update aws.md for loope02bd2093feat: update Kubernetes to 1.31.0-rc.064914b086chore: add test for crun extension7a1c62b8bfeat: publish installed extensions as node labels/annotations3f2058abafix: update containerd configuration and settings81bd20f5adocs: remove deprecated jiva from openebs instructions480ffb88adocs: fix the amd64 PXE boot script URL20fe34dbddocs: fix docker getting started typo0fd7dfd2adocs: update Equinix Guide3d1474ac0feat: update CoreDNS to 1.1.350e5f37efchore: add test for apparmor96492c097docs: extend multus configuration for Cilium19aa44c54fix: generate kubeconfig using proper types240104e45feat: update Linux to 6.6.4332db8db60chore: lock microsoft secureboot certs3ce5492f8feat: runc memfd-bind service341b55cd3docs: update vmware.sh117628aa6chore: add test for gvisor extension with platform kvmfd01571c4feat: update Linux, enable Broadcom MPI3 driverb333ec07dfeat: update etcd to 3.5.15, Flannel to 0.25.5087290178feat: use ethtool ioctl to get link status when netlink api not available395c64290docs: update openebs-jiva helm repof132d3f40chore(ci): remove artifacts directory prefix for checksumsfd54dc191feat(talosctl): append microsoft secure boot certsfd6ddd11efeat: provide POD_IP env var to scheduler and controller-manager407347a7afeat: update Kubernetes to 1.31.0-beta.01b8c9ccbbfix: enforce secureboot enroll option only for supported releasesd52b89cb9chore: ensure tls required on s3 bucketsc288ace7bfix: be more smart when merging DNS resolver configd983e4430fix: panic on shutdown01404edffchore: reduce memory requirement for contrplane nodes980f9ebc0fix: fix log format in cluster provisioningea626a963feat: add label 'exclude-from-external-load-balancers' for cp nodes1cf76cfbcdocs: fix talosctl spellingb07338f54feat: provide machine config document to update trusted CA rootsf14c4795efix: sort ports and merge adjacent ones in the nft rulecf5effabbfeat: provide an option to enforce SecureBoot for TPM enrollment736c1485efix: change the UEFI firmware search path ordera727a1d97chore: make using action tracker easier0aebeff35docs: add missing backslashes398151e64fix: remove host bind mount for/tmpfor trustdce4c404e1chore: redo FilterMessages as generic functionfbde9c556chore: bump deps3bab15214feat: update Kubernetes to 1.31.0-alpha.3c2a5213eedocs: add note about mayastor nvme_tcp init container checkdad9c40c7chore: simplify code963612bccchore: redo EncodeString and EncodeBytes using buffer interfaced9db360abfix: properly output multi-doc machine config inget mc31af6b3f8chore: fix the release step to include CNI bundled7cd46643chore: fix the push/tag stepsc9aeeca3dchore: fix the Makefile48cdbe0derelease(v1.8.0-alpha.1): prepare release2512ef435test: fix the integrtion tests for apply-config076f3c4f2chore: improve link spec controller code0454130adfeat: suppress controller runtime first N failures on the console3d35e5468chore: update hydrophone library1f28726d4chore: support version with and withoutvprefix9a56b8527chore(ci): fix parallel runs of tf pipelinesbe35f380cchore: update pkgs/tools/extras93df23444docs: update opengraph image for main landing pagesd9d62d4dafeat: update Linux to 6.6.366b0fe5b8cdocs: update deploying cilium docs for v1.7 and v1.852611a90dfeat: update Kubernetes to v1.30.2c19cc4ccbdocs: clarify direct access needed to nodes in insecure modeb4c871e4bchore: bump dependenciescc345c8c9feat: add support for configuring vlan filtering on the bridge2d054ad35chore: handle documents diff inapply-configdry runbd34f71f3feat: add apparmor pkg71857fd4ddocs: fix typo:messure->measuref75f16b0achore(ci): fix cluster name generationc603d2bf9chore: output more info whenExecuteCommandInPodfails4b5a7445edocs: fix missing Akamai platform in supported matrix4701498a1chore(ci): run e2e-aws-nvidia with zfs extension enabled86a3222aechore: use new disks api for iscsi tests5ffc3f14bfeat: show siderolink status on dashboard6f6a5d105chore: upgrade to rtnetlink/v2 library1fb8453c2chore: update Go modules8e15621e8chore(ci): add conformance pipelines7fcb521a6feat: use hydrophone instead of sonobuoyd1a0c1f98test: fix the integration test for no META name535006334chore: fix our dns server implementationc6f90d014chore: replace sync.Map with concurrent.HashTrieMape8ced2c2dchore: drop k8s timeout in the default kubeconfig7cbdce73ffix: detect CD devices, fix user disks wipe testaca475c66chore: small usability fixes26cf566dcchore: bump our coredns fork5e66e117efix: initial assignment of Hetzner Cloud Alias IPf07b79f4afeat: provide disk detection based on new blockdevices8ee087268chore(ci): drop crashdump, save logs as artifacts7c9a14383fix: volume discovery improvements80ca8ff71fix: update the cgroups for Talos core servicesfe317f1e1docs: fix typo in QEMU guest agent support on Proxmox8dbe2128afeat: implement Talos diagnostics357d7754ffix: clean up VM runners on cluster destroy41f92e0bachore: update Go to 1.22.4, other updates4621e9bb7chore: add stale and lock issue workflows82d9cd322fix: add upgrade errata for arm64/zboot kernels9a23d846cfix: downgrade Azure IMDS required version30860210ctest: fix hardware test not to require PCI devices9fcc9b841feat: update Flannel to v0.25.39d395b9dechore: use bun instead of npma1684bdf8chore: speed up go generate for enumer4dd0aa712feat: implement PCI device bus enumerationb0466e0abfix: disable kexec on GCP/Azure911c25574chore: fix go.work resolution2f088ede0docs: add another example for installing cilium3967e0777feat: update etcd to 3.5.143367ded9ffix: correct time adjustment intime.SyncController893e64fcbfix: replacenslookupwithdigin integration tests0359c8537chore: unify toml packages being used4feb94ca0feat: add multidoc check to the Talos quirks module0b4a9777fdocs: update talosctl install instructions for 1.8da8305ffbtest: add a test for watchdog timersda7f27640fix: mounttracefsfilesystem7b37e5b63chore(ci): fix integration extensionsde7553d77fix(ci): cron jobseb510d9fdchore: require enabled bootloader for docker provisionera9cf9b789fix: correctly handle dns messages in our dns implementationc2b19dcb9chore: move to containerd 2.0 API92a274e9afix: workaround problems with udevd races31b24ea3dchore(ci): split integration misc8a1371337fix: produce stable order of bonds with equinix6406193f4test: add Equnix Metal sample metadata with two bonds01ea82053fix: time sync over NTP from future era5aea42427fix(ci): fix crons by setting up buildx always84706c3e2docs: default to brew docs for talosctlfcd65ff65feat: enable forwardKubeDNSToHost by default2e64e9e4efix: require accepted CAs on worker nodes23c1c4560fix(ci): fix crons fby rekres2d50392c5feat: update containerd to 2.0.0-rc.2, runc to 1.2.0-rc.1a12e4bb24chore(ci): fix github action cronse7bd9cd2bfix: decrease maximum negative ttl for dns responses9c3ebad9fchore(ci): kresify gh actionsff60f6fderefactor: make some of the extensions package publicce8c86d64fix: panic in osroot controllere1711cd3cchore: stop using containerd package for cri namespaced4307043ffix: update go-tail library to fix 'short read' error7cd13ef4adocs: add documentation on using Multus with Talos4784da3effeat: use new circular buffer compressed chunks feature78b48eb3afeat: include EDAC drivers0bf2d69fbfeat: update Kubernetes to 1.30.153f548913fix: increase host dns packet ttl for podsdedb6d360fix: update github.com/siderolabs/siderolink to v0.3.743939f1a6docs: fix typos, add docker socket info6663068bbchore: update project in GCP testingb86edc677chore: update office hours in talos repocfa25d22dchore: remove docs prior to 1.0 from website navigation120705459chore: handle I/O error for xfs_repairb7afe2669feat: update Linux 6.6.3026519ceeddocs: update proxmox.md851b91a0efix: don't enable hostDNS for versions of Talos which do not have it42ac5cd0cfix: check fornilmachine config during installation1d29111d4chore: update Go to 1.22.3f4d7b9d9afeat: gather plaform dns names0b0f9995adocs: add resource information, some grammar fixes763dae250fix: add cluster name to the worker machine config4aac5b4ecfeat: mount /sys/kernel/security into kubelet817f18153docs: remove mention of enabling KubePrism after v1.6c08d79732docs: fix the variable name typo478b862b4fix: do not fail cli action tracker when boot id cannot be readbe510f9ebdocs: fix grpc_tunnel value to trueb7b8a8d8fdocs: add logs example for the certificate errors troubleshooting8df5b85ecrelease(v1.8.0-alpha.0): prepare release07f78182cfix: use a fresh context for etcd unlock84cd7dbecfeat: update Linux to 6.6.2970fdca6a4chore: update minimum hardware requirement for vmware ovab690ffeb8test: improve DNS resolver test stability5aa0299b6style: use correct capitalization for openstack4c0c626b7feat: use zstd compression in place of xz98906ed6efix: use reboot delay only in case of error05fd042bbtest: improve the reset integration tests8cdf0f7cbdocs: fix typo in Cilium instructionsdd1d279dafix: allow more flags intalosctl cluster create --input-diref4394e58chore: update kernel and other packagesccdb4c8b1chore: update google.golang.org/grpc to 1.63.2c5b59df69fix: wait for devices to be discovered before probing filesystems0821b9c50feat: add--non-masquerade-cidrsflag totalosctl cluster create2bf613ad3fix: add endpoints for "virtual"host-dnsservicef4163aefefix: bump priority of OpenStack routes if IPv6 and default gateway6fbd1263cfeat: report process MAC labelsd46032821fix: return proper value from Bridge.STP instead of plain nilbac1d00c3chore: prepare for Talos 1.8d6c8067e1docs: make 1.7 docs the defaultd7c3a0735docs: add what's new for v1.7908f67fa1feat: add host dns support for resolving member addrs0d20b637dfeat: update Kubernetes to 1.30.0ec69d7a78chore: replace math/rand with math/rand/v289040ce43chore: update go-blockdevice/v2 library to the latest version0a785802efix: overlay installer operationsb1b63f658fix: mark overlay installer executable3433fa13bfeat: use container DNS when in container mode5d07ac5a7fix: close apid inter-backend connections gracefully for real7ba18555bdocs: fix typos in Akamai and AWS platform docs3dd1f4e88chore: extractpkg/imager/quirkstopkg/machinery78bc3a433docs: update Cilium docs831f3d39efeat: update Flannel to v0.25.1ea5b3ff0cfeat: update Kubernetes to v1.30.0-rc.254dac5ed4feat: update Linux 6.6.24, containerd 1.7.15c51f146dadocs: update Akamai platform docs9550f5ff7docs: fix getAuthenticationMethod and completePathFromNode docsbfbd02abffix: assign different priority to IPv6 default gateway on OpenStackc8f674bd3test: add a test for 'spin' container runtime5390ccd48chore: replace []byte with string and use go:embed for templatesba7cdc8c8chore: optimize DNSResolveCacheController145f24063fix: don't modify a global map of profiles6fe91ad9cfeat: provide Kubernets/Talos version compatibility for 1.8909a5800efix: generate secureboot ISO .der certificate correctlyb0fdc3c8cfix: make static pods check output consistentc6ad0fccefix: validate that workers don't get cluster CA key3735add87fix: reconnect to the logs stream in dashboard after reboot9aa1e1b79fix: present all accepted CAs to the kube-apiserver336e61174fix: close the apid connection to other machines gracefullyff2c427b0fix: pre-create nftables chain to make kubelet use nftables5622f0e45docs: change localDNS to hostDNS in release notes yaml section
Changes since v1.8.0-alpha.1
113 commits
6f7c3a8e5fix: build of talosctl on non-Linux archesf0a59cec7release(v1.8.0-alpha.2): prepare releasec8aed3be4fix: correctly add console args for ttyS0b453385bdfeat: support volume configuration, provisioning, etcb6b16b35fchore: pause sequencer when talos installed and iso bootedeade0a9f2chore: bring inuiomodules81f9fcd9cfix: report errors correctly when pulling, fix EEXISTb309e87b4docs: fix invalid input in field user_datac7474877adocs: kubeProxyReplacement from "disabled" to "false"be2ebf6b4chore: bump dependencies88601bff4chore: drop calico from interactive installer106c17d0bchore: aarch64 qemu local secureboot supportda6263506feat: update Flannel to v0.25.619a44c2b0chore: drop consolettyS0argument75cecb421feat: add Apache Cloudstack support951cf66fdfeat: add Cisco fnic driver2d3bc94bffix(ci): fix broken testsa9551b7cafix: host DNS access with firewall enabled4834a61a8feat: report SELinux labels8fe39eacbchore: move csi tests as go teste4f8cb854fix: merge extension service config files bymountPath5ba1df469chore: add java package to protos823480800fix: add missing host/nvme-rdma5b4b64979fix: bump go-smbios for broken SMIOS tablesf57d1f07efix: add NVMe target kernel modules5ff6cf82cfix: drop /opt mount for containers/tink3c0db34d8docs: update kubespan docs3041d9075fix: always handlePermissionDeniedin dashboard resource watches36f83eea9chore: make qemu check flag consistent with codefe52cb074chore: update protoc-gen-docee4290f68fix: bind HostDNS to 169.254.x link-local addressc312a46f6chore: restructure k8s component health checkse193e7db9docs: fix incorrect path for openebs in documentationbeadbac21docs: update Oracle Cloud Talos custom image docs6f969e364chore: improvecluster createUX on aarch6445cc8688achore: replaceifblocks withmin/maxfunctionsa5bd770bffix: retry with another upstream if the previous failed82e19f38adocs: add high-level overlay development guide872599c9achore: drop image assets from release3c36c41a9feat: provide device extra settle timeout9e348ef35feat: update Kubernetes to 1.31.061a1c946bfeat: bundle (some) CNI plugins with Talos core091da163bchore: support arm64 kexec from zboot kernel images73511c1efchore: fix release notes2bf924c7bfeat: update ISO VolumeID with Talos version9a33dce10docs: fix the VMWare docs12562c2d5docs: fix talos version in vmware.shee67da14cfeat: scaleway routed ipeba5dafb9fix: add dns-resolve-cache to the support bundled4f8100bddocs: fix default openebs folder60e163d54docs: fix typo in doc98d9abdd0chore(ci): fix cilium ci testsbeb9602e3chore: bump github.com/docker/docker to v27.1.1+incompatible0698a4921docs: aws getting started re-write4d7d7a589chore(ci): update nvidia integration tests60e901c1dchore: document slim kubelet image622d66a98chore: bump depsf9f5e0ef5chore: fix k8s tests2ac8d2274chore: supportunsupportedflag for mkfs9b9159d1edocs: update support matrix for nvidia drivers9d3415850fix: fix graph diffs in dashboard when node aliases are used9a126d70echore: generate deepcopy for SecureBootAssets typedff56d824chore: remove arch-specific etcd image tagc9f1dece5feat: update Kubernetes to 1.31.0-rc.149831c56fdocs: replace removed Cilium/kubeProxyReplacement value33a316369docs: update aws.md for loope02bd2093feat: update Kubernetes to 1.31.0-rc.064914b086chore: add test for crun extension7a1c62b8bfeat: publish installed extensions as node labels/annotations3f2058abafix: update containerd configuration and settings81bd20f5adocs: remove deprecated jiva from openebs instructions480ffb88adocs: fix the amd64 PXE boot script URL20fe34dbddocs: fix docker getting started typo0fd7dfd2adocs: update Equinix Guide3d1474ac0feat: update CoreDNS to 1.1.350e5f37efchore: add test for apparmor96492c097docs: extend multus configuration for Cilium19aa44c54fix: generate kubeconfig using proper types240104e45feat: update Linux to 6.6.4332db8db60chore: lock microsoft secureboot certs3ce5492f8feat: runc memfd-bind service341b55cd3docs: update vmware.sh117628aa6chore: add test for gvisor extension with platform kvmfd01571c4feat: update Linux, enable Broadcom MPI3 driverb333ec07dfeat: update etcd to 3.5.15, Flannel to 0.25.5087290178feat: use ethtool ioctl to get link status when netlink api not available395c64290docs: update openebs-jiva helm repof132d3f40chore(ci): remove artifacts directory prefix for checksumsfd54dc191feat(talosctl): append microsoft secure boot certsfd6ddd11efeat: provide POD_IP env var to scheduler and controller-manager407347a7afeat: update Kubernetes to 1.31.0-beta.01b8c9ccbbfix: enforce secureboot enroll option only for supported releasesd52b89cb9chore: ensure tls required on s3 bucketsc288ace7bfix: be more smart when merging DNS resolver configd983e4430fix: panic on shutdown01404edffchore: reduce memory requirement for contrplane nodes980f9ebc0fix: fix log format in cluster provisioningea626a963feat: add label 'exclude-from-external-load-balancers' for cp nodes1cf76cfbcdocs: fix talosctl spellingb07338f54feat: provide machine config document to update trusted CA rootsf14c4795efix: sort ports and merge adjacent ones in the nft rulecf5effabbfeat: provide an option to enforce SecureBoot for TPM enrollment736c1485efix: change the UEFI firmware search path ordera727a1d97chore: make using action tracker easier0aebeff35docs: add missing backslashes398151e64fix: remove host bind mount for/tmpfor trustdce4c404e1chore: redo FilterMessages as generic functionfbde9c556chore: bump deps3bab15214feat: update Kubernetes to 1.31.0-alpha.3c2a5213eedocs: add note about mayastor nvme_tcp init container checkdad9c40c7chore: simplify code963612bccchore: redo EncodeString and EncodeBytes using buffer interfaced9db360abfix: properly output multi-doc machine config inget mc
Changes from siderolabs/discovery-client
2 commits
Changes from siderolabs/extras
7 commits
Changes from siderolabs/gen
2 commits
Changes from siderolabs/go-api-signature
3 commits
Changes from siderolabs/go-circular
3 commits
Changes from siderolabs/go-debug
Changes from siderolabs/go-kubernetes
2 commits
Changes from siderolabs/go-loadbalancer
Changes from siderolabs/go-pcidb
Changes from siderolabs/go-smbios
2 commits
Changes from siderolabs/go-tail
Changes from siderolabs/go-talos-support
3 commits
Changes from siderolabs/grpc-proxy
5 commits
Changes from siderolabs/pkgs
56 commits
4ce5bc6feat: add uio_pci_generic kernel module18d3b85feat: adduinputkernel module4fd2541feat: bump dependencies467d127feat: enable Cisco FCoE HBA Driver (fnic)4e6dec2feat: enable more PCI options5f919c5fix: add virtio-net GSO issue patch7b2e46bfeat: update Linux to 6.6.45a6db229fix: strip CNI plugins124d35bchore: bump depsaf6b4e6chore: bump nvidia drivers5e8a15achore: bump deps99650c8fix: enable TPROXY for nftables75adbdefeat: support lts and production nvidia modulesa97d58ffeat: add Intel management engine modules for Intel Arc support4e940f8feat: update Linux to 6.6.437f9c802fix(kernel): array-index-out-of-bounds error on bpf8cc6455feat: add driver for Broadcom MPI3d01fb35feat: update Linux to 6.6.3925f3a99fix: update ca-certificates in pkgs60a91b2fix: enable CONFIG_PROC_CHILDREN for amd64 kernelce49757feat: update flannel-cni plugin to v1.5.1289ed6bfeat: bump deps8d6b19afeat: update Linux to 6.6.36b671d46feat: update containerd/runc to the next rc versionsc7e9591feat: enable CONFIG_X86_AMD_PSTATE84bad89feat: add 'apparmor' package4d9869afeat: update Linux to 6.6.33e5990e8feat: enable CONFIG_KSMa37f382fix: network for Rockchip boards like Rock6495218c7fix: enable PAGE_TABLE_CHECKcbd9cd7feat: enable SCTP supportc309452feat: bump dependencies3a56032chore: rekresdb7f60cfeat: bump Linux to 6.6.32c647a05feat: update ipxe to the latestf350879feat: update containerd to 2.0.0-rc.2, runc to 1.2.0-rc.1f8392fbfeat: update Linux firmware to 20240513f414bbdfix: disable CONFIG_EFI_DISABLE_PCI_DMA option9ebfd1bfeat: enable EDAC driversf9559defix: drbd module installation492638dfeat: update dependenciesbd70572feat: update Go to 1.22.3edb600afeat: update zfs package to v2.2.46775002feat: enable NFT FIB lookups28c5696feat: update Linux to 6.6.299c8a02cfeat: update containerd to 1.7.16ca6249bfeat: compress amd64 Linux kernel using zstd718a7dafeat: enable SELinux207481ffeat(intel): add support for power management and ACPI options for Intel CPUsdfa7dcefeat: update Linux to 6.6.287b30b61fix: use proper EFI zBoot image010913bfeat: update Linux 6.6.26, containerd 1.7.15da397fafeat: enable BFQ IO schedulerc839801feat: enable zboot on arm64 with zstd compression1b28e2cfeat: go 1.22.2, Linux 6.6.2405db2a8fix: revert musl to 1.2.4
Changes from siderolabs/protoenc
19 commits
684f268chore: bump deps, add repeated <-> single field example82f0774fix: encode (u)int(16|8)s as varintsd8ddbd5chore: add more testsdceb5a6fix: proper order for custom EncoderDecoder3617e19fix: add missing test and proper check formap[string]interface{}647e9dachore: various additions3e56913fix: support pointer to structs in marshal/unmarshal49a85fachore: add support for map[string]interface{}bf5e39bchore: support (u)int(8|16) fields ans slices, fix map issues,d618d0dchore: no longer treat T and *T as the same types in RegisterEncoderDecoderaa7ee6cchore: add fast path for ints, fixed ints and floats6427893chore: bump Go and fix lint issues94427a5chore: even more various fixes and small refactorings76e5695chore: various fixes and small refactorings8a48bf0feat: implement custom encoders/decoders549761bchore: various embedding fixesab9b1ffchore: add side-by-side tests with official proto.Marshal and Unmarshal2519db3feat: implement Marshal/Unmarshal functions for protobuf encoding485db9fInitial commit
Changes from siderolabs/siderolink
4 commits
Changes from siderolabs/tools
14 commits
50e55e6feat: bump dependencies2b8dab4feat: add policycoreutils for building squashfs with SELinuxef48079feat: add fakeroot as a build dependency86b5363feat: add secilc41ed4b2fix: fix Tcl tag hashesa764e8dchore: bump deps7d807bdchore: bump deps31ad71bfeat: update dependenciesd2746e5feat: update Go to 1.22.406ba64efeat: update dependencies7e5a248feat: update dependenciesc34ec5bfeat: update Go to 1.22.33c25a6ffix: update pkg-config configure flagbd405fffeat: update go to 1.22.2
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.3 -> v0.5.0
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.11.1 -> v1.13.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.5.1 -> v1.7.0
- github.com/aws/aws-sdk-go-v2/config v1.27.10 -> v1.27.31
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.1 -> v1.16.12
- github.com/aws/aws-sdk-go-v2/service/kms v1.30.1 -> v1.35.5
- github.com/aws/smithy-go v1.20.2 -> v1.20.4
- github.com/beevik/ntp v1.3.1 -> v1.4.3
- github.com/containerd/containerd/api v1.8.0-rc.3 new
- github.com/containerd/containerd/v2 v2.0.0-rc.4 new
- github.com/containerd/errdefs v0.1.0 new
- github.com/containerd/platforms v0.2.1 new
- github.com/containerd/typeurl/v2 v2.1.1 -> v2.2.0
- github.com/containernetworking/cni v1.1.2 -> v1.2.3
- github.com/containernetworking/plugins v1.4.1 -> v1.5.1
- github.com/coreos/go-iptables v0.7.0 -> v0.8.0
- github.com/cosi-project/runtime v0.4.1 -> v0.5.5
- github.com/docker/docker v26.0.0 -> v27.2.0
- github.com/fatih/color v1.16.0 -> v1.17.0
- github.com/foxboron/go-uefi 48be911532c2 -> e2076f0e58ca
- github.com/google/go-containerregistry v0.19.1 -> v0.20.2
- github.com/google/go-tpm ee6cbcd136f8 -> v0.9.1
- github.com/hashicorp/go-getter/v2 v2.2.1 -> v2.2.3
- github.com/hetznercloud/hcloud-go/v2 v2.7.0 -> v2.13.1
- github.com/insomniacslk/dhcp c728f5dd21c8 -> a3a4c1f04475
- github.com/jsimonetti/rtnetlink/v2 v2.0.2 new
- github.com/klauspost/compress v1.17.9 new
- github.com/klauspost/cpuid/v2 v2.2.7 -> v2.2.8
- github.com/miekg/dns v1.1.58 -> v1.1.62
- github.com/opencontainers/runc v1.2.0-rc.2 new
- github.com/pelletier/go-toml/v2 v2.2.3 new
- github.com/pkg/xattr v0.4.10 new
- github.com/prometheus/procfs v0.13.0 -> v0.15.1
- github.com/rivo/tview a22293bda944 -> fd649dbf1223
- github.com/rs/xid v1.5.0 -> v1.6.0
- github.com/safchain/ethtool v0.3.0 -> v0.4.1
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.25 -> v1.0.0-beta.29
- github.com/siderolabs/discovery-client v0.1.8 -> v0.1.9
- github.com/siderolabs/extras v1.7.0-1-gbb76755 -> v1.8.0-alpha.0-6-g43a2821
- github.com/siderolabs/gen v0.4.8 -> v0.5.0
- github.com/siderolabs/go-api-signature v0.3.2 -> v0.3.5
- github.com/siderolabs/go-blockdevice/v2 3265299b0192 -> v2.0.1
- github.com/siderolabs/go-circular v0.1.0 -> v0.2.0
- github.com/siderolabs/go-debug v0.3.0 -> v0.4.0
- github.com/siderolabs/go-kubernetes v0.2.9 -> v0.2.11
- github.com/siderolabs/go-loadbalancer v0.3.3 -> v0.3.4
- github.com/siderolabs/go-pcidb v0.2.0 -> v0.3.0
- github.com/siderolabs/go-smbios v0.3.2 -> v0.3.3
- github.com/siderolabs/go-tail v0.1.0 -> v0.1.1
- github.com/siderolabs/go-talos-support v0.1.0 -> v0.1.1
- github.com/siderolabs/grpc-proxy v0.4.0 -> v0.4.1
- github.com/siderolabs/pkgs v1.7.0-6-g29106c0 -> v1.8.0-alpha.0-54-g4ce5bc6
- github.com/siderolabs/protoenc v0.2.1 new
- github.com/siderolabs/siderolink v0.3.5 -> v0.3.9
- github.com/siderolabs/talos/pkg/machinery v1.7.0 -> v1.8.0-alpha.2
- github.com/siderolabs/tools v1.7.0-1-g10b2a69 -> v1.8.0
- github.com/spf13/cobra v1.8.0 -> v1.8.1
- github.com/vishvananda/netlink v1.2.1-beta.2 -> v1.3.0
- go.etcd.io/etcd/api/v3 v3.5.13 -> v3.5.15
- go.etcd.io/etcd/client/pkg/v3 v3.5.13 -> v3.5.15
- go.etcd.io/etcd/client/v3 v3.5.13 -> v3.5.15
- go.etcd.io/etcd/etcdutl/v3 v3.5.13 -> v3.5.15
- golang.org/x/net v0.23.0 -> v0.28.0
- golang.org/x/oauth2 v0.18.0 -> v0.22.0
- golang.org/x/sync v0.6.0 -> v0.8.0
- golang.org/x/sys v0.18.0 -> v0.24.0
- golang.org/x/term v0.18.0 -> v0.23.0
- golang.org/x/text v0.14.0 -> v0.17.0
- golang.org/x/time v0.5.0 -> v0.6.0
- google.golang.org/grpc v1.62.1 -> v1.66.0
- google.golang.org/protobuf v1.33.0 -> v1.34.2
- k8s.io/api v0.30.0 -> v0.31.0
- k8s.io/apimachinery v0.30.0 -> v0.31.0
- k8s.io/apiserver v0.30.0 -> v0.31.0
- k8s.io/client-go v0.30.0 -> v0.31.0
- k8s.io/component-base v0.30.0 -> v0.31.0
- k8s.io/cri-api v0.30.0 -> v0.32.0-alpha.0
- k8s.io/klog/v2 v2.120.1 -> v2.130.1
- k8s.io/kube-scheduler v0.30.0 -> v0.31.0
- k8s.io/kubectl v0.30.0 -> v0.31.0
- k8s.io/kubelet v0.30.0 -> v0.31.0
- k8s.io/pod-security-admission v0.30.0 -> v0.31.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.69 -> v1.2.70
- sigs.k8s.io/hydrophone b92baf7e0b04 new
Previous release can be found at v1.7.0
Talos 1.8.0-alpha.1 (2024-07-05)
Welcome to the v1.8.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Workload Apparmor Profile
Talos Linux can now apply the default AppArmor profiles to all workloads started via containerd, if the machine is installed with the AppArmor LSM enforced via the extraKernelArgs.
Eg:
machine:
install:
extraKernelArgs:
- security=apparmor
Bridge Interface
Talos Linux now support configuring 'vlan_filtering' for bridge interfaces.
Diagnostics
Talos Linux now shows diagnostics information for common problems related to misconfiguration via talosctl health and Talos dashboard.
DNS Forwarding for CoreDNS pods
Usage of the host DNS resolver as upstream for Kubernetes CoreDNS pods is now enabled by default. You can disable it with:
machine:
features:
hostDNS:
enabled: true
forwardKubeDNSToHost: false
Please note that on running cluster you will have to kill CoreDNS pods for this change to apply.
PCI Devices
A list of PCI devices can now be obtained via PCIDevices resource, e.g. talosctl get pcidevices.
Component Updates
Kubernetes: 1.30.2 Linux: 6.6.36 containerd: 2.0.0-rc.3 runc: 1.2.0-rc.2 etcd: 3.5.14 Flannel: 0.25.3 Flannel CNI plugin: 1.5.1
Talos is built with Go 1.22.5.
ZSTD Compression
Talos Linux now compresses kernel and initramfs using ZSTD. Linux arm64 kernel is now compressed (previously it was uncompressed).
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
- Noel Georgi
- Utku Ozdemir
- Artem Chernyshev
- Dmitry Sharshakov
- Spencer Smith
- Justin Garrison
- Steve Francis
- Bernard Gütermann
- Konrad Eriksson
- Andrew Rynhard
- Attila Oláh
- Birger J. Nordølum
- Dennis Marttinen
- Enrique Hernández Bello
- Evan Johnson
- Fabian Topfstedt
- Grzegorz Rozniecki
- Grzegorz Rożniecki
- Igor Rzegocki
- Jean-Francois Roy
- Marcel Richter
- Marco Franssen
- Michael Trip
- Ron Olson
- Serge Logvinov
- Simon-Boyer
- Steve Fan
- USBAkimbo
- Will Bush
- darox
- dhaines-quera
- leppeK
- looklose
Changes
160 commits
0454130adfeat: suppress controller runtime first N failures on the console3d35e5468chore: update hydrophone library1f28726d4chore: support version with and withoutvprefix9a56b8527chore(ci): fix parallel runs of tf pipelinesbe35f380cchore: update pkgs/tools/extras93df23444docs: update opengraph image for main landing pagesd9d62d4dafeat: update Linux to 6.6.366b0fe5b8cdocs: update deploying cilium docs for v1.7 and v1.852611a90dfeat: update Kubernetes to v1.30.2c19cc4ccbdocs: clarify direct access needed to nodes in insecure modeb4c871e4bchore: bump dependenciescc345c8c9feat: add support for configuring vlan filtering on the bridge2d054ad35chore: handle documents diff inapply-configdry runbd34f71f3feat: add apparmor pkg71857fd4ddocs: fix typo:messure->measuref75f16b0achore(ci): fix cluster name generationc603d2bf9chore: output more info whenExecuteCommandInPodfails4b5a7445edocs: fix missing Akamai platform in supported matrix4701498a1chore(ci): run e2e-aws-nvidia with zfs extension enabled86a3222aechore: use new disks api for iscsi tests5ffc3f14bfeat: show siderolink status on dashboard6f6a5d105chore: upgrade to rtnetlink/v2 library1fb8453c2chore: update Go modules8e15621e8chore(ci): add conformance pipelines7fcb521a6feat: use hydrophone instead of sonobuoyd1a0c1f98test: fix the integration test for no META name535006334chore: fix our dns server implementationc6f90d014chore: replace sync.Map with concurrent.HashTrieMape8ced2c2dchore: drop k8s timeout in the default kubeconfig7cbdce73ffix: detect CD devices, fix user disks wipe testaca475c66chore: small usability fixes26cf566dcchore: bump our coredns fork5e66e117efix: initial assignment of Hetzner Cloud Alias IPf07b79f4afeat: provide disk detection based on new blockdevices8ee087268chore(ci): drop crashdump, save logs as artifacts7c9a14383fix: volume discovery improvements80ca8ff71fix: update the cgroups for Talos core servicesfe317f1e1docs: fix typo in QEMU guest agent support on Proxmox8dbe2128afeat: implement Talos diagnostics357d7754ffix: clean up VM runners on cluster destroy41f92e0bachore: update Go to 1.22.4, other updates4621e9bb7chore: add stale and lock issue workflows82d9cd322fix: add upgrade errata for arm64/zboot kernels9a23d846cfix: downgrade Azure IMDS required version30860210ctest: fix hardware test not to require PCI devices9fcc9b841feat: update Flannel to v0.25.39d395b9dechore: use bun instead of npma1684bdf8chore: speed up go generate for enumer4dd0aa712feat: implement PCI device bus enumerationb0466e0abfix: disable kexec on GCP/Azure911c25574chore: fix go.work resolution2f088ede0docs: add another example for installing cilium3967e0777feat: update etcd to 3.5.143367ded9ffix: correct time adjustment intime.SyncController893e64fcbfix: replacenslookupwithdigin integration tests0359c8537chore: unify toml packages being used4feb94ca0feat: add multidoc check to the Talos quirks module0b4a9777fdocs: update talosctl install instructions for 1.8da8305ffbtest: add a test for watchdog timersda7f27640fix: mounttracefsfilesystem7b37e5b63chore(ci): fix integration extensionsde7553d77fix(ci): cron jobseb510d9fdchore: require enabled bootloader for docker provisionera9cf9b789fix: correctly handle dns messages in our dns implementationc2b19dcb9chore: move to containerd 2.0 API92a274e9afix: workaround problems with udevd races31b24ea3dchore(ci): split integration misc8a1371337fix: produce stable order of bonds with equinix6406193f4test: add Equnix Metal sample metadata with two bonds01ea82053fix: time sync over NTP from future era5aea42427fix(ci): fix crons by setting up buildx always84706c3e2docs: default to brew docs for talosctlfcd65ff65feat: enable forwardKubeDNSToHost by default2e64e9e4efix: require accepted CAs on worker nodes23c1c4560fix(ci): fix crons fby rekres2d50392c5feat: update containerd to 2.0.0-rc.2, runc to 1.2.0-rc.1a12e4bb24chore(ci): fix github action cronse7bd9cd2bfix: decrease maximum negative ttl for dns responses9c3ebad9fchore(ci): kresify gh actionsff60f6fderefactor: make some of the extensions package publicce8c86d64fix: panic in osroot controllere1711cd3cchore: stop using containerd package for cri namespaced4307043ffix: update go-tail library to fix 'short read' error7cd13ef4adocs: add documentation on using Multus with Talos4784da3effeat: use new circular buffer compressed chunks feature78b48eb3afeat: include EDAC drivers0bf2d69fbfeat: update Kubernetes to 1.30.153f548913fix: increase host dns packet ttl for podsdedb6d360fix: update github.com/siderolabs/siderolink to v0.3.743939f1a6docs: fix typos, add docker socket info6663068bbchore: update project in GCP testingb86edc677chore: update office hours in talos repocfa25d22dchore: remove docs prior to 1.0 from website navigation120705459chore: handle I/O error for xfs_repairb7afe2669feat: update Linux 6.6.3026519ceeddocs: update proxmox.md851b91a0efix: don't enable hostDNS for versions of Talos which do not have it42ac5cd0cfix: check fornilmachine config during installation1d29111d4chore: update Go to 1.22.3f4d7b9d9afeat: gather plaform dns names0b0f9995adocs: add resource information, some grammar fixes763dae250fix: add cluster name to the worker machine config4aac5b4ecfeat: mount /sys/kernel/security into kubelet817f18153docs: remove mention of enabling KubePrism after v1.6c08d79732docs: fix the variable name typo478b862b4fix: do not fail cli action tracker when boot id cannot be readbe510f9ebdocs: fix grpc_tunnel value to trueb7b8a8d8fdocs: add logs example for the certificate errors troubleshooting8df5b85ecrelease(v1.8.0-alpha.0): prepare release07f78182cfix: use a fresh context for etcd unlock84cd7dbecfeat: update Linux to 6.6.2970fdca6a4chore: update minimum hardware requirement for vmware ovab690ffeb8test: improve DNS resolver test stability5aa0299b6style: use correct capitalization for openstack4c0c626b7feat: use zstd compression in place of xz98906ed6efix: use reboot delay only in case of error05fd042bbtest: improve the reset integration tests8cdf0f7cbdocs: fix typo in Cilium instructionsdd1d279dafix: allow more flags intalosctl cluster create --input-diref4394e58chore: update kernel and other packagesccdb4c8b1chore: update google.golang.org/grpc to 1.63.2c5b59df69fix: wait for devices to be discovered before probing filesystems0821b9c50feat: add--non-masquerade-cidrsflag totalosctl cluster create2bf613ad3fix: add endpoints for "virtual"host-dnsservicef4163aefefix: bump priority of OpenStack routes if IPv6 and default gateway6fbd1263cfeat: report process MAC labelsd46032821fix: return proper value from Bridge.STP instead of plain nilbac1d00c3chore: prepare for Talos 1.8d6c8067e1docs: make 1.7 docs the defaultd7c3a0735docs: add what's new for v1.7908f67fa1feat: add host dns support for resolving member addrs0d20b637dfeat: update Kubernetes to 1.30.0ec69d7a78chore: replace math/rand with math/rand/v289040ce43chore: update go-blockdevice/v2 library to the latest version0a785802efix: overlay installer operationsb1b63f658fix: mark overlay installer executable3433fa13bfeat: use container DNS when in container mode5d07ac5a7fix: close apid inter-backend connections gracefully for real7ba18555bdocs: fix typos in Akamai and AWS platform docs3dd1f4e88chore: extractpkg/imager/quirkstopkg/machinery78bc3a433docs: update Cilium docs831f3d39efeat: update Flannel to v0.25.1ea5b3ff0cfeat: update Kubernetes to v1.30.0-rc.254dac5ed4feat: update Linux 6.6.24, containerd 1.7.15c51f146dadocs: update Akamai platform docs9550f5ff7docs: fix getAuthenticationMethod and completePathFromNode docsbfbd02abffix: assign different priority to IPv6 default gateway on OpenStackc8f674bd3test: add a test for 'spin' container runtime5390ccd48chore: replace []byte with string and use go:embed for templatesba7cdc8c8chore: optimize DNSResolveCacheController145f24063fix: don't modify a global map of profiles6fe91ad9cfeat: provide Kubernets/Talos version compatibility for 1.8909a5800efix: generate secureboot ISO .der certificate correctlyb0fdc3c8cfix: make static pods check output consistentc6ad0fccefix: validate that workers don't get cluster CA key3735add87fix: reconnect to the logs stream in dashboard after reboot9aa1e1b79fix: present all accepted CAs to the kube-apiserver336e61174fix: close the apid connection to other machines gracefullyff2c427b0fix: pre-create nftables chain to make kubelet use nftables5622f0e45docs: change localDNS to hostDNS in release notes yaml section
Changes since v1.8.0-alpha.0
108 commits
0454130adfeat: suppress controller runtime first N failures on the console3d35e5468chore: update hydrophone library1f28726d4chore: support version with and withoutvprefix9a56b8527chore(ci): fix parallel runs of tf pipelinesbe35f380cchore: update pkgs/tools/extras93df23444docs: update opengraph image for main landing pagesd9d62d4dafeat: update Linux to 6.6.366b0fe5b8cdocs: update deploying cilium docs for v1.7 and v1.852611a90dfeat: update Kubernetes to v1.30.2c19cc4ccbdocs: clarify direct access needed to nodes in insecure modeb4c871e4bchore: bump dependenciescc345c8c9feat: add support for configuring vlan filtering on the bridge2d054ad35chore: handle documents diff inapply-configdry runbd34f71f3feat: add apparmor pkg71857fd4ddocs: fix typo:messure->measuref75f16b0achore(ci): fix cluster name generationc603d2bf9chore: output more info whenExecuteCommandInPodfails4b5a7445edocs: fix missing Akamai platform in supported matrix4701498a1chore(ci): run e2e-aws-nvidia with zfs extension enabled86a3222aechore: use new disks api for iscsi tests5ffc3f14bfeat: show siderolink status on dashboard6f6a5d105chore: upgrade to rtnetlink/v2 library1fb8453c2chore: update Go modules8e15621e8chore(ci): add conformance pipelines7fcb521a6feat: use hydrophone instead of sonobuoyd1a0c1f98test: fix the integration test for no META name535006334chore: fix our dns server implementationc6f90d014chore: replace sync.Map with concurrent.HashTrieMape8ced2c2dchore: drop k8s timeout in the default kubeconfig7cbdce73ffix: detect CD devices, fix user disks wipe testaca475c66chore: small usability fixes26cf566dcchore: bump our coredns fork5e66e117efix: initial assignment of Hetzner Cloud Alias IPf07b79f4afeat: provide disk detection based on new blockdevices8ee087268chore(ci): drop crashdump, save logs as artifacts7c9a14383fix: volume discovery improvements80ca8ff71fix: update the cgroups for Talos core servicesfe317f1e1docs: fix typo in QEMU guest agent support on Proxmox8dbe2128afeat: implement Talos diagnostics357d7754ffix: clean up VM runners on cluster destroy41f92e0bachore: update Go to 1.22.4, other updates4621e9bb7chore: add stale and lock issue workflows82d9cd322fix: add upgrade errata for arm64/zboot kernels9a23d846cfix: downgrade Azure IMDS required version30860210ctest: fix hardware test not to require PCI devices9fcc9b841feat: update Flannel to v0.25.39d395b9dechore: use bun instead of npma1684bdf8chore: speed up go generate for enumer4dd0aa712feat: implement PCI device bus enumerationb0466e0abfix: disable kexec on GCP/Azure911c25574chore: fix go.work resolution2f088ede0docs: add another example for installing cilium3967e0777feat: update etcd to 3.5.143367ded9ffix: correct time adjustment intime.SyncController893e64fcbfix: replacenslookupwithdigin integration tests0359c8537chore: unify toml packages being used4feb94ca0feat: add multidoc check to the Talos quirks module0b4a9777fdocs: update talosctl install instructions for 1.8da8305ffbtest: add a test for watchdog timersda7f27640fix: mounttracefsfilesystem7b37e5b63chore(ci): fix integration extensionsde7553d77fix(ci): cron jobseb510d9fdchore: require enabled bootloader for docker provisionera9cf9b789fix: correctly handle dns messages in our dns implementationc2b19dcb9chore: move to containerd 2.0 API92a274e9afix: workaround problems with udevd races31b24ea3dchore(ci): split integration misc8a1371337fix: produce stable order of bonds with equinix6406193f4test: add Equnix Metal sample metadata with two bonds01ea82053fix: time sync over NTP from future era5aea42427fix(ci): fix crons by setting up buildx always84706c3e2docs: default to brew docs for talosctlfcd65ff65feat: enable forwardKubeDNSToHost by default2e64e9e4efix: require accepted CAs on worker nodes23c1c4560fix(ci): fix crons fby rekres2d50392c5feat: update containerd to 2.0.0-rc.2, runc to 1.2.0-rc.1a12e4bb24chore(ci): fix github action cronse7bd9cd2bfix: decrease maximum negative ttl for dns responses9c3ebad9fchore(ci): kresify gh actionsff60f6fderefactor: make some of the extensions package publicce8c86d64fix: panic in osroot controllere1711cd3cchore: stop using containerd package for cri namespaced4307043ffix: update go-tail library to fix 'short read' error7cd13ef4adocs: add documentation on using Multus with Talos4784da3effeat: use new circular buffer compressed chunks feature78b48eb3afeat: include EDAC drivers0bf2d69fbfeat: update Kubernetes to 1.30.153f548913fix: increase host dns packet ttl for podsdedb6d360fix: update github.com/siderolabs/siderolink to v0.3.743939f1a6docs: fix typos, add docker socket info6663068bbchore: update project in GCP testingb86edc677chore: update office hours in talos repocfa25d22dchore: remove docs prior to 1.0 from website navigation120705459chore: handle I/O error for xfs_repairb7afe2669feat: update Linux 6.6.3026519ceeddocs: update proxmox.md851b91a0efix: don't enable hostDNS for versions of Talos which do not have it42ac5cd0cfix: check fornilmachine config during installation1d29111d4chore: update Go to 1.22.3f4d7b9d9afeat: gather plaform dns names0b0f9995adocs: add resource information, some grammar fixes763dae250fix: add cluster name to the worker machine config4aac5b4ecfeat: mount /sys/kernel/security into kubelet817f18153docs: remove mention of enabling KubePrism after v1.6c08d79732docs: fix the variable name typo478b862b4fix: do not fail cli action tracker when boot id cannot be readbe510f9ebdocs: fix grpc_tunnel value to trueb7b8a8d8fdocs: add logs example for the certificate errors troubleshooting
Changes from siderolabs/discovery-client
2 commits
Changes from siderolabs/extras
4 commits
Changes from siderolabs/gen
2 commits
Changes from siderolabs/go-api-signature
Changes from siderolabs/go-circular
3 commits
Changes from siderolabs/go-loadbalancer
Changes from siderolabs/go-pcidb
Changes from siderolabs/go-tail
Changes from siderolabs/go-talos-support
Changes from siderolabs/pkgs
36 commits
ce49757feat: update flannel-cni plugin to v1.5.1289ed6bfeat: bump deps8d6b19afeat: update Linux to 6.6.36b671d46feat: update containerd/runc to the next rc versionsc7e9591feat: enable CONFIG_X86_AMD_PSTATE84bad89feat: add 'apparmor' package4d9869afeat: update Linux to 6.6.33e5990e8feat: enable CONFIG_KSMa37f382fix: network for Rockchip boards like Rock6495218c7fix: enable PAGE_TABLE_CHECKcbd9cd7feat: enable SCTP supportc309452feat: bump dependencies3a56032chore: rekresdb7f60cfeat: bump Linux to 6.6.32c647a05feat: update ipxe to the latestf350879feat: update containerd to 2.0.0-rc.2, runc to 1.2.0-rc.1f8392fbfeat: update Linux firmware to 20240513f414bbdfix: disable CONFIG_EFI_DISABLE_PCI_DMA option9ebfd1bfeat: enable EDAC driversf9559defix: drbd module installation492638dfeat: update dependenciesbd70572feat: update Go to 1.22.3edb600afeat: update zfs package to v2.2.46775002feat: enable NFT FIB lookups28c5696feat: update Linux to 6.6.299c8a02cfeat: update containerd to 1.7.16ca6249bfeat: compress amd64 Linux kernel using zstd718a7dafeat: enable SELinux207481ffeat(intel): add support for power management and ACPI options for Intel CPUsdfa7dcefeat: update Linux to 6.6.287b30b61fix: use proper EFI zBoot image010913bfeat: update Linux 6.6.26, containerd 1.7.15da397fafeat: enable BFQ IO schedulerc839801feat: enable zboot on arm64 with zstd compression1b28e2cfeat: go 1.22.2, Linux 6.6.2405db2a8fix: revert musl to 1.2.4
Changes from siderolabs/siderolink
4 commits
Changes from siderolabs/tools
7 commits
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.3 -> v0.4.0
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.11.1 -> v1.12.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.5.1 -> v1.7.0
- github.com/aws/aws-sdk-go-v2/config v1.27.10 -> v1.27.23
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.1 -> v1.16.9
- github.com/aws/aws-sdk-go-v2/service/kms v1.30.1 -> v1.35.1
- github.com/aws/smithy-go v1.20.2 -> v1.20.3
- github.com/beevik/ntp v1.3.1 -> v1.4.3
- github.com/containerd/containerd/api v1.8.0-rc.2 new
- github.com/containerd/containerd/v2 v2.0.0-rc.3 new
- github.com/containerd/errdefs v0.1.0 new
- github.com/containerd/platforms v0.2.1 new
- github.com/containernetworking/cni v1.1.2 -> v1.2.2
- github.com/containernetworking/plugins v1.4.1 -> v1.5.1
- github.com/cosi-project/runtime v0.4.1 -> v0.5.0
- github.com/docker/docker v26.0.0 -> v27.0.3
- github.com/fatih/color v1.16.0 -> v1.17.0
- github.com/foxboron/go-uefi 48be911532c2 -> 205d5597883a
- github.com/google/go-containerregistry v0.19.1 -> v0.19.2
- github.com/google/go-tpm ee6cbcd136f8 -> v0.9.1
- github.com/hashicorp/go-getter/v2 v2.2.1 -> v2.2.2
- github.com/hetznercloud/hcloud-go/v2 v2.7.0 -> v2.10.2
- github.com/insomniacslk/dhcp c728f5dd21c8 -> bf3278ac95c1
- github.com/jsimonetti/rtnetlink/v2 v2.0.2 new
- github.com/klauspost/compress v1.17.9 new
- github.com/klauspost/cpuid/v2 v2.2.7 -> v2.2.8
- github.com/miekg/dns v1.1.58 -> v1.1.61
- github.com/pelletier/go-toml/v2 v2.2.2 new
- github.com/prometheus/procfs v0.13.0 -> v0.15.1
- github.com/rivo/tview a22293bda944 -> b0a7293b8130
- github.com/safchain/ethtool v0.3.0 -> v0.4.1
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.25 -> v1.0.0-beta.28
- github.com/siderolabs/discovery-client v0.1.8 -> v0.1.9
- github.com/siderolabs/extras v1.7.0-1-gbb76755 -> v1.8.0-alpha.0-3-gcab51d8
- github.com/siderolabs/gen v0.4.8 -> v0.5.0
- github.com/siderolabs/go-api-signature v0.3.2 -> v0.3.3
- github.com/siderolabs/go-blockdevice/v2 3265299b0192 -> f4a4030394f4
- github.com/siderolabs/go-circular v0.1.0 -> v0.2.0
- github.com/siderolabs/go-loadbalancer v0.3.3 -> v0.3.4
- github.com/siderolabs/go-pcidb v0.2.0 -> v0.3.0
- github.com/siderolabs/go-tail v0.1.0 -> v0.1.1
- github.com/siderolabs/go-talos-support v0.1.0 -> 69891cf04662
- github.com/siderolabs/pkgs v1.7.0-6-g29106c0 -> v1.8.0-alpha.0-34-gce49757
- github.com/siderolabs/siderolink v0.3.5 -> v0.3.9
- github.com/siderolabs/talos/pkg/machinery v1.7.0 ->
e1711cd3c9 - github.com/siderolabs/tools v1.7.0-1-g10b2a69 -> v1.8.0-alpha.0-6-g31ad71b
- github.com/spf13/cobra v1.8.0 -> v1.8.1
- go.etcd.io/etcd/api/v3 v3.5.13 -> v3.5.14
- go.etcd.io/etcd/client/pkg/v3 v3.5.13 -> v3.5.14
- go.etcd.io/etcd/client/v3 v3.5.13 -> v3.5.14
- go.etcd.io/etcd/etcdutl/v3 v3.5.13 -> v3.5.14
- golang.org/x/net v0.23.0 -> v0.26.0
- golang.org/x/oauth2 v0.18.0 -> v0.21.0
- golang.org/x/sync v0.6.0 -> v0.7.0
- golang.org/x/sys v0.18.0 -> v0.21.0
- golang.org/x/term v0.18.0 -> v0.21.0
- golang.org/x/text v0.14.0 -> v0.16.0
- google.golang.org/grpc v1.62.1 -> v1.64.0
- google.golang.org/protobuf v1.33.0 -> v1.34.2
- k8s.io/api v0.30.0 -> v0.30.2
- k8s.io/apiserver v0.30.0 -> v0.30.2
- k8s.io/client-go v0.30.0 -> v0.30.2
- k8s.io/component-base v0.30.0 -> v0.30.2
- k8s.io/cri-api v0.30.0 -> 3a66d9d86654
- k8s.io/klog/v2 v2.120.1 -> v2.130.1
- k8s.io/kube-scheduler v0.30.0 -> v0.30.2
- k8s.io/kubectl v0.30.0 -> v0.30.2
- k8s.io/kubelet v0.30.0 -> v0.30.2
- k8s.io/pod-security-admission v0.30.0 -> v0.30.2
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.69 -> v1.2.70
- sigs.k8s.io/hydrophone 91065c9fe3a5 new
Previous release can be found at v1.7.0
Talos 1.8.0-alpha.0 (2024-05-01)
Welcome to the v1.8.0-alpha.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.29 containerd: 1.7.16
Talos is built with Go 1.22.2.
ZSTD Compression
Talos Linux now compresses kernel and initramfs using ZSTD. Linux arm64 kernel is now compressed (previously it was uncompressed).
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
- Utku Ozdemir
- Dmitry Sharshakov
- Artem Chernyshev
- Bernard Gütermann
- Birger J. Nordølum
- Dennis Marttinen
- Evan Johnson
- Grzegorz Rożniecki
- Igor Rzegocki
- Noel Georgi
- Spencer Smith
- darox
- looklose
Changes
51 commits
07f78182cfix: use a fresh context for etcd unlock84cd7dbecfeat: update Linux to 6.6.2970fdca6a4chore: update minimum hardware requirement for vmware ovab690ffeb8test: improve DNS resolver test stability5aa0299b6style: use correct capitalization for openstack4c0c626b7feat: use zstd compression in place of xz98906ed6efix: use reboot delay only in case of error05fd042bbtest: improve the reset integration tests8cdf0f7cbdocs: fix typo in Cilium instructionsdd1d279dafix: allow more flags intalosctl cluster create --input-diref4394e58chore: update kernel and other packagesccdb4c8b1chore: update google.golang.org/grpc to 1.63.2c5b59df69fix: wait for devices to be discovered before probing filesystems0821b9c50feat: add--non-masquerade-cidrsflag totalosctl cluster create2bf613ad3fix: add endpoints for "virtual"host-dnsservicef4163aefefix: bump priority of OpenStack routes if IPv6 and default gateway6fbd1263cfeat: report process MAC labelsd46032821fix: return proper value from Bridge.STP instead of plain nilbac1d00c3chore: prepare for Talos 1.8d6c8067e1docs: make 1.7 docs the defaultd7c3a0735docs: add what's new for v1.7908f67fa1feat: add host dns support for resolving member addrs0d20b637dfeat: update Kubernetes to 1.30.0ec69d7a78chore: replace math/rand with math/rand/v289040ce43chore: update go-blockdevice/v2 library to the latest version0a785802efix: overlay installer operationsb1b63f658fix: mark overlay installer executable3433fa13bfeat: use container DNS when in container mode5d07ac5a7fix: close apid inter-backend connections gracefully for real7ba18555bdocs: fix typos in Akamai and AWS platform docs3dd1f4e88chore: extractpkg/imager/quirkstopkg/machinery78bc3a433docs: update Cilium docs831f3d39efeat: update Flannel to v0.25.1ea5b3ff0cfeat: update Kubernetes to v1.30.0-rc.254dac5ed4feat: update Linux 6.6.24, containerd 1.7.15c51f146dadocs: update Akamai platform docs9550f5ff7docs: fix getAuthenticationMethod and completePathFromNode docsbfbd02abffix: assign different priority to IPv6 default gateway on OpenStackc8f674bd3test: add a test for 'spin' container runtime5390ccd48chore: replace []byte with string and use go:embed for templatesba7cdc8c8chore: optimize DNSResolveCacheController145f24063fix: don't modify a global map of profiles6fe91ad9cfeat: provide Kubernets/Talos version compatibility for 1.8909a5800efix: generate secureboot ISO .der certificate correctlyb0fdc3c8cfix: make static pods check output consistentc6ad0fccefix: validate that workers don't get cluster CA key3735add87fix: reconnect to the logs stream in dashboard after reboot9aa1e1b79fix: present all accepted CAs to the kube-apiserver336e61174fix: close the apid connection to other machines gracefullyff2c427b0fix: pre-create nftables chain to make kubelet use nftables5622f0e45docs: change localDNS to hostDNS in release notes yaml section
Changes from siderolabs/discovery-client
2 commits
Changes from siderolabs/extras
Changes from siderolabs/pkgs
12 commits
28c5696feat: update Linux to 6.6.299c8a02cfeat: update containerd to 1.7.16ca6249bfeat: compress amd64 Linux kernel using zstd718a7dafeat: enable SELinux207481ffeat(intel): add support for power management and ACPI options for Intel CPUsdfa7dcefeat: update Linux to 6.6.287b30b61fix: use proper EFI zBoot image010913bfeat: update Linux 6.6.26, containerd 1.7.15da397fafeat: enable BFQ IO schedulerc839801feat: enable zboot on arm64 with zstd compression1b28e2cfeat: go 1.22.2, Linux 6.6.2405db2a8fix: revert musl to 1.2.4
Changes from siderolabs/tools
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.3 -> v0.3.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.5.1 -> v1.5.2
- github.com/aws/aws-sdk-go-v2/config v1.27.10 -> v1.27.11
- github.com/aws/aws-sdk-go-v2/service/kms v1.30.1 -> v1.31.0
- github.com/containerd/containerd v1.7.14 -> v1.7.16
- github.com/containernetworking/cni v1.1.2 -> v1.2.0
- github.com/docker/docker v26.0.0 -> v26.0.2
- github.com/google/go-tpm ee6cbcd136f8 -> 1fb84445f623
- github.com/hetznercloud/hcloud-go/v2 v2.7.0 -> v2.7.2
- github.com/insomniacslk/dhcp c728f5dd21c8 -> f1cffa2c0c49
- github.com/klauspost/compress v1.17.7 new
- github.com/miekg/dns v1.1.58 -> v1.1.59
- github.com/prometheus/procfs v0.13.0 -> v0.14.0
- github.com/rivo/tview a22293bda944 -> e119d15762fe
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.25 -> v1.0.0-beta.26
- github.com/siderolabs/discovery-client v0.1.8 -> v0.1.9
- github.com/siderolabs/extras v1.7.0-1-gbb76755 -> v1.8.0-alpha.0
- github.com/siderolabs/pkgs v1.7.0-6-g29106c0 -> v1.8.0-alpha.0-10-g28c5696
- github.com/siderolabs/talos/pkg/machinery v1.7.0 -> v1.7.0-alpha.1
- github.com/siderolabs/tools v1.7.0-1-g10b2a69 -> v1.8.0-alpha.0
- golang.org/x/net v0.23.0 -> v0.24.0
- golang.org/x/oauth2 v0.18.0 -> v0.19.0
- golang.org/x/sync v0.6.0 -> v0.7.0
- golang.org/x/sys v0.18.0 -> v0.19.0
- golang.org/x/term v0.18.0 -> v0.19.0
- google.golang.org/grpc v1.62.1 -> v1.63.2
Previous release can be found at v1.7.0
Talos 1.7.0-alpha.1 (2024-03-14)
Welcome to the v1.7.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Device Selectors
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
DNS Caching
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
localDNS: false
Extension Services Config
Talos now supports supplying configuration files and environment variables for extension services. The extension service configuration is a separate config document. An example is shown below:
---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: nut-client
configFiles:
- content: MONITOR ${upsmonHost} 1 remote pass password
mountPath: /usr/local/etc/nut/upsmon.conf
environment:
- UPS_NAME=ups
For documentation, see Extension Services Config Files.
Note: The use of environmentFile in extension service spec is now deprecated and will be removed in a future release of Talos.
Use ExtensionServiceConfig instead.
Kubernetes Upgrade
The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.
KubeSpan
Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members. This feature turned out to be less helpful than expected and caused unnecessary performance issues.
Previous behavior can be restored with:
machine:
network:
kubespan:
harvestExtraEndpoints: true
NTP
Default NTP server was updated to be time.cloudflare.com instead of pool.ntp.org.
Default server is only used if the user does not specify any NTP servers in the configuration.
OpenNebula
Talos Linux now supports OpenNebula platform.
Known Problems
DRBD extension is disabled in this release due to incompatibility with the latest Linux kernel.
Kubernetes API Server Service Account Key
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
SBC
Talos core will drop support for SBC's and will not include the SBC binaries in the release. Overlays are being developed to support SBC's.
Secure Boot Image
Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:
output:
kind: iso
isoOptions:
sdBootEnrollKeys: force # default is still if-safe
outFormat: raw
Syslog
Talos Linux now starts a basic syslog receiver listening on /dev/log.
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
The logs can be viewed via talosctl logs syslogd.
This is mostly implemented for extension services that log to syslog.
Component Updates
Linux: 6.6.21 etcd: 3.5.11 Kubernetes: 1.30.0-beta.0 containerd: 1.7.14 runc: 1.1.12 Flannel: 0.24.1
Talos is built with Go 1.22.1.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Andrey Smirnov
- Artem Chernyshev
- Radosław Piliszek
- Spencer Smith
- Anthony ARNAUD
- Justin Garrison
- Steve Francis
- Anastasios Papagiannis
- Andrei Kvapil
- Andrian Zubovic
- AvnarJakob
- Cas de Reuver
- Christian Mohn
- Christian WALDBILLIG
- Dmitry Sharshakov
- Dmitry Sharshakov
- Drew Hess
- ExtraClock
- Fabiano Fidêncio
- Henno Schooljan
- Hervé Werner
- JJGadgets
- Jacob McSwain
- Jonomir
- Kai Hanssen
- Louis SCHNEIDER
- Matthieu S
- Michael Stephenson
- Nico Berlee
- Pip Oomen
- Saiyam Pathak
- Sebastiaan Gerritsen
- Sebastian Gaiser
- Serge Logvinov
- Tim Jones
- bri
- ebcrypto
- edwinavalos
- fazledyn-or
- james-dreebot
- pardomue
- shurkys
- stereobutter
Changes
162 commits
403ad93c3feat: update dependencies7376f34e8fix: remove maintenance config when maintenance service is shut down952801d8bfix: handle overlay partition options465b9a4e6fix: update discovery client with the fix for keepalive interval1e9f866acfeat: update Kubernetes to v1.30.0-beta.0d118a852bfeat: implementInstallfor imager overlayscd5a5a447chore: migrate to go-grpc-middleware/v2e3c2a6398feat: set default NTP server to time.cloudflare.com32e087760chore: print all available logs containers inlogscommand completionse89d755c5fix: etcd config validation for worker1aa3c9182docs: add DreeBot to ADOPTERS.md1bb6027ccfix: fix nil panic on maintenance upgrade with partial configaa70bfb9ddocs: add Redpill Linpro to adopters listf02aeec92fix: do not fail cluster create when input dir does not contain talosconfig1ec6683e0chore: use go-copy3c8f51d70chore: move cli formatters and version modules to machinery8152a6dd6feat: update Go to 1.22.18c7953991docs: update replicated-local-storage-with-openebs-jiva.mdf23bd8144fix: syslog parserbbed07e03feat: update Linux to 6.6.188125e754bfeat: imager overlay0b9b4da12feat: update Kubernetes to 1.30.0-alpha.33a764029edocs: fix typo in word governord81d49000chore: update CoreDNS renovate sourceb2ad5dc5ffix: workaround a race in CNI setup (talosctl cluster create)457507803fix: provide auth when pulling images in the imagere707175abdocs: update config patch in cilium docsf8c556a1cchore: listen for dns requests on 127.0.0.538872a7a21fix: ignore 'no such device' in addition to 'no such file'1cb544353chore: uki der certs in iso67ac6933dfix: handle errors to watch apid/trustd certsc79d69c2efix: only set gateway if set in context (opennebula)4575dd8e7chore: allow not preallocated disks for QEMU cluster0bddfea81chore: add oceanbox.io to adopters136427592chore: use propertalos_version_contractfor TF tests6bf50fdc1chore: disable x/net/trace in gRPC to enable dead code elimination815a8e9ccfeat: add partial config support totalosctl cluster create64e9703f8chore: add tests for the Kata Containers extension9b6291925feat: update pkgs66f3ffdd4fix: ensure that Talos runs in a pod (container)9dbc33972feat: add basic syslog implementation0b7a27e6afeat: allow access to all resources over siderolink in maintenance mode53721883dfeat: support AWS KMS for the SecureBoot signing7ee999f8afix: disable KubeSpan endpoint harvesting by default7b87c7fe9chore: bump Go dependencies8e9596d3cdocs: rpi talosctl install update493bb60f8fix: correctly handle partial configs inDNSUpstreamController6deb10ae2chore: deprecateenvironmentFilefor extensionsf8b4ee82achore: update extensions test1366ce14afeat: update Kubernetes to v1.30.0-alpha.2559308ef7fix: use MachineStatus resource to check for boot done15e8bca2bfeat: support environment inExtensionServicesConfig3fe82ec46feat: custom image settings for k8s upgradefa3b93370chore: replace fmt.Errorf with errors.New where possibled4521ee9cfeat: update kernel with sfc driver and LSM updates2f0421b40fix: run xfs_repair on invalid argument errorf868fb8e8docs: update vmware tools urlfa2d34dd8chore: enable v6 support on the same port83e0b0c19chore: adjust dns sockets settingsa1ec1705bchore: update Go to 1.22.076b50fcd4chore: add Ænix to the Adopters list5324d3916chore: bump stuff087b50f42feat: support systemd-boot ISO enroll keys optionafa71d6b0chore: use "handle-like" resource inDNSResolveCacheController013e13070fix: error with decoding config document with wrong apiVersion1e77bb1c3chore: allow custom pkgs to build talos3f8a85f1bfix: unlock the upgrade mutex properly61c3331b1docs: update indentation in vip.md383e528dfchore: allow uuid-based hostnames in talosctl cluster create1e6c8c4defeat: extensions services config989ca3adefeat: add OpenNebula platform support914f88778docs: update nocloud.md Proxmox informationa04cc8015fix: pass TTL when generating client certificate3fe8c12cafix: add log line about controller runtime failingddbabc7e5fix: use a separate cgroup for each extension service6ccdd2c09chore: fix markdown-lint call4184e617achore: add test for wasmedge runtime extension95ea3a6c6chore: bump timeout in acquire testsc19a505d8chore: bump docker dind imaged7d4154d5chore: remove channel blocking in qemu launch029d7f7b9release(v1.7.0-alpha.0): prepare release2ff81c06bfeat: update runc 1.1.12, containerd 1.7.139d8cd4d05chore: drop deprecated method EtcdRemoveMember17567f19bfix: take into account the moment seen when cleaning up CRI imagesaa03204b8docs: document the process of building custom kernel packages7af48bd55feat: use RSA key for kube-apiserver service account keya5e13c696fix: retry blockdevice open in the installer593afeea3fix: run the interactive installer loop to report errors87be76b87fix: be more tolerant to error handling in Mounts API03add7503docs: add section on using imager with extensions from tarballee0fb5effdocs: consolidate certificate management articles9c14dea20chore: bump corednsebeef2852feat: implement local caching dns server4a3691a27docs: fix broken links in metal-network-configuration.mdc4ed189a6docs: provide sane defaults for each release series in vmware script8138d54c6docs: clarify node taints/labels for worker nodesb44551ccdfeat: update Linux to 6.6.13385707c5fdocs: update vmware.shd1a79b845docs: fix small typo in etcd maintenance guidecf0603330docs: copy generated JSON schema to hostf11139c22docs: document local path provisioner installe0dfbb8fbfix: allow META encoded values to be compressedd677901b6feat: implement device selector for 'physical'7d1117289docs: add missing talosconfig flag8a1732bcbfix: pull inmptspidriverc1e45071frefactor: use etcd configuration from the EtcdSpec resource4e9b688d3fix: use correct TTL for talosconfig intalosctl config newfb5ad0555feat: update Kubernetes default to 1.29.1fe24139f3docs: fork docs for v1.71c2d10cccchore: bump dependenciesa599e3867chore: allow custom registry to build installer/imager3911ddf7bdocs: add how-to for cert managementb0ee0bfbafix: strategic patch merging for audit policy474eccdc4fix: watch bufer overrun for RouteStatuscc06b5d7afix: fix .der output intalosctl gen secureboot1dbb4abf4fix: update discovery service client to v0.1.69782319c3fix: support KubePrism settings in Kubernetes Discovery6c5a0c281feat: generate a single JSON schema for multidoc configf70b47dddfix: force KubePrism to connect using IPv4d5321e085fix: update kmsg with utf-8 fix7fa7362ddfix: fix nodes on dashboard footer when node names are used in--nodesba88678f1fix: merge ports and ingress configs correctly in NetworkRuleConfigdea9bda2dfix: disk UUID & WWID always empty intalosctl disks8dc112f36chore: pull in NBD modulesf6926faabfix: default priority for ipv6e8758dcbachore: support http downloads for assets in talosctl cluster create265f21be0fix: replace the filemap implementation to not buffer in memory8db3c5b3cfix: pick correctly base installer image layers0a30ef784fix: imager should support different Talos versionsd6342cda5docs: update latest version to v1.6.1e6e422b92chore: bump dependencies5a19d078afix: properly overwrite files on install9eb6cea78docs: secureboot sd-boot menu clarification01f0cbe61feat: support iPXE direct booting intalosctl cluster create3ba84701dfeat: pull in kernel modules for mlx Infiniband and VFIOba993e0eddocs: announce that SecureBoot is available241bc9312fix: update the way secureboot signer fetches certificate (azure)59b62398fchore: modernize machined/pkg/controllers/k8s760f793d5fix: use correct prefix when installing SBC files0b94550c4chore: fix the gvisor test3a787c1d6docs: update 1.6 docs with Noel's feedbackd803e40efdocs: provide documentation for Talos 1.69a185a30ffeat: update Kubernetes to v1.29.05934815d2chore: split more kernel modules on amd6410c59a6b9fix: leave discovery service later in the reset sequence0c86ca1ccchore: enable kubespan+firewall for cilium tests98fd722d5feat: provide compatibility for future Talos 1.7131a1b167fix: add a KubeSpan option to disable extra endpoint harvesting4547ad9affeat: sendactor idto the SideroLink events sink04e774547docs: cap max heading level6bb1e99aachore: optimize pcap dump4f9d3b975feat: update Kubernetes to v1.29.0-rc.246121c9fedocs: rework machine config documentation generatione128d3c82fix: talosctl cluster create not to enforce kubeprism always320064c5afeat: update Go 1.21.5, Linux 6.1.65, etcd 3.5.11270604beafix: support user disks via symlinks4f195dd27chore: fix the release.toml474fa0480fix: store and execute desired action on emergency action515ae2a18docs: extend hetzner-cloud docs for arm64eecc4dbd5fix: trim leading spaces\newlines in inline manifest contentsdbf274ddffix: skip writing the file if the contents haven't changed6329222bdfix: do not panic inmerge.Mergeif map value is nil
Changes since v1.7.0-alpha.0
80 commits
403ad93c3feat: update dependencies7376f34e8fix: remove maintenance config when maintenance service is shut down952801d8bfix: handle overlay partition options465b9a4e6fix: update discovery client with the fix for keepalive interval1e9f866acfeat: update Kubernetes to v1.30.0-beta.0d118a852bfeat: implementInstallfor imager overlayscd5a5a447chore: migrate to go-grpc-middleware/v2e3c2a6398feat: set default NTP server to time.cloudflare.com32e087760chore: print all available logs containers inlogscommand completionse89d755c5fix: etcd config validation for worker1aa3c9182docs: add DreeBot to ADOPTERS.md1bb6027ccfix: fix nil panic on maintenance upgrade with partial configaa70bfb9ddocs: add Redpill Linpro to adopters listf02aeec92fix: do not fail cluster create when input dir does not contain talosconfig1ec6683e0chore: use go-copy3c8f51d70chore: move cli formatters and version modules to machinery8152a6dd6feat: update Go to 1.22.18c7953991docs: update replicated-local-storage-with-openebs-jiva.mdf23bd8144fix: syslog parserbbed07e03feat: update Linux to 6.6.188125e754bfeat: imager overlay0b9b4da12feat: update Kubernetes to 1.30.0-alpha.33a764029edocs: fix typo in word governord81d49000chore: update CoreDNS renovate sourceb2ad5dc5ffix: workaround a race in CNI setup (talosctl cluster create)457507803fix: provide auth when pulling images in the imagere707175abdocs: update config patch in cilium docsf8c556a1cchore: listen for dns requests on 127.0.0.538872a7a21fix: ignore 'no such device' in addition to 'no such file'1cb544353chore: uki der certs in iso67ac6933dfix: handle errors to watch apid/trustd certsc79d69c2efix: only set gateway if set in context (opennebula)4575dd8e7chore: allow not preallocated disks for QEMU cluster0bddfea81chore: add oceanbox.io to adopters136427592chore: use propertalos_version_contractfor TF tests6bf50fdc1chore: disable x/net/trace in gRPC to enable dead code elimination815a8e9ccfeat: add partial config support totalosctl cluster create64e9703f8chore: add tests for the Kata Containers extension9b6291925feat: update pkgs66f3ffdd4fix: ensure that Talos runs in a pod (container)9dbc33972feat: add basic syslog implementation0b7a27e6afeat: allow access to all resources over siderolink in maintenance mode53721883dfeat: support AWS KMS for the SecureBoot signing7ee999f8afix: disable KubeSpan endpoint harvesting by default7b87c7fe9chore: bump Go dependencies8e9596d3cdocs: rpi talosctl install update493bb60f8fix: correctly handle partial configs inDNSUpstreamController6deb10ae2chore: deprecateenvironmentFilefor extensionsf8b4ee82achore: update extensions test1366ce14afeat: update Kubernetes to v1.30.0-alpha.2559308ef7fix: use MachineStatus resource to check for boot done15e8bca2bfeat: support environment inExtensionServicesConfig3fe82ec46feat: custom image settings for k8s upgradefa3b93370chore: replace fmt.Errorf with errors.New where possibled4521ee9cfeat: update kernel with sfc driver and LSM updates2f0421b40fix: run xfs_repair on invalid argument errorf868fb8e8docs: update vmware tools urlfa2d34dd8chore: enable v6 support on the same port83e0b0c19chore: adjust dns sockets settingsa1ec1705bchore: update Go to 1.22.076b50fcd4chore: add Ænix to the Adopters list5324d3916chore: bump stuff087b50f42feat: support systemd-boot ISO enroll keys optionafa71d6b0chore: use "handle-like" resource inDNSResolveCacheController013e13070fix: error with decoding config document with wrong apiVersion1e77bb1c3chore: allow custom pkgs to build talos3f8a85f1bfix: unlock the upgrade mutex properly61c3331b1docs: update indentation in vip.md383e528dfchore: allow uuid-based hostnames in talosctl cluster create1e6c8c4defeat: extensions services config989ca3adefeat: add OpenNebula platform support914f88778docs: update nocloud.md Proxmox informationa04cc8015fix: pass TTL when generating client certificate3fe8c12cafix: add log line about controller runtime failingddbabc7e5fix: use a separate cgroup for each extension service6ccdd2c09chore: fix markdown-lint call4184e617achore: add test for wasmedge runtime extension95ea3a6c6chore: bump timeout in acquire testsc19a505d8chore: bump docker dind imaged7d4154d5chore: remove channel blocking in qemu launch
Changes from siderolabs/crypto
Changes from siderolabs/discovery-api
Changes from siderolabs/discovery-client
3 commits
Changes from siderolabs/extras
4 commits
Changes from siderolabs/gen
Changes from siderolabs/go-api-signature
21 commits
cf2bd06chore: bump dependencies370cebffix: always print the login URL on key renew flowd28609afeat: move in the cli grpc interceptor logic, support service account in env4602accchore: add a dummy workflowcfd21b6fix: support validating signatures generated with the time in the future74dd3dcchore: bump depsd78bedbchore: bump depsa034e9ffeat: replace scopes with roles5b4f3bbchore: run rekres9dba116chore: remove time.Sleep hacke84e686chore: bump dependencies8baaf8achore: bump deps5f27e1echore: add renovate bot and bump deps69886dcfeat: allow custom validations on PGP key63d4da3fix: limit clock skew for short-lived keyscdb9722feat: add support for +-5 min clock skew7b80a50refactor: use options pattern in RegisterPGPPublicKeyc647861feat: add scopes to RegisterPublicKeyRequest5d3647efeat: provide more client PGP functions2b682ecfeat: initial versiona4c2943chore: initial commit
Changes from siderolabs/go-copy
Changes from siderolabs/go-debug
Changes from siderolabs/go-kmsg
2 commits
Changes from siderolabs/go-kubernetes
Changes from siderolabs/go-loadbalancer
Changes from siderolabs/pkgs
37 commits
8804a60chore: update dependenciesa587b42feat: enable most common amd64 watchdog drivers3aacf03feat: update releasese5c0c79feat: build NVMe target modulecb39126chore: re-enable zfs pkgd9c1540feat: update releases1904994feat: enable VRF module87eb013feat: disable PCI busmastering on bridges during boot30f18c8chore: remove symlinks and broken binaries7811e5echore: setPREEMPT_NONEas recommended for servers65006edfix: enable KFD support in kernel510a3f9feat: add support for Solarflare SFC9100 and SFC9200 family4340508feat: enable CONFIG_SECURITY_PATH and CONFIG_BPF_LSM0ec4cc3feat: update Go to 1.2236c08aefeat: enable PSI (pressure stall information)0853224feat: update Linux to 6.6.1696cc841chore: bump deps064fd58feat: update Linux to 6.6.14, enable XDPefbbd23feat: update Linux to 6.6.13dfb5026chore: switch to git ref for raspberrypi firmware4af2d0ffeat: update Linux to 6.1.742358efefix: enable FUSION_SPI driverf376a53chore: bump dependencies583e519feat: add v4l usb video class (webcam) drivers2d3ca68feat: enable NBDf647eddfeat: update Linux to 6.1.696af1691feat: enable VFIO also on amd64d633cd6feat: enable modules for mlx infiniband4c59641fix: zfs module builde325097feat: enable nct6683 sensors as moduled6185ecfeat: enable IRQ remapping on amd64814dc60feat: update containerd to 1.7.11dd71790chore: rekres to fix 'failed' build on maina36dec4feat: split more device drivers into modules97270a2feat: update Linux to 6.1.678a73907feat: update Go to 1.21.58f0ffb9feat: update zfs to v2.2.2
Changes from siderolabs/tools
12 commits
cb5fd56chore: update xz to 5.6.114bf457fix: use musl 1.2.4 in tools, revert kmod back to 326c1f73dfix: revert kmod to version 3159fd552feat: update releaseseff5d16feat: update Go to 1.22.1b6b4d9efeat: update Go to 1.22f4b41d1fix: rust toolchain8cc79e6feat: update dependenciesc7076ebchore: bump dependenciesa80a2aafeat: update Go to 1.21.6b677a2bfeat: add rust build stage1659d82feat: update Go to 1.21.5
Dependency Changes
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 -> v1.10.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 -> v1.5.1
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.0.0 -> v1.1.0
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.0.1 -> v1.1.0
- github.com/alexflint/go-filemutex v1.3.0 new
- github.com/aws/aws-sdk-go-v2/config v1.25.6 -> v1.27.7
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.5 -> v1.15.3
- github.com/aws/aws-sdk-go-v2/service/kms v1.29.2 new
- github.com/aws/smithy-go v1.17.0 -> v1.20.1
- github.com/beevik/ntp v1.3.0 -> v1.3.1
- github.com/containerd/cgroups/v3 v3.0.2 -> v3.0.3
- github.com/containerd/containerd v1.7.9 -> v1.7.14
- github.com/containernetworking/plugins v1.3.0 -> v1.4.1
- github.com/coredns/coredns v1.11.1 new
- github.com/cosi-project/runtime v0.3.19 -> v0.4.0-alpha.9
- github.com/docker/docker v24.0.7 -> v25.0.4
- github.com/docker/go-connections v0.4.0 -> v0.5.0
- github.com/foxboron/go-uefi 18b9ba9cd4c3 -> 48be911532c2
- github.com/gdamore/tcell/v2 v2.6.0 -> v2.7.4
- github.com/google/go-containerregistry v0.16.1 -> v0.19.0
- github.com/google/go-tpm v0.9.0 -> ee6cbcd136f8
- github.com/google/nftables v0.1.0 -> v0.2.0
- github.com/google/uuid v1.4.0 -> v1.6.0
- github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.1.0 new
- github.com/hetznercloud/hcloud-go/v2 v2.4.0 -> v2.6.0
- github.com/insomniacslk/dhcp b0416c0f187a -> c728f5dd21c8
- github.com/jeromer/syslogparser v1.1.0 new
- github.com/jsimonetti/rtnetlink v1.4.0 -> v1.4.1
- github.com/miekg/dns v1.1.58 new
- github.com/opencontainers/image-spec v1.1.0-rc4 -> v1.1.0
- github.com/opencontainers/runtime-spec v1.1.0-rc.1 -> v1.2.0
- github.com/packethost/packngo v0.30.0 -> v0.31.0
- github.com/pmorjan/kmod v1.1.0 -> v1.1.1
- github.com/prometheus/procfs v0.12.0 -> v0.13.0
- github.com/rivo/tview 33a1d271f2b6 -> e804876934a1
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21 -> v1.0.0-beta.25
- github.com/siderolabs/crypto v0.4.1 -> v0.4.2
- github.com/siderolabs/discovery-api v0.1.3 -> v0.1.4
- github.com/siderolabs/discovery-client v0.1.5 -> v0.1.8
- github.com/siderolabs/extras v1.6.0-1-g113887a -> v1.7.0-alpha.0-3-g47bb718
- github.com/siderolabs/gen v0.4.7 -> v0.4.8
- github.com/siderolabs/go-api-signature v0.3.2 new
- github.com/siderolabs/go-copy v0.1.0 new
- github.com/siderolabs/go-debug v0.2.3 -> v0.3.0
- github.com/siderolabs/go-kmsg v0.1.3 -> v0.1.4
- github.com/siderolabs/go-kubernetes v0.2.8 -> v0.2.9
- github.com/siderolabs/go-loadbalancer v0.3.2 -> v0.3.3
- github.com/siderolabs/pkgs v1.6.0-5-g3ae2450 -> v1.7.0-alpha.0-35-g8804a60
- github.com/siderolabs/talos/pkg/machinery v1.6.0 -> v1.7.0-alpha.0
- github.com/siderolabs/tools v1.6.0-1-g336d248 -> v1.7.0-alpha.0-11-gcb5fd56
- github.com/stretchr/testify v1.8.4 -> v1.9.0
- github.com/u-root/u-root v0.11.0 -> v0.14.0
- go.etcd.io/etcd/api/v3 v3.5.11 -> v3.5.12
- go.etcd.io/etcd/client/pkg/v3 v3.5.11 -> v3.5.12
- go.etcd.io/etcd/client/v3 v3.5.11 -> v3.5.12
- go.etcd.io/etcd/etcdutl/v3 v3.5.11 -> v3.5.12
- go.uber.org/zap v1.26.0 -> v1.27.0
- go4.org/netipx 6213f710f925 -> fdeea329fbba
- golang.org/x/net v0.19.0 -> v0.22.0
- golang.org/x/oauth2 v0.15.0 -> v0.18.0
- golang.org/x/sync v0.5.0 -> v0.6.0
- golang.org/x/sys v0.15.0 -> v0.18.0
- golang.org/x/term v0.15.0 -> v0.18.0
- google.golang.org/grpc v1.59.0 -> v1.62.1
- google.golang.org/protobuf v1.31.0 -> v1.33.0
- k8s.io/api v0.29.0 -> v0.30.0-beta.0
- k8s.io/apimachinery v0.29.0 -> v0.30.0-beta.0
- k8s.io/apiserver v0.29.0 -> v0.30.0-beta.0
- k8s.io/client-go v0.29.0 -> v0.30.0-beta.0
- k8s.io/component-base v0.29.0 -> v0.30.0-beta.0
- k8s.io/cri-api v0.29.0 -> v0.30.0-beta.0
- k8s.io/klog/v2 v2.110.1 -> v2.120.1
- k8s.io/kube-scheduler v0.29.0 -> v0.30.0-beta.0
- k8s.io/kubectl v0.29.0 -> v0.30.0-beta.0
- k8s.io/kubelet v0.29.0 -> v0.30.0-beta.0
- k8s.io/pod-security-admission v0.30.0-beta.0 new
Previous release can be found at v1.6.0
Talos 1.7.0-alpha.0 (2024-02-01)
Welcome to the v1.7.0-alpha.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Device Selectors
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
DNS Caching
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
localDNS: false
Known Problems
ZFS and DRBD extensions are disabled in this release due to incompatibility with the latest Linux kernel.
Kubernetes API Server Service Account Key
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
Component Updates
Linux: 6.6.14 etcd: 3.5.11 Kubernetes: 1.29.1 containerd: 1.7.13 runc: 1.1.12 Flannel: 0.24.1
Talos is built with Go 1.21.6.
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
- Utku Ozdemir
- Noel Georgi
- Andrey Smirnov
- Radosław Piliszek
- Artem Chernyshev
- Spencer Smith
- Steve Francis
- Anthony ARNAUD
- Cas de Reuver
- Christian Mohn
- Drew Hess
- ExtraClock
- Hervé Werner
- JJGadgets
- Jacob McSwain
- Jonomir
- Sebastian Gaiser
- Serge Logvinov
- Tim Jones
- edwinavalos
- stereobutter
Changes
81 commits
2ff81c06bfeat: update runc 1.1.12, containerd 1.7.139d8cd4d05chore: drop deprecated method EtcdRemoveMember17567f19bfix: take into account the moment seen when cleaning up CRI imagesaa03204b8docs: document the process of building custom kernel packages7af48bd55feat: use RSA key for kube-apiserver service account keya5e13c696fix: retry blockdevice open in the installer593afeea3fix: run the interactive installer loop to report errors87be76b87fix: be more tolerant to error handling in Mounts API03add7503docs: add section on using imager with extensions from tarballee0fb5effdocs: consolidate certificate management articles9c14dea20chore: bump corednsebeef2852feat: implement local caching dns server4a3691a27docs: fix broken links in metal-network-configuration.mdc4ed189a6docs: provide sane defaults for each release series in vmware script8138d54c6docs: clarify node taints/labels for worker nodesb44551ccdfeat: update Linux to 6.6.13385707c5fdocs: update vmware.shd1a79b845docs: fix small typo in etcd maintenance guidecf0603330docs: copy generated JSON schema to hostf11139c22docs: document local path provisioner installe0dfbb8fbfix: allow META encoded values to be compressedd677901b6feat: implement device selector for 'physical'7d1117289docs: add missing talosconfig flag8a1732bcbfix: pull inmptspidriverc1e45071frefactor: use etcd configuration from the EtcdSpec resource4e9b688d3fix: use correct TTL for talosconfig intalosctl config newfb5ad0555feat: update Kubernetes default to 1.29.1fe24139f3docs: fork docs for v1.71c2d10cccchore: bump dependenciesa599e3867chore: allow custom registry to build installer/imager3911ddf7bdocs: add how-to for cert managementb0ee0bfbafix: strategic patch merging for audit policy474eccdc4fix: watch bufer overrun for RouteStatuscc06b5d7afix: fix .der output intalosctl gen secureboot1dbb4abf4fix: update discovery service client to v0.1.69782319c3fix: support KubePrism settings in Kubernetes Discovery6c5a0c281feat: generate a single JSON schema for multidoc configf70b47dddfix: force KubePrism to connect using IPv4d5321e085fix: update kmsg with utf-8 fix7fa7362ddfix: fix nodes on dashboard footer when node names are used in--nodesba88678f1fix: merge ports and ingress configs correctly in NetworkRuleConfigdea9bda2dfix: disk UUID & WWID always empty intalosctl disks8dc112f36chore: pull in NBD modulesf6926faabfix: default priority for ipv6e8758dcbachore: support http downloads for assets in talosctl cluster create265f21be0fix: replace the filemap implementation to not buffer in memory8db3c5b3cfix: pick correctly base installer image layers0a30ef784fix: imager should support different Talos versionsd6342cda5docs: update latest version to v1.6.1e6e422b92chore: bump dependencies5a19d078afix: properly overwrite files on install9eb6cea78docs: secureboot sd-boot menu clarification01f0cbe61feat: support iPXE direct booting intalosctl cluster create3ba84701dfeat: pull in kernel modules for mlx Infiniband and VFIOba993e0eddocs: announce that SecureBoot is available241bc9312fix: update the way secureboot signer fetches certificate (azure)59b62398fchore: modernize machined/pkg/controllers/k8s760f793d5fix: use correct prefix when installing SBC files0b94550c4chore: fix the gvisor test3a787c1d6docs: update 1.6 docs with Noel's feedbackd803e40efdocs: provide documentation for Talos 1.69a185a30ffeat: update Kubernetes to v1.29.05934815d2chore: split more kernel modules on amd6410c59a6b9fix: leave discovery service later in the reset sequence0c86ca1ccchore: enable kubespan+firewall for cilium tests98fd722d5feat: provide compatibility for future Talos 1.7131a1b167fix: add a KubeSpan option to disable extra endpoint harvesting4547ad9affeat: sendactor idto the SideroLink events sink04e774547docs: cap max heading level6bb1e99aachore: optimize pcap dump4f9d3b975feat: update Kubernetes to v1.29.0-rc.246121c9fedocs: rework machine config documentation generatione128d3c82fix: talosctl cluster create not to enforce kubeprism always320064c5afeat: update Go 1.21.5, Linux 6.1.65, etcd 3.5.11270604beafix: support user disks via symlinks4f195dd27chore: fix the release.toml474fa0480fix: store and execute desired action on emergency action515ae2a18docs: extend hetzner-cloud docs for arm64eecc4dbd5fix: trim leading spaces\newlines in inline manifest contentsdbf274ddffix: skip writing the file if the contents haven't changed6329222bdfix: do not panic inmerge.Mergeif map value is nil
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
Changes from siderolabs/go-api-signature
20 commits
370cebffix: always print the login URL on key renew flowd28609afeat: move in the cli grpc interceptor logic, support service account in env4602accchore: add a dummy workflowcfd21b6fix: support validating signatures generated with the time in the future74dd3dcchore: bump depsd78bedbchore: bump depsa034e9ffeat: replace scopes with roles5b4f3bbchore: run rekres9dba116chore: remove time.Sleep hacke84e686chore: bump dependencies8baaf8achore: bump deps5f27e1echore: add renovate bot and bump deps69886dcfeat: allow custom validations on PGP key63d4da3fix: limit clock skew for short-lived keyscdb9722feat: add support for +-5 min clock skew7b80a50refactor: use options pattern in RegisterPGPPublicKeyc647861feat: add scopes to RegisterPublicKeyRequest5d3647efeat: provide more client PGP functions2b682ecfeat: initial versiona4c2943chore: initial commit
Changes from siderolabs/go-kmsg
2 commits
Changes from siderolabs/pkgs
21 commits
96cc841chore: bump deps064fd58feat: update Linux to 6.6.14, enable XDPefbbd23feat: update Linux to 6.6.13dfb5026chore: switch to git ref for raspberrypi firmware4af2d0ffeat: update Linux to 6.1.742358efefix: enable FUSION_SPI driverf376a53chore: bump dependencies583e519feat: add v4l usb video class (webcam) drivers2d3ca68feat: enable NBDf647eddfeat: update Linux to 6.1.696af1691feat: enable VFIO also on amd64d633cd6feat: enable modules for mlx infiniband4c59641fix: zfs module builde325097feat: enable nct6683 sensors as moduled6185ecfeat: enable IRQ remapping on amd64814dc60feat: update containerd to 1.7.11dd71790chore: rekres to fix 'failed' build on maina36dec4feat: split more device drivers into modules97270a2feat: update Linux to 6.1.678a73907feat: update Go to 1.21.58f0ffb9feat: update zfs to v2.2.2
Changes from siderolabs/tools
6 commits
Dependency Changes
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 -> v1.9.1
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 -> v1.5.1
- github.com/aws/aws-sdk-go-v2/config v1.25.6 -> v1.26.6
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.5 -> v1.14.11
- github.com/aws/smithy-go v1.17.0 -> v1.19.0
- github.com/beevik/ntp v1.3.0 -> v1.3.1
- github.com/containerd/cgroups/v3 v3.0.2 -> v3.0.3
- github.com/containerd/containerd v1.7.9 -> v1.7.13
- github.com/containernetworking/plugins v1.3.0 -> v1.4.0
- github.com/coredns/coredns v1.11.1 new
- github.com/cosi-project/runtime v0.3.19 -> v0.3.20
- github.com/docker/docker v24.0.7 -> v25.0.2
- github.com/docker/go-connections v0.4.0 -> v0.5.0
- github.com/emicklei/dot v1.6.0 -> v1.6.1
- github.com/foxboron/go-uefi 18b9ba9cd4c3 -> 48be911532c2
- github.com/gdamore/tcell/v2 v2.6.0 -> v2.7.0
- github.com/google/go-containerregistry v0.16.1 -> v0.19.0
- github.com/google/go-tpm v0.9.0 -> ee6cbcd136f8
- github.com/google/uuid v1.4.0 -> v1.6.0
- github.com/hetznercloud/hcloud-go/v2 v2.4.0 -> v2.6.0
- github.com/insomniacslk/dhcp b0416c0f187a -> 15c9b8791914
- github.com/jsimonetti/rtnetlink v1.4.0 -> v1.4.1
- github.com/miekg/dns v1.1.58 new
- github.com/opencontainers/image-spec v1.1.0-rc4 -> v1.1.0-rc6
- github.com/opencontainers/runtime-spec v1.1.0-rc.1 -> v1.1.0
- github.com/packethost/packngo v0.30.0 -> v0.31.0
- github.com/pin/tftp 2f79be2dba4e new
- github.com/pmorjan/kmod v1.1.0 -> v1.1.1
- github.com/rivo/tview 33a1d271f2b6 -> 8526c9fe1b54
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21 -> v1.0.0-beta.22
- github.com/siderolabs/discovery-client v0.1.5 -> v0.1.6
- github.com/siderolabs/extras v1.6.0-1-g113887a -> v1.7.0-alpha.0
- github.com/siderolabs/go-api-signature v0.3.1 new
- github.com/siderolabs/go-kmsg v0.1.3 -> v0.1.4
- github.com/siderolabs/pkgs v1.6.0-5-g3ae2450 -> v1.7.0-alpha.0-19-g96cc841
- github.com/siderolabs/talos/pkg/machinery v1.6.0 -> v1.6.0-alpha.2
- github.com/siderolabs/tools v1.6.0-1-g336d248 -> v1.7.0-alpha.0-5-gf4b41d1
- github.com/u-root/u-root v0.11.0 -> v0.12.0
- go.etcd.io/etcd/api/v3 v3.5.11 -> v3.5.12
- go.etcd.io/etcd/client/pkg/v3 v3.5.11 -> v3.5.12
- go.etcd.io/etcd/client/v3 v3.5.11 -> v3.5.12
- go.etcd.io/etcd/etcdutl/v3 v3.5.11 -> v3.5.12
- go4.org/netipx 6213f710f925 -> fdeea329fbba
- golang.org/x/net v0.19.0 -> v0.20.0
- golang.org/x/oauth2 v0.15.0 -> v0.16.0
- golang.org/x/sync v0.5.0 -> v0.6.0
- golang.org/x/sys v0.15.0 -> v0.16.0
- golang.org/x/term v0.15.0 -> v0.16.0
- google.golang.org/grpc v1.59.0 -> v1.61.0
- google.golang.org/protobuf v1.31.0 -> v1.32.0
- k8s.io/api v0.29.0 -> v0.29.1
- k8s.io/apimachinery v0.29.0 -> v0.29.1
- k8s.io/apiserver v0.29.0 -> v0.29.1
- k8s.io/client-go v0.29.0 -> v0.29.1
- k8s.io/component-base v0.29.0 -> v0.29.1
- k8s.io/cri-api v0.29.0 -> v0.29.1
- k8s.io/klog/v2 v2.110.1 -> v2.120.1
- k8s.io/kube-scheduler v0.29.0 -> v0.29.1
- k8s.io/kubectl v0.29.0 -> v0.29.1
- k8s.io/kubelet v0.29.0 -> v0.29.1
Previous release can be found at v1.6.0
Talos 1.6.0-alpha.2 (2023-11-21)
Welcome to the v1.6.0-alpha.2 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Kubelet Credential Provider Configuration
Talos now supports specifying the kubelet credential provider configuration in the Talos configuration file.
It can be set under machine.kubelet.credentialProviderConfig and kubelet will be automatically configured to with the correct flags.
The credential binaries are expected to be present under /usr/local/lib/kubelet/credentialproviders.
Talos System Extensions can be used to install the credential binaries.
Network Device Selectors
Previously, network device selectors only matched the first link, now the configuration is applied to all matching links.
Linux Firmware
Starting with Talos 1.6, there is no Linux firmware included in the initramfs. Customers who need Linux firmware can pull them as extension during install time using the image factory service. If the initial boot requires firmware, a custom iso can be built with the firmware included using the image factory service. This also ensures that the linux-firmware is not tied to a specific Talos version.
Kube-Scheduler Configuration
Talos now supports specifying the kube-scheduler configuration in the Talos configuration file.
It can be set under cluster.scheduler.config and kube-scheduler will be automatically configured to with the correct flags.
KubePrism
KubePrism is enabled by default on port 7445.
Sysctl
Talos now handles sysctl/sysfs key names in line with sysctl.conf(5):
- if the first separator is '/', no conversion is done
- if the first separator is '.', dots and slashes are remapped
Example (both sysctls are equivalent):
machine:
sysctls:
net/ipv6/conf/eth0.100/disable_ipv6: "1"
net.ipv6.conf.eth0/100.disable_ipv6: "1"
talosctl CLI
The command images deprecated in Talos 1.5 was removed, please use talosctl images default instead.
Component Updates
Linux: 6.1.63 containerd: 1.7.9 CoreDNS: 1.11.1 Kubernetes: 1.29.0-alpha.3 Flannel: 0.22.3 etcd: 3.5.10 runc: 1.1.10
Talos is built with Go 1.21.4.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Andrey Smirnov
- Oscar Utbult
- Serge Logvinov
- Utku Ozdemir
- Artem Chernyshev
- Nico Berlee
- Radosław Piliszek
- Steve Francis
- Thomas Way
- ndbrew
- Andrei Kvapil
- Christian Rolland
- Drew Hess
- Enno Boland
- Florian Berchtold
- Henry Sachs
- Jacob McSwain
- Jacob McSwain
- Jared Davenport
- Mans Matulewicz
- Nebula
- Sascha Desch
- Spencer Smith
- Thomas Lemarchand
- Tim Jones
- Zachary Milonas
- budimanjojo
- guoguangwu
- mikucat0309
Changes
177 commits
514e514bafeat: update Linux 6.1.63, containerd 1.7.9aca8b5e17fix: ignore kernel command line in container mode020a0eb63docs: fix table formatting for bootstraprequest0eb245e04docs: fix talosctl pcap example indentationde6caf534docs: fix table formatting for machineservice api27d208c26feat: implement OAuth2 device flow for machine config5c8fa2a80chore: start containerd early in boot95a252cfcdocs: fix link in what is new page0d3c3ed71feat: support kube scheduler config06941b7e5fix: allow rootfs propagation configuration for extension services57dc796f3docs: update lastRelease to v1.5.5 in _index.md21d944a64docs: add timezone information4f1ad16c7feat: support kubelet credentialprovider config71a3bf0e3fix: allow extra kernel args for secureboot installerf38eaaab8feat: rework secureboot and PCR signing key6eade3d5echore: add ability to rewrite uuids and set unique tokens for Talose9c7ac17afix: set max msg recv size when proxyinge22ab440dfeat: update Linux 6.1.61, containerd 1.7.8, runc 1.1.108245361f9feat: show first 32 bytes of response body on download error75d3987c0chore: drop sha1 from genereated pcr json6f32d2990feat: add.deroutputtalosctl gen secureboot pcr87c40da6cfix: proper logging in machined on startupa54da5f64fix: image build for nanopi_4s6f3cd0593refactor: update packet capture to use 'afpacket' interface813442dd7fix: don't validate machine.install if installeddff60069cfeat: update Kubernetes to 1.29.0-alpha.3c97db5dfechore: bump Go dependencies807a9950afix: use custom Talos/kernel version when generating UKIeb94468a6docs: add documentation for Image Factory2e78513e1refactor: drop the dependency link platform -> network ctrl6dc776b8afix: when writing to META in the installer/imager, use fixed name3703041e9chore: remove uneeded codecbe6e7622fix: generate images for SBCs using imager5dff164f1fix: fix error output of cli action trackeref5056122feat: update etcd to 3.5.1045ae80873chore: bump go-api-signature dependency to v0.3.1ffa5e05cbfix: make Talos work on Rockpi 4c boards again8eba4c599feat: generate secrets bundle from the machine configc7de745f6chore: drop deprecated codecc0c3ab69docs: update rpi_generic.mda009f5c60fix: accept sysctl paths with dots4919f6ee2feat: add GOMEMLIMIT to shipped manifests with memory limits73ee576eachore: update sonobuouy library, drop the forkc23bc2f4achore: support OCI layout as a source for profile input154bbd70fdocs: fix talos version in guide for docker11d1f6163release(v1.6.0-alpha.1): prepare release9dfae8467chore: update dependencies38ce3c827feat: nocloud prefer mac address401e89411feat: customize image size865f08f86docs: kubeadm migration guide improvementsc3e418200refactor: use COSI runtime with new controller runtime DBc1ee24465feat: update Kubernetes to v1.29.0-alpha.20ff7350abfix: oracle integration fixes675bada45test: add config generation stability testsf9639fb53test: fix 'talosctl gen' tests6142d87a0feat: hostname configuration improvements on the NoCloud platform7bb205ebefix: don't use runtime-specs Mount struct in machine configd1b27926cfeat: update Go to 1.21.3b87092ab6fix: handle secure boot state policy pcr digest error498aeb8c3docs: fix incorrect image suffixc14a5d4f7feat: support service account auth in cli336aee0fdfix: use tpm2 hash algorithm constants and allow non-SHA-256 PCRs69d8054c9chore: drop UpdateEndpointSuiteef7be16c8fix: clear the encryption config in META when STATE is reset5fc60d2cafeat: add Solarflare SFC9000 support9b5cfdd0bchore: add tests for iscsib897764f8docs: update proxmox.md159f45bdedocs: fix typos in CLI calls to endpoints0bd1bdd74chore: allow insecure access to installer base image (imager)10ed13067fix: the node IP for kubelet shouldn't change if nothing matchese7575ecaafeat: support n-5 latest Kubernetes versionse71508ec1chore: update dependencies6d7fa4668docs: add metal network configuration guide2b548ad0dfeat: update containerd to 1.7.x62dcfe81efix: update kubernetes library to support 1.29 upgrades52caf0763feat: update Kubernetes to 1.29.0-alpha.1390137447feat: enable KubePrism by default1beb5e86edocs: add KubePrism videoa52d3cda3chore: update gen and COSI runtime29b201d61feat: enable common h/w sensors9c2ba7c6fchore: add tests for chelsio drivers5ca4d58dcfix: generate of modules.dep when on the machine5efcccb6bchore: bump kernel to 6.1.5429c767a02docs: add control plane nodes as users of apid also for control plane nodes4874cfb95chore: fix typo96f2a62eatest: update upgrade tests versionsf3a370acbfeat: update Flannel to 0.22.3efdee6965feat: update Kubernetes to 1.28.2e3b494058fix: build CPU ucode correctly for early loaderc5bd0ac5crefactor: reimplement the depmod extension rebuilder0b883f52adocs: add notes about stable addressing3ef670a9echore: pull in dm modules8f4a36b0ddocs: update aws to add command to allow KubeSpan wireguard porta7edd0523fix: set default route priority for hcloud platform87c1b3dddfix: calculate UKI ISO size dynamically9698e4547fix: handle correctly change of listen address for maintenance servicea096f05a5chore: update gRPC library and enable shared write buffers9e78feccachore: improve image signing processf00567e20chore: add PKG_KERNEL arg to customize used kernel2960f93bafeat: add readonly information to the disks API response735bf9ed0feat: bring in Google vNIC driver3f5232075feat: upgrade-k8s without commentse44875106docs: update deploying-cilium.md7046cae43chore: update gopacket to reduce init memory allocsda73b563dchore: update Go to 1.21.15e11f08a6fix: trim file path in the container image3d2dad4e6chore: show securtiystate on dashboardb48510874chore: e2e-aws cleanup1eebbce35chore: add output flag for talosctl config info3fbed806cchore: add tests for util-linux extensions7c514a1a6docs: update header links6058c3602fix: shorten VLAN link names to fit into the limit of 15 characters9c2f765c8fix: allow network device selector to match multiple linksa04b98637fix: update kubernetes library for 1.28 upgrade pre-checksf7473e477feat: update default Kubernetes to 1.28.1d693604a1chore: fix default image list in the release notesd91b5b3a3feat: set environment variables early in the bootc918c0855fix: set correct (1 year) talosconfig expiration79bbdf454fix: set proper timeouts for KubePrism loadbalancerb8fb55d5cfix: use a mount prefix when installing a bootloader44f59a804feat: improve imager APIs2d3ac925erefactor: update NTP spike detectoraf0cc70e3test: update e2e-aws to use worker groupsd03dc7a8achore: validate new system extensionsbbeb489aachore: drop firmware from initramfs3c9f7a7dechore: re-enable nolintlint and typecheck lintersc51e2c9b4feat: update CoreDNS to 1.11.18670450d2release(v1.6.0-alpha.0): prepare release6778ded29feat: add e2e-aws for nvidia extensions74c07ed71chore: update Go to 1.21a28d72e9cfix: ova contents to be nameddisk.*c0ea4d7bafix: properly calculate overal of node address with subnet filtersd6b2719e2chore: drone: move extensions step to a function9608ef56dchore: allow bridge traffic with DHCP broadcast trafficc99316457docs: fix the installing system extensions doc833895940chore: add tests for zfs extensioncb468c41cfix: copy proper modules to arm64 squashfsea0d6e8c6fix: prevent dashboard crashes when process info is not availablee9077a6fbfeat: filter the hostname to produce nodenamedc8361c1dfix: properly GC images supplied with both tag and digestccfa8de11fix: automatically changerpi_4board on upgradeb56e8b7d9fix: support 'List' type manifests574d48e54fix: use image digest when starting a container175747ceafix: ntp query error with bare IPv6 addressc8b507fb2docs: fix kubeprism typo0cdcb2e0edocs: restructure docs for nvidia drivers for v1.4676db9768docs: fork docs for Talos 1.692ad18c18fix: write correct capacity to the ovf6b0373ebechore: move bash tests to integration52b3d8d37docs: make Talos 1.5 documentation the default onedc873df9bchore: fix the filenames of openstack imagesb5c0e7b24docs: update nvidia docs9606e871edocs: update Jiva Pod Security Policya86ed4362chore: update Kubernetes Go modules to 0.28.097b4e3e91feat: update Kubernetes to 1.28.079ca1a3dffeat: e2e-aws using tf codebf3a5e011chore: add version compatibility for Talos 1.6969e8097cfeat: update Kubernetes to 1.28.0-rc.1ca41b611echore: drone jsonnet cleanupbc198e98edocs: retain cilium autoMount pending upstream hostPath fix86c94eff8refactor: docgen and config examplesee6d639f6fix: match routes on the priority properlybff0d8f32chore: fix dependencies in the release pipelinee1b288679refactor: compile regex in validation method on the first usedaa4c185adocs: add what's new and documentation for Talos 1.5c4a1ca8d6chore: remove <-errCh where possible in grpc methodse0f383598chore: clean up the output of theimagerfb536af4dchore: optimize memory usage oftcelllibrary on init7c86a365echore: publish systemd-boot and systemd-stub assets7d688ccfefix: make encryption config provider default toluks2if not set80238a05achore: unify semver undergithub.com/blang/semver/v40f1920bddchore: provide a resource to peek into Linux clock adjustments4eab3017bfix: calculate log2i properlybcf284530fix: update providerid prefix for awsac2aff5ccfix: fix azure portion of cloud uploader793dcedc9fix: fast-wipe the system disk on talosctl reset76fa45afbdocs: update cilium instructions
Changes since v1.6.0-alpha.1
45 commits
514e514bafeat: update Linux 6.1.63, containerd 1.7.9aca8b5e17fix: ignore kernel command line in container mode020a0eb63docs: fix table formatting for bootstraprequest0eb245e04docs: fix talosctl pcap example indentationde6caf534docs: fix table formatting for machineservice api27d208c26feat: implement OAuth2 device flow for machine config5c8fa2a80chore: start containerd early in boot95a252cfcdocs: fix link in what is new page0d3c3ed71feat: support kube scheduler config06941b7e5fix: allow rootfs propagation configuration for extension services57dc796f3docs: update lastRelease to v1.5.5 in _index.md21d944a64docs: add timezone information4f1ad16c7feat: support kubelet credentialprovider config71a3bf0e3fix: allow extra kernel args for secureboot installerf38eaaab8feat: rework secureboot and PCR signing key6eade3d5echore: add ability to rewrite uuids and set unique tokens for Talose9c7ac17afix: set max msg recv size when proxyinge22ab440dfeat: update Linux 6.1.61, containerd 1.7.8, runc 1.1.108245361f9feat: show first 32 bytes of response body on download error75d3987c0chore: drop sha1 from genereated pcr json6f32d2990feat: add.deroutputtalosctl gen secureboot pcr87c40da6cfix: proper logging in machined on startupa54da5f64fix: image build for nanopi_4s6f3cd0593refactor: update packet capture to use 'afpacket' interface813442dd7fix: don't validate machine.install if installeddff60069cfeat: update Kubernetes to 1.29.0-alpha.3c97db5dfechore: bump Go dependencies807a9950afix: use custom Talos/kernel version when generating UKIeb94468a6docs: add documentation for Image Factory2e78513e1refactor: drop the dependency link platform -> network ctrl6dc776b8afix: when writing to META in the installer/imager, use fixed name3703041e9chore: remove uneeded codecbe6e7622fix: generate images for SBCs using imager5dff164f1fix: fix error output of cli action trackeref5056122feat: update etcd to 3.5.1045ae80873chore: bump go-api-signature dependency to v0.3.1ffa5e05cbfix: make Talos work on Rockpi 4c boards again8eba4c599feat: generate secrets bundle from the machine configc7de745f6chore: drop deprecated codecc0c3ab69docs: update rpi_generic.mda009f5c60fix: accept sysctl paths with dots4919f6ee2feat: add GOMEMLIMIT to shipped manifests with memory limits73ee576eachore: update sonobuouy library, drop the forkc23bc2f4achore: support OCI layout as a source for profile input154bbd70fdocs: fix talos version in guide for docker
Changes from siderolabs/extras
7 commits
Changes from siderolabs/gen
2 commits
Changes from siderolabs/go-kubernetes
7 commits
fa05430chore: support kube-scheduler config version68bf392feat: add dropped API resource for 1.2909fa006fix: retry Windows connection errors3aa47a4feat: support Kubernetes 1.29 upgradesae33a4afeat: introduce support for Kubernetes version compatibility checkscf2754echore: update to use GHA44e26b3feat: update removed feature gates for 1.28
Changes from siderolabs/go-retry
Changes from siderolabs/pkgs
32 commits
3aea711feat: bump dependenciesd59cb3efeat(lvm2): configure thin support252a59ffeat: bump dependencies0bb2a79feat: update Go to 1.21.4f57b0a9chore: fix kernel target to honorPLATFORM5f84302chore: move to using kresd7509f1chore: bump deps3a66437chore: add gh workflows2e892fdfeat: update versions37348d6feat: update Go to 1.21.334f3c41feat: add Solarflare SFC9000 support0c84090feat: update releases19cdf71feat: enable common sensorsacee18echore: bump kernel to 6.1.541d16fd2feat: add Chelsio support4504f83chore: rename kconfig-hardened-check847a9c3chore: enable dm thin provisioning1401505chore: drop-pkgsfor upstream kernel modulesa62471dfeat: add binfmt_misc support518c441feat: add gVNIC support7d9e60efeat: update Go to 1.21.1d3d7d29chore: bump deps3b70656chore: fix cacert permscca80b7feat: update Linux to 6.1.462e1c0b9fix: nonfree kmod pkg namecff5bebfeat: add btrfs support7717b7echore: bump deps2f19f18feat: update containerd to 1.6.2330d4b74feat: update Go to 1.21eda123dfeat: update runc to 1.1.930cd584chore: enable pushing of non-free packagesfb247b5chore: update kernel and microcode
Changes from siderolabs/siderolink
5 commits
Changes from siderolabs/tools
13 commits
ff7fe96feat: update Go to 1.21.46216d64fix: org name4334b92chore: move to using kres024ef25chore: bump deps5a22409chore: refactor github actions9a05d12feat: move to gh workflowa4a52e2chore: add dummy gh workflow9c09b00feat: update dependencies35948affeat: update Go to 1.21.309023c1feat: update OpenSSL to 3.1.37fa8bb5feat: update releasesfa388defeat: update Go to 1.21.133fb4b3feat: update Go to 1.21
Dependency Changes
- github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 new
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 new
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.0.0 new
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.0.1 new
- github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.0.1 new
- github.com/aws/aws-sdk-go-v2/config v1.18.32 -> v1.25.4
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.7 -> v1.14.5
- github.com/aws/smithy-go v1.14.0 -> v1.17.0
- github.com/beevik/ntp v1.2.0 -> v1.3.0
- github.com/blang/semver/v4 v4.0.0 new
- github.com/containerd/cgroups/v3 v3.0.2 new
- github.com/containerd/containerd v1.6.23 -> v1.7.9
- github.com/cosi-project/runtime v0.3.1 -> v0.3.17
- github.com/distribution/reference v0.5.0 new
- github.com/docker/docker v24.0.5 -> v24.0.7
- github.com/fatih/color v1.15.0 -> v1.16.0
- github.com/foxboron/go-uefi 32187aa193d0 -> 18b9ba9cd4c3
- github.com/fsnotify/fsnotify v1.6.0 -> v1.7.0
- github.com/google/go-cmp v0.5.9 -> v0.6.0
- github.com/google/go-containerregistry v0.15.2 -> v0.16.1
- github.com/google/uuid v1.3.0 -> v1.4.0
- github.com/gopacket/gopacket v1.1.1 -> e79bddbcb4a7
- github.com/hetznercloud/hcloud-go/v2 v2.0.0 -> v2.4.0
- github.com/insomniacslk/dhcp 0f9eb93a696c -> 6a2c8fbdcc1c
- github.com/jsimonetti/rtnetlink v1.3.4 -> v1.3.5
- github.com/mattn/go-isatty v0.0.19 -> v0.0.20
- github.com/mdp/qrterminal/v3 v3.2.0 new
- github.com/opencontainers/runtime-spec 1c3f411f0417 -> v1.1.0-rc.1
- github.com/prometheus/procfs v0.11.1 -> v0.12.0
- github.com/rivo/tview 6cc0565babaf -> 7c9e464bac02
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.20 -> v1.0.0-beta.21
- github.com/siderolabs/extras v1.5.0 -> v1.6.0-alpha.0-5-ge8e801b
- github.com/siderolabs/gen v0.4.5 -> v0.4.7
- github.com/siderolabs/go-kubernetes v0.2.2 -> v0.2.8
- github.com/siderolabs/go-retry v0.3.2 -> v0.3.3
- github.com/siderolabs/pkgs v1.5.0-6-g2f2c9cd -> v1.6.0-alpha.0-31-g3aea711
- github.com/siderolabs/siderolink v0.3.1 -> v0.3.2
- github.com/siderolabs/talos/pkg/machinery v1.5.0 -> v1.6.0-alpha.1
- github.com/siderolabs/tools v1.5.0 -> v1.6.0-alpha.0-12-gff7fe96
- github.com/spf13/cobra v1.7.0 -> v1.8.0
- github.com/vmware-tanzu/sonobuoy v0.56.17 -> v0.57.1
- go.etcd.io/etcd/api/v3 v3.5.9 -> v3.5.10
- go.etcd.io/etcd/client/pkg/v3 v3.5.9 -> v3.5.10
- go.etcd.io/etcd/client/v3 v3.5.9 -> v3.5.10
- go.etcd.io/etcd/etcdutl/v3 v3.5.9 -> v3.5.10
- go.uber.org/zap v1.25.0 -> v1.26.0
- go4.org/netipx ec4c8b891b28 -> 6213f710f925
- golang.org/x/net v0.13.0 -> v0.18.0
- golang.org/x/oauth2 v0.14.0 new
- golang.org/x/sync v0.3.0 -> v0.5.0
- golang.org/x/sys v0.10.0 -> v0.14.0
- golang.org/x/term v0.10.0 -> v0.14.0
- golang.org/x/text v0.11.0 -> v0.14.0
- golang.org/x/time v0.3.0 -> v0.4.0
- google.golang.org/grpc v1.57.0 -> v1.59.0
- k8s.io/api v0.28.0 -> v0.29.0-alpha.3
- k8s.io/apimachinery v0.28.0 -> v0.29.0-alpha.3
- k8s.io/apiserver v0.28.0 -> v0.29.0-alpha.3
- k8s.io/client-go v0.28.0 -> v0.29.0-alpha.3
- k8s.io/component-base v0.28.0 -> v0.29.0-alpha.3
- k8s.io/cri-api v0.28.0 -> v0.29.0-alpha.3
- k8s.io/klog/v2 v2.100.1 -> v2.110.1
- k8s.io/kube-scheduler v0.29.0-alpha.3 new
- k8s.io/kubectl v0.28.0 -> v0.29.0-alpha.3
- k8s.io/kubelet v0.28.0 -> v0.29.0-alpha.3
- sigs.k8s.io/yaml v1.3.0 -> v1.4.0
Previous release can be found at v1.5.0
Talos 1.6.0-alpha.1 (2023-10-17)
Welcome to the v1.6.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Network Device Selectors
Previously, network device selectors only matched the first link, now the configuration is applied to all matching links.
Linux Firmware
Starting with Talos 1.6, there is no Linux firmware included in the initramfs. Customers who need Linux firmware can pull them as extension during install time using the image factory service. If the initial boot requires firmware, a custom iso can be built with the firmware included using the image factory service. This also ensures that the linux-firmware is not tied to a specific Talos version.
KubePrism
KubePrism is enabled by default on port 7445.
talosctl CLI
The command images deprecated in Talos 1.5 was removed, please use talosctl images default instead.
Component Updates
Linux: 6.1.58 containerd: 1.7.7 CoreDNS: 1.11.1 Kubernetes: 1.29.0-alpha.2 Flannel: 0.22.3
Talos is built with Go 1.21.3.
Contributors
- Andrey Smirnov
- Noel Georgi
- Andrey Smirnov
- Dmitriy Matrenichev
- Serge Logvinov
- Radosław Piliszek
- Artem Chernyshev
- Thomas Way
- Utku Ozdemir
- Andrei Kvapil
- Christian Rolland
- Drew Hess
- Enno Boland
- Henry Sachs
- Jacob McSwain
- Jacob McSwain
- Jared Davenport
- Mans Matulewicz
- Nebula
- Nico Berlee
- Sascha Desch
- Spencer Smith
- Steve Francis
- Thomas Lemarchand
- Tim Jones
- Zachary Milonas
- guoguangwu
- mikucat0309
- ndbrew
Changes
131 commits
9dfae8467chore: update dependencies38ce3c827feat: nocloud prefer mac address401e89411feat: customize image size865f08f86docs: kubeadm migration guide improvementsc3e418200refactor: use COSI runtime with new controller runtime DBc1ee24465feat: update Kubernetes to v1.29.0-alpha.20ff7350abfix: oracle integration fixes675bada45test: add config generation stability testsf9639fb53test: fix 'talosctl gen' tests6142d87a0feat: hostname configuration improvements on the NoCloud platform7bb205ebefix: don't use runtime-specs Mount struct in machine configd1b27926cfeat: update Go to 1.21.3b87092ab6fix: handle secure boot state policy pcr digest error498aeb8c3docs: fix incorrect image suffixc14a5d4f7feat: support service account auth in cli336aee0fdfix: use tpm2 hash algorithm constants and allow non-SHA-256 PCRs69d8054c9chore: drop UpdateEndpointSuiteef7be16c8fix: clear the encryption config in META when STATE is reset5fc60d2cafeat: add Solarflare SFC9000 support9b5cfdd0bchore: add tests for iscsib897764f8docs: update proxmox.md159f45bdedocs: fix typos in CLI calls to endpoints0bd1bdd74chore: allow insecure access to installer base image (imager)10ed13067fix: the node IP for kubelet shouldn't change if nothing matchese7575ecaafeat: support n-5 latest Kubernetes versionse71508ec1chore: update dependencies6d7fa4668docs: add metal network configuration guide2b548ad0dfeat: update containerd to 1.7.x62dcfe81efix: update kubernetes library to support 1.29 upgrades52caf0763feat: update Kubernetes to 1.29.0-alpha.1390137447feat: enable KubePrism by default1beb5e86edocs: add KubePrism videoa52d3cda3chore: update gen and COSI runtime29b201d61feat: enable common h/w sensors9c2ba7c6fchore: add tests for chelsio drivers5ca4d58dcfix: generate of modules.dep when on the machine5efcccb6bchore: bump kernel to 6.1.5429c767a02docs: add control plane nodes as users of apid also for control plane nodes4874cfb95chore: fix typo96f2a62eatest: update upgrade tests versionsf3a370acbfeat: update Flannel to 0.22.3efdee6965feat: update Kubernetes to 1.28.2e3b494058fix: build CPU ucode correctly for early loaderc5bd0ac5crefactor: reimplement the depmod extension rebuilder0b883f52adocs: add notes about stable addressing3ef670a9echore: pull in dm modules8f4a36b0ddocs: update aws to add command to allow KubeSpan wireguard porta7edd0523fix: set default route priority for hcloud platform87c1b3dddfix: calculate UKI ISO size dynamically9698e4547fix: handle correctly change of listen address for maintenance servicea096f05a5chore: update gRPC library and enable shared write buffers9e78feccachore: improve image signing processf00567e20chore: add PKG_KERNEL arg to customize used kernel2960f93bafeat: add readonly information to the disks API response735bf9ed0feat: bring in Google vNIC driver3f5232075feat: upgrade-k8s without commentse44875106docs: update deploying-cilium.md7046cae43chore: update gopacket to reduce init memory allocsda73b563dchore: update Go to 1.21.15e11f08a6fix: trim file path in the container image3d2dad4e6chore: show securtiystate on dashboardb48510874chore: e2e-aws cleanup1eebbce35chore: add output flag for talosctl config info3fbed806cchore: add tests for util-linux extensions7c514a1a6docs: update header links6058c3602fix: shorten VLAN link names to fit into the limit of 15 characters9c2f765c8fix: allow network device selector to match multiple linksa04b98637fix: update kubernetes library for 1.28 upgrade pre-checksf7473e477feat: update default Kubernetes to 1.28.1d693604a1chore: fix default image list in the release notesd91b5b3a3feat: set environment variables early in the bootc918c0855fix: set correct (1 year) talosconfig expiration79bbdf454fix: set proper timeouts for KubePrism loadbalancerb8fb55d5cfix: use a mount prefix when installing a bootloader44f59a804feat: improve imager APIs2d3ac925erefactor: update NTP spike detectoraf0cc70e3test: update e2e-aws to use worker groupsd03dc7a8achore: validate new system extensionsbbeb489aachore: drop firmware from initramfs3c9f7a7dechore: re-enable nolintlint and typecheck lintersc51e2c9b4feat: update CoreDNS to 1.11.18670450d2release(v1.6.0-alpha.0): prepare release6778ded29feat: add e2e-aws for nvidia extensions74c07ed71chore: update Go to 1.21a28d72e9cfix: ova contents to be nameddisk.*c0ea4d7bafix: properly calculate overal of node address with subnet filtersd6b2719e2chore: drone: move extensions step to a function9608ef56dchore: allow bridge traffic with DHCP broadcast trafficc99316457docs: fix the installing system extensions doc833895940chore: add tests for zfs extensioncb468c41cfix: copy proper modules to arm64 squashfsea0d6e8c6fix: prevent dashboard crashes when process info is not availablee9077a6fbfeat: filter the hostname to produce nodenamedc8361c1dfix: properly GC images supplied with both tag and digestccfa8de11fix: automatically changerpi_4board on upgradeb56e8b7d9fix: support 'List' type manifests574d48e54fix: use image digest when starting a container175747ceafix: ntp query error with bare IPv6 addressc8b507fb2docs: fix kubeprism typo0cdcb2e0edocs: restructure docs for nvidia drivers for v1.4676db9768docs: fork docs for Talos 1.692ad18c18fix: write correct capacity to the ovf6b0373ebechore: move bash tests to integration52b3d8d37docs: make Talos 1.5 documentation the default onedc873df9bchore: fix the filenames of openstack imagesb5c0e7b24docs: update nvidia docs9606e871edocs: update Jiva Pod Security Policya86ed4362chore: update Kubernetes Go modules to 0.28.097b4e3e91feat: update Kubernetes to 1.28.079ca1a3dffeat: e2e-aws using tf codebf3a5e011chore: add version compatibility for Talos 1.6969e8097cfeat: update Kubernetes to 1.28.0-rc.1ca41b611echore: drone jsonnet cleanupbc198e98edocs: retain cilium autoMount pending upstream hostPath fix86c94eff8refactor: docgen and config examplesee6d639f6fix: match routes on the priority properlybff0d8f32chore: fix dependencies in the release pipelinee1b288679refactor: compile regex in validation method on the first usedaa4c185adocs: add what's new and documentation for Talos 1.5c4a1ca8d6chore: remove <-errCh where possible in grpc methodse0f383598chore: clean up the output of theimagerfb536af4dchore: optimize memory usage oftcelllibrary on init7c86a365echore: publish systemd-boot and systemd-stub assets7d688ccfefix: make encryption config provider default toluks2if not set80238a05achore: unify semver undergithub.com/blang/semver/v40f1920bddchore: provide a resource to peek into Linux clock adjustments4eab3017bfix: calculate log2i properlybcf284530fix: update providerid prefix for awsac2aff5ccfix: fix azure portion of cloud uploader793dcedc9fix: fast-wipe the system disk on talosctl reset76fa45afbdocs: update cilium instructions
Changes since v1.6.0-alpha.0
81 commits
9dfae8467chore: update dependencies38ce3c827feat: nocloud prefer mac address401e89411feat: customize image size865f08f86docs: kubeadm migration guide improvementsc3e418200refactor: use COSI runtime with new controller runtime DBc1ee24465feat: update Kubernetes to v1.29.0-alpha.20ff7350abfix: oracle integration fixes675bada45test: add config generation stability testsf9639fb53test: fix 'talosctl gen' tests6142d87a0feat: hostname configuration improvements on the NoCloud platform7bb205ebefix: don't use runtime-specs Mount struct in machine configd1b27926cfeat: update Go to 1.21.3b87092ab6fix: handle secure boot state policy pcr digest error498aeb8c3docs: fix incorrect image suffixc14a5d4f7feat: support service account auth in cli336aee0fdfix: use tpm2 hash algorithm constants and allow non-SHA-256 PCRs69d8054c9chore: drop UpdateEndpointSuiteef7be16c8fix: clear the encryption config in META when STATE is reset5fc60d2cafeat: add Solarflare SFC9000 support9b5cfdd0bchore: add tests for iscsib897764f8docs: update proxmox.md159f45bdedocs: fix typos in CLI calls to endpoints0bd1bdd74chore: allow insecure access to installer base image (imager)10ed13067fix: the node IP for kubelet shouldn't change if nothing matchese7575ecaafeat: support n-5 latest Kubernetes versionse71508ec1chore: update dependencies6d7fa4668docs: add metal network configuration guide2b548ad0dfeat: update containerd to 1.7.x62dcfe81efix: update kubernetes library to support 1.29 upgrades52caf0763feat: update Kubernetes to 1.29.0-alpha.1390137447feat: enable KubePrism by default1beb5e86edocs: add KubePrism videoa52d3cda3chore: update gen and COSI runtime29b201d61feat: enable common h/w sensors9c2ba7c6fchore: add tests for chelsio drivers5ca4d58dcfix: generate of modules.dep when on the machine5efcccb6bchore: bump kernel to 6.1.5429c767a02docs: add control plane nodes as users of apid also for control plane nodes4874cfb95chore: fix typo96f2a62eatest: update upgrade tests versionsf3a370acbfeat: update Flannel to 0.22.3efdee6965feat: update Kubernetes to 1.28.2e3b494058fix: build CPU ucode correctly for early loaderc5bd0ac5crefactor: reimplement the depmod extension rebuilder0b883f52adocs: add notes about stable addressing3ef670a9echore: pull in dm modules8f4a36b0ddocs: update aws to add command to allow KubeSpan wireguard porta7edd0523fix: set default route priority for hcloud platform87c1b3dddfix: calculate UKI ISO size dynamically9698e4547fix: handle correctly change of listen address for maintenance servicea096f05a5chore: update gRPC library and enable shared write buffers9e78feccachore: improve image signing processf00567e20chore: add PKG_KERNEL arg to customize used kernel2960f93bafeat: add readonly information to the disks API response735bf9ed0feat: bring in Google vNIC driver3f5232075feat: upgrade-k8s without commentse44875106docs: update deploying-cilium.md7046cae43chore: update gopacket to reduce init memory allocsda73b563dchore: update Go to 1.21.15e11f08a6fix: trim file path in the container image3d2dad4e6chore: show securtiystate on dashboardb48510874chore: e2e-aws cleanup1eebbce35chore: add output flag for talosctl config info3fbed806cchore: add tests for util-linux extensions7c514a1a6docs: update header links6058c3602fix: shorten VLAN link names to fit into the limit of 15 characters9c2f765c8fix: allow network device selector to match multiple linksa04b98637fix: update kubernetes library for 1.28 upgrade pre-checksf7473e477feat: update default Kubernetes to 1.28.1d693604a1chore: fix default image list in the release notesd91b5b3a3feat: set environment variables early in the bootc918c0855fix: set correct (1 year) talosconfig expiration79bbdf454fix: set proper timeouts for KubePrism loadbalancerb8fb55d5cfix: use a mount prefix when installing a bootloader44f59a804feat: improve imager APIs2d3ac925erefactor: update NTP spike detectoraf0cc70e3test: update e2e-aws to use worker groupsd03dc7a8achore: validate new system extensionsbbeb489aachore: drop firmware from initramfs3c9f7a7dechore: re-enable nolintlint and typecheck lintersc51e2c9b4feat: update CoreDNS to 1.11.1
Changes from siderolabs/extras
4 commits
Changes from siderolabs/gen
2 commits
Changes from siderolabs/go-kubernetes
5 commits
Changes from siderolabs/pkgs
24 commits
2e892fdfeat: update versions37348d6feat: update Go to 1.21.334f3c41feat: add Solarflare SFC9000 support0c84090feat: update releases19cdf71feat: enable common sensorsacee18echore: bump kernel to 6.1.541d16fd2feat: add Chelsio support4504f83chore: rename kconfig-hardened-check847a9c3chore: enable dm thin provisioning1401505chore: drop-pkgsfor upstream kernel modulesa62471dfeat: add binfmt_misc support518c441feat: add gVNIC support7d9e60efeat: update Go to 1.21.1d3d7d29chore: bump deps3b70656chore: fix cacert permscca80b7feat: update Linux to 6.1.462e1c0b9fix: nonfree kmod pkg namecff5bebfeat: add btrfs support7717b7echore: bump deps2f19f18feat: update containerd to 1.6.2330d4b74feat: update Go to 1.21eda123dfeat: update runc to 1.1.930cd584chore: enable pushing of non-free packagesfb247b5chore: update kernel and microcode
Changes from siderolabs/tools
6 commits
Dependency Changes
- github.com/aws/aws-sdk-go-v2/config v1.18.32 -> v1.19.0
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.7 -> v1.13.13
- github.com/aws/smithy-go v1.14.0 -> v1.15.0
- github.com/beevik/ntp v1.2.0 -> v1.3.0
- github.com/blang/semver/v4 v4.0.0 new
- github.com/containerd/cgroups/v3 v3.0.2 new
- github.com/containerd/containerd v1.6.23 -> v1.7.7
- github.com/cosi-project/runtime v0.3.1 -> v0.3.13
- github.com/distribution/reference v0.5.0 new
- github.com/docker/docker v24.0.5 -> v24.0.6
- github.com/foxboron/go-uefi 32187aa193d0 -> 18b9ba9cd4c3
- github.com/google/go-cmp v0.5.9 -> v0.6.0
- github.com/google/go-containerregistry v0.15.2 -> v0.16.1
- github.com/google/uuid v1.3.0 -> v1.3.1
- github.com/gopacket/gopacket v1.1.1 -> 4769cf270e9e
- github.com/hetznercloud/hcloud-go/v2 v2.0.0 -> v2.4.0
- github.com/insomniacslk/dhcp 0f9eb93a696c -> 6a2c8fbdcc1c
- github.com/jsimonetti/rtnetlink v1.3.4 -> v1.3.5
- github.com/opencontainers/runtime-spec 1c3f411f0417 -> v1.1.0-rc.1
- github.com/prometheus/procfs v0.11.1 -> v0.12.0
- github.com/rivo/tview 6cc0565babaf -> 6c844bdc5f7a
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.20 -> v1.0.0-beta.21
- github.com/siderolabs/extras v1.5.0 -> v1.6.0-alpha.0-2-g6d48418
- github.com/siderolabs/gen v0.4.5 -> v0.4.7
- github.com/siderolabs/go-kubernetes v0.2.2 -> v0.2.6
- github.com/siderolabs/pkgs v1.5.0-6-g2f2c9cd -> v1.6.0-alpha.0-23-g2e892fd
- github.com/siderolabs/talos/pkg/machinery v1.5.0 -> v1.6.0-alpha.0
- github.com/siderolabs/tools v1.5.0 -> v1.6.0-alpha.0-5-g9c09b00
- go.uber.org/zap v1.25.0 -> v1.26.0
- go4.org/netipx ec4c8b891b28 -> 6213f710f925
- golang.org/x/net v0.13.0 -> v0.17.0
- golang.org/x/sync v0.3.0 -> v0.4.0
- golang.org/x/sys v0.10.0 -> v0.13.0
- golang.org/x/term v0.10.0 -> v0.13.0
- golang.org/x/text v0.11.0 -> v0.13.0
- google.golang.org/grpc v1.57.0 -> v1.58.3
- k8s.io/api v0.28.0 -> v0.29.0-alpha.2
- k8s.io/apimachinery v0.28.0 -> v0.29.0-alpha.2
- k8s.io/apiserver v0.28.0 -> v0.29.0-alpha.2
- k8s.io/client-go v0.28.0 -> v0.29.0-alpha.2
- k8s.io/component-base v0.28.0 -> v0.29.0-alpha.2
- k8s.io/cri-api v0.28.0 -> v0.29.0-alpha.2
- k8s.io/kubectl v0.28.0 -> v0.29.0-alpha.2
- k8s.io/kubelet v0.28.0 -> v0.29.0-alpha.2
Previous release can be found at v1.5.0
Talos 1.6.0-alpha.0 (2023-08-24)
Welcome to the v1.6.0-alpha.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
talosctl CLI
The command images deprecated in Talos 1.5 was removed, please use talosctl images default instead.
Component Updates
Linux: 6.1.46
Talos is built with Go 1.21.
Contributors
- Andrey Smirnov
- Noel Georgi
- Andrey Smirnov
- Dmitriy Matrenichev
- Artem Chernyshev
- Christian Rolland
- Enno Boland
- Henry Sachs
- Jared Davenport
- Nico Berlee
- Sascha Desch
- Tim Jones
- Utku Ozdemir
Changes
48 commits
74c07ed71chore: update Go to 1.21a28d72e9cfix: ova contents to be nameddisk.*c0ea4d7bafix: properly calculate overal of node address with subnet filtersd6b2719e2chore: drone: move extensions step to a function9608ef56dchore: allow bridge traffic with DHCP broadcast trafficc99316457docs: fix the installing system extensions doc833895940chore: add tests for zfs extensioncb468c41cfix: copy proper modules to arm64 squashfsea0d6e8c6fix: prevent dashboard crashes when process info is not availablee9077a6fbfeat: filter the hostname to produce nodenamedc8361c1dfix: properly GC images supplied with both tag and digestccfa8de11fix: automatically changerpi_4board on upgradeb56e8b7d9fix: support 'List' type manifests574d48e54fix: use image digest when starting a container175747ceafix: ntp query error with bare IPv6 addressc8b507fb2docs: fix kubeprism typo0cdcb2e0edocs: restructure docs for nvidia drivers for v1.4676db9768docs: fork docs for Talos 1.692ad18c18fix: write correct capacity to the ovf6b0373ebechore: move bash tests to integration52b3d8d37docs: make Talos 1.5 documentation the default onedc873df9bchore: fix the filenames of openstack imagesb5c0e7b24docs: update nvidia docs9606e871edocs: update Jiva Pod Security Policya86ed4362chore: update Kubernetes Go modules to 0.28.097b4e3e91feat: update Kubernetes to 1.28.079ca1a3dffeat: e2e-aws using tf codebf3a5e011chore: add version compatibility for Talos 1.6969e8097cfeat: update Kubernetes to 1.28.0-rc.1ca41b611echore: drone jsonnet cleanupbc198e98edocs: retain cilium autoMount pending upstream hostPath fix86c94eff8refactor: docgen and config examplesee6d639f6fix: match routes on the priority properlybff0d8f32chore: fix dependencies in the release pipelinee1b288679refactor: compile regex in validation method on the first usedaa4c185adocs: add what's new and documentation for Talos 1.5c4a1ca8d6chore: remove <-errCh where possible in grpc methodse0f383598chore: clean up the output of theimagerfb536af4dchore: optimize memory usage oftcelllibrary on init7c86a365echore: publish systemd-boot and systemd-stub assets7d688ccfefix: make encryption config provider default toluks2if not set80238a05achore: unify semver undergithub.com/blang/semver/v40f1920bddchore: provide a resource to peek into Linux clock adjustments4eab3017bfix: calculate log2i properlybcf284530fix: update providerid prefix for awsac2aff5ccfix: fix azure portion of cloud uploader793dcedc9fix: fast-wipe the system disk on talosctl reset76fa45afbdocs: update cilium instructions
Changes from siderolabs/pkgs
8 commits
Changes from siderolabs/tools
Dependency Changes
- github.com/aws/aws-sdk-go-v2/config v1.18.32 -> v1.18.36
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.7 -> v1.13.11
- github.com/aws/smithy-go v1.14.0 -> v1.14.2
- github.com/beevik/ntp v1.2.0 -> v1.3.0
- github.com/blang/semver/v4 v4.0.0 new
- github.com/containerd/containerd v1.6.23 -> v1.6.22
- github.com/foxboron/go-uefi 32187aa193d0 -> 18b9ba9cd4c3
- github.com/google/go-containerregistry v0.15.2 -> v0.16.1
- github.com/google/uuid v1.3.0 -> v1.3.1
- github.com/hetznercloud/hcloud-go/v2 v2.0.0 -> v2.1.1
- github.com/insomniacslk/dhcp 0f9eb93a696c -> b3ca2534940d
- github.com/jsimonetti/rtnetlink v1.3.4 -> v1.3.5
- github.com/rivo/tview 6cc0565babaf -> ccc2c8119703
- github.com/siderolabs/pkgs v1.5.0-6-g2f2c9cd -> v1.6.0-alpha.0-7-g2e1c0b9
- github.com/siderolabs/talos/pkg/machinery v1.5.0 -> v1.5.0-alpha.3
- github.com/siderolabs/tools v1.5.0 -> v1.6.0-alpha.0
- golang.org/x/net v0.13.0 -> v0.14.0
- golang.org/x/sys v0.10.0 -> v0.11.0
- golang.org/x/term v0.10.0 -> v0.11.0
- golang.org/x/text v0.11.0 -> v0.12.0
Previous release can be found at v1.5.0
Talos 1.5.0-alpha.3 (2023-07-25)
Welcome to the v1.5.0-alpha.3 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Extension Services
Talos now supports setting environmentFile for an extension service container spec. Refer: https://www.talos.dev/v1.5/advanced/extension-services/#container
The extension waits for the file to be present before starting the service.
Predictable Network Interface Names
Starting with version Talos 1.5, network interfaces are renamed to predictable names
same way as systemd does that in other Linux distributions.
The naming schema enx78e7d1ea46da (based on MAC addresses) is enabled by default, the order of interface naming decisions is:
- firmware/BIOS provided index numbers for on-board devices (example:
eno1) - firmware/BIOS provided PCI Express hotplug slot index numbers (example:
ens1) - physical/geographical location of the connector of the hardware (example:
enp2s0) - interfaces's MAC address (example:
enx78e7d1ea46da)
The predictable network interface names features can be disabled by specifying net.ifnames=0 in the kernel command line.
Talos automatically adds the net.ifnames=0 kernel argument when upgrading from Talos versions before 1.5.
This change doesn't affect "cloud" platforms, like AWS, as Talos automatically adds net.ifnames=0 to the kernel command line.
Network KMS Disk Encryption
Talos now supports new type of encryption keys which are sealed/unsealed with an external KMS server:
systemDiskEncryption:
ephemeral:
keys:
- kms:
endpoint: https://1.2.3.4:443
slot: 0
gRPC API definitions and a simple reference implementation of the KMS server can be found in this repository.
KubePrism - Kubernetes API Server In-Cluster Load Balancer
Talos now supports configuring the KubePrism - Kubernetes API Server in-cluster load balancer with machine config
features.kubePrism.port and features.kubePrism.enabled fields.
If enabled, KubePrism binds to localhost and runs on the same port on every machine in the cluster.
The default value for KubePrism endpoint is https://localhost:7445.
The KubePrism is used by the kubelet, kube-scheduler, kube-controller-manager
and kube-proxy by default and can be passed to the CNIs like Cilium and Calico.
The KubePrism provides access to the Kubernetes API endpoint even if the external loadbalancer is not healthy, provided that the worker nodes can reach to the controlplane machine addresses directly.
Machine Config option .machine.install.bootloader
The .machine.install.bootloader option in the machine config is deprecated and will be removed in Talos 1.6.
This was a no-op for a long time. The bootloader is always installed.
XFS Quota
Talos 1.5+ enables XFS project quota support by default, also enabling by default
kubelet feature gate LocalStorageCapacityIsolationFSQuotaMonitoring to use xfs quotas
to monitor volume usage instead of du.
This feature is controlled by the .machine.features.diskQuotaSupport field in the machine config,
it is set to true for new clusters.
When upgrading from a previous version, the feature can be enabled by setting the field to true. On the first mount of a volume, the quota information will be recalculated, which may take some time.
RDMA/RoCE support
Talos no longer loads by default rdma_rxe Linux driver, which is required for RoCE support.
If the driver is required, it can be enabled by specifying rdma_rxe in the .machine.kernel.modules field in the machine config.
SecureBoot
Talos now supports generating a custom iso that can be used with SecureBoot. Key generation and enrolling has to be done manually.
talosctl image Command
A new set of commands was introduced to manage container images in the CRI:
talosctl image listshows list of available imagestalosctl image pullallows to pre-pull an image into the CRI
Both new commands accept --namespace flag with two possible values:
cri(default): images managed by the CRI (Kubernetes workloads)system: images managed by Talos (etcdandkubelet)
### `talosctl images` Command
The command `talosctl images` was renamed to `talosctl image default`.
The backward-compatible alias is kept in Talos 1.5, but it will be dropped in Talos 1.6.
### TPM Disk Encryption
Talos now supports encrypting STATE/EPHEMERAL with keys bound to a TPM device. The TPM device must be TPM2.0 compatible.
This is ideally supported when booting with new Talos SecureBoot UKI ISOs/Metal images. This feature would still work if SecureBoot
is not enabled for UKI images, but not recommended since there is no way to verify the trust of the bootloader.
Example machine config:
systemDiskEncryption: ephemeral: keys: - slot: 0 tpm: {} state: keys: - slot: 0 tpm: {}
### Component Updates
* Linux: 6.1.39
* containerd: 1.6.21
* runc: 1.1.8
* etcd: 3.5.9
* Kubernetes: 1.28.0-beta.0
* Flannel: 0.22.0
Talos is built with Go 1.20.6.
### `talosctl upgrade-k8s` Image Pre-pulling
The command `talosctl upgrade-k8s` now by default pre-pulls images for Kubernetes controlplane components
and kubelet. This provides an early check for missing images, and minimizes downtime during Kubernetes
rolling component update.
### Contributors
* Andrey Smirnov
* Noel Georgi
* Dmitriy Matrenichev
* Utku Ozdemir
* Artem Chernyshev
* Christian Rolland
* Steve Francis
* Nanfei Chen
* Nico Berlee
* Spencer Smith
* Alex Corcoles
* Alex Corcoles
* Alex Lubbock
* Andrei Kvapil
* Artem Chernyshev
* Budiman Jojo
* Chris Hoffman
* DJAlPee
* Dennis Marttinen
* Eirik Askheim
* Florian Klink
* Henk Kraal
* Igor Rzegocki
* James Callahan
* LukasAuerbeck
* Markus Reiter
* Michael A. Davis
* Michael Fornaro
* Niklas Wik
* Piotr Maksymiuk
* Ricky Sadowski
* Roee Klinger
* Sacha Trémoureux
* Scott Cariss
* Serge Logvinov
* Thomas Lemarchand
* Thomas Perronin
* Tim Jones
* Victor Bajada
* Walt Chen
* bdronneau
### Changes
<details><summary>194 commits</summary>
<p>
* [`d2f64af86`](https://github.com/siderolabs/talos/commit/d2f64af863e14b1d111bbeeaa6d9077aadaf6085) chore: disable cloud-images, pull in new kernel and gre module
* [`8edce4906`](https://github.com/siderolabs/talos/commit/8edce490639c213cd8c45989a5a87e3388179d37) docs: improve proxmox install guide
* [`c783458be`](https://github.com/siderolabs/talos/commit/c783458be0c90b779bcc2fe3c10e37fd3dfe01db) docs: typo dhcp -> dhcp
* [`003cbd161`](https://github.com/siderolabs/talos/commit/003cbd161196375edc8ee5033be62014eb88202e) docs: warn about secretboxEncryptionSecret in kubeadm migration guide
* [`786e86f5b`](https://github.com/siderolabs/talos/commit/786e86f5b8219ef37c5c6480d97c440cbbd53e30) refactor: rewrite the way Talos acquires the machine configuration
* [`5e13cafe5`](https://github.com/siderolabs/talos/commit/5e13cafe5b506039fdd652372b1d1f71a1c1c10b) feat: enforce kernel lockdown for UKI
* [`4d96d642f`](https://github.com/siderolabs/talos/commit/4d96d642fd9c462db2c084afee1428009d454a9e) feat: update default Kubernetes version to 1.28.0-beta.0
* [`170a73e16`](https://github.com/siderolabs/talos/commit/170a73e161eacb0e21ce95e7a7e406533552bf1d) chore: support creating qemu guest socket
* [`59ac38a6b`](https://github.com/siderolabs/talos/commit/59ac38a6bffe943fa634b124b8ec2a907f95a006) docs: add docs for installing azure ccm and csi
* [`6288cd970`](https://github.com/siderolabs/talos/commit/6288cd970e83f18e8b1cadca777deabe3ff9fc91) release(v1.5.0-alpha.2): prepare release
* [`60c304126`](https://github.com/siderolabs/talos/commit/60c304126fce95fd4995c416e7757f85505b90fb) chore: bump dependencies
* [`9ef4e5efc`](https://github.com/siderolabs/talos/commit/9ef4e5efca4b537a550a5e902fc2479ebb5e53e3) fix: log explicitly when kubelet has no nodeIP match
* [`6b39c6a4d`](https://github.com/siderolabs/talos/commit/6b39c6a4d326752f92d98388bbb418f2e50d3ddb) fix: enable compression and bump gRPC max msg size
* [`2f2eca861`](https://github.com/siderolabs/talos/commit/2f2eca86175fe98b3bf491f38ff907599333b139) chore: basic support for shutdown/poweroff flags
* [`b84277d7d`](https://github.com/siderolabs/talos/commit/b84277d7dc50b196b7cd27e7f2ceff6bf8f58a8d) docs: fix wrong capability name
* [`59d7d9344`](https://github.com/siderolabs/talos/commit/59d7d9344b27529af420ec31c7b599027cda044f) chore: use machined for `shutdown`, `poweroff`
* [`2439bfb71`](https://github.com/siderolabs/talos/commit/2439bfb719d9f50107cee500d03c90bd50649e05) chore: explicitly add timestamps to machined logs
* [`14966e718`](https://github.com/siderolabs/talos/commit/14966e718a07906ff389ecdda063fd16b22baab9) fix: skip over tpm2 1.2 devices
* [`6716e7bc0`](https://github.com/siderolabs/talos/commit/6716e7bc0ba6da31b8bc19aa4bd5edb7749b39a1) docs: update cilium documentation about KubePrism usage
* [`166d75fe8`](https://github.com/siderolabs/talos/commit/166d75fe888d334349f57dcf405b6867ca5305e2) fix: tpm2 encrypt/decrypt flow
* [`130518de7`](https://github.com/siderolabs/talos/commit/130518de71ae96cdf7d733a35e4c306940e1b845) chore: change missing renames of KubePrism
* [`5f34f5b41`](https://github.com/siderolabs/talos/commit/5f34f5b41f03d6d455d7b843084d2951c365a7ee) chore: rename api load balancer to KubePrism
* [`c8b7095c0`](https://github.com/siderolabs/talos/commit/c8b7095c01f597cd8b41964b42aa7e35c85ae307) refactor: use tpm2 library to calculate policy hash
* [`078aac92e`](https://github.com/siderolabs/talos/commit/078aac92ee30c9666235219d4623b82d66362d4d) chore: bump deps
* [`53873b844`](https://github.com/siderolabs/talos/commit/53873b8444acaa97d85c50caec625b9dbfdfef93) refactor: move ukify into Talos code
* [`d5f6fb9ff`](https://github.com/siderolabs/talos/commit/d5f6fb9ff2980df03365719d9e2690cb5ac788af) chore: add vendor info
* [`79365d9ba`](https://github.com/siderolabs/talos/commit/79365d9bacf0e8a6660cdc6b7172c79edf5f3ba3) feat: tpm2 based disk encryption
* [`06369e819`](https://github.com/siderolabs/talos/commit/06369e8195e76f96d232d077efb2bfb059b7aa96) fix: retry CRI pod removal, fix upgrade flow in the tests
* [`d32dd3a82`](https://github.com/siderolabs/talos/commit/d32dd3a820b07d58ca89c4226c986d87ff0e2b65) chore: update Go to 1.20.6
* [`8017afb10`](https://github.com/siderolabs/talos/commit/8017afb107b901a8785bccaac65d63f34e506568) feat: implement CRI image management and pre-pull on K8s upgrade
* [`1c2f19b36`](https://github.com/siderolabs/talos/commit/1c2f19b367af8b04fc49174540e5b141f4b34156) feat: update Kubernetes to 1.28.0-alpha.4
* [`94e9891c1`](https://github.com/siderolabs/talos/commit/94e9891c1bb44a1e7c285b4ccf1fad59ea05aa62) chore: bump sd-boot to v254-rc1
* [`936111ce0`](https://github.com/siderolabs/talos/commit/936111ce062d23ed11b30ea35585c0519260f9c5) fix: properly set up tls for KMS endpoint
* [`cb226eec4`](https://github.com/siderolabs/talos/commit/cb226eec46b59372c684c3946e0ba0910066573d) fix: rewrite encryption system information flow
* [`3206db528`](https://github.com/siderolabs/talos/commit/3206db52895416d1eb936caa4e953312b34b8549) feat: drop tpm simulator for ukify measure
* [`bd4f89f63`](https://github.com/siderolabs/talos/commit/bd4f89f6338423a79b7ce89bda1bd6704caaae59) fix: disable dashboard on Azure, GCP and Scaleway
* [`bdb96189f`](https://github.com/siderolabs/talos/commit/bdb96189faadc48e93146f9fd7b03e006bf1dd75) refactor: make maintenance service controller-based
* [`d23d04de2`](https://github.com/siderolabs/talos/commit/d23d04de2a5dee30ccf21efe767daf229de78bdb) feat: seed the kernel random pool from the TPM
* [`c81ce8cfb`](https://github.com/siderolabs/talos/commit/c81ce8cfb0bc7df66ffd1e1819b64dad6357d890) feat: support controlplane resources configuration
* [`74de562b2`](https://github.com/siderolabs/talos/commit/74de562b29c748fda3140871ea3fab99698341ef) fix: mount hugepages with nosuid + nodev
* [`ce63abb21`](https://github.com/siderolabs/talos/commit/ce63abb219a2fd4a9d3fdd93a13c343af123efc2) feat: add KMS assisted encryption key handler
* [`dafbe9deb`](https://github.com/siderolabs/talos/commit/dafbe9debdee2b015ed574ac4f5f722bce997b31) chore: optimize dockerfile instructions
* [`a4289e870`](https://github.com/siderolabs/talos/commit/a4289e8703d9f9e52b739b19b5b38e30a75a1454) chore: fix CLI docs generation stability
* [`2fec8388f`](https://github.com/siderolabs/talos/commit/2fec8388fc2fe3058b7b6f141ce9eae2c6a8268f) chore: bump dependencies
* [`c1b4262dd`](https://github.com/siderolabs/talos/commit/c1b4262dd60f6cbea6d46a8d0433499bf6365b36) docs: split simple and more complex getting started guides
* [`c9a9f9561`](https://github.com/siderolabs/talos/commit/c9a9f95611e38cf5c298f0d9fb0890a9bc0f8b98) refactor: extract secure boot certificate generation
* [`6be5a13d5`](https://github.com/siderolabs/talos/commit/6be5a13d5d8341c58d0d2fe75c49ba1de9bf7316) feat: implement machine config documents for event and log streaming
* [`e241be85b`](https://github.com/siderolabs/talos/commit/e241be85ba748163268eaeed2a88c8e295f84b28) fix: properly handle YAML comment stripping for multi-doc
* [`c02ada7d9`](https://github.com/siderolabs/talos/commit/c02ada7d952255bffe67b3c84f1f832253e1a3b5) fix: capabilities including `ALL` should be uppercase
* [`cbdf96d46`](https://github.com/siderolabs/talos/commit/cbdf96d461ec0cf8929c2c76614081ef042dda31) feat: support environment file for extensions
* [`35d6adcb9`](https://github.com/siderolabs/talos/commit/35d6adcb9ad7e9420a5bcdfcf3378a05c0b65d46) fix: provide stashed META values before installation
* [`258f07449`](https://github.com/siderolabs/talos/commit/258f07449050d69c369fdc71ac613a1a225807bf) fix: ukify cert generation
* [`bf3febb7e`](https://github.com/siderolabs/talos/commit/bf3febb7e2bf3ebf1bd66ee088f3885a178c953c) fix: refine OVMF search paths
* [`fbebc17f8`](https://github.com/siderolabs/talos/commit/fbebc17f8be7a3ca6c45c3c84d306e52c47d441d) fix: disable LVM backups/archive
* [`e5306ef26`](https://github.com/siderolabs/talos/commit/e5306ef2637dd2eb7464691b55159a43933c7419) chore: format and cleanup test scripts
* [`bc371ecfd`](https://github.com/siderolabs/talos/commit/bc371ecfdafe51f8cf34461caf9e6f51c0a93108) chore: add `/sbin/shutdown`
* [`0d313b973`](https://github.com/siderolabs/talos/commit/0d313b973367906b2fd4bcad4b2def79344dbd67) feat: add `reboot-mode` flag to `talosctl upgrade`
* [`7ce87f20c`](https://github.com/siderolabs/talos/commit/7ce87f20c39c615f4d23a3be23780a36008dcb19) fix: compare only basename of `os.Args[0]` in machined
* [`53389b1e7`](https://github.com/siderolabs/talos/commit/53389b1e724751e28046167b44f05c6ecf06f184) feat: auto-enroll secure boot keys
* [`d77f0bc7b`](https://github.com/siderolabs/talos/commit/d77f0bc7bbe01b7fc8efa21a7c57d73ecb94a01f) docs: fix broken link to powershell module
* [`e1b150a11`](https://github.com/siderolabs/talos/commit/e1b150a11014ddd0c60585d320dd7cd556cf2a0c) release(v1.5.0-alpha.1): prepare release
* [`8daf432b2`](https://github.com/siderolabs/talos/commit/8daf432b2957a8f9d5c59970cf68e7e8414038f5) chore: bump deps
* [`e3f3f5794`](https://github.com/siderolabs/talos/commit/e3f3f5794d276433748d0e677ed8476a54f8a98e) feat: implement revert for sd-boot
* [`d8b0903d7`](https://github.com/siderolabs/talos/commit/d8b0903d70181afc901d8ddb71bdfa964d4df2cd) docs: vagrant setup document fix
* [`fe0f46980`](https://github.com/siderolabs/talos/commit/fe0f46980f348852907218d6f49581efe4b45d49) feat: implement secure boot from disk
* [`445f5ad54`](https://github.com/siderolabs/talos/commit/445f5ad5426b125e29d86ff096695399bd01eb32) feat: support API server load balancer
* [`19bc223de`](https://github.com/siderolabs/talos/commit/19bc223de8ad878bffe539bda617d5f861af3cfe) refactor: bootloader interface, labels
* [`665702ddd`](https://github.com/siderolabs/talos/commit/665702ddd351e902336e6ab81108ea94d61db5c1) chore: fix cilium e2e tests
* [`71a548d18`](https://github.com/siderolabs/talos/commit/71a548d18013ee16394921759e819b0fabb43758) chore: generic boootloader implementation
* [`e9dbc9311`](https://github.com/siderolabs/talos/commit/e9dbc9311bcbbbcaab2c7eb7f7128013194c234a) test: bump versions for upgrade tests
* [`0a99965ef`](https://github.com/siderolabs/talos/commit/0a99965efbdd5dc0d927eb2cbae209dc143c9541) refactor: replace `uncordonNode` with controllers
* [`e858bca3a`](https://github.com/siderolabs/talos/commit/e858bca3a2f75d5035710d52229c8142f3eb6982) test: fix cilium integration tests
* [`455328d05`](https://github.com/siderolabs/talos/commit/455328d058fba3a5a8b3358820a02e2b4fabad95) fix: allow time skew for generated kubeconfig
* [`3ae05648a`](https://github.com/siderolabs/talos/commit/3ae05648ae0a2f79bebd678f85d63d4e5dafde0a) fix: usage of custom kernels
* [`0797b0d16`](https://github.com/siderolabs/talos/commit/0797b0d16808d115649a9e0e37b355bbbc2a30b5) chore: add a pipeline to test cloud-images step without a release
* [`e5a36268b`](https://github.com/siderolabs/talos/commit/e5a36268b63e588ea6cd2439bf0de356ee07d752) docs: include `allowSchedulingOnControlPlanes` on `talosctl gen config` output
* [`c74d93728`](https://github.com/siderolabs/talos/commit/c74d937280c2ec707936a72d07dc2a5dd252c5d2) chore: bump github.com/cosi-project/runtime
* [`dbaf5c699`](https://github.com/siderolabs/talos/commit/dbaf5c69978fd1d22737385ddd096798d408254c) refactor: task `labelControlPlane` into controllers
* [`1865a0c29`](https://github.com/siderolabs/talos/commit/1865a0c29663a1a78db7ef6e901d450d67a3cbe1) chore: modify some usages that are not recommended
* [`3816318b9`](https://github.com/siderolabs/talos/commit/3816318b9e2e205da0c949c0ec59a087decd0b78) chore: wrap config.Provider in atomic wrapper
* [`d04cf1978`](https://github.com/siderolabs/talos/commit/d04cf19788df20c802eadb9678570a4f15d339b2) chore: clean up unnecessary self assignment
* [`a34a94898`](https://github.com/siderolabs/talos/commit/a34a948985fed7c3054c4342c48e0e0620569625) fix: copy missing modules.* files
* [`f5e3272fc`](https://github.com/siderolabs/talos/commit/f5e3272fce641a878eefa66437d28d3ed9917ab6) refactor: task 'updateBootLoader' as controller
* [`e7be6ee7c`](https://github.com/siderolabs/talos/commit/e7be6ee7c3636eebd557d93e440e9749c8093360) refactor: make event log streaming fully reactive
* [`aef2192a6`](https://github.com/siderolabs/talos/commit/aef2192a6584e7934086eae0caab6faba52a8ac1) chore: use fixed module list
* [`c719aa231`](https://github.com/siderolabs/talos/commit/c719aa2316bffa3b614d27d630ea3d8731684f4e) fix: allow http:// for discovery service URL
* [`39134d8d5`](https://github.com/siderolabs/talos/commit/39134d8d5304cec5e1a1c5fe23f62ed957241213) chore: fix cron pipeline
* [`a61dcdbbd`](https://github.com/siderolabs/talos/commit/a61dcdbbd5c917b49c810108ff96854ad51269b1) fix: don't load RDMA over Ethernet driver by default
* [`aac441f61`](https://github.com/siderolabs/talos/commit/aac441f618ac60f2298d9e17a2044916f7da9d69) chore: update Go to 1.20.5, bump dependencies
* [`1c0c7933d`](https://github.com/siderolabs/talos/commit/1c0c7933dfef23544e2fb0fc04c4c5ad7d5b5d9b) chore: cleanup partition code
* [`31b988281`](https://github.com/siderolabs/talos/commit/31b988281efb9d0c66975bbfc20b893ad32c161d) docs: add some words about certifcates
* [`e912c0dfc`](https://github.com/siderolabs/talos/commit/e912c0dfcf515c5a6c852f4b935c9b48e61b13f1) chore: use go-blockdevice for zeroing partitions
* [`e6dde8ffc`](https://github.com/siderolabs/talos/commit/e6dde8ffc50e435a42d11eb96cf6aea2cf3520ca) feat: add network chaos to qemu development environment
* [`47986cb79`](https://github.com/siderolabs/talos/commit/47986cb79eb30c6e9c0d091ee37b2b1c2f20885c) chore: unify kexec phase
* [`3a865370f`](https://github.com/siderolabs/talos/commit/3a865370f5152243e08a69626de023f924e22689) feat: qemu secureboot
* [`5dab45e86`](https://github.com/siderolabs/talos/commit/5dab45e86917837b0991a62ab94a7b96b3ef777e) refactor: allow kmsg log streaming to be reconfigured on the fly
* [`8a02ecd4c`](https://github.com/siderolabs/talos/commit/8a02ecd4cb97bcaafe5761d464fec8a4e44b672f) chore: add endpoints balancer controller
* [`423a31ac9`](https://github.com/siderolabs/talos/commit/423a31ac9d8f28c2bcf00794bacf5446e43fc0b7) chore: deprectae `bootloader` installer option
* [`cdfece7d6`](https://github.com/siderolabs/talos/commit/cdfece7d64a9269afcc213f8d604d0b7e525cb8a) chore: optimize image compression
* [`bfc341937`](https://github.com/siderolabs/talos/commit/bfc34193762cb309ef2230f4d79673c4a56f4db5) chore: add default console args
* [`2749aeeda`](https://github.com/siderolabs/talos/commit/2749aeeda0451b286369d911696070e2cf4359e9) feat: add support for multi-doc strategic merge patching
* [`3f68485e4`](https://github.com/siderolabs/talos/commit/3f68485e44800a0c50b5855531ec10507e7d0df9) feat: add uki iso generation
* [`bab484a40`](https://github.com/siderolabs/talos/commit/bab484a405cb598d1c5f35f7602c2ac27e6efa97) feat: use stable network interface names
* [`196dfb99b`](https://github.com/siderolabs/talos/commit/196dfb99b0329d5c52fd7089e62fbfa1b09df3c6) fix: do not probe kernel args in dashboard if not needed
* [`8c071b579`](https://github.com/siderolabs/talos/commit/8c071b5796db05ecb17e46295eb2140827a58ca8) fix: skip DHCP RENEW if server IP in the lease is all zeroes
* [`badbc51e6`](https://github.com/siderolabs/talos/commit/badbc51e63b685e22fffb82ae294a35cd9f65922) refactor: rewrite code to include preliminary support for multi-doc
* [`ecce29dee`](https://github.com/siderolabs/talos/commit/ecce29dee9625842e419496e18560291ef90b1b5) fix: upgrade-k8s use internal IP first, external IP fallback
* [`3c64a5ffb`](https://github.com/siderolabs/talos/commit/3c64a5ffba2109ccf5102f71652e54def52f8dbf) chore: optimize image generation time
* [`2292f36d9`](https://github.com/siderolabs/talos/commit/2292f36d970d3edcf39b5d5f12d0051d7d75f390) chore: registry.k8s.io for coredns image
* [`f2b258b37`](https://github.com/siderolabs/talos/commit/f2b258b3733a8fcc34bccde3bf01855a512d519a) docs: document talosctl version for upgrades
* [`a0773f783`](https://github.com/siderolabs/talos/commit/a0773f783cfb3cfab8cbbeffb6449159754d785e) chore: add ukify Go script
* [`b69e38d1f`](https://github.com/siderolabs/talos/commit/b69e38d1ff069ba8fac7a6524621f8b3c7256238) chore: bump dependencies
* [`adce65103`](https://github.com/siderolabs/talos/commit/adce65103424f9f895e6b8c4858b27b3eb6bd74b) docs: add piraeus/drbd to storage documentation
* [`a982cabe7`](https://github.com/siderolabs/talos/commit/a982cabe7011c87e863f7bb0829921e927ddf782) docs: link support matrix in k8s update doc
* [`1fb29a56a`](https://github.com/siderolabs/talos/commit/1fb29a56a8abe5d72b8a3a336693e798424c63e0) fix: fail quickly if upgrade-k8s is used with multiple nodes
* [`51d931c47`](https://github.com/siderolabs/talos/commit/51d931c4705fc7ca0bdadc59d732e56fae318dda) chore: faster dev cycle
* [`dc6764871`](https://github.com/siderolabs/talos/commit/dc6764871c9e732b88f7cddc1784e943e9d952bb) refactor: move around config interfaces, make RawV1Alpha1 typed
* [`ea9a97dba`](https://github.com/siderolabs/talos/commit/ea9a97dba38c6ab2de830e3b0c3d202d22bdb668) fix: fall back to external IP when discovering nodes in upgrade-k8s
* [`0bb7e8a5c`](https://github.com/siderolabs/talos/commit/0bb7e8a5cf8b8f3bf31d9f8c3a85b4153921c126) refactor: split config.Provider into Config & Container
* [`85d8a1619`](https://github.com/siderolabs/talos/commit/85d8a1619431989eb05cb15ad01a1bc06b0f63e9) chore: bump deps
* [`39b7a56f0`](https://github.com/siderolabs/talos/commit/39b7a56f01d41d33eb96a0feb6e34d43965a99fd) chore: use 8GiB instead of 10GiB for cloud images
* [`ff11fd39c`](https://github.com/siderolabs/talos/commit/ff11fd39c723a40c01abe6348f64b1f892856175) fix: race with `udevd` and `mountUserDisks`
* [`c3fabb982`](https://github.com/siderolabs/talos/commit/c3fabb9829d12353770d6436a1d726b15820ebce) chore: update default image sizes to 10GB for all "cloud" images
* [`10155c390`](https://github.com/siderolabs/talos/commit/10155c390e87898098426600709657fbd51e02e8) feat: enable xfs project quota support, kubelet feature
* [`eba818564`](https://github.com/siderolabs/talos/commit/eba81856427dd3f6c0cf317f027e63d65a079029) release(v1.5.0-alpha.0): prepare release
* [`383471c3e`](https://github.com/siderolabs/talos/commit/383471c3e956ff6e077a1de75b02a50835fbf352) feat: update default Kubernetes to v1.27.2
* [`8f68d1abe`](https://github.com/siderolabs/talos/commit/8f68d1abeff83c3ff0e6c5d9f61cb14807b44ca5) chore: bump deps
* [`e0c1585d3`](https://github.com/siderolabs/talos/commit/e0c1585d3047ef213134331dc57f8e2e8c23a93d) feat: create azure community gallery image version on release
* [`dd8336c9e`](https://github.com/siderolabs/talos/commit/dd8336c9ee7f8a3a44d45c9f9e3cbbf741f84c44) fix: refresh kubelet self-issued serving certificates
* [`bb02dd263`](https://github.com/siderolabs/talos/commit/bb02dd263cbc5e7e3839148d86a4a0a5f7ea998b) chore: drop deprecated stuff for Talos 1.5
* [`61cad8673`](https://github.com/siderolabs/talos/commit/61cad86731e5c0aa80d7df41ea02d0b7ff579c45) chore: bump deps
* [`01dfd3af7`](https://github.com/siderolabs/talos/commit/01dfd3af7d64dacd179d17d9d5eaf4bc44cf72af) feat: update etcd to v3.5.9
* [`aa65fbb8a`](https://github.com/siderolabs/talos/commit/aa65fbb8a1752a70e7bac4e4e9872f35e88d1cc9) chore: update KUBECTL_URL to reflect the community bucket
* [`cc3128d94`](https://github.com/siderolabs/talos/commit/cc3128d944abacfb633bc783b7fed6d0a6f80661) chore: bump kernel to 6.1.28
* [`97fffaf78`](https://github.com/siderolabs/talos/commit/97fffaf78a0b9a1dc67709de11d37ea20aefde59) chore: use ctest.UpdateWithConflicts instead of plain UpdateWithConflicts
* [`3b36993b9`](https://github.com/siderolabs/talos/commit/3b36993b9926392f4290e6fabc82e635f4c98149) fix: rlimit nofile test
* [`45e6e27af`](https://github.com/siderolabs/talos/commit/45e6e27af75746fd0cc8b0f98a2d14579eb0ed40) chore: bump runtime
* [`4f720d465`](https://github.com/siderolabs/talos/commit/4f720d46532af39165fc5051052d5c42595d91af) fix: revert: set rlimit explicitly in wrapperd
* [`a2565f674`](https://github.com/siderolabs/talos/commit/a2565f67416e9b9bc22f2d5506df9ea7771c0c8c) fix: set rlimit explicitly in wrapperd
* [`cdfc242b8`](https://github.com/siderolabs/talos/commit/cdfc242b8354f4cc4e7ce51bbe3a8fb20b35995d) chore: re-enable Go buildid
* [`e67f3f5c5`](https://github.com/siderolabs/talos/commit/e67f3f5c5453f947355194ea9656c15ff008c35e) feat: linux 6.1.27, containerd 1.6.21, go 1.20.4
* [`55ae59a0a`](https://github.com/siderolabs/talos/commit/55ae59a0ad71293676b3efed461f5ab98101401a) fix: properly skip/cleanup controlplane configs for workers
* [`64eade9bd`](https://github.com/siderolabs/talos/commit/64eade9bde271bce4e629e6ac09407c8c42e01be) chore: clean up unused constant
* [`62c6e9655`](https://github.com/siderolabs/talos/commit/62c6e9655cb639d4993aaa4c9b364342688599cb) feat: introduce siderolink config resource & reconnect
* [`860002c73`](https://github.com/siderolabs/talos/commit/860002c7352bedd10845e11da37c80685ff0e720) fix: don't reload control plane pods on cert SANs changes
* [`d43c61e80`](https://github.com/siderolabs/talos/commit/d43c61e80f5b05b81f2a021cdfe012e500c3d98e) fix: enforce nolock option for all NFS mounts by default
* [`339986db9`](https://github.com/siderolabs/talos/commit/339986db9d3675b78ce0d268f799ad654862fb0f) fix: inhibit timer to follow kubelet timer
* [`cbf6dc100`](https://github.com/siderolabs/talos/commit/cbf6dc1009ad47a2804774839e4e0301efa8ac78) fix: set timeout for unmount calls
* [`b58f913d5`](https://github.com/siderolabs/talos/commit/b58f913d5f4b8ecf39be183d0bafe1109f0f0737) fix: set the static pod priority as values
* [`f8a7a5b6b`](https://github.com/siderolabs/talos/commit/f8a7a5b6bf4138a33cbe5c9afe85db99de167aec) docs: add information about KubeSpan ports and topology
* [`2bad74d64`](https://github.com/siderolabs/talos/commit/2bad74d6423c083ec34f1b422f23b0024d5f8798) docs: add how to on scaling down
* [`7442ff8b0`](https://github.com/siderolabs/talos/commit/7442ff8b095ef1337f54332a71d08053a2832144) chore: fix typos inteface -> interface (docs and tests)
* [`d4e94f7a1`](https://github.com/siderolabs/talos/commit/d4e94f7a15acf7f3c9e7532b067cdacd0e805bec) fix: add back required TARGETARCH for installer
* [`e6fffda01`](https://github.com/siderolabs/talos/commit/e6fffda01385a2daaa901a5742f30a4edc9186a7) chore: linux 6.1.26, runc 1.1.7
* [`344746ae2`](https://github.com/siderolabs/talos/commit/344746ae2fa038b704d02fec04c3d358762fe938) fix: bump max inhibit delay to 20 min
* [`d9bdea2b5`](https://github.com/siderolabs/talos/commit/d9bdea2b54772f067783ee64eb85c834957d386a) chore: fork docs and compatibility modules for Talos 1.5
* [`3d99610fc`](https://github.com/siderolabs/talos/commit/3d99610fc9b0d0084be822be29bb1bf2fbe85833) docs: document building, verifying image and process caps
* [`014008ea2`](https://github.com/siderolabs/talos/commit/014008ea25208afbeabb42ef89238802705ad4e0) fix: udevd rules trigger
* [`9b36bb613`](https://github.com/siderolabs/talos/commit/9b36bb613b44f182e47ae63bc74e4a8b6342d68d) feat: update Linux to 6.1.25, fix virtio on arm64
* [`08ec66c55`](https://github.com/siderolabs/talos/commit/08ec66c55ccca3f9aa82a9703ebf183913b19a7e) feat: clean up (garbage collect) system images which are not referenced
* [`b097efcde`](https://github.com/siderolabs/talos/commit/b097efcde29c20cdc4fed23fe8366bd683db634c) fix: display correct number of machines on dashboard
* [`cad43f0ad`](https://github.com/siderolabs/talos/commit/cad43f0ad3bc2ede8a6ae81767c9226b6bc69f19) chore: remove k8s master label
* [`e296a566e`](https://github.com/siderolabs/talos/commit/e296a566e6efb0cbdd119e73aff1feaa772d38bd) fix: support kernel userspace module loading
* [`103f0ffdd`](https://github.com/siderolabs/talos/commit/103f0ffdd3ebd57a5086852f3502a8a7d4428faa) feat: add startup probes to controller-manager and scheduler
* [`5a1ae8aae`](https://github.com/siderolabs/talos/commit/5a1ae8aae89e54d5540586d6f2e99ef3e80a72eb) chore: bump dependences
* [`ec8c8dbaf`](https://github.com/siderolabs/talos/commit/ec8c8dbafcdaf63d036bdba92fa153d4d1c90100) chore: fix container image reproducibility
* [`f661d8487`](https://github.com/siderolabs/talos/commit/f661d84877e6db5bc8856b982990926dcbfe949c) fix: allow `talosctl cp` to handle special files in `/proc`
* [`2d824b563`](https://github.com/siderolabs/talos/commit/2d824b5639a4b8c3b673d13b08b2b97c69aafe0d) fix: do not show control plane status for workers on dashboard
* [`e5491ddad`](https://github.com/siderolabs/talos/commit/e5491ddadeb1776bd5c17dd35917e05ec4847d0f) docs: update documentation for nocloud
* [`7a004a6f7`](https://github.com/siderolabs/talos/commit/7a004a6f7f47fa5d17e855eb02650754d8411574) fix: parse errors correctly
* [`374ef5385`](https://github.com/siderolabs/talos/commit/374ef53853947811dc221d99751cf0e16294508c) test: submit verbose flag to e2e tests
* [`e1d38b6fe`](https://github.com/siderolabs/talos/commit/e1d38b6febf26fe31a6b9d6ed8f9b6bdba29aa3b) feat: show template URL in dashboard config URL tab
* [`45d7f0ce9`](https://github.com/siderolabs/talos/commit/45d7f0ce95454ce85c403fc493ddb97e4d478238) docs: fix the latest url
* [`96efbf147`](https://github.com/siderolabs/talos/commit/96efbf14769579d514ef9c75d01d9f44d276113a) docs: activate 1.4.0 docs by default
* [`8c1f515b1`](https://github.com/siderolabs/talos/commit/8c1f515b1b8e40bce42e2fc04755afe5bf8a56aa) feat: update Linux to 6.1.24
* [`8689bef5f`](https://github.com/siderolabs/talos/commit/8689bef5f10839091cf131edb6c8efad4ccba034) docs: update documentation for Talos 1.4
* [`a781dfb8e`](https://github.com/siderolabs/talos/commit/a781dfb8e3ded67edcb2a6a1048bfe76c6bd0d24) feat: update Kubernetes to 1.27.1
* [`a737dd83a`](https://github.com/siderolabs/talos/commit/a737dd83a4cd7549f85f8df0882f1c9a4446060d) chore: typo in `compatibility.ParseKubernetesVersion`
* [`f14928b0a`](https://github.com/siderolabs/talos/commit/f14928b0a9dd3d85664605f4f6a206236ea94614) fix: fix dashboard crash when a non-existent node is specified
* [`3e406d9b0`](https://github.com/siderolabs/talos/commit/3e406d9b07c0e67a2fb61e612bc3f378f3c35247) feat: update etcd to v3.5.8
* [`bd1cff3e8`](https://github.com/siderolabs/talos/commit/bd1cff3e83530b9b89b27d8083ea8f3f0cf6ede4) chore: remove Go buildid
* [`e31f7f50b`](https://github.com/siderolabs/talos/commit/e31f7f50b1b455beb98cd25859a44bbbccc1ff64) feat: update Kubernetes to 1.27.0
* [`aa3640d74`](https://github.com/siderolabs/talos/commit/aa3640d74ce2e3619476453381909fa3520eb87d) docs: update storage.md
* [`07bb61e60`](https://github.com/siderolabs/talos/commit/07bb61e60c53b267756dc97874b9c9554f2b1486) chore: module-sig-verify cleanup
* [`5e9d836c3`](https://github.com/siderolabs/talos/commit/5e9d836c3d075c3edb2d48b2868c31a1c963e2de) chore: add kernel module signtaure verification
* [`3cd1c6bb0`](https://github.com/siderolabs/talos/commit/3cd1c6bb0b83e5747a7356140a44b16deb4727e6) fix: send 'STOP' event on phase end
* [`5176d27dc`](https://github.com/siderolabs/talos/commit/5176d27dc566d8689bb305398da7250269ebe9a3) feat: update Kubernetes to 1.27.0-rc.1
* [`2c55550a6`](https://github.com/siderolabs/talos/commit/2c55550a66b49b49d8dc95b83516b7c0f8107300) fix: quote ISO kernel args for GRUB
* [`319d76e38`](https://github.com/siderolabs/talos/commit/319d76e38978406d8d37e89ada2c403969d6c972) fix: respect BROWSER=echo in client auth interceptor
* [`4e4ace839`](https://github.com/siderolabs/talos/commit/4e4ace839c0f558e7b00979fa4c64c32985aa3ce) chore: update Go to 1.20.3
* [`170f73899`](https://github.com/siderolabs/talos/commit/170f73899a3bf29e9c6f76fdc5e510be08edf4aa) fix: correctly parse static pod phase
* [`c3a595d5b`](https://github.com/siderolabs/talos/commit/c3a595d5b7d3c7c3091229caef6b2553416edb56) fix: improve action tracking post checks
* [`eb01edbc8`](https://github.com/siderolabs/talos/commit/eb01edbc8a0ef5810693afe450861d5b63877b72) fix: rework DHCP flow
* [`e095150a6`](https://github.com/siderolabs/talos/commit/e095150a6e34cbdc805a2cac85ec7f28f98629b4) test: bump CAPI components versions
</p>
</details>
### Changes since v1.5.0-alpha.2
<details><summary>9 commits</summary>
<p>
* [`d2f64af86`](https://github.com/siderolabs/talos/commit/d2f64af863e14b1d111bbeeaa6d9077aadaf6085) chore: disable cloud-images, pull in new kernel and gre module
* [`8edce4906`](https://github.com/siderolabs/talos/commit/8edce490639c213cd8c45989a5a87e3388179d37) docs: improve proxmox install guide
* [`c783458be`](https://github.com/siderolabs/talos/commit/c783458be0c90b779bcc2fe3c10e37fd3dfe01db) docs: typo dhcp -> dhcp
* [`003cbd161`](https://github.com/siderolabs/talos/commit/003cbd161196375edc8ee5033be62014eb88202e) docs: warn about secretboxEncryptionSecret in kubeadm migration guide
* [`786e86f5b`](https://github.com/siderolabs/talos/commit/786e86f5b8219ef37c5c6480d97c440cbbd53e30) refactor: rewrite the way Talos acquires the machine configuration
* [`5e13cafe5`](https://github.com/siderolabs/talos/commit/5e13cafe5b506039fdd652372b1d1f71a1c1c10b) feat: enforce kernel lockdown for UKI
* [`4d96d642f`](https://github.com/siderolabs/talos/commit/4d96d642fd9c462db2c084afee1428009d454a9e) feat: update default Kubernetes version to 1.28.0-beta.0
* [`170a73e16`](https://github.com/siderolabs/talos/commit/170a73e161eacb0e21ce95e7a7e406533552bf1d) chore: support creating qemu guest socket
* [`59ac38a6b`](https://github.com/siderolabs/talos/commit/59ac38a6bffe943fa634b124b8ec2a907f95a006) docs: add docs for installing azure ccm and csi
</p>
</details>
### Changes from siderolabs/crypto
<details><summary>2 commits</summary>
<p>
* [`8f77da3`](https://github.com/siderolabs/crypto/commit/8f77da30a5193d207a6660b562a273a06d73aae0) feat: add a method to load PEM key from file
* [`c03ff58`](https://github.com/siderolabs/crypto/commit/c03ff58af5051acb9b56e08377200324a3ea1d5e) feat: add a way to represent redacted x509 private keys
</p>
</details>
### Changes from siderolabs/discovery-api
<details><summary>1 commit</summary>
<p>
* [`5e3db3c`](https://github.com/siderolabs/discovery-api/commit/5e3db3c1a656ebdc717494e5384f10c7b11eef0f) chore: app optional ControlPlane data
</p>
</details>
### Changes from siderolabs/discovery-client
<details><summary>1 commit</summary>
<p>
* [`9ba5f03`](https://github.com/siderolabs/discovery-client/commit/9ba5f033a47d41448153962c5fe22db2d9a8a00c) chore: app optional ControlPlane data
</p>
</details>
### Changes from siderolabs/extras
<details><summary>3 commits</summary>
<p>
* [`f415aac`](https://github.com/siderolabs/extras/commit/f415aac20c245592612a02157d247cb2dd4a5d45) feat: update Go to 1.20.6
* [`a73d524`](https://github.com/siderolabs/extras/commit/a73d5243f443fd32376780bf2a4f97b08f28917c) feat: update Go to 1.20.5
* [`36c8ac4`](https://github.com/siderolabs/extras/commit/36c8ac4ab98300059acaad501c2adc8abd39179f) chore: update to Go 1.20.3
</p>
</details>
### Changes from siderolabs/gen
<details><summary>3 commits</summary>
<p>
* [`f9f5805`](https://github.com/siderolabs/gen/commit/f9f5805973d30fe6bbac2f4a79ad4197fe59970e) chore: bump rekres and add functions from exp
* [`b968d21`](https://github.com/siderolabs/gen/commit/b968d21c9671d97e54317f80cdf781d6f963e44b) feat: add `TryRecv` and `RecvWithContext` functions
* [`476dfea`](https://github.com/siderolabs/gen/commit/476dfeae70882e1ca6e5cfed3d6e12dc36841a26) feat: add foreach and clear to lazymap
</p>
</details>
### Changes from siderolabs/go-blockdevice
<details><summary>4 commits</summary>
<p>
* [`fbb01f7`](https://github.com/siderolabs/go-blockdevice/commit/fbb01f714bdc9c32ea3459345b730b1043ce10c0) fix: properly detect token not found error
* [`3e08968`](https://github.com/siderolabs/go-blockdevice/commit/3e089682439e885c6386f833e35728ce54daff44) fix: do not attach token to a key slot
* [`f2c419e`](https://github.com/siderolabs/go-blockdevice/commit/f2c419e81dcba3c5be007130f677d2075e2aec3c) feat: support LUKS token management
* [`076874a`](https://github.com/siderolabs/go-blockdevice/commit/076874a155ad44d764d25081125f950e8194d023) chore: resolve blockdevice symlinks
</p>
</details>
### Changes from siderolabs/go-debug
<details><summary>1 commit</summary>
<p>
* [`43d9100`](https://github.com/siderolabs/go-debug/commit/43d9100eba3a30ff0d7f1bed0058e6631243cc47) chore: allow enabling pprof manually
</p>
</details>
### Changes from siderolabs/go-kubernetes
<details><summary>2 commits</summary>
<p>
* [`69fea5b`](https://github.com/siderolabs/go-kubernetes/commit/69fea5b840fb51aa08e5fbf380fa924b9d444094) feat: support upgrades to Kubernetes 1.28
* [`5a3df5b`](https://github.com/siderolabs/go-kubernetes/commit/5a3df5b002d74ba9f4d773dc1278047481b1d4ba) fix: remove removed APIs for 1.27 upgrade
</p>
</details>
### Changes from siderolabs/go-loadbalancer
<details><summary>6 commits</summary>
<p>
* [`574126c`](https://github.com/siderolabs/go-loadbalancer/commit/574126cbf0e1e45a06cabaf602e5070dd7d441e2) chore: add 0.1ms tier and fix tiers
* [`5301800`](https://github.com/siderolabs/go-loadbalancer/commit/5301800a874e853d97f8e12195558f79c97c0beb) chore: fix logging and tests
* [`b23a173`](https://github.com/siderolabs/go-loadbalancer/commit/b23a1733aa9b303bda82175b4f5e9f8a4765a27b) chore: replace std log with zap
* [`1a2f374`](https://github.com/siderolabs/go-loadbalancer/commit/1a2f374df7804dffe683e8be90e9829f2dfb5e95) feat: add multi-tier scoring based for generic List
* [`56a27da`](https://github.com/siderolabs/go-loadbalancer/commit/56a27da7083139b71898f4f9207dc40088e8c815) chore: move to siderolabs/tcpproxy of inet.af/tcpproxy
* [`f3a0e24`](https://github.com/siderolabs/go-loadbalancer/commit/f3a0e2411e08eef9c79876f3dc6e09e770710379) fix: use SO_LINGER option when doing TCP healthchecks
</p>
</details>
### Changes from siderolabs/kms-client
<details><summary>3 commits</summary>
<p>
* [`50064b6`](https://github.com/siderolabs/kms-client/commit/50064b67ac73c0a3f6f89c6a44ef914711107df0) fix: pass context to the key handler in the server wrapper
* [`83e0a2e`](https://github.com/siderolabs/kms-client/commit/83e0a2ec6b06668940ec31d64491d9b8a630524b) feat: define API and add reference implementation for KMS server
* [`8c37ee8`](https://github.com/siderolabs/kms-client/commit/8c37ee83099a6563197c89166b0ea596eebf0598) Initial commit
</p>
</details>
### Changes from siderolabs/pkgs
<details><summary>41 commits</summary>
<p>
* [`fedfafa`](https://github.com/siderolabs/pkgs/commit/fedfafa77de930ae7945e16ace61c13568024ac5) feat: add thunderbolt/USB4 module
* [`17d5b94`](https://github.com/siderolabs/pkgs/commit/17d5b94cc7b3e9f9c86a9f5080dcc70f095659fe) feat: enable NET_IPGRE kernel config
* [`84cdfb6`](https://github.com/siderolabs/pkgs/commit/84cdfb6d270201b166dacdcd928669d028e12deb) feat: add 'zfs' package
* [`d0eaedc`](https://github.com/siderolabs/pkgs/commit/d0eaedcb5cd2510925e4609369e25c3e3572d5fe) feat: enable DM_RAID kernel config
* [`d5e0fad`](https://github.com/siderolabs/pkgs/commit/d5e0fad0d59dfb8d2386ab2ad6c7df749e0b9413) feat: update dependencies
* [`c644633`](https://github.com/siderolabs/pkgs/commit/c644633324ed1e56ab19f146c04ed3984736a88a) feat: enable multi-gen lru by default
* [`75696ba`](https://github.com/siderolabs/pkgs/commit/75696ba81581ef0f1af668db565a08950145e45d) feat: update Go to 1.20.6
* [`205cab6`](https://github.com/siderolabs/pkgs/commit/205cab6d0e6be2721c5338bef232e3345d3a299f) chore: feat use new sd-boot
* [`fb817fe`](https://github.com/siderolabs/pkgs/commit/fb817fe20789ca48895275e1877808a9206630dd) fix: enable USB attached SCSI driver on x86 systems
* [`43451e6`](https://github.com/siderolabs/pkgs/commit/43451e68a0ddf634b90c7c12cca9437faa52d183) chore: bump dependencies
* [`eca94f8`](https://github.com/siderolabs/pkgs/commit/eca94f8f1b9c3ceb62efb53fd1260d49ce17f1dd) feat: enable sriov
* [`5a8e8e5`](https://github.com/siderolabs/pkgs/commit/5a8e8e594248847bb606ca07b3ea29e187e20d26) feat: enable VMWARE/HYPERV vsockets
* [`edd725a`](https://github.com/siderolabs/pkgs/commit/edd725a0f9d07d39256d98a67be5dc4c56631078) chore: bump deps
* [`c0ac69b`](https://github.com/siderolabs/pkgs/commit/c0ac69b70cfac3cdcf100a35f6d766c5ae47d950) feat: enable CONFIG_NVME_{MULTIPATH|AUTH}
* [`f7cd916`](https://github.com/siderolabs/pkgs/commit/f7cd916b47975e61c6732079c1c5c4684dfb8c96) fix: bump drbd to 9.2.4
* [`a56d15a`](https://github.com/siderolabs/pkgs/commit/a56d15ad626b6e76a137636d6088361be9a73a9f) fix: copy missing `modules.*` files
* [`1eefa66`](https://github.com/siderolabs/pkgs/commit/1eefa664fc7c65491e956a6f403ada774e73a7d3) feat: build isb modem drivers as module
* [`a859f4f`](https://github.com/siderolabs/pkgs/commit/a859f4fb257e17fa19b1c10efcae594d33a86618) fix: build RDMA_RXE as a module
* [`5fb5e95`](https://github.com/siderolabs/pkgs/commit/5fb5e9517de9fe35e383b96e92fa873aa045a845) feat: bump dependencies
* [`39a64b2`](https://github.com/siderolabs/pkgs/commit/39a64b23e2c8689c44b9891b1e70149b8d003655) feat: update Linux to 6.1.31, add GENEVE for arm64
* [`97177be`](https://github.com/siderolabs/pkgs/commit/97177be803cc91c8fabccfec575b7d920bc78c38) feat: update Linux to 6.1.30
* [`b1f9d4e`](https://github.com/siderolabs/pkgs/commit/b1f9d4e717fbd0132b820d45c226ca643d7f577e) chore: prevent unsigned kexec with secureboot
* [`9232a42`](https://github.com/siderolabs/pkgs/commit/9232a425b85b1058cd38eab30304f6cf243ab32c) feat: add reproducibility pipelines
* [`702d7a7`](https://github.com/siderolabs/pkgs/commit/702d7a7e90099d8fdc9cc4ba50e86c8ba6e91d77) chore: bump deps
* [`7958db1`](https://github.com/siderolabs/pkgs/commit/7958db1549a7c7560eeeb8f9c06d3be9487d8804) chore: copy over sd-boot and sd-stub from tools
* [`813b3c3`](https://github.com/siderolabs/pkgs/commit/813b3c3d3276d0d9156919307e9ffe521925d40b) chore: revert xfsprogs
* [`0cc78ab`](https://github.com/siderolabs/pkgs/commit/0cc78ab82ce920c8fa5654c73738050107e190bb) chore: bump kernel to 6.1.28
* [`70189e3`](https://github.com/siderolabs/pkgs/commit/70189e3df555fed4afade93798d72cd31aad99c5) chore: bump deps
* [`c5d3bf1`](https://github.com/siderolabs/pkgs/commit/c5d3bf1985b49e688d29d06db6730834f65ee480) feat: add sd-stub and sd-boot
* [`30a7ac2`](https://github.com/siderolabs/pkgs/commit/30a7ac2974fb7580e83819c76502fde77d777ea0) feat: update Linux 6.1.27, containerd 1.6.21
* [`fbc6ee5`](https://github.com/siderolabs/pkgs/commit/fbc6ee55b6ffae44c117255901ab0fbecae79cc3) chore: bump deps
* [`82b9489`](https://github.com/siderolabs/pkgs/commit/82b9489b88b108f144b45fb55432576bfd767f91) chore: bump dependencies
* [`f37e520`](https://github.com/siderolabs/pkgs/commit/f37e5205cf10fe10296e86565fa018d149f5d8c4) feat: update Linux to 6.1.25
* [`3920b16`](https://github.com/siderolabs/pkgs/commit/3920b163a5c6a6d7c7969155a909a7b2122e65f6) feat: add multi-gen LRU kernel support
* [`988f1ec`](https://github.com/siderolabs/pkgs/commit/988f1ecf95536fb259cbd79e044a556728bc7332) feat: update Linux to 6.1.24
* [`5327d12`](https://github.com/siderolabs/pkgs/commit/5327d1263680f76706ea667906ca08222c8398da) fix: remove FB_NVIDIA drivers, Linux 6.1.23
* [`4eae958`](https://github.com/siderolabs/pkgs/commit/4eae958770573613bc29568d130be7aaa775e530) chore: copy over the kernel signing public key
* [`174f8fc`](https://github.com/siderolabs/pkgs/commit/174f8fc9c80d871f1c03ea0a53dc8b6eb7112ccf) chore: update Go to 1.20.3
* [`41629b0`](https://github.com/siderolabs/pkgs/commit/41629b03e82bfb77623a812000ef8e98d15d56fa) chore: reorder pkgs for better kernel caching
* [`b483a6b`](https://github.com/siderolabs/pkgs/commit/b483a6b01f539b0da13ca09882015044bff24e41) feat: build 'snp.efi' for iPXE
* [`fb853ff`](https://github.com/siderolabs/pkgs/commit/fb853ff6b1194cdc1f2412c776347cf4b55c3336) feat: update containerd to 1.6.20
</p>
</details>
### Changes from siderolabs/tools
<details><summary>20 commits</summary>
<p>
* [`dc7dd9e`](https://github.com/siderolabs/tools/commit/dc7dd9e5b949f6f5d7626f11cb3b001526e8d1de) chore: remove libseccomp
* [`e27c249`](https://github.com/siderolabs/tools/commit/e27c249c3213af6d12be4fb440a8f896c8e1b3d4) feat: update Go to 1.20.6
* [`9b6d512`](https://github.com/siderolabs/tools/commit/9b6d5123fa1e28160019a4b6e8b0f04482c49dc0) feat: use systemd 254-rc1
* [`cd3b692`](https://github.com/siderolabs/tools/commit/cd3b692b0cf5c663548cbe75db43036e11ee1014) chore: bump deps
* [`c1027a6`](https://github.com/siderolabs/tools/commit/c1027a63d058b77f6cce7351fa7b63d4c94883ad) chore: remove sbsign
* [`e0c76c0`](https://github.com/siderolabs/tools/commit/e0c76c096d06ef11afdb54287d5f15add108399b) chore: bump dependencies
* [`7d0cd58`](https://github.com/siderolabs/tools/commit/7d0cd58b34bba6b9415db5e39bed351e7f00d44d) feat: update Go to 1.20.5
* [`150efc2`](https://github.com/siderolabs/tools/commit/150efc22508043bfadc9d84a8c3c5fee6c2aac5f) chore: remove non needed tools
* [`88ebb40`](https://github.com/siderolabs/tools/commit/88ebb40dd348b6c9e4dc5551b616e4a1892b4e42) feat: add swtpm
* [`4c5d7fe`](https://github.com/siderolabs/tools/commit/4c5d7feb88dcbae2f7bf45f51f9e5e1ba339abac) chore: use same source epoch everywhere
* [`2e46e5b`](https://github.com/siderolabs/tools/commit/2e46e5be764f8180a0762a5ab080ccff04534a8a) feat: add reproducibility pipelines
* [`c6a41b6`](https://github.com/siderolabs/tools/commit/c6a41b6c5108d676f8573d3dd47ee29ae46e5cc0) fix: add sd-stub assertion patch
* [`d2dde48`](https://github.com/siderolabs/tools/commit/d2dde48f72343aa3c541336f5319b8e649e80c87) chore: bump deps
* [`8e45ad7`](https://github.com/siderolabs/tools/commit/8e45ad75ea78e353ca3eae21b18da9a42d1edf49) feat: add sbsign
* [`271c4a6`](https://github.com/siderolabs/tools/commit/271c4a66b6987d9de2c0d1d69891b5ff277ebd43) feat: add sd-tools
* [`eedc294`](https://github.com/siderolabs/tools/commit/eedc294967d415cca40d4c427d3521cd198661d7) chore: bump deps
* [`81b09a5`](https://github.com/siderolabs/tools/commit/81b09a5ab204f16306c980eeff518a0d1a37ddf2) feat: add libcap and gnuefi
* [`47b0fd3`](https://github.com/siderolabs/tools/commit/47b0fd3e364d4fbcfffe10965f740db7acd82f70) chore: bump go to 1.20.4
* [`ff4cf2b`](https://github.com/siderolabs/tools/commit/ff4cf2beabab310365ad9887abb6234570f5092a) chore: bump deps
* [`1563556`](https://github.com/siderolabs/tools/commit/1563556b8f8fdf20d8aa58ac5340104c7ffe732e) feat: update Go to 1.20.3
</p>
</details>
### Dependency Changes
* **github.com/BurntSushi/toml** v1.2.1 -> v1.3.2
* **github.com/aws/aws-sdk-go** v1.44.232 -> v1.44.304
* **github.com/beevik/ntp** v0.3.0 -> v1.2.0
* **github.com/benbjohnson/clock** v1.1.0 -> v1.3.5
* **github.com/cenkalti/backoff/v4** v4.2.0 -> v4.2.1
* **github.com/containerd/containerd** v1.6.19 -> v1.6.21
* **github.com/containerd/typeurl/v2** v2.1.1 **_new_**
* **github.com/containernetworking/plugins** v1.2.0 -> v1.3.0
* **github.com/cosi-project/runtime** v0.3.0 -> v0.3.1-alpha.8
* **github.com/docker/distribution** v2.8.1 -> v2.8.2
* **github.com/docker/docker** v23.0.2 -> v24.0.4
* **github.com/ecks/uefi** caef65d070eb **_new_**
* **github.com/emicklei/dot** v1.4.2 -> v1.5.0
* **github.com/foxboron/go-uefi** 32187aa193d0 **_new_**
* **github.com/google/go-tpm** v0.9.0 **_new_**
* **github.com/hashicorp/go-envparse** v0.1.0 **_new_**
* **github.com/hetznercloud/hcloud-go** v1.41.0 -> v1.48.0
* **github.com/insomniacslk/dhcp** 74ae03f2425e -> 5648422c16cd
* **github.com/jsimonetti/rtnetlink** v1.3.1 -> v1.3.4
* **github.com/mattn/go-isatty** v0.0.18 -> v0.0.19
* **github.com/mdlayher/ethtool** ba3b4bc2e02c -> v0.1.0
* **github.com/mdlayher/genetlink** v1.3.1 -> v1.3.2
* **github.com/mdlayher/netlink** v1.7.1 -> v1.7.2
* **github.com/mdlayher/netx** c711c2f8512f -> 7e21880baee8
* **github.com/nberlee/go-netstat** v0.1.1 -> v0.1.2
* **github.com/opencontainers/go-digest** v1.0.0 **_new_**
* **github.com/opencontainers/image-spec** v1.1.0-rc2 -> v1.1.0-rc4
* **github.com/packethost/packngo** v0.29.0 -> v0.30.0
* **github.com/prometheus/procfs** v0.9.0 -> v0.11.0
* **github.com/rivo/tview** 281d14d896d7 -> 6cc0565babaf
* **github.com/rs/xid** v1.4.0 -> v1.5.0
* **github.com/scaleway/scaleway-sdk-go** v1.0.0-beta.15 -> v1.0.0-beta.19
* **github.com/siderolabs/crypto** v0.4.0 -> v0.4.1
* **github.com/siderolabs/discovery-api** v0.1.2 -> v0.1.3
* **github.com/siderolabs/discovery-client** v0.1.4 -> v0.1.5
* **github.com/siderolabs/extras** v1.4.0-1-g9b07505 -> v1.5.0-alpha.0-2-gf415aac
* **github.com/siderolabs/gen** v0.4.3 -> v0.4.5
* **github.com/siderolabs/go-blockdevice** v0.4.4 -> v0.4.6
* **github.com/siderolabs/go-debug** v0.2.2 -> v0.2.3
* **github.com/siderolabs/go-kubernetes** v0.2.0 -> v0.2.2
* **github.com/siderolabs/go-loadbalancer** v0.2.1 -> v0.3.2
* **github.com/siderolabs/kms-client** v0.1.0 **_new_**
* **github.com/siderolabs/pkgs** v1.4.1-5-ga333a84 -> v1.5.0-alpha.0-40-gfedfafa
* **github.com/siderolabs/talos/pkg/machinery** v1.4.0 -> v1.5.0-alpha.2
* **github.com/siderolabs/tools** v1.4.0-1-g955aabc -> v1.5.0-alpha.0-19-gdc7dd9e
* **github.com/spf13/cobra** v1.6.1 -> v1.7.0
* **github.com/stretchr/testify** v1.8.2 -> v1.8.4
* **github.com/vmware-tanzu/sonobuoy** v0.56.16 -> v0.56.17
* **github.com/vmware/govmomi** v0.30.4 -> v0.30.6
* **go.etcd.io/etcd/api/v3** v3.5.8 -> v3.5.9
* **go.etcd.io/etcd/client/pkg/v3** v3.5.8 -> v3.5.9
* **go.etcd.io/etcd/client/v3** v3.5.8 -> v3.5.9
* **go.etcd.io/etcd/etcdutl/v3** v3.5.8 -> v3.5.9
* **golang.org/x/net** v0.8.0 -> v0.12.0
* **golang.org/x/sync** v0.1.0 -> v0.3.0
* **golang.org/x/sys** v0.6.0 -> v0.10.0
* **golang.org/x/term** v0.6.0 -> v0.10.0
* **golang.org/x/text** v0.11.0 **_new_**
* **golang.zx2c4.com/wireguard/wgctrl** 9c5414ab4bde -> 925a1e7659e6
* **google.golang.org/grpc** v1.54.0 -> v1.56.2
* **google.golang.org/protobuf** v1.30.0 -> v1.31.0
* **k8s.io/api** v0.27.1 -> v0.28.0-alpha.4
* **k8s.io/apimachinery** v0.27.1 -> v0.28.0-alpha.4
* **k8s.io/apiserver** v0.27.1 -> v0.28.0-alpha.4
* **k8s.io/client-go** v0.27.1 -> v0.28.0-alpha.4
* **k8s.io/component-base** v0.27.1 -> v0.28.0-alpha.4
* **k8s.io/cri-api** v0.27.1 -> v0.28.0-alpha.4
* **k8s.io/klog/v2** v2.90.1 -> v2.100.1
* **k8s.io/kubectl** v0.27.1 -> v0.28.0-alpha.4
* **k8s.io/kubelet** v0.27.1 -> v0.28.0-alpha.4
* **kernel.org/pub/linux/libs/security/libcap/cap** v1.2.68 -> v1.2.69
Previous release can be found at [v1.4.0](https://github.com/siderolabs/talos/releases/tag/v1.4.0)
## [Talos 1.5.0-alpha.2](https://github.com/siderolabs/talos/releases/tag/v1.5.0-alpha.2) (2023-07-20)
Welcome to the v1.5.0-alpha.2 release of Talos!
*This is a pre-release of Talos*
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
### Extension Services
Talos now supports setting `environmentFile` for an extension service container spec. Refer: https://www.talos.dev/v1.5/advanced/extension-services/#container
The extension waits for the file to be present before starting the service.
### Predictable Network Interface Names
Starting with version Talos 1.5, network interfaces are renamed to [predictable names](https://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/)
same way as `systemd` does that in other Linux distributions.
The naming schema `enx78e7d1ea46da` (based on MAC addresses) is enabled by default, the order of interface naming decisions is:
* firmware/BIOS provided index numbers for on-board devices (example: `eno1`)
* firmware/BIOS provided PCI Express hotplug slot index numbers (example: `ens1`)
* physical/geographical location of the connector of the hardware (example: `enp2s0`)
* interfaces's MAC address (example: `enx78e7d1ea46da`)
The predictable network interface names features can be disabled by specifying `net.ifnames=0` in the kernel command line.
Talos automatically adds the `net.ifnames=0` kernel argument when upgrading from Talos versions before 1.5.
This change doesn't affect "cloud" platforms, like AWS, as Talos automatically adds `net.ifnames=0` to the kernel command line.
### Network KMS Disk Encryption
Talos now supports new type of encryption keys which are sealed/unsealed with an external KMS server:
systemDiskEncryption: ephemeral: keys: - kms: endpoint: https://1.2.3.4:443 slot: 0
gRPC API definitions and a simple reference implementation of the KMS server can be found in this
[repository](https://github.com/siderolabs/kms-client/blob/main/cmd/kms-server/main.go).
### KubePrism - Kubernetes API Server In-Cluster Load Balancer
Talos now supports configuring the KubePrism - Kubernetes API Server in-cluster load balancer with machine config
`features.kubePrism.port` and `features.kubePrism.enabled` fields.
If enabled, KubePrism binds to `localhost` and runs on the same port on every machine in the cluster.
The default value for KubePrism endpoint is https://localhost:7445.
The KubePrism is used by the `kubelet`, `kube-scheduler`, `kube-controller-manager`
and `kube-proxy` by default and can be passed to the CNIs like Cilium and Calico.
The KubePrism provides access to the Kubernetes API endpoint even if the external loadbalancer
is not healthy, provided that the worker nodes can reach to the controlplane machine addresses directly.
### Machine Config option `.machine.install.bootloader`
The `.machine.install.bootloader` option in the machine config is deprecated and will be removed in Talos 1.6.
This was a no-op for a long time. The bootloader is always installed.
### XFS Quota
Talos 1.5+ enables XFS project quota support by default, also enabling by default
kubelet feature gate `LocalStorageCapacityIsolationFSQuotaMonitoring` to use xfs quotas
to monitor volume usage instead of `du`.
This feature is controlled by the `.machine.features.diskQuotaSupport` field in the machine config,
it is set to true for new clusters.
When upgrading from a previous version, the feature can be enabled by setting the field to true.
On the first mount of a volume, the quota information will be recalculated, which may take some time.
### RDMA/RoCE support
Talos no longer loads by default `rdma_rxe` Linux driver, which is required for RoCE support.
If the driver is required, it can be enabled by specifying `rdma_rxe` in the `.machine.kernel.modules` field in the machine config.
### SecureBoot
Talos now supports generating a custom iso that can be used with SecureBoot. Key generation and enrolling has to be done manually.
### `talosctl image` Command
A new set of commands was introduced to manage container images in the CRI:
* `talosctl image list` shows list of available images
* `talosctl image pull` allows to pre-pull an image into the CRI
Both new commands accept `--namespace` flag with two possible values:
* `cri` (default): images managed by the CRI (Kubernetes workloads)
* `system`: images managed by Talos (`etcd` and `kubelet`)
talosctl images Command
The command talosctl images was renamed to talosctl image default.
The backward-compatible alias is kept in Talos 1.5, but it will be dropped in Talos 1.6.
TPM Disk Encryption
Talos now supports encrypting STATE/EPHEMERAL with keys bound to a TPM device. The TPM device must be TPM2.0 compatible. This is ideally supported when booting with new Talos SecureBoot UKI ISOs/Metal images. This feature would still work if SecureBoot is not enabled for UKI images, but not recommended since there is no way to verify the trust of the bootloader.
Example machine config:
systemDiskEncryption:
ephemeral:
keys:
- slot: 0
tpm: {}
state:
keys:
- slot: 0
tpm: {}
Component Updates
- Linux: 6.1.39
- containerd: 1.6.21
- runc: 1.1.8
- etcd: 3.5.9
- Kubernetes: 1.28.0-alpha.4
- Flannel: 0.22.0
Talos is built with Go 1.20.6.
talosctl upgrade-k8s Image Pre-pulling
The command talosctl upgrade-k8s now by default pre-pulls images for Kubernetes controlplane components
and kubelet. This provides an early check for missing images, and minimizes downtime during Kubernetes
rolling component update.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Artem Chernyshev
- Steve Francis
- Christian Rolland
- Nanfei Chen
- Nico Berlee
- Spencer Smith
- Alex Corcoles
- Alex Corcoles
- Alex Lubbock
- Artem Chernyshev
- Budiman Jojo
- Chris Hoffman
- DJAlPee
- Dennis Marttinen
- Eirik Askheim
- Florian Klink
- Henk Kraal
- James Callahan
- LukasAuerbeck
- Markus Reiter
- Michael A. Davis
- Michael Fornaro
- Niklas Wik
- Piotr Maksymiuk
- Ricky Sadowski
- Roee Klinger
- Serge Logvinov
- Thomas Perronin
- Tim Jones
- Victor Bajada
- Walt Chen
- bdronneau
Changes
184 commits
60c304126chore: bump dependencies9ef4e5efcfix: log explicitly when kubelet has no nodeIP match6b39c6a4dfix: enable compression and bump gRPC max msg size2f2eca861chore: basic support for shutdown/poweroff flagsb84277d7ddocs: fix wrong capability name59d7d9344chore: use machined forshutdown,poweroff2439bfb71chore: explicitly add timestamps to machined logs14966e718fix: skip over tpm2 1.2 devices6716e7bc0docs: update cilium documentation about KubePrism usage166d75fe8fix: tpm2 encrypt/decrypt flow130518de7chore: change missing renames of KubePrism5f34f5b41chore: rename api load balancer to KubePrismc8b7095c0refactor: use tpm2 library to calculate policy hash078aac92echore: bump deps53873b844refactor: move ukify into Talos coded5f6fb9ffchore: add vendor info79365d9bafeat: tpm2 based disk encryption06369e819fix: retry CRI pod removal, fix upgrade flow in the testsd32dd3a82chore: update Go to 1.20.68017afb10feat: implement CRI image management and pre-pull on K8s upgrade1c2f19b36feat: update Kubernetes to 1.28.0-alpha.494e9891c1chore: bump sd-boot to v254-rc1936111ce0fix: properly set up tls for KMS endpointcb226eec4fix: rewrite encryption system information flow3206db528feat: drop tpm simulator for ukify measurebd4f89f63fix: disable dashboard on Azure, GCP and Scalewaybdb96189frefactor: make maintenance service controller-basedd23d04de2feat: seed the kernel random pool from the TPMc81ce8cfbfeat: support controlplane resources configuration74de562b2fix: mount hugepages with nosuid + nodevce63abb21feat: add KMS assisted encryption key handlerdafbe9debchore: optimize dockerfile instructionsa4289e870chore: fix CLI docs generation stability2fec8388fchore: bump dependenciesc1b4262dddocs: split simple and more complex getting started guidesc9a9f9561refactor: extract secure boot certificate generation6be5a13d5feat: implement machine config documents for event and log streaminge241be85bfix: properly handle YAML comment stripping for multi-docc02ada7d9fix: capabilities includingALLshould be uppercasecbdf96d46feat: support environment file for extensions35d6adcb9fix: provide stashed META values before installation258f07449fix: ukify cert generationbf3febb7efix: refine OVMF search pathsfbebc17f8fix: disable LVM backups/archivee5306ef26chore: format and cleanup test scriptsbc371ecfdchore: add/sbin/shutdown0d313b973feat: addreboot-modeflag totalosctl upgrade7ce87f20cfix: compare only basename ofos.Args[0]in machined53389b1e7feat: auto-enroll secure boot keysd77f0bc7bdocs: fix broken link to powershell modulee1b150a11release(v1.5.0-alpha.1): prepare release8daf432b2chore: bump depse3f3f5794feat: implement revert for sd-bootd8b0903d7docs: vagrant setup document fixfe0f46980feat: implement secure boot from disk445f5ad54feat: support API server load balancer19bc223derefactor: bootloader interface, labels665702dddchore: fix cilium e2e tests71a548d18chore: generic boootloader implementatione9dbc9311test: bump versions for upgrade tests0a99965efrefactor: replaceuncordonNodewith controllerse858bca3atest: fix cilium integration tests455328d05fix: allow time skew for generated kubeconfig3ae05648afix: usage of custom kernels0797b0d16chore: add a pipeline to test cloud-images step without a releasee5a36268bdocs: includeallowSchedulingOnControlPlanesontalosctl gen configoutputc74d93728chore: bump github.com/cosi-project/runtimedbaf5c699refactor: tasklabelControlPlaneinto controllers1865a0c29chore: modify some usages that are not recommended3816318b9chore: wrap config.Provider in atomic wrapperd04cf1978chore: clean up unnecessary self assignmenta34a94898fix: copy missing modules.* filesf5e3272fcrefactor: task 'updateBootLoader' as controllere7be6ee7crefactor: make event log streaming fully reactiveaef2192a6chore: use fixed module listc719aa231fix: allow http:// for discovery service URL39134d8d5chore: fix cron pipelinea61dcdbbdfix: don't load RDMA over Ethernet driver by defaultaac441f61chore: update Go to 1.20.5, bump dependencies1c0c7933dchore: cleanup partition code31b988281docs: add some words about certifcatese912c0dfcchore: use go-blockdevice for zeroing partitionse6dde8ffcfeat: add network chaos to qemu development environment47986cb79chore: unify kexec phase3a865370ffeat: qemu secureboot5dab45e86refactor: allow kmsg log streaming to be reconfigured on the fly8a02ecd4cchore: add endpoints balancer controller423a31ac9chore: deprectaebootloaderinstaller optioncdfece7d6chore: optimize image compressionbfc341937chore: add default console args2749aeedafeat: add support for multi-doc strategic merge patching3f68485e4feat: add uki iso generationbab484a40feat: use stable network interface names196dfb99bfix: do not probe kernel args in dashboard if not needed8c071b579fix: skip DHCP RENEW if server IP in the lease is all zeroesbadbc51e6refactor: rewrite code to include preliminary support for multi-docecce29deefix: upgrade-k8s use internal IP first, external IP fallback3c64a5ffbchore: optimize image generation time2292f36d9chore: registry.k8s.io for coredns imagef2b258b37docs: document talosctl version for upgradesa0773f783chore: add ukify Go scriptb69e38d1fchore: bump dependenciesadce65103docs: add piraeus/drbd to storage documentationa982cabe7docs: link support matrix in k8s update doc1fb29a56afix: fail quickly if upgrade-k8s is used with multiple nodes51d931c47chore: faster dev cycledc6764871refactor: move around config interfaces, make RawV1Alpha1 typedea9a97dbafix: fall back to external IP when discovering nodes in upgrade-k8s0bb7e8a5crefactor: split config.Provider into Config & Container85d8a1619chore: bump deps39b7a56f0chore: use 8GiB instead of 10GiB for cloud imagesff11fd39cfix: race withudevdandmountUserDisksc3fabb982chore: update default image sizes to 10GB for all "cloud" images10155c390feat: enable xfs project quota support, kubelet featureeba818564release(v1.5.0-alpha.0): prepare release383471c3efeat: update default Kubernetes to v1.27.28f68d1abechore: bump depse0c1585d3feat: create azure community gallery image version on releasedd8336c9efix: refresh kubelet self-issued serving certificatesbb02dd263chore: drop deprecated stuff for Talos 1.561cad8673chore: bump deps01dfd3af7feat: update etcd to v3.5.9aa65fbb8achore: update KUBECTL_URL to reflect the community bucketcc3128d94chore: bump kernel to 6.1.2897fffaf78chore: use ctest.UpdateWithConflicts instead of plain UpdateWithConflicts3b36993b9fix: rlimit nofile test45e6e27afchore: bump runtime4f720d465fix: revert: set rlimit explicitly in wrapperda2565f674fix: set rlimit explicitly in wrapperdcdfc242b8chore: re-enable Go buildide67f3f5c5feat: linux 6.1.27, containerd 1.6.21, go 1.20.455ae59a0afix: properly skip/cleanup controlplane configs for workers64eade9bdchore: clean up unused constant62c6e9655feat: introduce siderolink config resource & reconnect860002c73fix: don't reload control plane pods on cert SANs changesd43c61e80fix: enforce nolock option for all NFS mounts by default339986db9fix: inhibit timer to follow kubelet timercbf6dc100fix: set timeout for unmount callsb58f913d5fix: set the static pod priority as valuesf8a7a5b6bdocs: add information about KubeSpan ports and topology2bad74d64docs: add how to on scaling down7442ff8b0chore: fix typos inteface -> interface (docs and tests)d4e94f7a1fix: add back required TARGETARCH for installere6fffda01chore: linux 6.1.26, runc 1.1.7344746ae2fix: bump max inhibit delay to 20 mind9bdea2b5chore: fork docs and compatibility modules for Talos 1.53d99610fcdocs: document building, verifying image and process caps014008ea2fix: udevd rules trigger9b36bb613feat: update Linux to 6.1.25, fix virtio on arm6408ec66c55feat: clean up (garbage collect) system images which are not referencedb097efcdefix: display correct number of machines on dashboardcad43f0adchore: remove k8s master labele296a566efix: support kernel userspace module loading103f0ffddfeat: add startup probes to controller-manager and scheduler5a1ae8aaechore: bump dependencesec8c8dbafchore: fix container image reproducibilityf661d8487fix: allowtalosctl cpto handle special files in/proc2d824b563fix: do not show control plane status for workers on dashboarde5491ddaddocs: update documentation for nocloud7a004a6f7fix: parse errors correctly374ef5385test: submit verbose flag to e2e testse1d38b6fefeat: show template URL in dashboard config URL tab45d7f0ce9docs: fix the latest url96efbf147docs: activate 1.4.0 docs by default8c1f515b1feat: update Linux to 6.1.248689bef5fdocs: update documentation for Talos 1.4a781dfb8efeat: update Kubernetes to 1.27.1a737dd83achore: typo incompatibility.ParseKubernetesVersionf14928b0afix: fix dashboard crash when a non-existent node is specified3e406d9b0feat: update etcd to v3.5.8bd1cff3e8chore: remove Go buildide31f7f50bfeat: update Kubernetes to 1.27.0aa3640d74docs: update storage.md07bb61e60chore: module-sig-verify cleanup5e9d836c3chore: add kernel module signtaure verification3cd1c6bb0fix: send 'STOP' event on phase end5176d27dcfeat: update Kubernetes to 1.27.0-rc.12c55550a6fix: quote ISO kernel args for GRUB319d76e38fix: respect BROWSER=echo in client auth interceptor4e4ace839chore: update Go to 1.20.3170f73899fix: correctly parse static pod phasec3a595d5bfix: improve action tracking post checkseb01edbc8fix: rework DHCP flowe095150a6test: bump CAPI components versions
Changes since v1.5.0-alpha.1
50 commits
60c304126chore: bump dependencies9ef4e5efcfix: log explicitly when kubelet has no nodeIP match6b39c6a4dfix: enable compression and bump gRPC max msg size2f2eca861chore: basic support for shutdown/poweroff flagsb84277d7ddocs: fix wrong capability name59d7d9344chore: use machined forshutdown,poweroff2439bfb71chore: explicitly add timestamps to machined logs14966e718fix: skip over tpm2 1.2 devices6716e7bc0docs: update cilium documentation about KubePrism usage166d75fe8fix: tpm2 encrypt/decrypt flow130518de7chore: change missing renames of KubePrism5f34f5b41chore: rename api load balancer to KubePrismc8b7095c0refactor: use tpm2 library to calculate policy hash078aac92echore: bump deps53873b844refactor: move ukify into Talos coded5f6fb9ffchore: add vendor info79365d9bafeat: tpm2 based disk encryption06369e819fix: retry CRI pod removal, fix upgrade flow in the testsd32dd3a82chore: update Go to 1.20.68017afb10feat: implement CRI image management and pre-pull on K8s upgrade1c2f19b36feat: update Kubernetes to 1.28.0-alpha.494e9891c1chore: bump sd-boot to v254-rc1936111ce0fix: properly set up tls for KMS endpointcb226eec4fix: rewrite encryption system information flow3206db528feat: drop tpm simulator for ukify measurebd4f89f63fix: disable dashboard on Azure, GCP and Scalewaybdb96189frefactor: make maintenance service controller-basedd23d04de2feat: seed the kernel random pool from the TPMc81ce8cfbfeat: support controlplane resources configuration74de562b2fix: mount hugepages with nosuid + nodevce63abb21feat: add KMS assisted encryption key handlerdafbe9debchore: optimize dockerfile instructionsa4289e870chore: fix CLI docs generation stability2fec8388fchore: bump dependenciesc1b4262dddocs: split simple and more complex getting started guidesc9a9f9561refactor: extract secure boot certificate generation6be5a13d5feat: implement machine config documents for event and log streaminge241be85bfix: properly handle YAML comment stripping for multi-docc02ada7d9fix: capabilities includingALLshould be uppercasecbdf96d46feat: support environment file for extensions35d6adcb9fix: provide stashed META values before installation258f07449fix: ukify cert generationbf3febb7efix: refine OVMF search pathsfbebc17f8fix: disable LVM backups/archivee5306ef26chore: format and cleanup test scriptsbc371ecfdchore: add/sbin/shutdown0d313b973feat: addreboot-modeflag totalosctl upgrade7ce87f20cfix: compare only basename ofos.Args[0]in machined53389b1e7feat: auto-enroll secure boot keysd77f0bc7bdocs: fix broken link to powershell module
Changes from siderolabs/crypto
2 commits
Changes from siderolabs/discovery-api
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
3 commits
Changes from siderolabs/gen
3 commits
Changes from siderolabs/go-blockdevice
4 commits
Changes from siderolabs/go-debug
Changes from siderolabs/go-kubernetes
2 commits
Changes from siderolabs/go-loadbalancer
6 commits
574126cchore: add 0.1ms tier and fix tiers5301800chore: fix logging and testsb23a173chore: replace std log with zap1a2f374feat: add multi-tier scoring based for generic List56a27dachore: move to siderolabs/tcpproxy of inet.af/tcpproxyf3a0e24fix: use SO_LINGER option when doing TCP healthchecks
Changes from siderolabs/kms-client
3 commits
Changes from siderolabs/pkgs
38 commits
d0eaedcfeat: enable DM_RAID kernel configd5e0fadfeat: update dependenciesc644633feat: enable multi-gen lru by default75696bafeat: update Go to 1.20.6205cab6chore: feat use new sd-bootfb817fefix: enable USB attached SCSI driver on x86 systems43451e6chore: bump dependencieseca94f8feat: enable sriov5a8e8e5feat: enable VMWARE/HYPERV vsocketsedd725achore: bump depsc0ac69bfeat: enable CONFIG_NVME_{MULTIPATH|AUTH}f7cd916fix: bump drbd to 9.2.4a56d15afix: copy missingmodules.*files1eefa66feat: build isb modem drivers as modulea859f4ffix: build RDMA_RXE as a module5fb5e95feat: bump dependencies39a64b2feat: update Linux to 6.1.31, add GENEVE for arm6497177befeat: update Linux to 6.1.30b1f9d4echore: prevent unsigned kexec with secureboot9232a42feat: add reproducibility pipelines702d7a7chore: bump deps7958db1chore: copy over sd-boot and sd-stub from tools813b3c3chore: revert xfsprogs0cc78abchore: bump kernel to 6.1.2870189e3chore: bump depsc5d3bf1feat: add sd-stub and sd-boot30a7ac2feat: update Linux 6.1.27, containerd 1.6.21fbc6ee5chore: bump deps82b9489chore: bump dependenciesf37e520feat: update Linux to 6.1.253920b16feat: add multi-gen LRU kernel support988f1ecfeat: update Linux to 6.1.245327d12fix: remove FB_NVIDIA drivers, Linux 6.1.234eae958chore: copy over the kernel signing public key174f8fcchore: update Go to 1.20.341629b0chore: reorder pkgs for better kernel cachingb483a6bfeat: build 'snp.efi' for iPXEfb853fffeat: update containerd to 1.6.20
Changes from siderolabs/tools
20 commits
dc7dd9echore: remove libseccompe27c249feat: update Go to 1.20.69b6d512feat: use systemd 254-rc1cd3b692chore: bump depsc1027a6chore: remove sbsigne0c76c0chore: bump dependencies7d0cd58feat: update Go to 1.20.5150efc2chore: remove non needed tools88ebb40feat: add swtpm4c5d7fechore: use same source epoch everywhere2e46e5bfeat: add reproducibility pipelinesc6a41b6fix: add sd-stub assertion patchd2dde48chore: bump deps8e45ad7feat: add sbsign271c4a6feat: add sd-toolseedc294chore: bump deps81b09a5feat: add libcap and gnuefi47b0fd3chore: bump go to 1.20.4ff4cf2bchore: bump deps1563556feat: update Go to 1.20.3
Dependency Changes
- github.com/BurntSushi/toml v1.2.1 -> v1.3.2
- github.com/aws/aws-sdk-go v1.44.232 -> v1.44.304
- github.com/beevik/ntp v0.3.0 -> v1.2.0
- github.com/benbjohnson/clock v1.1.0 -> v1.3.5
- github.com/cenkalti/backoff/v4 v4.2.0 -> v4.2.1
- github.com/containerd/containerd v1.6.19 -> v1.6.21
- github.com/containerd/typeurl/v2 v2.1.1 new
- github.com/containernetworking/plugins v1.2.0 -> v1.3.0
- github.com/cosi-project/runtime v0.3.0 -> v0.3.1-alpha.8
- github.com/docker/distribution v2.8.1 -> v2.8.2
- github.com/docker/docker v23.0.2 -> v24.0.4
- github.com/ecks/uefi caef65d070eb new
- github.com/emicklei/dot v1.4.2 -> v1.5.0
- github.com/foxboron/go-uefi 32187aa193d0 new
- github.com/google/go-tpm v0.9.0 new
- github.com/hashicorp/go-envparse v0.1.0 new
- github.com/hetznercloud/hcloud-go v1.41.0 -> v1.48.0
- github.com/insomniacslk/dhcp 74ae03f2425e -> 5648422c16cd
- github.com/jsimonetti/rtnetlink v1.3.1 -> v1.3.4
- github.com/mattn/go-isatty v0.0.18 -> v0.0.19
- github.com/mdlayher/ethtool ba3b4bc2e02c -> v0.1.0
- github.com/mdlayher/genetlink v1.3.1 -> v1.3.2
- github.com/mdlayher/netlink v1.7.1 -> v1.7.2
- github.com/mdlayher/netx c711c2f8512f -> 7e21880baee8
- github.com/nberlee/go-netstat v0.1.1 -> v0.1.2
- github.com/opencontainers/go-digest v1.0.0 new
- github.com/opencontainers/image-spec v1.1.0-rc2 -> v1.1.0-rc4
- github.com/packethost/packngo v0.29.0 -> v0.30.0
- github.com/prometheus/procfs v0.9.0 -> v0.11.0
- github.com/rivo/tview 281d14d896d7 -> 6cc0565babaf
- github.com/rs/xid v1.4.0 -> v1.5.0
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.15 -> v1.0.0-beta.19
- github.com/siderolabs/crypto v0.4.0 -> v0.4.1
- github.com/siderolabs/discovery-api v0.1.2 -> v0.1.3
- github.com/siderolabs/discovery-client v0.1.4 -> v0.1.5
- github.com/siderolabs/extras v1.4.0-1-g9b07505 -> v1.5.0-alpha.0-2-gf415aac
- github.com/siderolabs/gen v0.4.3 -> v0.4.5
- github.com/siderolabs/go-blockdevice v0.4.4 -> v0.4.6
- github.com/siderolabs/go-debug v0.2.2 -> v0.2.3
- github.com/siderolabs/go-kubernetes v0.2.0 -> v0.2.2
- github.com/siderolabs/go-loadbalancer v0.2.1 -> v0.3.2
- github.com/siderolabs/kms-client v0.1.0 new
- github.com/siderolabs/pkgs v1.4.1-5-ga333a84 -> v1.5.0-alpha.0-37-gd0eaedc
- github.com/siderolabs/talos/pkg/machinery v1.4.0 -> v1.5.0-alpha.1
- github.com/siderolabs/tools v1.4.0-1-g955aabc -> v1.5.0-alpha.0-19-gdc7dd9e
- github.com/spf13/cobra v1.6.1 -> v1.7.0
- github.com/stretchr/testify v1.8.2 -> v1.8.4
- github.com/vmware-tanzu/sonobuoy v0.56.16 -> v0.56.17
- github.com/vmware/govmomi v0.30.4 -> v0.30.6
- go.etcd.io/etcd/api/v3 v3.5.8 -> v3.5.9
- go.etcd.io/etcd/client/pkg/v3 v3.5.8 -> v3.5.9
- go.etcd.io/etcd/client/v3 v3.5.8 -> v3.5.9
- go.etcd.io/etcd/etcdutl/v3 v3.5.8 -> v3.5.9
- golang.org/x/net v0.8.0 -> v0.12.0
- golang.org/x/sync v0.1.0 -> v0.3.0
- golang.org/x/sys v0.6.0 -> v0.10.0
- golang.org/x/term v0.6.0 -> v0.10.0
- golang.org/x/text v0.11.0 new
- golang.zx2c4.com/wireguard/wgctrl 9c5414ab4bde -> 925a1e7659e6
- google.golang.org/grpc v1.54.0 -> v1.56.2
- google.golang.org/protobuf v1.30.0 -> v1.31.0
- k8s.io/api v0.27.1 -> v0.28.0-alpha.4
- k8s.io/apimachinery v0.27.1 -> v0.28.0-alpha.4
- k8s.io/apiserver v0.27.1 -> v0.28.0-alpha.4
- k8s.io/client-go v0.27.1 -> v0.28.0-alpha.4
- k8s.io/component-base v0.27.1 -> v0.28.0-alpha.4
- k8s.io/cri-api v0.27.1 -> v0.28.0-alpha.4
- k8s.io/klog/v2 v2.90.1 -> v2.100.1
- k8s.io/kubectl v0.27.1 -> v0.28.0-alpha.4
- k8s.io/kubelet v0.27.1 -> v0.28.0-alpha.4
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.68 -> v1.2.69
Previous release can be found at v1.4.0
Talos 1.5.0-alpha.1 (2023-06-22)
Welcome to the v1.5.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Kubernetes API Server In-Cluster Load Balancer
Talos now supports configuring the Kubernetes API Server in-cluster load balancer with machine config
features.apiServerBalancerSupport.port and features.apiServerBalancerSupport.enabled fields.
If enabled, the loadbalancer binds to localhost and runs on the same port on every machine in the cluster.
The default value for loadbalancer endpoint is https://localhost:7445.
The in-cluster loadbalancer endpoint is used by the kubelet, kube-scheduler, kube-controller-manager
and kube-proxy by default and can be passed to the CNIs like Cilium and Calico.
The in-cluster loadbalancer provides access to the Kubernetes API endpoint even if the external loadbalancer is not healthy, provided that the worker nodes can reach to the controlplane machine addresses directly.
Predictable Network Interface Names
Starting with version Talos 1.5, network interfaces are renamed to predictable names
same way as systemd does that in other Linux distributions.
The naming schema enx78e7d1ea46da (based on MAC addresses) is enabled by default, the order of interface naming decisions is:
- firmware/BIOS provided index numbers for on-board devices (example:
eno1) - firmware/BIOS provided PCI Express hotplug slot index numbers (example:
ens1) - physical/geographical location of the connector of the hardware (example:
enp2s0) - interfaces's MAC address (example:
enx78e7d1ea46da)
The predictable network interface names features can be disabled by specifying net.ifnames=0 in the kernel command line.
Talos automatically adds the net.ifnames=0 kernel argument when upgrading from Talos versions before 1.5.
This change doesn't affect "cloud" platforms, like AWS, as Talos automatically adds net.ifnames=0 to the kernel command line.
Machine Config option .machine.install.bootloader
The .machine.install.bootloader option in the machine config is deprecated and will be removed in Talos 1.6.
This was a no-op for a long time. The bootloader is always installed.
XFS Quota
Talos 1.5+ enables XFS project quota support by default, also enabling by default
kubelet feature gate LocalStorageCapacityIsolationFSQuotaMonitoring to use xfs quotas
to monitor volume usage instead of du.
This feature is controlled by the .machine.features.diskQuotaSupport field in the machine config,
it is set to true for new clusters.
When upgrading from a previous version, the feature can be enabled by setting the field to true. On the first mount of a volume, the quota information will be recalculated, which may take some time.
RDMA/RoCE support
Talos no longer loads by default rdma_rxe Linux driver, which is required for RoCE support.
If the driver is required, it can be enabled by specifying rdma_rxe in the .machine.kernel.modules field in the machine config.
SecureBoot
Talos now supports generating a custom iso that can be used with SecureBoot. Key generation and enrolling has to be done manually.
Component Updates
- Linux: 6.1.35
- containerd: 1.6.21
- runc: 1.1.7
- etcd: 3.5.9
- Kubernetes: 1.27.3
- Flannel: 0.22.0
Talos is built with Go 1.20.5.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Christian Rolland
- Nanfei Chen
- Spencer Smith
- Steve Francis
- Alex Corcoles
- Alex Corcoles
- Alex Lubbock
- Budiman Jojo
- DJAlPee
- Eirik Askheim
- Henk Kraal
- Michael A. Davis
- Michael Fornaro
- Nico Berlee
- Niklas Wik
- Piotr Maksymiuk
- Ricky Sadowski
- Roee Klinger
- Thomas Perronin
- Walt Chen
- bdronneau
Changes
133 commits
8daf432b2chore: bump depse3f3f5794feat: implement revert for sd-bootd8b0903d7docs: vagrant setup document fixfe0f46980feat: implement secure boot from disk445f5ad54feat: support API server load balancer19bc223derefactor: bootloader interface, labels665702dddchore: fix cilium e2e tests71a548d18chore: generic boootloader implementatione9dbc9311test: bump versions for upgrade tests0a99965efrefactor: replaceuncordonNodewith controllerse858bca3atest: fix cilium integration tests455328d05fix: allow time skew for generated kubeconfig3ae05648afix: usage of custom kernels0797b0d16chore: add a pipeline to test cloud-images step without a releasee5a36268bdocs: includeallowSchedulingOnControlPlanesontalosctl gen configoutputc74d93728chore: bump github.com/cosi-project/runtimedbaf5c699refactor: tasklabelControlPlaneinto controllers1865a0c29chore: modify some usages that are not recommended3816318b9chore: wrap config.Provider in atomic wrapperd04cf1978chore: clean up unnecessary self assignmenta34a94898fix: copy missing modules.* filesf5e3272fcrefactor: task 'updateBootLoader' as controllere7be6ee7crefactor: make event log streaming fully reactiveaef2192a6chore: use fixed module listc719aa231fix: allow http:// for discovery service URL39134d8d5chore: fix cron pipelinea61dcdbbdfix: don't load RDMA over Ethernet driver by defaultaac441f61chore: update Go to 1.20.5, bump dependencies1c0c7933dchore: cleanup partition code31b988281docs: add some words about certifcatese912c0dfcchore: use go-blockdevice for zeroing partitionse6dde8ffcfeat: add network chaos to qemu development environment47986cb79chore: unify kexec phase3a865370ffeat: qemu secureboot5dab45e86refactor: allow kmsg log streaming to be reconfigured on the fly8a02ecd4cchore: add endpoints balancer controller423a31ac9chore: deprectaebootloaderinstaller optioncdfece7d6chore: optimize image compressionbfc341937chore: add default console args2749aeedafeat: add support for multi-doc strategic merge patching3f68485e4feat: add uki iso generationbab484a40feat: use stable network interface names196dfb99bfix: do not probe kernel args in dashboard if not needed8c071b579fix: skip DHCP RENEW if server IP in the lease is all zeroesbadbc51e6refactor: rewrite code to include preliminary support for multi-docecce29deefix: upgrade-k8s use internal IP first, external IP fallback3c64a5ffbchore: optimize image generation time2292f36d9chore: registry.k8s.io for coredns imagef2b258b37docs: document talosctl version for upgradesa0773f783chore: add ukify Go scriptb69e38d1fchore: bump dependenciesadce65103docs: add piraeus/drbd to storage documentationa982cabe7docs: link support matrix in k8s update doc1fb29a56afix: fail quickly if upgrade-k8s is used with multiple nodes51d931c47chore: faster dev cycledc6764871refactor: move around config interfaces, make RawV1Alpha1 typedea9a97dbafix: fall back to external IP when discovering nodes in upgrade-k8s0bb7e8a5crefactor: split config.Provider into Config & Container85d8a1619chore: bump deps39b7a56f0chore: use 8GiB instead of 10GiB for cloud imagesff11fd39cfix: race withudevdandmountUserDisksc3fabb982chore: update default image sizes to 10GB for all "cloud" images10155c390feat: enable xfs project quota support, kubelet featureeba818564release(v1.5.0-alpha.0): prepare release383471c3efeat: update default Kubernetes to v1.27.28f68d1abechore: bump depse0c1585d3feat: create azure community gallery image version on releasedd8336c9efix: refresh kubelet self-issued serving certificatesbb02dd263chore: drop deprecated stuff for Talos 1.561cad8673chore: bump deps01dfd3af7feat: update etcd to v3.5.9aa65fbb8achore: update KUBECTL_URL to reflect the community bucketcc3128d94chore: bump kernel to 6.1.2897fffaf78chore: use ctest.UpdateWithConflicts instead of plain UpdateWithConflicts3b36993b9fix: rlimit nofile test45e6e27afchore: bump runtime4f720d465fix: revert: set rlimit explicitly in wrapperda2565f674fix: set rlimit explicitly in wrapperdcdfc242b8chore: re-enable Go buildide67f3f5c5feat: linux 6.1.27, containerd 1.6.21, go 1.20.455ae59a0afix: properly skip/cleanup controlplane configs for workers64eade9bdchore: clean up unused constant62c6e9655feat: introduce siderolink config resource & reconnect860002c73fix: don't reload control plane pods on cert SANs changesd43c61e80fix: enforce nolock option for all NFS mounts by default339986db9fix: inhibit timer to follow kubelet timercbf6dc100fix: set timeout for unmount callsb58f913d5fix: set the static pod priority as valuesf8a7a5b6bdocs: add information about KubeSpan ports and topology2bad74d64docs: add how to on scaling down7442ff8b0chore: fix typos inteface -> interface (docs and tests)d4e94f7a1fix: add back required TARGETARCH for installere6fffda01chore: linux 6.1.26, runc 1.1.7344746ae2fix: bump max inhibit delay to 20 mind9bdea2b5chore: fork docs and compatibility modules for Talos 1.53d99610fcdocs: document building, verifying image and process caps014008ea2fix: udevd rules trigger9b36bb613feat: update Linux to 6.1.25, fix virtio on arm6408ec66c55feat: clean up (garbage collect) system images which are not referencedb097efcdefix: display correct number of machines on dashboardcad43f0adchore: remove k8s master labele296a566efix: support kernel userspace module loading103f0ffddfeat: add startup probes to controller-manager and scheduler5a1ae8aaechore: bump dependencesec8c8dbafchore: fix container image reproducibilityf661d8487fix: allowtalosctl cpto handle special files in/proc2d824b563fix: do not show control plane status for workers on dashboarde5491ddaddocs: update documentation for nocloud7a004a6f7fix: parse errors correctly374ef5385test: submit verbose flag to e2e testse1d38b6fefeat: show template URL in dashboard config URL tab45d7f0ce9docs: fix the latest url96efbf147docs: activate 1.4.0 docs by default8c1f515b1feat: update Linux to 6.1.248689bef5fdocs: update documentation for Talos 1.4a781dfb8efeat: update Kubernetes to 1.27.1a737dd83achore: typo incompatibility.ParseKubernetesVersionf14928b0afix: fix dashboard crash when a non-existent node is specified3e406d9b0feat: update etcd to v3.5.8bd1cff3e8chore: remove Go buildide31f7f50bfeat: update Kubernetes to 1.27.0aa3640d74docs: update storage.md07bb61e60chore: module-sig-verify cleanup5e9d836c3chore: add kernel module signtaure verification3cd1c6bb0fix: send 'STOP' event on phase end5176d27dcfeat: update Kubernetes to 1.27.0-rc.12c55550a6fix: quote ISO kernel args for GRUB319d76e38fix: respect BROWSER=echo in client auth interceptor4e4ace839chore: update Go to 1.20.3170f73899fix: correctly parse static pod phasec3a595d5bfix: improve action tracking post checkseb01edbc8fix: rework DHCP flowe095150a6test: bump CAPI components versions
Changes since v1.5.0-alpha.0
63 commits
8daf432b2chore: bump depse3f3f5794feat: implement revert for sd-bootd8b0903d7docs: vagrant setup document fixfe0f46980feat: implement secure boot from disk445f5ad54feat: support API server load balancer19bc223derefactor: bootloader interface, labels665702dddchore: fix cilium e2e tests71a548d18chore: generic boootloader implementatione9dbc9311test: bump versions for upgrade tests0a99965efrefactor: replaceuncordonNodewith controllerse858bca3atest: fix cilium integration tests455328d05fix: allow time skew for generated kubeconfig3ae05648afix: usage of custom kernels0797b0d16chore: add a pipeline to test cloud-images step without a releasee5a36268bdocs: includeallowSchedulingOnControlPlanesontalosctl gen configoutputc74d93728chore: bump github.com/cosi-project/runtimedbaf5c699refactor: tasklabelControlPlaneinto controllers1865a0c29chore: modify some usages that are not recommended3816318b9chore: wrap config.Provider in atomic wrapperd04cf1978chore: clean up unnecessary self assignmenta34a94898fix: copy missing modules.* filesf5e3272fcrefactor: task 'updateBootLoader' as controllere7be6ee7crefactor: make event log streaming fully reactiveaef2192a6chore: use fixed module listc719aa231fix: allow http:// for discovery service URL39134d8d5chore: fix cron pipelinea61dcdbbdfix: don't load RDMA over Ethernet driver by defaultaac441f61chore: update Go to 1.20.5, bump dependencies1c0c7933dchore: cleanup partition code31b988281docs: add some words about certifcatese912c0dfcchore: use go-blockdevice for zeroing partitionse6dde8ffcfeat: add network chaos to qemu development environment47986cb79chore: unify kexec phase3a865370ffeat: qemu secureboot5dab45e86refactor: allow kmsg log streaming to be reconfigured on the fly8a02ecd4cchore: add endpoints balancer controller423a31ac9chore: deprectaebootloaderinstaller optioncdfece7d6chore: optimize image compressionbfc341937chore: add default console args2749aeedafeat: add support for multi-doc strategic merge patching3f68485e4feat: add uki iso generationbab484a40feat: use stable network interface names196dfb99bfix: do not probe kernel args in dashboard if not needed8c071b579fix: skip DHCP RENEW if server IP in the lease is all zeroesbadbc51e6refactor: rewrite code to include preliminary support for multi-docecce29deefix: upgrade-k8s use internal IP first, external IP fallback3c64a5ffbchore: optimize image generation time2292f36d9chore: registry.k8s.io for coredns imagef2b258b37docs: document talosctl version for upgradesa0773f783chore: add ukify Go scriptb69e38d1fchore: bump dependenciesadce65103docs: add piraeus/drbd to storage documentationa982cabe7docs: link support matrix in k8s update doc1fb29a56afix: fail quickly if upgrade-k8s is used with multiple nodes51d931c47chore: faster dev cycledc6764871refactor: move around config interfaces, make RawV1Alpha1 typedea9a97dbafix: fall back to external IP when discovering nodes in upgrade-k8s0bb7e8a5crefactor: split config.Provider into Config & Container85d8a1619chore: bump deps39b7a56f0chore: use 8GiB instead of 10GiB for cloud imagesff11fd39cfix: race withudevdandmountUserDisksc3fabb982chore: update default image sizes to 10GB for all "cloud" images10155c390feat: enable xfs project quota support, kubelet feature
Changes from siderolabs/discovery-api
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
Changes from siderolabs/gen
3 commits
Changes from siderolabs/go-blockdevice
Changes from siderolabs/go-kubernetes
Changes from siderolabs/go-loadbalancer
5 commits
Changes from siderolabs/pkgs
29 commits
edd725achore: bump depsc0ac69bfeat: enable CONFIG_NVME_{MULTIPATH|AUTH}f7cd916fix: bump drbd to 9.2.4a56d15afix: copy missingmodules.*files1eefa66feat: build isb modem drivers as modulea859f4ffix: build RDMA_RXE as a module5fb5e95feat: bump dependencies39a64b2feat: update Linux to 6.1.31, add GENEVE for arm6497177befeat: update Linux to 6.1.30b1f9d4echore: prevent unsigned kexec with secureboot9232a42feat: add reproducibility pipelines702d7a7chore: bump deps7958db1chore: copy over sd-boot and sd-stub from tools813b3c3chore: revert xfsprogs0cc78abchore: bump kernel to 6.1.2870189e3chore: bump depsc5d3bf1feat: add sd-stub and sd-boot30a7ac2feat: update Linux 6.1.27, containerd 1.6.21fbc6ee5chore: bump deps82b9489chore: bump dependenciesf37e520feat: update Linux to 6.1.253920b16feat: add multi-gen LRU kernel support988f1ecfeat: update Linux to 6.1.245327d12fix: remove FB_NVIDIA drivers, Linux 6.1.234eae958chore: copy over the kernel signing public key174f8fcchore: update Go to 1.20.341629b0chore: reorder pkgs for better kernel cachingb483a6bfeat: build 'snp.efi' for iPXEfb853fffeat: update containerd to 1.6.20
Changes from siderolabs/tools
15 commits
e0c76c0chore: bump dependencies7d0cd58feat: update Go to 1.20.5150efc2chore: remove non needed tools88ebb40feat: add swtpm4c5d7fechore: use same source epoch everywhere2e46e5bfeat: add reproducibility pipelinesc6a41b6fix: add sd-stub assertion patchd2dde48chore: bump deps8e45ad7feat: add sbsign271c4a6feat: add sd-toolseedc294chore: bump deps81b09a5feat: add libcap and gnuefi47b0fd3chore: bump go to 1.20.4ff4cf2bchore: bump deps1563556feat: update Go to 1.20.3
Dependency Changes
- github.com/BurntSushi/toml v1.2.1 -> v1.3.2
- github.com/aws/aws-sdk-go v1.44.232 -> v1.44.287
- github.com/beevik/ntp v0.3.0 -> v1.1.1
- github.com/benbjohnson/clock v1.1.0 -> v1.3.5
- github.com/cenkalti/backoff/v4 v4.2.0 -> v4.2.1
- github.com/containerd/containerd v1.6.19 -> v1.6.21
- github.com/containerd/typeurl/v2 v2.1.1 new
- github.com/containernetworking/plugins v1.2.0 -> v1.3.0
- github.com/cosi-project/runtime v0.3.0 -> v0.3.1-alpha.5
- github.com/docker/distribution v2.8.1 -> v2.8.2
- github.com/docker/docker v23.0.2 -> v24.0.2
- github.com/ecks/uefi caef65d070eb new
- github.com/emicklei/dot v1.4.2 -> v1.5.0
- github.com/hetznercloud/hcloud-go v1.41.0 -> v1.47.0
- github.com/insomniacslk/dhcp 74ae03f2425e -> b20c9ba983df
- github.com/jsimonetti/rtnetlink v1.3.1 -> v1.3.3
- github.com/mattn/go-isatty v0.0.18 -> v0.0.19
- github.com/mdlayher/ethtool ba3b4bc2e02c -> v0.1.0
- github.com/mdlayher/genetlink v1.3.1 -> v1.3.2
- github.com/mdlayher/netlink v1.7.1 -> v1.7.2
- github.com/mdlayher/netx c711c2f8512f -> 7e21880baee8
- github.com/nberlee/go-netstat v0.1.1 -> v0.1.2
- github.com/opencontainers/image-spec v1.1.0-rc2 -> v1.1.0-rc3
- github.com/packethost/packngo v0.29.0 -> v0.30.0
- github.com/prometheus/procfs v0.9.0 -> v0.11.0
- github.com/rivo/tview 281d14d896d7 -> 6cc0565babaf
- github.com/rs/xid v1.4.0 -> v1.5.0
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.15 -> v1.0.0-beta.17
- github.com/siderolabs/discovery-api v0.1.2 -> v0.1.3
- github.com/siderolabs/discovery-client v0.1.4 -> v0.1.5
- github.com/siderolabs/extras v1.4.0-1-g9b07505 -> v1.5.0-alpha.0-1-ga73d524
- github.com/siderolabs/gen v0.4.3 -> v0.4.5
- github.com/siderolabs/go-blockdevice v0.4.4 -> v0.4.5
- github.com/siderolabs/go-kubernetes v0.2.0 -> v0.2.1
- github.com/siderolabs/go-loadbalancer v0.2.1 -> v0.3.1
- github.com/siderolabs/pkgs v1.4.1-5-ga333a84 -> v1.5.0-alpha.0-28-gedd725a
- github.com/siderolabs/talos/pkg/machinery v1.4.0 -> v1.5.0-alpha.0
- github.com/siderolabs/tools v1.4.0-1-g955aabc -> v1.5.0-alpha.0-14-ge0c76c0
- github.com/spf13/cobra v1.6.1 -> v1.7.0
- github.com/stretchr/testify v1.8.2 -> v1.8.4
- github.com/vmware-tanzu/sonobuoy v0.56.16 -> v0.56.17
- go.etcd.io/etcd/api/v3 v3.5.8 -> v3.5.9
- go.etcd.io/etcd/client/pkg/v3 v3.5.8 -> v3.5.9
- go.etcd.io/etcd/client/v3 v3.5.8 -> v3.5.9
- go.etcd.io/etcd/etcdutl/v3 v3.5.8 -> v3.5.9
- golang.org/x/net v0.8.0 -> v0.11.0
- golang.org/x/sync v0.1.0 -> v0.3.0
- golang.org/x/sys v0.6.0 -> v0.9.0
- golang.org/x/term v0.6.0 -> v0.9.0
- golang.org/x/text v0.10.0 new
- golang.zx2c4.com/wireguard/wgctrl 9c5414ab4bde -> 925a1e7659e6
- google.golang.org/grpc v1.54.0 -> v1.56.1
- k8s.io/api v0.27.1 -> v0.27.3
- k8s.io/apimachinery v0.27.1 -> v0.27.3
- k8s.io/apiserver v0.27.1 -> v0.27.3
- k8s.io/client-go v0.27.1 -> v0.27.3
- k8s.io/component-base v0.27.1 -> v0.27.3
- k8s.io/cri-api v0.27.1 -> v0.27.3
- k8s.io/klog/v2 v2.90.1 -> v2.100.1
- k8s.io/kubectl v0.27.1 -> v0.27.3
- k8s.io/kubelet v0.27.1 -> v0.27.3
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.68 -> v1.2.69
Previous release can be found at v1.4.0
Talos 1.5.0-alpha.0 (2023-05-19)
Welcome to the v1.5.0-alpha.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Component Updates
- Linux: 6.1.28
- containerd: 1.6.21
- runc: 1.1.7
- etcd: 3.5.9
- Kubernetes: 1.27.2
Talos is built with Go 1.20.4.
Contributors
- Andrey Smirnov
- Noel Georgi
- Utku Ozdemir
- Dmitriy Matrenichev
- Steve Francis
- Budiman Jojo
- Christian Rolland
- Henk Kraal
- Michael A. Davis
- Michael Fornaro
- Nico Berlee
- Niklas Wik
- Ricky Sadowski
- Thomas Perronin
Changes
69 commits
383471c3efeat: update default Kubernetes to v1.27.28f68d1abechore: bump depse0c1585d3feat: create azure community gallery image version on releasedd8336c9efix: refresh kubelet self-issued serving certificatesbb02dd263chore: drop deprecated stuff for Talos 1.561cad8673chore: bump deps01dfd3af7feat: update etcd to v3.5.9aa65fbb8achore: update KUBECTL_URL to reflect the community bucketcc3128d94chore: bump kernel to 6.1.2897fffaf78chore: use ctest.UpdateWithConflicts instead of plain UpdateWithConflicts3b36993b9fix: rlimit nofile test45e6e27afchore: bump runtime4f720d465fix: revert: set rlimit explicitly in wrapperda2565f674fix: set rlimit explicitly in wrapperdcdfc242b8chore: re-enable Go buildide67f3f5c5feat: linux 6.1.27, containerd 1.6.21, go 1.20.455ae59a0afix: properly skip/cleanup controlplane configs for workers64eade9bdchore: clean up unused constant62c6e9655feat: introduce siderolink config resource & reconnect860002c73fix: don't reload control plane pods on cert SANs changesd43c61e80fix: enforce nolock option for all NFS mounts by default339986db9fix: inhibit timer to follow kubelet timercbf6dc100fix: set timeout for unmount callsb58f913d5fix: set the static pod priority as valuesf8a7a5b6bdocs: add information about KubeSpan ports and topology2bad74d64docs: add how to on scaling down7442ff8b0chore: fix typos inteface -> interface (docs and tests)d4e94f7a1fix: add back required TARGETARCH for installere6fffda01chore: linux 6.1.26, runc 1.1.7344746ae2fix: bump max inhibit delay to 20 mind9bdea2b5chore: fork docs and compatibility modules for Talos 1.53d99610fcdocs: document building, verifying image and process caps014008ea2fix: udevd rules trigger9b36bb613feat: update Linux to 6.1.25, fix virtio on arm6408ec66c55feat: clean up (garbage collect) system images which are not referencedb097efcdefix: display correct number of machines on dashboardcad43f0adchore: remove k8s master labele296a566efix: support kernel userspace module loading103f0ffddfeat: add startup probes to controller-manager and scheduler5a1ae8aaechore: bump dependencesec8c8dbafchore: fix container image reproducibilityf661d8487fix: allowtalosctl cpto handle special files in/proc2d824b563fix: do not show control plane status for workers on dashboarde5491ddaddocs: update documentation for nocloud7a004a6f7fix: parse errors correctly374ef5385test: submit verbose flag to e2e testse1d38b6fefeat: show template URL in dashboard config URL tab45d7f0ce9docs: fix the latest url96efbf147docs: activate 1.4.0 docs by default8c1f515b1feat: update Linux to 6.1.248689bef5fdocs: update documentation for Talos 1.4a781dfb8efeat: update Kubernetes to 1.27.1a737dd83achore: typo incompatibility.ParseKubernetesVersionf14928b0afix: fix dashboard crash when a non-existent node is specified3e406d9b0feat: update etcd to v3.5.8bd1cff3e8chore: remove Go buildide31f7f50bfeat: update Kubernetes to 1.27.0aa3640d74docs: update storage.md07bb61e60chore: module-sig-verify cleanup5e9d836c3chore: add kernel module signtaure verification3cd1c6bb0fix: send 'STOP' event on phase end5176d27dcfeat: update Kubernetes to 1.27.0-rc.12c55550a6fix: quote ISO kernel args for GRUB319d76e38fix: respect BROWSER=echo in client auth interceptor4e4ace839chore: update Go to 1.20.3170f73899fix: correctly parse static pod phasec3a595d5bfix: improve action tracking post checkseb01edbc8fix: rework DHCP flowe095150a6test: bump CAPI components versions
Changes from siderolabs/extras
Changes from siderolabs/gen
3 commits
Changes from siderolabs/go-blockdevice
Changes from siderolabs/go-loadbalancer
Changes from siderolabs/pkgs
18 commits
702d7a7chore: bump deps7958db1chore: copy over sd-boot and sd-stub from tools813b3c3chore: revert xfsprogs0cc78abchore: bump kernel to 6.1.2870189e3chore: bump depsc5d3bf1feat: add sd-stub and sd-boot30a7ac2feat: update Linux 6.1.27, containerd 1.6.21fbc6ee5chore: bump deps82b9489chore: bump dependenciesf37e520feat: update Linux to 6.1.253920b16feat: add multi-gen LRU kernel support988f1ecfeat: update Linux to 6.1.245327d12fix: remove FB_NVIDIA drivers, Linux 6.1.234eae958chore: copy over the kernel signing public key174f8fcchore: update Go to 1.20.341629b0chore: reorder pkgs for better kernel cachingb483a6bfeat: build 'snp.efi' for iPXEfb853fffeat: update containerd to 1.6.20
Changes from siderolabs/tools
8 commits
Dependency Changes
- github.com/aws/aws-sdk-go v1.44.232 -> v1.44.264
- github.com/beevik/ntp v0.3.0 -> v1.0.0
- github.com/benbjohnson/clock v1.1.0 -> v1.3.5
- github.com/cenkalti/backoff/v4 v4.2.0 -> v4.2.1
- github.com/containerd/containerd v1.6.19 -> v1.6.20
- github.com/containerd/typeurl/v2 v2.1.1 new
- github.com/containernetworking/plugins v1.2.0 -> v1.3.0
- github.com/cosi-project/runtime v0.3.0 -> 82b69d862a7a
- github.com/docker/docker v23.0.2 -> v23.0.6
- github.com/hetznercloud/hcloud-go v1.41.0 -> v1.45.1
- github.com/insomniacslk/dhcp 74ae03f2425e -> 49801966e6cb
- github.com/jsimonetti/rtnetlink v1.3.1 -> v1.3.3
- github.com/mdlayher/genetlink v1.3.1 -> v1.3.2
- github.com/mdlayher/netlink v1.7.1 -> v1.7.2
- github.com/mdlayher/netx c711c2f8512f -> 7e21880baee8
- github.com/nberlee/go-netstat v0.1.1 -> v0.1.2
- github.com/opencontainers/image-spec v1.1.0-rc2 -> v1.1.0-rc3
- github.com/rivo/tview 281d14d896d7 -> 822bd067b165
- github.com/rs/xid v1.4.0 -> v1.5.0
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.15 -> v1.0.0-beta.16
- github.com/siderolabs/extras v1.4.0-1-g9b07505 -> v1.5.0-alpha.0
- github.com/siderolabs/gen v0.4.3 -> v0.4.5
- github.com/siderolabs/go-blockdevice v0.4.4 -> v0.4.5
- github.com/siderolabs/go-loadbalancer v0.2.1 -> v0.2.2
- github.com/siderolabs/pkgs v1.4.1-5-ga333a84 -> v1.5.0-alpha.0-17-g702d7a7
- github.com/siderolabs/talos/pkg/machinery v1.4.0 -> v1.4.4
- github.com/siderolabs/tools v1.4.0-1-g955aabc -> v1.5.0-alpha.0-7-gd2dde48
- github.com/spf13/cobra v1.6.1 -> v1.7.0
- go.etcd.io/etcd/api/v3 v3.5.8 -> v3.5.9
- go.etcd.io/etcd/client/pkg/v3 v3.5.8 -> v3.5.9
- go.etcd.io/etcd/client/v3 v3.5.8 -> v3.5.9
- go.etcd.io/etcd/etcdutl/v3 v3.5.8 -> v3.5.9
- golang.org/x/net v0.8.0 -> v0.10.0
- golang.org/x/sync v0.1.0 -> v0.2.0
- golang.org/x/sys v0.6.0 -> v0.8.0
- golang.org/x/term v0.6.0 -> v0.8.0
- golang.zx2c4.com/wireguard/wgctrl 9c5414ab4bde -> 925a1e7659e6
- google.golang.org/grpc v1.54.0 -> v1.55.0
- k8s.io/api v0.27.1 -> v0.27.2
- k8s.io/apimachinery v0.27.1 -> v0.27.2
- k8s.io/apiserver v0.27.1 -> v0.27.2
- k8s.io/client-go v0.27.1 -> v0.27.2
- k8s.io/component-base v0.27.1 -> v0.27.2
- k8s.io/klog/v2 v2.90.1 -> v2.100.1
- k8s.io/kubectl v0.27.1 -> v0.27.2
- k8s.io/kubelet v0.27.1 -> v0.27.2
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.68 -> v1.2.69
Previous release can be found at v1.4.0
Talos 1.4.0-alpha.4 (2023-03-31)
Welcome to the v1.4.0-alpha.4 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Bond Device Selectors
Bond links can now be described using device selectors instead of explicit device names:
machine:
network:
interfaces:
- interface: bond0
bond:
deviceSelectors:
- hardwareAddr: '00:50:56:*'
- hardwareAddr: '00:50:57:9c:2c:2d'
talosctl containers
talosctl logs -k and talosctl containers -k now support and output container display names with their ids.
This allows to distinguish between containers with the same name.
Registry Mirror Catch-All Option
Talos now supports a catch-all option for registry mirrors:
machine:
registries:
mirrors:
docker.io:
- https://registry-1.docker.io/
"*":
- https://my-registry.example.com/
Talos Dashboard on TTY2
Talos now starts a text-based UI dashboard on virtual console /dev/tty2 and switches to it by default upon boot.
Kernel logs remain available on /dev/tty1.
To switch TTYs, use the Alt+F1 through Alt+F2 keys.
You can disable this behavior by setting the kernel parameter talos.dashboard.disabled=1.
This behavior is disabled by default on SBCs.
Kernel Argument talos.environment
Talos now supports passing environment variables via talos.environment kernel argument.
Example:
talos.environment=http_proxy=http://proxy.example.com:8080 talos.environment=https_proxy=http://proxy.example.com:8080
etcd Maintenance
Talos adds new APIs to make it easier to perform etcd maintenance operations.
These APIs are available via new talosctl etcd sub-commands:
talosctl etcd alarm list|disarmtalosctl etcd defragtalosctl etcd status
See also etcd maintenance guide.
Kernel Modules
Talos now supports automatically loading kernel drivers built as modules. If any system extensions or the Talos base kernel build provides kernel modules and if they matches the system hardware (via PCI IDs), they will be loaded automatically. Modules can still be loaded explicitly by defining it in machine configuration.
Kernel Modules Tree
Talos now supports re-building the kernel modules dependency tree information on upgrades.
This allows modules of same name to co-exist as in-tree and external modules.
System Extensions can provide modules installed into extras directory and when loading it'll take precendence over the in-tree module.
Kernel Reset Argument
Talos now supports talos.experimental.wipe=system:EPHEMERAL,STATE kernel argument.
Talos now also supports the new GRUB boot option - "Reset Talos installation and return to maintenance mode".
Both of this options will reset EPHEMERAL and STATE partitions and will return Talos into maintenance mode after the reboot.
Machine Configuration
Strategic merge config patches correctly support merging .vlans sections of the network interface.
talosctl netstat
Talos API was extended to support retrieving a list of network connections (sockets) from the node and pods.
talosctl netstat command was added to retrieve the list of network connections.
Reset API Enhancements
Talos now supports resetting user disks through the Reset API,
the list of disks to wipe is set using the --user-disks-to-wipe parameter in talosctl.
Additionally, the Reset API can now function in maintenance mode
and has the capability to wipe the node's system disk (partial wipe is not supported).
New Talos API os:operator role
Talos now supports a new os:operator role for the Talos API.
This role allows everything os:reader role allows plus access to maintenance APIs:
rebooting, shutting down a node, accessing packet capture, etcd alarm APIs, etcd backup, etc.
Component Updates
- Linux: 6.1.22
- containerd: v1.6.20
- runc: v1.1.5
- Kubernetes: v1.27.0-rc.0
- etcd: v3.5.7
- CoreDNS: v1.10.1
- Flannel: v0.21.4
Talos is built with Go 1.20.2.
VMware Platform
Talos now supports loading network configuration on VMWare platform from the metadata key.
See CAPV IPAM Support and
Talos issue 6708 for details.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Spencer Smith
- Artem Chernyshev
- Serge Logvinov
- Steve Francis
- Nico Berlee
- Tim Jones
- Seán C McCord
- Steffen Windoffer
- Andrey Smirnov
- Cees-Jan Kiewiet
- Chris van de Sande
- Dennis Marttinen
- Dzerom Dzenkins
- Erik Lund
- Jori Huisman
- Lance R. Vick
- Matthias Riegler
- Michael Vorburger
- Murtaza Udaipurwala
- Niklas Wik
- Rowan Smith
- Samuel Kees
- Sander Maijers
- Thomas Way
- Tim van Druenen
- Victor Seva
- budimanjojo
- xyhhx
Changes
200 commits
7ffabe0f1feat: support network bond device selectorscbab12e3arefactor: rename outbound to connectivity on dashboard07c3c5d59feat: return disk subsystem in theDisks APIb8497b99efeat: update containerd to 1.6.20aa1499353feat: introduce network probes9dc1150e3docs: update nvidia instructions7967ccfc1feat: add config code entry screen to dashboardddb014cfdfix: udevd rules trigger0af8fe2fbfeat: netstat pod support52e857f55feat: linux 6.1.22, runc 1.1.5aa662ff63fix: apply small fixes on dashboard188560a33fix: add a link-scope route if the cmdline gateway is not reachable45c5b47a5feat: dhcpv4: send current hostname, fix spec compliance of renewals289b41fe4fix: output oftalosctl logsmight be corruped02f0a4526feat: allow writing initial META values into the imageea0e9bdbefeat: environment variables via the kernel arguments94c24ca64chore: add machine config version contract for v1.4cefa9c3ecfeat: update Kubernetes to 1.27.0-rc.09e8603f53feat: implement new download URL variable${code}d30cf9c86test: fix misprint in e2e scripts0d0bb31cffix: use stripped kernel modules3583eea98release(v1.4.0-alpha.3): prepare releasea7b79ef1bfeat: add network config screen to dashboardcf2ccc521fix: always shutdown maintenance API servicea0a5db590feat: update Flannel to 0.21.4d1a61fd34chore: bump golangci-lint36a9a208echore: bump depsc63cf90e3feat: update k8s to v1.27.0-beta.0b246c90abfix: add uint32 to Magic1 and Magic2777c8d6f6chore: update COSI to watch aggregated versionbec89bf6efix: use 'no block' etcd dial with multiple endpoints28713c2c4feat: update Kubernetes to 1.26.3a3cf41647docs: add InstallConfig ignored notice to docdf9b851fbchore: load all external artifacts earlier2dd0964c5refactor: use resource watches on dashboard9933ebb6achore: fix loaded artifacts file permissiona14a0aba0fix: nil pointer exception in syncLinkcf101e56ffix: add--forceflag fortalosctl genea2aa0611fix: fix data race on network config read64e3d24c6feat: provide platform network config for 'metal' in META442cb9c1bfeat: implement APIs to write to META9e07832dbfeat: implement summary dashboard1df841bb5refactor: change the interface of METAe9962bc3echore: update CI to tag azure buckets9f5f5cf9bfeat: update Flannel to v0.21.302b0ff35efeat: generate Flannel CNI manifest from upstream6656d35ecdocs: fix Talos version to use template72a6d1d70docs: update nocloud9948a646dfeat: coredns node uninitialized toleratione03902b54feat: update Go to 1.20.2c8f8579f2fix: upgrade-k8s to flag should not be required since there is a default230cfaf80feat: use network information from guestinfo.metadata97048f7c3feat: netstat in API and clientfda6da692fix: successful ACPI shutdown in maintenance modeb97e1abaafeat: set default image, validate empty image121220a3bchore: bump dependencies via renovate botebc92f3c1chore: add container id totalosctl -k containersandtalosctl -k logs22ef81c1efeat: add grub option to drop to maintenance mode642fe0c90feat: update pkgs with framebuffer console69cb414f0docs: update cilium install instructionse71cc6619fix: redo assertHostnames in HostnameMergeSuite.TestMerge8ea4bfad8refactor: improve the kubernetes upgrade flow81879fc0cdocs: add how tos for workloads on control planes, and scaling up05b0b721cchore: move blob storage to azure for buildsa78281214feat: add cilium e2e tests061640cccfeat: add pod ip to kube-proxy specdea17d723feat: update Kubernetes to v1.26.2337aaba7afeat: add 'os:operator' role40e69af22fix: improve etcd leave on reset process638dc9128fix: fix "defer" leak in ResetUserDisksbfba3677bchore: handle grub option - "wipe"594f27d87release(v1.4.0-alpha.2): prepare releaseb52071081feat: introduce new flag in reset API that makes Talos reset user disksf55f5df73feat: move dashboard package & run it in tty236e077eadchore: bump deps5a01d5fd4chore: run extension build as downstream426fe9687fix: extension base folder permission609d3a8a6feat: support strategic merge patches on VLAN configuration7e19f32d7chore: provide version compatibility data for Talos 1.2.x230e46e56refactor: extract parts of kubernetes librariesf3d3f0f26fix: update go-smbios library with Hyper-V data fix8711eea96fix: use passed--contextintalosctl configcmd5ac9f43e4feat: start machined earlier & in maintenance mode36ab414a1docs: fix the endpoints in the libvirt guide3d55bd80ffix: add--forceflag totalosctl gen config660b8874dfeat: cmdline integer netmask1e3daacc4docs: update nvidia component versionsb5c03a7fafix: docker talosctl cluster create provisioner6e8f13529fix: add support for a fallback '*' mirror configurationdcd4eb1a9fix: improve error message on single node upgradeed5af3f78chore: bump deps0dc6858e5chore: bump cosi-project/runtimeda2edb9dechore: bump dependenciese51a110f0chore: bump dependencies2d0148018feat: automatically load modules based on hw info7b75cd8b9fix: kernel module dependency tree generation65d02e5adfix: dbus shutdown when it's not initializeda7079ce85fix: quote the ampersand character in GRUB config933ba2d82fix: display correct blockdevice sizec449cb736fix: talosctl reboot command passing mode in wait mode34ab0007adocs: port is needed for wireguard endpoint1e1aa84f6fix: kubernetes removed resource version checkdcbcf5a93fix: wait for network and retry in platform get config funcs3d7566ec7test: update Canal CNI manifest URLe09e10666fix: default dns domain to 'cluster.local' in local casecc6e37a47feat: use process wrapper for dropping capabilities0c6c88874fix: trackable action flag usage text. --no-wait does not exist5cb2915d8feat: use wrapper for starting processes56d945326fix: panic in talosctl cluster show38a51191efix: correctly expand parameters in the URLaf21860a2fix: return proper error if download attempts time out54f7d4c92fix: correctly quote and unquote strings in GRUB config54cf0672afix: omit zero MTU in the machine configbdc53ac25docs: add hyperlink to Docker API docs aboutconfig.jsonb3bc06dd1chore: bump vtprotobuf to v0.4.00ba5e59f6fix: drone config for renovate PR's590a393defix: udevd healthcheck2b6b6deacdocs: simplify and clarify digital ocean docs92bc15f7frelease(v1.4.0-alpha.1): prepare releasee3da4754efeat: update Linux to 6.1.7006449e46test: build integration test early in the pipeline09aa71264fix: renovate config2d136f187feat: set markdown and html descriptions in config json schemaf0804027afix: renovate config812a2877cchore: bump deps + renovate cleanupaa9f66c1cfix: mark DigitalOcean anchor IP as scope linkbb4937f1bfeat: enable renovate3e0057162fix: unwrap gRPC errors on stop/remove pods check00e52ae07fix: build correctly etcd initial cluster URLae83b10aefeat: create JSON schema for v1alpha1.Config703d96595feat: update Kubernetes to 1.26.1, etcd to 3.5.7965e64591docs: update to use talosctl install scriptc5954f434chore: bump depsbb50f6a56chore: preallocate disk images for QEMU VMsd4b8b35defeat: generate kernel module dependency tree18122ae73fix: service restart (including extension services)680fd5e45fix: bump COSI runtime with the panic controller restart fix0b65bbfc8fix: handle overwriting tags in syslinux ADV70d9428a1fix: kubespan MSS clamping683b4ccb4chore: update Go to 1.19.5 and kernel to 6.1.4062c7d754test: fix integration test on cp endpoint update8e9fc13d7feat: implement enum generator for proto files771b0dc06docs: update left over rpi_4 ref to rpi_generic6c04b5f79chore: bump dependencies0a5a8802efeat: use 'localhost' endpoint for controlplane nodesb0775ebf2feat: add ISO wipe GRUB boot option29020cb9cfix: report fatal sequence errors as reboots96629d5bafeat: implement etcd maintenance commands80fed3194feat: include Kubernetes controlplane endpoint as one of the endpointsc6cb36cc1docs: fix auditpolicy example typoba8265bc5feat: new talosctl config remove to remove contextfcb19ff51fix: implement upgrade version checks for Talos 1.480f150ac8feat: enable ipv6 on gcp8db622f3ddocs: add Vandebron to adopters listf6a86ae90fix: oralce cloud zone89dbb0ecfrelease(v1.4.0-alpha.0): prepare release31fb90535feat: update Linux 6.1.1, containerd 1.6.14a0c0352ddfix: send diagnostic output to stderr consistently9a5f4c08afix: default the manifest namespace if not set3c6cce5fedocs: update last release for Talos 1.2.x703624c43docs: fix the 1.3 release date386c9293adocs: update nvidia-container-runtime versionff83d9fd7fix: improve talosctl completion31ff431fachore: add schulz systemtechnik to the list97bef7c47docs: vsphere.sh > vmware.sh34babe858chore: make organization selection an interfacea9643b477fix: use proper key usage for apid client certificate171aa9467fix: disable Wireless Lan using dtoverlay2e84d2ab3chore: update conformance product.yamlb7763843afeat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.afc45ad63docs: mark Talos 1.3 docs as default873bd3807fix: redact service account key in config in RedactSecrets methodb3aebfadffeat: validate Talos API access roles in machine config40761e17ddocs: fork docs for Talos 1.4474604cd2docs: update documentation for Talos 1.3faf49218cfeat: add more checks for K8s upgrade5b992bd86fix: allow empty dnsDomain in machine configeb332cfcbfeat: add health check for a minimal memory / disk sized04970dfafix: ignore k8s additional addresses if nil63c17104cfeat: update Kubernets to 1.26.0f7a9a90dbchore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)cf7adc51cfeat: add RedactSecrets method to v1alpha1.Config4c31b9b1adocs: clarify what the deal is with /vara8ebcca4achore: removewatchErrfrommetal.getResource1253513bdfix: fix nil pointer panic and incorrect error output82e8c9e1ffix: workaround panic in the kubelet service controllera505b8909fix: update COSI and reset restart backoff on successe92fdcbadchore: bump kernel to 5.15.81f0dddca2adocs: expand help for 'talosctl get'fcffc8879fix: add ext4 filesystem detection5b2960efffix: introduce 'overridePath' setting and fix Talos resolver0219d1124fix: use only kube-apiserver endpoints for Talos API access endpointsdc5e0f4affix: report errors to Equinix Metal event API7ab140a94feat: add talosctl machineconfig patch commandd3cf06114fix: ignore many more filesystems in IMA44e2799b8feat: add stdout and single config type support to talosctl gen config4452f0e17docs: bump talos version38e57bd12feat: update Kubernetes to v1.26.0-rc.14cd125d49fix: correctly handle new watch event types881b84152feat: update Flannel to 0.20.2
Changes since v1.4.0-alpha.3
21 commits
7ffabe0f1feat: support network bond device selectorscbab12e3arefactor: rename outbound to connectivity on dashboard07c3c5d59feat: return disk subsystem in theDisks APIb8497b99efeat: update containerd to 1.6.20aa1499353feat: introduce network probes9dc1150e3docs: update nvidia instructions7967ccfc1feat: add config code entry screen to dashboardddb014cfdfix: udevd rules trigger0af8fe2fbfeat: netstat pod support52e857f55feat: linux 6.1.22, runc 1.1.5aa662ff63fix: apply small fixes on dashboard188560a33fix: add a link-scope route if the cmdline gateway is not reachable45c5b47a5feat: dhcpv4: send current hostname, fix spec compliance of renewals289b41fe4fix: output oftalosctl logsmight be corruped02f0a4526feat: allow writing initial META values into the imageea0e9bdbefeat: environment variables via the kernel arguments94c24ca64chore: add machine config version contract for v1.4cefa9c3ecfeat: update Kubernetes to 1.27.0-rc.09e8603f53feat: implement new download URL variable${code}d30cf9c86test: fix misprint in e2e scripts0d0bb31cffix: use stripped kernel modules
Changes from siderolabs/discovery-api
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
9 commits
7faf14achore: bump pkgs to v1.4.0343956efeat: update Go to 1.20.26209d87chore: bump tc-redirect-tap8b28b6bchore: bump deps5ab4f59chore: disable renovate buildsddeddbdchore: update packages, tc_redirect_tap8cb4792chore: update Go to 1.19.53ca2df3chore: disable provenance in buildx55d8452feat: update releases
Changes from siderolabs/gen
2 commits
Changes from siderolabs/go-blockdevice
2 commits
Changes from siderolabs/go-kmsg
Changes from siderolabs/go-kubernetes
4 commits
Changes from siderolabs/go-smbios
Changes from siderolabs/pkgs
39 commits
aadb943feat: update containerd to 1.6.205a7b33echore: bump deps5d77814fix: strip kernel modules when installingc26b0b5chore: bump deps7d8f5bdfeat: enable Hyper-V dynamic memory driverea40205chore: bump deps21e5a68feat: update Go 1.20.2, Linux 6.1.15 and other1d7e60cfeat: enable framebuffer drivers and console fonts0e63e95chore: bump deps5dbce6bfix: xz url0097233chore: re-enable drbd7493721fix: sourcefourge url shasums185f482feat: update containerd to 1.6.18e3cab6cchore: bump deps18661b0chore: bump deps885a68bchore: bump depsc3a6e18chore: bump dependencies1fae0b2feat: virtio drivers as modules61d8ff4chore: bump deps and disable un-needed kconfig15fe6d8fix: kernel module tree files missing987d24afeat: mellanox drivers are modulesb82a015feat: mellanox oped057d4f9chore: bump deps4ac4138feat: enable nvme support for raspberrypi cm4ccb9d39fix: disable magic sysrqd33202dchore: bump u-boot to 2023.01cb83e16chore: bump dependenciese561dcbfeat: bump Go to 1.19.5c7797c7feat: update Linux to 6.1.4, restore RPi support5e8ebb0feat: add AMD K10 sensor support73ac37dchore: disable provenance in buildx8965beechore: use default symlinks to/bininbase325c9bffeat: bump dependencies165dff6fix: patch ipmitool IANA URLc542f39feat: add kernel support for usb setrial consolef564f45chore: bump tools, containerd268ea7cchore: bump depsdcf3cebfeat: add nitro enclave support in kernel17ea5e6chore: bump kernel to 5.15.81
Changes from siderolabs/tools
31 commits
95f814afeat: cmake 3.26.2a3d5bacchore: bump deps2d710f9chore: bump deps9bea7d0chore: skip rc versions for util-linuxa94850echore: bump depse6b2956fix: protoc install601e347feat: go 1.20.2 + other bumpsca67d0bchore: bump deps662a906feat: add libnla8440a9fix: partially revert e6c98fdf54425e6382f226e33bccca6f3875aad3ae6c98fdchore: remove swigcd9687bfix: renovate config977e3fcchore: bump go to 1.20.115748aachore: bump depsd4b719achore: bump deps8c36dbdchore: bump toolchain, bump protoc-gen-go-grpca62e365feat: update Go to 1.2028d4a57chore: reduce renovate noisee130fd5chore: bump deps37612fefix: revert enabling provenancee0b01e3chore: bump depsd0e6bd0feat: add gnutls3d34b5dchore: bump dependencies763c1d9feat: update Go to 1.19.5136958fchore: disable provenance in buildxe2a8692feat: update releases0e48f37chore: bump protobufa21aa1cchore: bump toolchain and mpc versions1a75d0fchore: bump deps55bd185feat: update Go to 1.19.4f291f46chore: bump tools
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
- github.com/aws/aws-sdk-go v1.44.147 -> v1.44.232
- github.com/benbjohnson/clock v1.1.0 new
- github.com/containerd/cgroups v1.0.4 -> v1.1.0
- github.com/containerd/containerd v1.6.12 -> v1.6.19
- github.com/containernetworking/plugins v1.1.1 -> v1.2.0
- github.com/coreos/go-semver v0.3.0 -> v0.3.1
- github.com/cosi-project/runtime v0.2.0 -> v0.3.0
- github.com/docker/docker v20.10.21 -> v23.0.2
- github.com/dustin/go-humanize v1.0.0 -> v1.0.1
- github.com/emicklei/dot v1.2.0 -> v1.4.2
- github.com/fatih/color v1.13.0 -> v1.15.0
- github.com/freddierice/go-losetup/v2 v2.0.1 new
- github.com/gdamore/tcell/v2 v2.5.3 -> v2.6.0
- github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 -> v1.4.0
- github.com/hashicorp/go-getter v1.6.2 -> v1.7.1
- github.com/hetznercloud/hcloud-go v1.37.0 -> v1.41.0
- github.com/insomniacslk/dhcp f26e6d78f622 -> 74ae03f2425e
- github.com/jsimonetti/rtnetlink v1.3.0 -> v1.3.1
- github.com/mattn/go-isatty v0.0.16 -> v0.0.18
- github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
- github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
- github.com/mdlayher/netlink v1.7.0 -> v1.7.1
- github.com/nberlee/go-netstat v0.1.1 new
- github.com/prometheus/procfs v0.8.0 -> v0.9.0
- github.com/rivo/tview db36428c92d9 -> 281d14d896d7
- github.com/safchain/ethtool v0.2.0 -> v0.3.0
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.15
- github.com/siderolabs/discovery-api v0.1.1 -> v0.1.2
- github.com/siderolabs/discovery-client v0.1.3 -> v0.1.4
- github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0
- github.com/siderolabs/gen v0.4.1 -> v0.4.3
- github.com/siderolabs/go-blockdevice v0.4.2 -> v0.4.4
- github.com/siderolabs/go-kmsg v0.1.2 -> v0.1.3
- github.com/siderolabs/go-kubernetes v0.2.0 new
- github.com/siderolabs/go-smbios v0.3.1 -> v0.3.2
- github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-1-gaadb943
- github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.3
- github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0
- github.com/stretchr/testify v1.8.1 -> v1.8.2
- github.com/u-root/u-root v0.10.0 -> v0.11.0
- github.com/ulikunitz/xz v0.5.11 new
- github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.16
- github.com/vmware/govmomi v0.29.0 -> v0.30.4
- go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
- go.uber.org/zap v1.23.0 -> v1.24.0
- go4.org/netipx 797b0c90d8ab -> f1b76eb4bb35
- golang.org/x/net v0.4.0 -> v0.8.0
- golang.org/x/sys v0.3.0 -> v0.6.0
- golang.org/x/term v0.3.0 -> v0.6.0
- golang.org/x/time v0.2.0 -> v0.3.0
- golang.zx2c4.com/wireguard/wgctrl 97bc4ad4a1cb -> 9c5414ab4bde
- google.golang.org/grpc v1.51.0 -> v1.54.0
- google.golang.org/protobuf v1.28.1 -> v1.30.0
- k8s.io/api v0.26.0 -> v0.27.0-rc.0
- k8s.io/apimachinery v0.26.0 -> v0.27.0-rc.0
- k8s.io/apiserver v0.26.0 -> v0.27.0-rc.0
- k8s.io/client-go v0.26.0 -> v0.27.0-rc.0
- k8s.io/component-base v0.26.0 -> v0.27.0-rc.0
- k8s.io/cri-api v0.26.0 -> v0.27.0-rc.0
- k8s.io/klog/v2 v2.80.1 -> v2.90.1
- k8s.io/kubectl v0.26.0 -> v0.27.0-rc.0
- k8s.io/kubelet v0.26.0 -> v0.27.0-rc.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.66 -> v1.2.68
Previous release can be found at v1.3.0
Talos 1.4.0-alpha.3 (2023-03-23)
Welcome to the v1.4.0-alpha.3 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
talosctl containers
talosctl logs -k and talosctl containers -k now support and output container display names with their ids.
This allows to distinguish between containers with the same name.
Registry Mirror Catch-All Option
Talos now supports a catch-all option for registry mirrors:
machine:
registries:
mirrors:
docker.io:
- https://registry-1.docker.io/
"*":
- https://my-registry.example.com/
Talos Dashboard on TTY2
Talos now starts a text-based UI dashboard on virtual console /dev/tty2 and switches to it by default upon boot.
Kernel logs remain available on /dev/tty1.
To switch TTYs, use the Alt+F1 through Alt+F2 keys.
You can disable this behavior by setting the kernel parameter talos.dashboard.disabled=1.
This behavior is disabled by default on SBCs.
etcd Maintenance
Talos adds new APIs to make it easier to perform etcd maintenance operations.
These APIs are available via new talosctl etcd sub-commands:
talosctl etcd alarm list|disarmtalosctl etcd defragtalosctl etcd status
See also etcd maintenance guide.
Kernel Modules
Talos now supports automatically loading kernel drivers built as modules. If any system extensions or the Talos base kernel build provides kernel modules and if they matches the system hardware (via PCI IDs), they will be loaded automatically. Modules can still be loaded explicitly by defining it in machine configuration.
Kernel Modules Tree
Talos now supports re-building the kernel modules dependency tree information on upgrades.
This allows modules of same name to co-exist as in-tree and external modules.
System Extensions can provide modules installed into extras directory and when loading it'll take precendence over the in-tree module.
Kernel Reset Argument
Talos now supports talos.experimental.wipe=system:EPHEMERAL,STATE kernel argument.
Talos now also supports the new GRUB boot option - "Reset Talos installation and return to maintenance mode".
Both of this options will reset EPHEMERAL and STATE partitions and will return Talos into maintenance mode after the reboot.
Machine Configuration
Strategic merge config patches correctly support merging .vlans sections of the network interface.
talosctl netstat
Talos API was extended to support retrieving a list of network connections (sockets) from the node.
talosctl netstat command was added to retrieve the list of network connections.
Reset API Enhancements
Talos now supports resetting user disks through the Reset API,
the list of disks to wipe is set using the --user-disks-to-wipe parameter in talosctl.
Additionally, the Reset API can now function in maintenance mode
and has the capability to wipe the node's system disk (partial wipe is not supported).
New Talos API os:operator role
Talos now supports a new os:operator role for the Talos API.
This role allows everything os:reader role allows plus access to maintenance APIs:
rebooting, shutting down a node, accessing packet capture, etcd alarm APIs, etcd backup, etc.
Component Updates
- Linux: 6.1.20
- containerd: v1.6.19
- Kubernetes: v1.27.0-beta.0
- etcd: v3.5.7
- CoreDNS: v1.10.1
- Flannel: v0.21.4
Talos is built with Go 1.20.2.
VMware Platform
Talos now supports loading network configuration on VMWare platform from the metadata key.
See CAPV IPAM Support and
Talos issue 6708 for details.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Spencer Smith
- Serge Logvinov
- Artem Chernyshev
- Steve Francis
- Tim Jones
- Nico Berlee
- Seán C McCord
- Steffen Windoffer
- Andrey Smirnov
- Cees-Jan Kiewiet
- Chris van de Sande
- Dzerom Dzenkins
- Erik Lund
- Jori Huisman
- Lance R. Vick
- Matthias Riegler
- Michael Vorburger
- Murtaza Udaipurwala
- Niklas Wik
- Rowan Smith
- Samuel Kees
- Sander Maijers
- Tim van Druenen
- Victor Seva
- budimanjojo
- xyhhx
Changes
178 commits
a7b79ef1bfeat: add network config screen to dashboardcf2ccc521fix: always shutdown maintenance API servicea0a5db590feat: update Flannel to 0.21.4d1a61fd34chore: bump golangci-lint36a9a208echore: bump depsc63cf90e3feat: update k8s to v1.27.0-beta.0b246c90abfix: add uint32 to Magic1 and Magic2777c8d6f6chore: update COSI to watch aggregated versionbec89bf6efix: use 'no block' etcd dial with multiple endpoints28713c2c4feat: update Kubernetes to 1.26.3a3cf41647docs: add InstallConfig ignored notice to docdf9b851fbchore: load all external artifacts earlier2dd0964c5refactor: use resource watches on dashboard9933ebb6achore: fix loaded artifacts file permissiona14a0aba0fix: nil pointer exception in syncLinkcf101e56ffix: add--forceflag fortalosctl genea2aa0611fix: fix data race on network config read64e3d24c6feat: provide platform network config for 'metal' in META442cb9c1bfeat: implement APIs to write to META9e07832dbfeat: implement summary dashboard1df841bb5refactor: change the interface of METAe9962bc3echore: update CI to tag azure buckets9f5f5cf9bfeat: update Flannel to v0.21.302b0ff35efeat: generate Flannel CNI manifest from upstream6656d35ecdocs: fix Talos version to use template72a6d1d70docs: update nocloud9948a646dfeat: coredns node uninitialized toleratione03902b54feat: update Go to 1.20.2c8f8579f2fix: upgrade-k8s to flag should not be required since there is a default230cfaf80feat: use network information from guestinfo.metadata97048f7c3feat: netstat in API and clientfda6da692fix: successful ACPI shutdown in maintenance modeb97e1abaafeat: set default image, validate empty image121220a3bchore: bump dependencies via renovate botebc92f3c1chore: add container id totalosctl -k containersandtalosctl -k logs22ef81c1efeat: add grub option to drop to maintenance mode642fe0c90feat: update pkgs with framebuffer console69cb414f0docs: update cilium install instructionse71cc6619fix: redo assertHostnames in HostnameMergeSuite.TestMerge8ea4bfad8refactor: improve the kubernetes upgrade flow81879fc0cdocs: add how tos for workloads on control planes, and scaling up05b0b721cchore: move blob storage to azure for buildsa78281214feat: add cilium e2e tests061640cccfeat: add pod ip to kube-proxy specdea17d723feat: update Kubernetes to v1.26.2337aaba7afeat: add 'os:operator' role40e69af22fix: improve etcd leave on reset process638dc9128fix: fix "defer" leak in ResetUserDisksbfba3677bchore: handle grub option - "wipe"594f27d87release(v1.4.0-alpha.2): prepare releaseb52071081feat: introduce new flag in reset API that makes Talos reset user disksf55f5df73feat: move dashboard package & run it in tty236e077eadchore: bump deps5a01d5fd4chore: run extension build as downstream426fe9687fix: extension base folder permission609d3a8a6feat: support strategic merge patches on VLAN configuration7e19f32d7chore: provide version compatibility data for Talos 1.2.x230e46e56refactor: extract parts of kubernetes librariesf3d3f0f26fix: update go-smbios library with Hyper-V data fix8711eea96fix: use passed--contextintalosctl configcmd5ac9f43e4feat: start machined earlier & in maintenance mode36ab414a1docs: fix the endpoints in the libvirt guide3d55bd80ffix: add--forceflag totalosctl gen config660b8874dfeat: cmdline integer netmask1e3daacc4docs: update nvidia component versionsb5c03a7fafix: docker talosctl cluster create provisioner6e8f13529fix: add support for a fallback '*' mirror configurationdcd4eb1a9fix: improve error message on single node upgradeed5af3f78chore: bump deps0dc6858e5chore: bump cosi-project/runtimeda2edb9dechore: bump dependenciese51a110f0chore: bump dependencies2d0148018feat: automatically load modules based on hw info7b75cd8b9fix: kernel module dependency tree generation65d02e5adfix: dbus shutdown when it's not initializeda7079ce85fix: quote the ampersand character in GRUB config933ba2d82fix: display correct blockdevice sizec449cb736fix: talosctl reboot command passing mode in wait mode34ab0007adocs: port is needed for wireguard endpoint1e1aa84f6fix: kubernetes removed resource version checkdcbcf5a93fix: wait for network and retry in platform get config funcs3d7566ec7test: update Canal CNI manifest URLe09e10666fix: default dns domain to 'cluster.local' in local casecc6e37a47feat: use process wrapper for dropping capabilities0c6c88874fix: trackable action flag usage text. --no-wait does not exist5cb2915d8feat: use wrapper for starting processes56d945326fix: panic in talosctl cluster show38a51191efix: correctly expand parameters in the URLaf21860a2fix: return proper error if download attempts time out54f7d4c92fix: correctly quote and unquote strings in GRUB config54cf0672afix: omit zero MTU in the machine configbdc53ac25docs: add hyperlink to Docker API docs aboutconfig.jsonb3bc06dd1chore: bump vtprotobuf to v0.4.00ba5e59f6fix: drone config for renovate PR's590a393defix: udevd healthcheck2b6b6deacdocs: simplify and clarify digital ocean docs92bc15f7frelease(v1.4.0-alpha.1): prepare releasee3da4754efeat: update Linux to 6.1.7006449e46test: build integration test early in the pipeline09aa71264fix: renovate config2d136f187feat: set markdown and html descriptions in config json schemaf0804027afix: renovate config812a2877cchore: bump deps + renovate cleanupaa9f66c1cfix: mark DigitalOcean anchor IP as scope linkbb4937f1bfeat: enable renovate3e0057162fix: unwrap gRPC errors on stop/remove pods check00e52ae07fix: build correctly etcd initial cluster URLae83b10aefeat: create JSON schema for v1alpha1.Config703d96595feat: update Kubernetes to 1.26.1, etcd to 3.5.7965e64591docs: update to use talosctl install scriptc5954f434chore: bump depsbb50f6a56chore: preallocate disk images for QEMU VMsd4b8b35defeat: generate kernel module dependency tree18122ae73fix: service restart (including extension services)680fd5e45fix: bump COSI runtime with the panic controller restart fix0b65bbfc8fix: handle overwriting tags in syslinux ADV70d9428a1fix: kubespan MSS clamping683b4ccb4chore: update Go to 1.19.5 and kernel to 6.1.4062c7d754test: fix integration test on cp endpoint update8e9fc13d7feat: implement enum generator for proto files771b0dc06docs: update left over rpi_4 ref to rpi_generic6c04b5f79chore: bump dependencies0a5a8802efeat: use 'localhost' endpoint for controlplane nodesb0775ebf2feat: add ISO wipe GRUB boot option29020cb9cfix: report fatal sequence errors as reboots96629d5bafeat: implement etcd maintenance commands80fed3194feat: include Kubernetes controlplane endpoint as one of the endpointsc6cb36cc1docs: fix auditpolicy example typoba8265bc5feat: new talosctl config remove to remove contextfcb19ff51fix: implement upgrade version checks for Talos 1.480f150ac8feat: enable ipv6 on gcp8db622f3ddocs: add Vandebron to adopters listf6a86ae90fix: oralce cloud zone89dbb0ecfrelease(v1.4.0-alpha.0): prepare release31fb90535feat: update Linux 6.1.1, containerd 1.6.14a0c0352ddfix: send diagnostic output to stderr consistently9a5f4c08afix: default the manifest namespace if not set3c6cce5fedocs: update last release for Talos 1.2.x703624c43docs: fix the 1.3 release date386c9293adocs: update nvidia-container-runtime versionff83d9fd7fix: improve talosctl completion31ff431fachore: add schulz systemtechnik to the list97bef7c47docs: vsphere.sh > vmware.sh34babe858chore: make organization selection an interfacea9643b477fix: use proper key usage for apid client certificate171aa9467fix: disable Wireless Lan using dtoverlay2e84d2ab3chore: update conformance product.yamlb7763843afeat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.afc45ad63docs: mark Talos 1.3 docs as default873bd3807fix: redact service account key in config in RedactSecrets methodb3aebfadffeat: validate Talos API access roles in machine config40761e17ddocs: fork docs for Talos 1.4474604cd2docs: update documentation for Talos 1.3faf49218cfeat: add more checks for K8s upgrade5b992bd86fix: allow empty dnsDomain in machine configeb332cfcbfeat: add health check for a minimal memory / disk sized04970dfafix: ignore k8s additional addresses if nil63c17104cfeat: update Kubernets to 1.26.0f7a9a90dbchore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)cf7adc51cfeat: add RedactSecrets method to v1alpha1.Config4c31b9b1adocs: clarify what the deal is with /vara8ebcca4achore: removewatchErrfrommetal.getResource1253513bdfix: fix nil pointer panic and incorrect error output82e8c9e1ffix: workaround panic in the kubelet service controllera505b8909fix: update COSI and reset restart backoff on successe92fdcbadchore: bump kernel to 5.15.81f0dddca2adocs: expand help for 'talosctl get'fcffc8879fix: add ext4 filesystem detection5b2960efffix: introduce 'overridePath' setting and fix Talos resolver0219d1124fix: use only kube-apiserver endpoints for Talos API access endpointsdc5e0f4affix: report errors to Equinix Metal event API7ab140a94feat: add talosctl machineconfig patch commandd3cf06114fix: ignore many more filesystems in IMA44e2799b8feat: add stdout and single config type support to talosctl gen config4452f0e17docs: bump talos version38e57bd12feat: update Kubernetes to v1.26.0-rc.14cd125d49fix: correctly handle new watch event types881b84152feat: update Flannel to 0.20.2
Changes since v1.4.0-alpha.2
50 commits
a7b79ef1bfeat: add network config screen to dashboardcf2ccc521fix: always shutdown maintenance API servicea0a5db590feat: update Flannel to 0.21.4d1a61fd34chore: bump golangci-lint36a9a208echore: bump depsc63cf90e3feat: update k8s to v1.27.0-beta.0b246c90abfix: add uint32 to Magic1 and Magic2777c8d6f6chore: update COSI to watch aggregated versionbec89bf6efix: use 'no block' etcd dial with multiple endpoints28713c2c4feat: update Kubernetes to 1.26.3a3cf41647docs: add InstallConfig ignored notice to docdf9b851fbchore: load all external artifacts earlier2dd0964c5refactor: use resource watches on dashboard9933ebb6achore: fix loaded artifacts file permissiona14a0aba0fix: nil pointer exception in syncLinkcf101e56ffix: add--forceflag fortalosctl genea2aa0611fix: fix data race on network config read64e3d24c6feat: provide platform network config for 'metal' in META442cb9c1bfeat: implement APIs to write to META9e07832dbfeat: implement summary dashboard1df841bb5refactor: change the interface of METAe9962bc3echore: update CI to tag azure buckets9f5f5cf9bfeat: update Flannel to v0.21.302b0ff35efeat: generate Flannel CNI manifest from upstream6656d35ecdocs: fix Talos version to use template72a6d1d70docs: update nocloud9948a646dfeat: coredns node uninitialized toleratione03902b54feat: update Go to 1.20.2c8f8579f2fix: upgrade-k8s to flag should not be required since there is a default230cfaf80feat: use network information from guestinfo.metadata97048f7c3feat: netstat in API and clientfda6da692fix: successful ACPI shutdown in maintenance modeb97e1abaafeat: set default image, validate empty image121220a3bchore: bump dependencies via renovate botebc92f3c1chore: add container id totalosctl -k containersandtalosctl -k logs22ef81c1efeat: add grub option to drop to maintenance mode642fe0c90feat: update pkgs with framebuffer console69cb414f0docs: update cilium install instructionse71cc6619fix: redo assertHostnames in HostnameMergeSuite.TestMerge8ea4bfad8refactor: improve the kubernetes upgrade flow81879fc0cdocs: add how tos for workloads on control planes, and scaling up05b0b721cchore: move blob storage to azure for buildsa78281214feat: add cilium e2e tests061640cccfeat: add pod ip to kube-proxy specdea17d723feat: update Kubernetes to v1.26.2337aaba7afeat: add 'os:operator' role40e69af22fix: improve etcd leave on reset process638dc9128fix: fix "defer" leak in ResetUserDisksbfba3677bchore: handle grub option - "wipe"594f27d87release(v1.4.0-alpha.2): prepare release
Changes from siderolabs/discovery-api
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
8 commits
Changes from siderolabs/gen
2 commits
Changes from siderolabs/go-blockdevice
Changes from siderolabs/go-kmsg
Changes from siderolabs/go-kubernetes
4 commits
Changes from siderolabs/go-smbios
Changes from siderolabs/pkgs
36 commits
c26b0b5chore: bump deps7d8f5bdfeat: enable Hyper-V dynamic memory driverea40205chore: bump deps21e5a68feat: update Go 1.20.2, Linux 6.1.15 and other1d7e60cfeat: enable framebuffer drivers and console fonts0e63e95chore: bump deps5dbce6bfix: xz url0097233chore: re-enable drbd7493721fix: sourcefourge url shasums185f482feat: update containerd to 1.6.18e3cab6cchore: bump deps18661b0chore: bump deps885a68bchore: bump depsc3a6e18chore: bump dependencies1fae0b2feat: virtio drivers as modules61d8ff4chore: bump deps and disable un-needed kconfig15fe6d8fix: kernel module tree files missing987d24afeat: mellanox drivers are modulesb82a015feat: mellanox oped057d4f9chore: bump deps4ac4138feat: enable nvme support for raspberrypi cm4ccb9d39fix: disable magic sysrqd33202dchore: bump u-boot to 2023.01cb83e16chore: bump dependenciese561dcbfeat: bump Go to 1.19.5c7797c7feat: update Linux to 6.1.4, restore RPi support5e8ebb0feat: add AMD K10 sensor support73ac37dchore: disable provenance in buildx8965beechore: use default symlinks to/bininbase325c9bffeat: bump dependencies165dff6fix: patch ipmitool IANA URLc542f39feat: add kernel support for usb setrial consolef564f45chore: bump tools, containerd268ea7cchore: bump depsdcf3cebfeat: add nitro enclave support in kernel17ea5e6chore: bump kernel to 5.15.81
Changes from siderolabs/tools
29 commits
2d710f9chore: bump deps9bea7d0chore: skip rc versions for util-linuxa94850echore: bump depse6b2956fix: protoc install601e347feat: go 1.20.2 + other bumpsca67d0bchore: bump deps662a906feat: add libnla8440a9fix: partially revert e6c98fdf54425e6382f226e33bccca6f3875aad3ae6c98fdchore: remove swigcd9687bfix: renovate config977e3fcchore: bump go to 1.20.115748aachore: bump depsd4b719achore: bump deps8c36dbdchore: bump toolchain, bump protoc-gen-go-grpca62e365feat: update Go to 1.2028d4a57chore: reduce renovate noisee130fd5chore: bump deps37612fefix: revert enabling provenancee0b01e3chore: bump depsd0e6bd0feat: add gnutls3d34b5dchore: bump dependencies763c1d9feat: update Go to 1.19.5136958fchore: disable provenance in buildxe2a8692feat: update releases0e48f37chore: bump protobufa21aa1cchore: bump toolchain and mpc versions1a75d0fchore: bump deps55bd185feat: update Go to 1.19.4f291f46chore: bump tools
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
- github.com/aws/aws-sdk-go v1.44.147 -> v1.44.226
- github.com/containerd/cgroups v1.0.4 -> v1.1.0
- github.com/containerd/containerd v1.6.12 -> v1.6.19
- github.com/containernetworking/plugins v1.1.1 -> v1.2.0
- github.com/coreos/go-semver v0.3.0 -> v0.3.1
- github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.10
- github.com/docker/docker v20.10.21 -> v23.0.1
- github.com/dustin/go-humanize v1.0.0 -> v1.0.1
- github.com/emicklei/dot v1.2.0 -> v1.3.1
- github.com/fatih/color v1.13.0 -> v1.15.0
- github.com/freddierice/go-losetup/v2 v2.0.1 new
- github.com/gdamore/tcell/v2 v2.5.3 -> v2.6.0
- github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 -> v1.4.0
- github.com/hashicorp/go-getter v1.6.2 -> v1.7.1
- github.com/hetznercloud/hcloud-go v1.37.0 -> v1.41.0
- github.com/insomniacslk/dhcp f26e6d78f622 -> e252950ab961
- github.com/jsimonetti/rtnetlink v1.3.0 -> v1.3.1
- github.com/mattn/go-isatty v0.0.16 -> v0.0.17
- github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
- github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
- github.com/mdlayher/netlink v1.7.0 -> v1.7.1
- github.com/nberlee/go-netstat 19cc338ee40a new
- github.com/prometheus/procfs v0.8.0 -> v0.9.0
- github.com/rivo/tview db36428c92d9 -> 84f9c0ff9de8
- github.com/safchain/ethtool v0.2.0 -> v0.3.0
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.15
- github.com/siderolabs/discovery-api v0.1.1 -> v0.1.2
- github.com/siderolabs/discovery-client v0.1.3 -> v0.1.4
- github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0-7-g343956e
- github.com/siderolabs/gen v0.4.1 -> v0.4.3
- github.com/siderolabs/go-blockdevice v0.4.2 -> v0.4.3
- github.com/siderolabs/go-kmsg v0.1.2 -> v0.1.3
- github.com/siderolabs/go-kubernetes v0.2.0 new
- github.com/siderolabs/go-smbios v0.3.1 -> v0.3.2
- github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-35-gc26b0b5
- github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.2
- github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-26-g2d710f9
- github.com/stretchr/testify v1.8.1 -> v1.8.2
- github.com/u-root/u-root v0.10.0 -> v0.11.0
- github.com/ulikunitz/xz v0.5.11 new
- github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.16
- github.com/vmware/govmomi v0.29.0 -> v0.30.4
- go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
- go.uber.org/zap v1.23.0 -> v1.24.0
- go4.org/netipx 797b0c90d8ab -> f1b76eb4bb35
- golang.org/x/net v0.4.0 -> v0.8.0
- golang.org/x/sys v0.3.0 -> v0.6.0
- golang.org/x/term v0.3.0 -> v0.6.0
- golang.org/x/time v0.2.0 -> v0.3.0
- golang.zx2c4.com/wireguard/wgctrl 97bc4ad4a1cb -> 9c5414ab4bde
- google.golang.org/grpc v1.51.0 -> v1.54.0
- google.golang.org/protobuf v1.28.1 -> v1.30.0
- k8s.io/api v0.26.0 -> v0.27.0-beta.0
- k8s.io/apimachinery v0.26.0 -> v0.27.0-beta.0
- k8s.io/apiserver v0.26.0 -> v0.27.0-beta.0
- k8s.io/client-go v0.26.0 -> v0.27.0-beta.0
- k8s.io/component-base v0.26.0 -> v0.27.0-beta.0
- k8s.io/cri-api v0.26.0 -> v0.27.0-beta.0
- k8s.io/klog/v2 v2.80.1 -> v2.90.1
- k8s.io/kubectl v0.26.0 -> v0.27.0-beta.0
- k8s.io/kubelet v0.26.0 -> v0.27.0-beta.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.66 -> v1.2.67
Previous release can be found at v1.3.0
Talos 1.4.0-alpha.2 (2023-02-28)
Welcome to the v1.4.0-alpha.2 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Registry Mirror Catch-All Option
Talos now supports a catch-all option for registry mirrors:
machine:
registries:
mirrors:
docker.io:
- https://registry-1.docker.io/
"*":
- https://my-registry.example.com/
Talos Dashboard on TTY2
Talos now starts a text-based UI dashboard on virtual console /dev/tty2 and switches to it by default upon boot.
Kernel logs remain available on /dev/tty1.
To switch TTYs, use the Alt+F1 through Alt+F2 keys.
You can disable this behavior by setting the kernel parameter talos.dashboard.disabled=1.
This behavior is disabled by default on SBCs.
etcd Maintenance
Talos adds new APIs to make it easier to perform etcd maintenance operations.
These APIs are available via new talosctl etcd sub-commands:
talosctl etcd alarm list|disarmtalosctl etcd defragtalosctl etcd status
See also etcd maintenance guide.
Kernel Modules
Talos now supports automatically loading kernel drivers built as modules. If any system extensions or the Talos base kernel build provides kernel modules and if they matches the system hardware (via PCI IDs), they will be loaded automatically. Modules can still be loaded explicitly by defining it in machine configuration.
Kernel Modules Tree
Talos now supports re-building the kernel modules dependency tree information on upgrades.
This allows modules of same name to co-exist as in-tree and external modules.
System Extensions can provide modules installed into extras directory and when loading it'll take precendence over the in-tree module.
Machine Configuration
Strategic merge config patches correctly support merging .vlans sections of the network interface.
Reset API Enhancements
Talos now supports resetting user disks through the Reset API,
the list of disks to wipe is set using the --user-disks-to-wipe parameter in talosctl.
Additionally, the Reset API can now function in maintenance mode
and has the capability to wipe the node's system disk (partial wipe is not supported).
Component Updates
- Linux: 6.1.12
- containerd: v1.6.18
- Kubernetes: v1.26.1
- etcd: v3.5.7
- CoreDNS: v1.10.1
Talos is built with Go 1.20.1.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Spencer Smith
- Serge Logvinov
- Steve Francis
- Artem Chernyshev
- Tim Jones
- Andrey Smirnov
- Cees-Jan Kiewiet
- Chris van de Sande
- Lance R. Vick
- Matthias Riegler
- Michael Vorburger
- Murtaza Udaipurwala
- Nico Berlee
- Niklas Wik
- Rowan Smith
- Samuel Kees
- Sander Maijers
- Seán C McCord
- Steffen Windoffer
- Tim van Druenen
- Victor Seva
- budimanjojo
Changes
128 commits
b52071081feat: introduce new flag in reset API that makes Talos reset user disksf55f5df73feat: move dashboard package & run it in tty236e077eadchore: bump deps5a01d5fd4chore: run extension build as downstream426fe9687fix: extension base folder permission609d3a8a6feat: support strategic merge patches on VLAN configuration7e19f32d7chore: provide version compatibility data for Talos 1.2.x230e46e56refactor: extract parts of kubernetes librariesf3d3f0f26fix: update go-smbios library with Hyper-V data fix8711eea96fix: use passed--contextintalosctl configcmd5ac9f43e4feat: start machined earlier & in maintenance mode36ab414a1docs: fix the endpoints in the libvirt guide3d55bd80ffix: add--forceflag totalosctl gen config660b8874dfeat: cmdline integer netmask1e3daacc4docs: update nvidia component versionsb5c03a7fafix: docker talosctl cluster create provisioner6e8f13529fix: add support for a fallback '*' mirror configurationdcd4eb1a9fix: improve error message on single node upgradeed5af3f78chore: bump deps0dc6858e5chore: bump cosi-project/runtimeda2edb9dechore: bump dependenciese51a110f0chore: bump dependencies2d0148018feat: automatically load modules based on hw info7b75cd8b9fix: kernel module dependency tree generation65d02e5adfix: dbus shutdown when it's not initializeda7079ce85fix: quote the ampersand character in GRUB config933ba2d82fix: display correct blockdevice sizec449cb736fix: talosctl reboot command passing mode in wait mode34ab0007adocs: port is needed for wireguard endpoint1e1aa84f6fix: kubernetes removed resource version checkdcbcf5a93fix: wait for network and retry in platform get config funcs3d7566ec7test: update Canal CNI manifest URLe09e10666fix: default dns domain to 'cluster.local' in local casecc6e37a47feat: use process wrapper for dropping capabilities0c6c88874fix: trackable action flag usage text. --no-wait does not exist5cb2915d8feat: use wrapper for starting processes56d945326fix: panic in talosctl cluster show38a51191efix: correctly expand parameters in the URLaf21860a2fix: return proper error if download attempts time out54f7d4c92fix: correctly quote and unquote strings in GRUB config54cf0672afix: omit zero MTU in the machine configbdc53ac25docs: add hyperlink to Docker API docs aboutconfig.jsonb3bc06dd1chore: bump vtprotobuf to v0.4.00ba5e59f6fix: drone config for renovate PR's590a393defix: udevd healthcheck2b6b6deacdocs: simplify and clarify digital ocean docs92bc15f7frelease(v1.4.0-alpha.1): prepare releasee3da4754efeat: update Linux to 6.1.7006449e46test: build integration test early in the pipeline09aa71264fix: renovate config2d136f187feat: set markdown and html descriptions in config json schemaf0804027afix: renovate config812a2877cchore: bump deps + renovate cleanupaa9f66c1cfix: mark DigitalOcean anchor IP as scope linkbb4937f1bfeat: enable renovate3e0057162fix: unwrap gRPC errors on stop/remove pods check00e52ae07fix: build correctly etcd initial cluster URLae83b10aefeat: create JSON schema for v1alpha1.Config703d96595feat: update Kubernetes to 1.26.1, etcd to 3.5.7965e64591docs: update to use talosctl install scriptc5954f434chore: bump depsbb50f6a56chore: preallocate disk images for QEMU VMsd4b8b35defeat: generate kernel module dependency tree18122ae73fix: service restart (including extension services)680fd5e45fix: bump COSI runtime with the panic controller restart fix0b65bbfc8fix: handle overwriting tags in syslinux ADV70d9428a1fix: kubespan MSS clamping683b4ccb4chore: update Go to 1.19.5 and kernel to 6.1.4062c7d754test: fix integration test on cp endpoint update8e9fc13d7feat: implement enum generator for proto files771b0dc06docs: update left over rpi_4 ref to rpi_generic6c04b5f79chore: bump dependencies0a5a8802efeat: use 'localhost' endpoint for controlplane nodesb0775ebf2feat: add ISO wipe GRUB boot option29020cb9cfix: report fatal sequence errors as reboots96629d5bafeat: implement etcd maintenance commands80fed3194feat: include Kubernetes controlplane endpoint as one of the endpointsc6cb36cc1docs: fix auditpolicy example typoba8265bc5feat: new talosctl config remove to remove contextfcb19ff51fix: implement upgrade version checks for Talos 1.480f150ac8feat: enable ipv6 on gcp8db622f3ddocs: add Vandebron to adopters listf6a86ae90fix: oralce cloud zone89dbb0ecfrelease(v1.4.0-alpha.0): prepare release31fb90535feat: update Linux 6.1.1, containerd 1.6.14a0c0352ddfix: send diagnostic output to stderr consistently9a5f4c08afix: default the manifest namespace if not set3c6cce5fedocs: update last release for Talos 1.2.x703624c43docs: fix the 1.3 release date386c9293adocs: update nvidia-container-runtime versionff83d9fd7fix: improve talosctl completion31ff431fachore: add schulz systemtechnik to the list97bef7c47docs: vsphere.sh > vmware.sh34babe858chore: make organization selection an interfacea9643b477fix: use proper key usage for apid client certificate171aa9467fix: disable Wireless Lan using dtoverlay2e84d2ab3chore: update conformance product.yamlb7763843afeat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.afc45ad63docs: mark Talos 1.3 docs as default873bd3807fix: redact service account key in config in RedactSecrets methodb3aebfadffeat: validate Talos API access roles in machine config40761e17ddocs: fork docs for Talos 1.4474604cd2docs: update documentation for Talos 1.3faf49218cfeat: add more checks for K8s upgrade5b992bd86fix: allow empty dnsDomain in machine configeb332cfcbfeat: add health check for a minimal memory / disk sized04970dfafix: ignore k8s additional addresses if nil63c17104cfeat: update Kubernets to 1.26.0f7a9a90dbchore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)cf7adc51cfeat: add RedactSecrets method to v1alpha1.Config4c31b9b1adocs: clarify what the deal is with /vara8ebcca4achore: removewatchErrfrommetal.getResource1253513bdfix: fix nil pointer panic and incorrect error output82e8c9e1ffix: workaround panic in the kubelet service controllera505b8909fix: update COSI and reset restart backoff on successe92fdcbadchore: bump kernel to 5.15.81f0dddca2adocs: expand help for 'talosctl get'fcffc8879fix: add ext4 filesystem detection5b2960efffix: introduce 'overridePath' setting and fix Talos resolver0219d1124fix: use only kube-apiserver endpoints for Talos API access endpointsdc5e0f4affix: report errors to Equinix Metal event API7ab140a94feat: add talosctl machineconfig patch commandd3cf06114fix: ignore many more filesystems in IMA44e2799b8feat: add stdout and single config type support to talosctl gen config4452f0e17docs: bump talos version38e57bd12feat: update Kubernetes to v1.26.0-rc.14cd125d49fix: correctly handle new watch event types881b84152feat: update Flannel to 0.20.2
Changes since v1.4.0-alpha.1
46 commits
b52071081feat: introduce new flag in reset API that makes Talos reset user disksf55f5df73feat: move dashboard package & run it in tty236e077eadchore: bump deps5a01d5fd4chore: run extension build as downstream426fe9687fix: extension base folder permission609d3a8a6feat: support strategic merge patches on VLAN configuration7e19f32d7chore: provide version compatibility data for Talos 1.2.x230e46e56refactor: extract parts of kubernetes librariesf3d3f0f26fix: update go-smbios library with Hyper-V data fix8711eea96fix: use passed--contextintalosctl configcmd5ac9f43e4feat: start machined earlier & in maintenance mode36ab414a1docs: fix the endpoints in the libvirt guide3d55bd80ffix: add--forceflag totalosctl gen config660b8874dfeat: cmdline integer netmask1e3daacc4docs: update nvidia component versionsb5c03a7fafix: docker talosctl cluster create provisioner6e8f13529fix: add support for a fallback '*' mirror configurationdcd4eb1a9fix: improve error message on single node upgradeed5af3f78chore: bump deps0dc6858e5chore: bump cosi-project/runtimeda2edb9dechore: bump dependenciese51a110f0chore: bump dependencies2d0148018feat: automatically load modules based on hw info7b75cd8b9fix: kernel module dependency tree generation65d02e5adfix: dbus shutdown when it's not initializeda7079ce85fix: quote the ampersand character in GRUB config933ba2d82fix: display correct blockdevice sizec449cb736fix: talosctl reboot command passing mode in wait mode34ab0007adocs: port is needed for wireguard endpoint1e1aa84f6fix: kubernetes removed resource version checkdcbcf5a93fix: wait for network and retry in platform get config funcs3d7566ec7test: update Canal CNI manifest URLe09e10666fix: default dns domain to 'cluster.local' in local casecc6e37a47feat: use process wrapper for dropping capabilities0c6c88874fix: trackable action flag usage text. --no-wait does not exist5cb2915d8feat: use wrapper for starting processes56d945326fix: panic in talosctl cluster show38a51191efix: correctly expand parameters in the URLaf21860a2fix: return proper error if download attempts time out54f7d4c92fix: correctly quote and unquote strings in GRUB config54cf0672afix: omit zero MTU in the machine configbdc53ac25docs: add hyperlink to Docker API docs aboutconfig.jsonb3bc06dd1chore: bump vtprotobuf to v0.4.00ba5e59f6fix: drone config for renovate PR's590a393defix: udevd healthcheck2b6b6deacdocs: simplify and clarify digital ocean docs
Changes from siderolabs/discovery-api
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
6 commits
Changes from siderolabs/gen
2 commits
Changes from siderolabs/go-blockdevice
Changes from siderolabs/go-kubernetes
Changes from siderolabs/go-smbios
Changes from siderolabs/pkgs
30 commits
5dbce6bfix: xz url0097233chore: re-enable drbd7493721fix: sourcefourge url shasums185f482feat: update containerd to 1.6.18e3cab6cchore: bump deps18661b0chore: bump deps885a68bchore: bump depsc3a6e18chore: bump dependencies1fae0b2feat: virtio drivers as modules61d8ff4chore: bump deps and disable un-needed kconfig15fe6d8fix: kernel module tree files missing987d24afeat: mellanox drivers are modulesb82a015feat: mellanox oped057d4f9chore: bump deps4ac4138feat: enable nvme support for raspberrypi cm4ccb9d39fix: disable magic sysrqd33202dchore: bump u-boot to 2023.01cb83e16chore: bump dependenciese561dcbfeat: bump Go to 1.19.5c7797c7feat: update Linux to 6.1.4, restore RPi support5e8ebb0feat: add AMD K10 sensor support73ac37dchore: disable provenance in buildx8965beechore: use default symlinks to/bininbase325c9bffeat: bump dependencies165dff6fix: patch ipmitool IANA URLc542f39feat: add kernel support for usb setrial consolef564f45chore: bump tools, containerd268ea7cchore: bump depsdcf3cebfeat: add nitro enclave support in kernel17ea5e6chore: bump kernel to 5.15.81
Changes from siderolabs/tools
20 commits
cd9687bfix: renovate config977e3fcchore: bump go to 1.20.115748aachore: bump depsd4b719achore: bump deps8c36dbdchore: bump toolchain, bump protoc-gen-go-grpca62e365feat: update Go to 1.2028d4a57chore: reduce renovate noisee130fd5chore: bump deps37612fefix: revert enabling provenancee0b01e3chore: bump depsd0e6bd0feat: add gnutls3d34b5dchore: bump dependencies763c1d9feat: update Go to 1.19.5136958fchore: disable provenance in buildxe2a8692feat: update releases0e48f37chore: bump protobufa21aa1cchore: bump toolchain and mpc versions1a75d0fchore: bump deps55bd185feat: update Go to 1.19.4f291f46chore: bump tools
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
- github.com/aws/aws-sdk-go v1.44.147 -> v1.44.209
- github.com/containerd/cgroups v1.0.4 -> v1.1.0
- github.com/containerd/containerd v1.6.12 -> v1.6.18
- github.com/containernetworking/plugins v1.1.1 -> v1.2.0
- github.com/coreos/go-semver v0.3.0 -> v0.3.1
- github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.7
- github.com/docker/docker v20.10.21 -> v23.0.1
- github.com/dustin/go-humanize v1.0.0 -> v1.0.1
- github.com/emicklei/dot v1.2.0 -> v1.3.1
- github.com/fatih/color v1.13.0 -> v1.14.1
- github.com/freddierice/go-losetup/v2 v2.0.1 new
- github.com/gdamore/tcell/v2 v2.5.3 -> v2.6.0
- github.com/hashicorp/go-getter v1.6.2 -> v1.7.0
- github.com/hetznercloud/hcloud-go v1.37.0 -> v1.40.0
- github.com/insomniacslk/dhcp f26e6d78f622 -> 5369909a5de7
- github.com/jsimonetti/rtnetlink v1.3.0 -> v1.3.1
- github.com/mattn/go-isatty v0.0.16 -> v0.0.17
- github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
- github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
- github.com/mdlayher/netlink v1.7.0 -> v1.7.1
- github.com/prometheus/procfs v0.8.0 -> v0.9.0
- github.com/rivo/tview db36428c92d9 -> 47e7db7885b4
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.13
- github.com/siderolabs/discovery-api v0.1.1 -> v0.1.2
- github.com/siderolabs/discovery-client v0.1.3 -> v0.1.4
- github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0-5-g8b28b6b
- github.com/siderolabs/gen v0.4.1 -> v0.4.3
- github.com/siderolabs/go-blockdevice v0.4.2 -> v0.4.3
- github.com/siderolabs/go-kubernetes v0.1.0 new
- github.com/siderolabs/go-smbios v0.3.1 -> v0.3.2
- github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-29-g5dbce6b
- github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.1
- github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-17-gcd9687b
- github.com/stretchr/testify v1.8.1 -> v1.8.2
- github.com/u-root/u-root v0.10.0 -> v0.11.0
- github.com/ulikunitz/xz v0.5.11 new
- github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.15
- github.com/vmware/govmomi v0.29.0 -> v0.30.2
- go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
- go.uber.org/zap v1.23.0 -> v1.24.0
- go4.org/netipx 797b0c90d8ab -> 8449b0a6169f
- golang.org/x/net v0.4.0 -> v0.7.0
- golang.org/x/sys v0.3.0 -> v0.5.0
- golang.org/x/term v0.3.0 -> v0.5.0
- golang.org/x/time v0.2.0 -> v0.3.0
- golang.zx2c4.com/wireguard/wgctrl 97bc4ad4a1cb -> 9c5414ab4bde
- google.golang.org/grpc v1.51.0 -> v1.53.0
- k8s.io/api v0.26.0 -> v0.26.1
- k8s.io/apimachinery v0.26.0 -> v0.26.1
- k8s.io/apiserver v0.26.0 -> v0.26.1
- k8s.io/client-go v0.26.0 -> v0.26.1
- k8s.io/component-base v0.26.0 -> v0.26.1
- k8s.io/klog/v2 v2.80.1 -> v2.90.0
- k8s.io/kubectl v0.26.0 -> v0.26.1
- k8s.io/kubelet v0.26.0 -> v0.26.1
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.66 -> v1.2.67
Previous release can be found at v1.3.0
Talos 1.4.0-alpha.1 (2023-01-25)
Welcome to the v1.4.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
etcd Maintenance
Talos adds new APIs to make it easier to perform etcd maintenance operations.
These APIs are available via new talosctl etcd sub-commands:
talosctl etcd alarm list|disarmtalosctl etcd defragtalosctl etcd status
See also etcd maintenance guide.
Component Updates
- Linux: 6.1.7
- containerd: v1.6.15
- Kubernetes: v1.26.1
- etcd: v3.5.7
Talos is built with Go 1.19.5.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Serge Logvinov
- Spencer Smith
- Steve Francis
- Cees-Jan Kiewiet
- Chris van de Sande
- Lance R. Vick
- Matthias Riegler
- Michael Vorburger
- Murtaza Udaipurwala
- Nico Berlee
- Niklas Wik
- Rowan Smith
- Samuel Kees
- Seán C McCord
- Tim Jones
- Tim van Druenen
- Victor Seva
Changes
81 commits
e3da4754efeat: update Linux to 6.1.7006449e46test: build integration test early in the pipeline09aa71264fix: renovate config2d136f187feat: set markdown and html descriptions in config json schemaf0804027afix: renovate config812a2877cchore: bump deps + renovate cleanupaa9f66c1cfix: mark DigitalOcean anchor IP as scope linkbb4937f1bfeat: enable renovate3e0057162fix: unwrap gRPC errors on stop/remove pods check00e52ae07fix: build correctly etcd initial cluster URLae83b10aefeat: create JSON schema for v1alpha1.Config703d96595feat: update Kubernetes to 1.26.1, etcd to 3.5.7965e64591docs: update to use talosctl install scriptc5954f434chore: bump depsbb50f6a56chore: preallocate disk images for QEMU VMsd4b8b35defeat: generate kernel module dependency tree18122ae73fix: service restart (including extension services)680fd5e45fix: bump COSI runtime with the panic controller restart fix0b65bbfc8fix: handle overwriting tags in syslinux ADV70d9428a1fix: kubespan MSS clamping683b4ccb4chore: update Go to 1.19.5 and kernel to 6.1.4062c7d754test: fix integration test on cp endpoint update8e9fc13d7feat: implement enum generator for proto files771b0dc06docs: update left over rpi_4 ref to rpi_generic6c04b5f79chore: bump dependencies0a5a8802efeat: use 'localhost' endpoint for controlplane nodesb0775ebf2feat: add ISO wipe GRUB boot option29020cb9cfix: report fatal sequence errors as reboots96629d5bafeat: implement etcd maintenance commands80fed3194feat: include Kubernetes controlplane endpoint as one of the endpointsc6cb36cc1docs: fix auditpolicy example typoba8265bc5feat: new talosctl config remove to remove contextfcb19ff51fix: implement upgrade version checks for Talos 1.480f150ac8feat: enable ipv6 on gcp8db622f3ddocs: add Vandebron to adopters listf6a86ae90fix: oralce cloud zone89dbb0ecfrelease(v1.4.0-alpha.0): prepare release31fb90535feat: update Linux 6.1.1, containerd 1.6.14a0c0352ddfix: send diagnostic output to stderr consistently9a5f4c08afix: default the manifest namespace if not set3c6cce5fedocs: update last release for Talos 1.2.x703624c43docs: fix the 1.3 release date386c9293adocs: update nvidia-container-runtime versionff83d9fd7fix: improve talosctl completion31ff431fachore: add schulz systemtechnik to the list97bef7c47docs: vsphere.sh > vmware.sh34babe858chore: make organization selection an interfacea9643b477fix: use proper key usage for apid client certificate171aa9467fix: disable Wireless Lan using dtoverlay2e84d2ab3chore: update conformance product.yamlb7763843afeat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.afc45ad63docs: mark Talos 1.3 docs as default873bd3807fix: redact service account key in config in RedactSecrets methodb3aebfadffeat: validate Talos API access roles in machine config40761e17ddocs: fork docs for Talos 1.4474604cd2docs: update documentation for Talos 1.3faf49218cfeat: add more checks for K8s upgrade5b992bd86fix: allow empty dnsDomain in machine configeb332cfcbfeat: add health check for a minimal memory / disk sized04970dfafix: ignore k8s additional addresses if nil63c17104cfeat: update Kubernets to 1.26.0f7a9a90dbchore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)cf7adc51cfeat: add RedactSecrets method to v1alpha1.Config4c31b9b1adocs: clarify what the deal is with /vara8ebcca4achore: removewatchErrfrommetal.getResource1253513bdfix: fix nil pointer panic and incorrect error output82e8c9e1ffix: workaround panic in the kubelet service controllera505b8909fix: update COSI and reset restart backoff on successe92fdcbadchore: bump kernel to 5.15.81f0dddca2adocs: expand help for 'talosctl get'fcffc8879fix: add ext4 filesystem detection5b2960efffix: introduce 'overridePath' setting and fix Talos resolver0219d1124fix: use only kube-apiserver endpoints for Talos API access endpointsdc5e0f4affix: report errors to Equinix Metal event API7ab140a94feat: add talosctl machineconfig patch commandd3cf06114fix: ignore many more filesystems in IMA44e2799b8feat: add stdout and single config type support to talosctl gen config4452f0e17docs: bump talos version38e57bd12feat: update Kubernetes to v1.26.0-rc.14cd125d49fix: correctly handle new watch event types881b84152feat: update Flannel to 0.20.2
Changes since v1.4.0-alpha.0
36 commits
e3da4754efeat: update Linux to 6.1.7006449e46test: build integration test early in the pipeline09aa71264fix: renovate config2d136f187feat: set markdown and html descriptions in config json schemaf0804027afix: renovate config812a2877cchore: bump deps + renovate cleanupaa9f66c1cfix: mark DigitalOcean anchor IP as scope linkbb4937f1bfeat: enable renovate3e0057162fix: unwrap gRPC errors on stop/remove pods check00e52ae07fix: build correctly etcd initial cluster URLae83b10aefeat: create JSON schema for v1alpha1.Config703d96595feat: update Kubernetes to 1.26.1, etcd to 3.5.7965e64591docs: update to use talosctl install scriptc5954f434chore: bump depsbb50f6a56chore: preallocate disk images for QEMU VMsd4b8b35defeat: generate kernel module dependency tree18122ae73fix: service restart (including extension services)680fd5e45fix: bump COSI runtime with the panic controller restart fix0b65bbfc8fix: handle overwriting tags in syslinux ADV70d9428a1fix: kubespan MSS clamping683b4ccb4chore: update Go to 1.19.5 and kernel to 6.1.4062c7d754test: fix integration test on cp endpoint update8e9fc13d7feat: implement enum generator for proto files771b0dc06docs: update left over rpi_4 ref to rpi_generic6c04b5f79chore: bump dependencies0a5a8802efeat: use 'localhost' endpoint for controlplane nodesb0775ebf2feat: add ISO wipe GRUB boot option29020cb9cfix: report fatal sequence errors as reboots96629d5bafeat: implement etcd maintenance commands80fed3194feat: include Kubernetes controlplane endpoint as one of the endpointsc6cb36cc1docs: fix auditpolicy example typoba8265bc5feat: new talosctl config remove to remove contextfcb19ff51fix: implement upgrade version checks for Talos 1.480f150ac8feat: enable ipv6 on gcp8db622f3ddocs: add Vandebron to adopters listf6a86ae90fix: oralce cloud zone
Changes from siderolabs/extras
3 commits
Changes from siderolabs/gen
2 commits
Changes from siderolabs/pkgs
19 commits
987d24afeat: mellanox drivers are modulesb82a015feat: mellanox oped057d4f9chore: bump deps4ac4138feat: enable nvme support for raspberrypi cm4ccb9d39fix: disable magic sysrqd33202dchore: bump u-boot to 2023.01cb83e16chore: bump dependenciese561dcbfeat: bump Go to 1.19.5c7797c7feat: update Linux to 6.1.4, restore RPi support5e8ebb0feat: add AMD K10 sensor support73ac37dchore: disable provenance in buildx8965beechore: use default symlinks to/bininbase325c9bffeat: bump dependencies165dff6fix: patch ipmitool IANA URLc542f39feat: add kernel support for usb setrial consolef564f45chore: bump tools, containerd268ea7cchore: bump depsdcf3cebfeat: add nitro enclave support in kernel17ea5e6chore: bump kernel to 5.15.81
Changes from siderolabs/tools
14 commits
28d4a57chore: reduce renovate noisee130fd5chore: bump deps37612fefix: revert enabling provenancee0b01e3chore: bump depsd0e6bd0feat: add gnutls3d34b5dchore: bump dependencies763c1d9feat: update Go to 1.19.5136958fchore: disable provenance in buildxe2a8692feat: update releases0e48f37chore: bump protobufa21aa1cchore: bump toolchain and mpc versions1a75d0fchore: bump deps55bd185feat: update Go to 1.19.4f291f46chore: bump tools
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
- github.com/aws/aws-sdk-go v1.44.147 -> v1.44.184
- github.com/containerd/containerd v1.6.12 -> v1.6.15
- github.com/containernetworking/plugins v1.1.1 -> v1.2.0
- github.com/coreos/go-semver v0.3.0 -> v0.3.1
- github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.4
- github.com/docker/docker v20.10.21 -> v20.10.23
- github.com/dustin/go-humanize v1.0.0 -> v1.0.1
- github.com/fatih/color v1.13.0 -> v1.14.1
- github.com/freddierice/go-losetup/v2 v2.0.1 new
- github.com/gdamore/tcell/v2 v2.5.3 -> v2.5.4
- github.com/hetznercloud/hcloud-go v1.37.0 -> v1.39.0
- github.com/insomniacslk/dhcp f26e6d78f622 -> de60144f33f8
- github.com/mattn/go-isatty v0.0.16 -> v0.0.17
- github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
- github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
- github.com/mdlayher/netlink v1.7.0 -> v1.7.1
- github.com/prometheus/procfs v0.8.0 -> v0.9.0
- github.com/rivo/tview db36428c92d9 -> 892d1a2eb0da
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.12
- github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0-2-g8cb4792
- github.com/siderolabs/gen v0.4.1 -> v0.4.3
- github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-18-g987d24a
- github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.0
- github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-11-g28d4a57
- github.com/ulikunitz/xz v0.5.11 new
- github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.14
- github.com/vmware/govmomi v0.29.0 -> v0.30.0
- go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
- go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
- go.uber.org/zap v1.23.0 -> v1.24.0
- go4.org/netipx 797b0c90d8ab -> 987e16ee2705
- golang.org/x/net v0.4.0 -> v0.5.0
- golang.org/x/sys v0.3.0 -> v0.4.0
- golang.org/x/term v0.3.0 -> v0.4.0
- golang.org/x/time v0.2.0 -> v0.3.0
- google.golang.org/grpc v1.51.0 -> v1.52.0
- k8s.io/api v0.26.0 -> v0.26.1
- k8s.io/apimachinery v0.26.0 -> v0.26.1
- k8s.io/apiserver v0.26.0 -> v0.26.1
- k8s.io/client-go v0.26.0 -> v0.26.1
- k8s.io/component-base v0.26.0 -> v0.26.1
- k8s.io/klog/v2 v2.80.1 -> v2.90.0
- k8s.io/kubectl v0.26.0 -> v0.26.1
- k8s.io/kubelet v0.26.0 -> v0.26.1
Previous release can be found at v1.3.0
Talos 1.4.0-alpha.0 (2022-12-23)
Welcome to the v1.4.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Component Updates
- Linux: 6.1.1
- containerd: v1.6.14
Talos is built with Go 1.19.4.
Contributors
- Andrey Smirnov
- Noel Georgi
- Utku Ozdemir
- Dmitriy Matrenichev
- Spencer Smith
- Lance R. Vick
- Michael Vorburger
- Nico Berlee
- Niklas Wik
- Rowan Smith
- Samuel Kees
- Steve Francis
- Victor Seva
Changes
44 commits
31fb90535feat: update Linux 6.1.1, containerd 1.6.14a0c0352ddfix: send diagnostic output to stderr consistently9a5f4c08afix: default the manifest namespace if not set3c6cce5fedocs: update last release for Talos 1.2.x703624c43docs: fix the 1.3 release date386c9293adocs: update nvidia-container-runtime versionff83d9fd7fix: improve talosctl completion31ff431fachore: add schulz systemtechnik to the list97bef7c47docs: vsphere.sh > vmware.sh34babe858chore: make organization selection an interfacea9643b477fix: use proper key usage for apid client certificate171aa9467fix: disable Wireless Lan using dtoverlay2e84d2ab3chore: update conformance product.yamlb7763843afeat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.afc45ad63docs: mark Talos 1.3 docs as default873bd3807fix: redact service account key in config in RedactSecrets methodb3aebfadffeat: validate Talos API access roles in machine config40761e17ddocs: fork docs for Talos 1.4474604cd2docs: update documentation for Talos 1.3faf49218cfeat: add more checks for K8s upgrade5b992bd86fix: allow empty dnsDomain in machine configeb332cfcbfeat: add health check for a minimal memory / disk sized04970dfafix: ignore k8s additional addresses if nil63c17104cfeat: update Kubernets to 1.26.0f7a9a90dbchore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)cf7adc51cfeat: add RedactSecrets method to v1alpha1.Config4c31b9b1adocs: clarify what the deal is with /vara8ebcca4achore: removewatchErrfrommetal.getResource1253513bdfix: fix nil pointer panic and incorrect error output82e8c9e1ffix: workaround panic in the kubelet service controllera505b8909fix: update COSI and reset restart backoff on successe92fdcbadchore: bump kernel to 5.15.81f0dddca2adocs: expand help for 'talosctl get'fcffc8879fix: add ext4 filesystem detection5b2960efffix: introduce 'overridePath' setting and fix Talos resolver0219d1124fix: use only kube-apiserver endpoints for Talos API access endpointsdc5e0f4affix: report errors to Equinix Metal event API7ab140a94feat: add talosctl machineconfig patch commandd3cf06114fix: ignore many more filesystems in IMA44e2799b8feat: add stdout and single config type support to talosctl gen config4452f0e17docs: bump talos version38e57bd12feat: update Kubernetes to v1.26.0-rc.14cd125d49fix: correctly handle new watch event types881b84152feat: update Flannel to 0.20.2
Changes from siderolabs/extras
Changes from siderolabs/gen
Changes from siderolabs/pkgs
7 commits
Changes from siderolabs/tools
6 commits
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
- github.com/aws/aws-sdk-go v1.44.147 -> v1.44.166
- github.com/containerd/containerd v1.6.12 -> v1.6.14
- github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.2
- github.com/docker/docker v20.10.21 -> v20.10.22
- github.com/hetznercloud/hcloud-go v1.37.0 -> v1.38.0
- github.com/insomniacslk/dhcp f26e6d78f622 -> de60144f33f8
- github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
- github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
- github.com/mdlayher/netlink v1.7.0 -> v1.7.1
- github.com/prometheus/procfs v0.8.0 -> v0.9.0
- github.com/rivo/tview db36428c92d9 -> 02e38ea9604c
- github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0
- github.com/siderolabs/gen v0.4.1 -> v0.4.2
- github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-6-g325c9bf
- github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.3.0-alpha.2
- github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-3-ge2a8692
- github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.14
- github.com/vmware/govmomi v0.29.0 -> v0.30.0
- go.uber.org/zap v1.23.0 -> v1.24.0
- golang.org/x/time v0.2.0 -> v0.3.0
Previous release can be found at v1.3.0
Talos 1.3.0-alpha.2 (2022-11-16)
Welcome to the v1.3.0-alpha.2 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
kube-apiserver Audit Policy
Talos now supports setting custom audit policy for kube-apiserver in the machine configuration.
cgroups v1
Talos defaults to using cgroups v2 when Talos doesn't run in a container (when running in a container
Talos follows host cgroups mode).
Talos can now be forced to use cgroups v1 by setting boot kernel argument talos.unified_cgroup_hierarchy=0:
machine:
install:
extraKernelArgs:
- "talos.unified_cgroup_hierarchy=0"
Current cgroups mode can be checked with talosctl ls /sys/fs/cgroup:
cgroups v1:
blkio
cpu
cpuacct
cpuset
devices
freezer
hugetlb
memory
net_cls
net_prio
perf_event
pids
cgroups v2:
cgroup.controllers
cgroup.max.depth
cgroup.max.descendants
cgroup.procs
cgroup.stat
cgroup.subtree_control
cgroup.threads
cpu.stat
cpuset.cpus.effective
cpuset.mems.effective
init
io.stat
kubepods
memory.numa_stat
memory.stat
podruntime
system
Note:
cgroupsv1is deprecated and it should be used only for compatibility with workloads which don't supportcgroupsv2yet.
Kernel Command Line ip= Argument
Talos now supports referencing interface name via enxMAC address notation:
ip=172.20.0.2::172.20.0.1:255.255.255.0::enx7085c2dfbc59
CRI Configuration Overrides
Talos no longer supports CRI config overrides placed in /var/cri/conf.d directory.
New way correctly handles merging of containerd/CRI plugin configuration.
etcd Consistency Check
Talos enables --experimental-compact-hash-check-enabled option by default to improve etcd store consistency guarantees.
This options is only available with etcd >= v3.5.5, so Talos doesn't support version of etcd before v3.5.5.
etcd Member ID
Talos now internally handles etcd member removal by member ID instead of member name (hostname). This resolves the case when member name is not accurate or empty (eg: when etcd hasn't fully joined yet).
Command talosctl etcd remove-member now accepts member IDs instead of member names.
New resource can be used to get member ID of the Talos node:
talosctl get etcdmember
Exocale Platform
Talos now supports new platform: Exoscale.
Exoscale provides a firewall, TCP load balancer and autoscale groups. It works well with CCM and Kubernetes node autoscaler.
Kernel Modules
Talos now supports settings kernel module parameters.
Eg:
machine:
kernel:
modules:
- name: "br_netfilter"
parameters:
- nf_conntrack_max=131072
KubeSpan
KubeSpan MTU link size is now configurable via network.kubespan.mtu setting in the machine configuration.
Node Labels
Talos now supports specifying node labels in the machine configuration:
machine:
nodeLabels:
rack: rack1a
zone: us-east-1a
Changes to the node labels will be applied immediately without kubelet restart.
Talos keeps track of the owned node labels in the talos.dev/owned-labels annotation.
Routes
Talos now supports setting MTU for a specific route.
Nano Pi R4S
Talos now supports the Nano Pi R4S SBC.
Raspberry Generic Images
The Raspberry Pi 4 specific image has been deprecated and will be removed in the v1.4 release of Talos. Talos now ships a generic Raspberry Pi image that should support more Raspberry Pi variants. Refer to the docs at https://www.talos.dev/v1.3/talos-guides/install/single-board-computers/rpi_generic/ to find which ones are supported.
Encryption with secretbox
By default new clusters will use secretbox for encryption instead of AESCBC.
If both are configured secretbox will take precedence.
Old clusters may keep using AESCBC.
To enable secretbox you may add an encryption secret at cluster.secretboxEncryptionSecret.
You should keep aescbcEncryptionSecret however, even if secretbox is enabled older data will still be encrypted with AESCBC.
How to generate the secret:
dd if=/dev/random of=/dev/stdout bs=32 count=1 | base64
Static Pod Manifests
The directory "/etc/kubernetes/manifests" is now deprecated.
Static pods should always be configured in machine.pods.
To reenable support you may set machine.kubelet.disableManifestsDirectory.
Eg:
machine:
kubelet:
disableManifestsDirectory: no
Component Updates
- Kubernetes: v1.26.0-rc.0
- Flannel: v0.20.1
- CoreDNS: v1.10.0
- etcd: v3.5.5
- Linux: 5.15.77
- containerd: v1.6.9
Talos is built with Go 1.19.3.
Contributors
- Andrey Smirnov
- Noel Georgi
- Andrey Smirnov
- Michal Witkowski
- Artem Chernyshev
- Artem Chernyshev
- Dmitriy Matrenichev
- Alexey Palazhchenko
- Serge Logvinov
- Andrey Smirnov
- Philipp Sauter
- Andrew Rynhard
- Steve Francis
- Utku Ozdemir
- Andrew Rynhard
- Tim Jones
- Seán C McCord
- Kris Reeves
- Marvin Drees
- Spencer Smith
- Branden Cash
- Brandon Nason
- Cameron Brunner
- DJAlPee
- Daniel Low
- Gerard de Leeuw
- Jack Wink
- Jon Stelly
- Martin Stone
- Matt Zahorik
- Maxim Makarov
- Olli Janatuinen
- Pau Campana
- Rubens Farias
- Sander Maijers
- Spencer Smith
- ankitm123
- emattiza
- killcity
Changes
173 commits
aa56aed79feat: publish discovered public IP as one of the KubeSpan endpoint9382443bafeat: update Kubernetes to v1.26.0-rc.06ffc381c5feat: implement CRI configuration customizatione1e340bddfeat: expose Talos node labels as a machine configuration fieldc78bbbfdadocs: specify that only XFS partitions are detectedb881a9a79chore: bump dependencies5bfd7dbfatest: fix assertion on reboot test1cfb6188bfeat: implement support for cgroupsv13866d0e33feat: update Kubernetes to v1.26.0-beta.0e1590ba7bfix: lifecycle action tracking804762c59feat: add timeout to cli action tracking, track by default & refactor4e114ca12feat: use the etcd member id for etcd operations instead of hostname06fea2441feat: expand platform metadata resources03a20da9dfix: filter up duplicate IPs out of NodeAddresses6b771bc73chore: bump deps96aa9638fchore: rename talos-systems/talos to siderolabs/talos30bbf6463refactor: use siderolabs/net version with netip.Addr343c55762chore: replace talos-systems Go modules with siderolabs0301bbe93fix: check if processes is nil to avoid panic08e7e49a2test: update versions for upgrade tests0b41923c3fix: restore the StaticPodStatus resource1947092aechore: introduce a healthcheck formachinedservice3333cd93cfix: generate correct Flannel config for IPv6-only clustersd7070f5e7release(v1.3.0-alpha.1): prepare release869f3b5a5feat: network configuration improvements on the OpenStack platform29f2195e1feat: support exoscale cloud8b4ae08d1fix: etcd snapshot command on Windows8bfa7ac1dfeat: platform metadata resource7e50e24c0fix: properly cleanup legacy static pod manifests directory6ee47bcc6fix: support serving config for qemu launcher on IPv66c3d11b49docs: admission control patch note4ea3b99b5fix: serve static pod files on 127.0.0.1 instead of localhost23842114ffeat: support encryption with secretboxf6773c472docs: talos support on equinix metalb307160f6chore: bump dependenciesd7edd0e2erefactor: use go-circular, go-kubeconfig, and go-tailc6e1702ecfeat: use URL-based manifests to present static pods to the kubelet136a795e5docs: update system requirements to mention dedicated disk usage879e8c0bfchore: update kernel with BTF supportceb0cd99afeat: implement Talos API auth using SideroV1 signaturese6fba7d3bchore: update dependencies93e55b85fchore: bump golangci-lint to v1.50.0aa3d9b4cafix: regenerate cert on node labeling retry021c73c35fix: lowercase nodenameb902036e1docs: update office hours time link7fcb8c681feat: update Flannel to v0.20.0dc70d892afix: support setting KubeSpan link MTU7d52bad37feat: update Linux to 5.15.739c78b3afffeat: update Kubernetes to v1.26.0-alpha.294913a672docs: add lofty to talos adopters0a0bdfe16docs: add Tremor Video to adoptersb7b1d4fd6feat: use readonly containersd210338e3fix: skip protobuf full unmarshaling for some talosctl commandsb3c679d18chore: bump dependencies993743f63fix: skip hostname via DHCP on OpenStack platformdb076e7b5feat: pin interface by mac address in cmdline args63de93722fix: update go-smbios to v0.3.149e9f808echore: bump kernel and goc7372144ddocs: add constraints to upgrade docsc71c8ca18docs: consolidate, simplify and correct various docs06f76bfebchore: bump dependenciesb1c421b9achore: publish ami's with imds v2 enabled195c40ab5docs: add information about applicable use cases of disk encryption54a687fb8docs: consolidate and expand on discovery service139c62d76feat: allow upgrades in maintenance mode (only over SideroLink)48dee4805feat: support mtu for routes1c43c72aedocs: fix talos required kernel params67cc45ae3release(v1.3.0-alpha.0): prepare release18c377a4dfeat: customize audit policy23c9ea46bfix: raspberry pi installf17cdee16feat: jsonpath filter for talosctl get outputs6bd3cca1achore: generic raspberry pi imagesd914ab8bbchore: add vulncheck tool as a lintera0151aa13feat: add generic rpi u-boot support30f851d09chore: bump dependences8b2235c3bfix: lookup Equinix Metal bond slaves using 'permanent addr'b3257ebb1chore: bump kernel to 5.15.700b2767c16feat: implement 'permanent addr' in link statusesc90e20251fix: kubeconfig permissionfc48849d0chore: move maps/slices/ordered to gen module8b09bd4b0feat: update Kubernetes to v1.26.0-alpha.1276d4175bchore: bump extension versions in testing357b770cbfix: cryptsetup delete slot711128839fix: continue applying bootstrap manifests on some errorsce12c7b38chore: update COSI runtime to v0.2.0-alpha.11b435c0b3chore: bump kernel + ice drivers18e041f1edocs: fix typo in patching example0ad6452cafeat: update CoreDNS to v1.10.0479f3f52echore: bump dependenciese07c6ae99feat: update Kubernetes to v1.25.113fdfaffctest: fix up default branch nameef181321adocs: add component diagram; K8s & Talos Linuxaade73643docs: fix missing variable in OpenEBS docs472590aa8chore: return InvalidArgument on invalid config in maintenance modee5cabd42cfeat: enable etcd consistency hashcheck015535d90fix: update discovery client with the redirect fixd0c8e7699chore: bump kernel and go985b0c2e7chore: remove go.work.sum69124f102feat: update etcd to v3.5.51985a796cdocs: update docs for pod security94b088f02fix: set etcd options consistently92ae7ef4bfix: fix protoenc encoding for enums and types with custom encoders93809017cdocs: cpu scaling governor knowledgebase7b270ff33test: fix api controller test2dadcd669fix: stop worker nodes from acting as apid routers9eaf33f3ffix: never sign client certificate requests in trustd436749124feat: environment vars for extension service0c0cb671echore: mark machine configuration validation failure as InvalidArgumentf424e5340fix: stop containers more thoroughly12827b861chore: move "implements" checks to compile time3a67c42cbfix: kill the task processes when cleaning up stale task14a79e325chore: bump dependencies9beee92e7docs: fix double vv in Kubernetes version688272515fix: use different username for Talos Kubernetes API access161a52a9efeat: check apid client certificate extended key usage9dadc4a59fix: include all node addresses into etcd cert SANs71bfd3e43feat: update CoreDNS to 1.9.49df8f1ff1fix: list COSI APIs for the apid authenticator31462450ffix: pass a pointer to specs.Mount into protoenc.Marshale626540dfchore: avoid double API request logging in trustdf62d17125chore: update crypto to use new import path siderolabs/cryptoef27dd855chore: bump dependencies6472ae00bfix: automatically discard VIPs for etcd advertised addresses5e21cca52feat: support setting kernel parametersbd56621cdfeat: add structprotogen toolcdb6bb2ccfeat: add Nano Pi R4S support36c1f1d6efix: flip the client-server version checkcd6c53a97docs: fork docs for v1.30847400f7fix: prevent panic on health check if a member has no IPs7471d7f01feat: update Flannel to v0.19.2148c75cfbdocs: consolidate the control-plane documentation353154281fix: drop kube-system SA default binding4f37b668bchore: remove capi hacks1369afea8docs: make 1.2.0 docs default ones7627cb0e3docs: add newtalosctl gen secrets8aa60a37achore: bump kernel to 5.15.64a798dbd5ddocs: update docs for upcoming 1.2.0 releaseb2fec3c97fix: properly handleconfigContextbeingnilin Talos client1c0977b3afix: change the type of returned gRPC connection object from the client41848e421fix: expose Talos client gRPC connection via the functionConn2e9be4af8chore: bump dependenciesd283aba3atest: fix cli reboot test0b339a9dcfeat: track progress of action API calls072349812fix: update COSI to the version with gRPC Wait fix89d57aa81fix: always abort the maintenance servicef6fa74619fix: limit apid backoff max delayd7ef346dbfix: get command in the case 'nodes' are not set in the context4e9c32256fix: correctly render hosts.toml with multiple endpointscdd0f08bcfeat: check client <> server version in some Talos commands446b0af58chore: bump kernel and runc8c203ce9bfeat: remove the machine from the discovery service on resetb59ca5810chore: move from inet.af/netaddr to net/netip and go4.org/netipx053af1d59fix: update etcd certificates when node addresses changes11edb2c6ftest: re-enable upgrade tests0310e2089chore: bump github.com/siderolabs/protoenc to v0.1.529bd63240chore: remove old build tags syntaxb500d0aa9chore: bump k8s to v1.25.029e574be7docs: update to v1.2.0-beta.126b549f2achore: bump dependencies8c3ac4c42chore: limit GOMAXPROCS for Talos services361e85b74fix: properly read kexec disabled sysctlcfe6c2bc2docs: nvidia oss drivers2f2d97b6bfix: don't wait for the hostname in maintenance modeb15a63924chore: bump kernel to 5.15.62a0d94be30fix: stable default hostname biasda4cd34effeat: update etcd advertised peer addresses on the flyfaf92ce01chore: bump kubernetes to v1.25.0-rc.152de919e3chore: bump containerd to v1.6.87d43fc79bfix: make 'ca', 'crt' and 'key' flags optional for 'talosctl config add'fd467e02cfix: handle grub config being empty in theRevertfunction9492aca65fix: clean upcancelCtxMuleftovers in PriorityLock61e3eb2eafix: talosctl edit mc loop32db7a7f5fix: surroundcancelCtxwith the mutex
Changes since v1.3.0-alpha.1
23 commits
aa56aed79feat: publish discovered public IP as one of the KubeSpan endpoint9382443bafeat: update Kubernetes to v1.26.0-rc.06ffc381c5feat: implement CRI configuration customizatione1e340bddfeat: expose Talos node labels as a machine configuration fieldc78bbbfdadocs: specify that only XFS partitions are detectedb881a9a79chore: bump dependencies5bfd7dbfatest: fix assertion on reboot test1cfb6188bfeat: implement support for cgroupsv13866d0e33feat: update Kubernetes to v1.26.0-beta.0e1590ba7bfix: lifecycle action tracking804762c59feat: add timeout to cli action tracking, track by default & refactor4e114ca12feat: use the etcd member id for etcd operations instead of hostname06fea2441feat: expand platform metadata resources03a20da9dfix: filter up duplicate IPs out of NodeAddresses6b771bc73chore: bump deps96aa9638fchore: rename talos-systems/talos to siderolabs/talos30bbf6463refactor: use siderolabs/net version with netip.Addr343c55762chore: replace talos-systems Go modules with siderolabs0301bbe93fix: check if processes is nil to avoid panic08e7e49a2test: update versions for upgrade tests0b41923c3fix: restore the StaticPodStatus resource1947092aechore: introduce a healthcheck formachinedservice3333cd93cfix: generate correct Flannel config for IPv6-only clusters
Changes from siderolabs/crypto
27 commits
c3225eefeat: allow CSR template subject field to be overridden8570669chore: rename to siderolabs/cryptoe9df1b8feat: add support for generating keys from RSA-SHA256 CAs510b0d2chore: add json tags6fa2d93fix: deepcopy nil fields asnil9a63cbafix: add back support for generating ECDSA keys with P-256 and SHA512893bc66fix: use SHA256 for ECDSA-P256deec8d4chore: implement DeepCopy methods for PEMEncoded* typesd3cb772feat: make possible to change KeyUsage6bc5bb5chore: remove unused argumentcd18ef6feat: add support for several organizations97c888bchore: add options to CSR7776057chore: fix typos80df078chore: remove named result parameters15bdd28chore: minor updates4f80b97fix: verify CSR signature before issuing a certificate39584f1feat: support for key/certificate types RSA, Ed25519, ECDSAcf75519fix: function NewKeyPair should create certificate with proper subject751c95afeat: add 'PEMEncodedKey' which allows to transport keys in YAML562c3b6feat: add support for public RSA key in RSAKeybda0e9cfeat: enable more conversions between encoded and raw versionse0dd56afeat: add NotBefore option for x509 cert creation12a4897feat: add support for SPKI fingerprint generation and matchingd0c3eeffix: implement NewKeyPair196679efeat: movepkg/grpc/tlsfromgithub.com/talos-systems/talosas./tls1ff6242chore: initial version as imported from talos-systems/talos835063echore: initial commit
Changes from siderolabs/discovery-api
3 commits
Changes from siderolabs/discovery-client
2 commits
Changes from siderolabs/extras
3 commits
Changes from siderolabs/gen
6 commits
b3b6db8fix: fix Copy documentation and implementation521f737feat: add xerrors package which contains additions to the std errors726e066fix: rename tuples.go to pair.go and set proper package named8d7d25chore: minor additions338a650chore: add initial implementation and documentation4fd8667Initial commit
Changes from siderolabs/go-blockdevice
56 commits
694ac62chore: update imports to siderolabs, rekresdcf6044chore: rekres and rename9c4af49fix: cryptsetup remove slot74ea471feat: add freebsd stubs9fa801cfeat: add ReadOnly attribute to Diskfccee8bchore: rekres the source, fix issuesd9c3a27feat: support probing FAT12/FAT16 filesystemsb374eb4fix: align partition to 1M boundary by defaultec428fefix: lookup filesystem labels on the actual device path7b9de26feat: read symlink fullpath in block device list function6928ee4refactor: rewrite GPT serialize/deserialize functions0c7e429refactor: simplify middle endian functions15b182dfix: return partition table not exist when trying to read an empty devb9517d5fix: resize partition70d2865fix: try to find cdrom disks667bf53fix: revert gpt partition not foundd7d4cddfix: gpt partition not found33afba3fix: also open in readonly mode when runningAlllookup methode367f9dfeat: make probe always open blockdevices in readonly moded981156fix: allow Build for Windowsfe24303fix: perform correct PMBR partition calculations2ec0c3cfix: preserve the PMBR bootable flag when opening GPT partition87816a8feat: align partition to minimum I/O sizec34b59ffeat: expose more encryption options in the LUKS module30c2bc3feat: mark MBR bootable1292574fix: make disk type matcher parser case insensitiveb77400efix: properly detect nvme and sd card disk types1d830a2fix: revert mark the EFI partition in PMBR as bootablebec914ffix: mark the EFI partition in PMBR as bootable776b37dfeat: add options to probe disk by various sysblock parametersbb3ad73fix: align partition start to physical sector size8f976c2feat: replace exec.Command with go-cmd module1cf7f25fix: properly handle no child processes error from cmd.Wait04a9851feat: implement luks encryption providerb0375e4feat: add an option to open block device with exclusive flock5a1c7f7refactor: add devname into gpt.Partition, refactor probe packagef2728a5fix: keep contents of PMBR when writing it2878460fix: write second copy of partition entries943b08bfix: blockdevice reset should read partition table from disk5b4ee44fix: ignore/dev/ramdevices98754ecrefactor: rewrite GPT library2a1baadfix: correctly build paths formmcblkdevices8076344fix: return proper disk size from GetDisks function8742133chore: add common method to list available disks using /sys/blockc4b5833feat: implement "fast" wipeb4e67d7feat: return resize status from Resize() functionceae64efix: sync kernel partition table incrementally2cb9516fix: return correct error value from blkpg functionscebe43drefactor: exposeInsertAtmethod via interfacec40dcd8fix: properly inform kernel about partition deletionbb8ac5dfeat: implement disk wiping via several methods23fb7dcfeat: expose partition name (label)ff3a821feat: implement 'InsertAt' method to insert partitions at any position3d1ce4ffix: calculate last lba of partition correctlyb71540ffeat: copy initial version from talos-systems/talosca3c078Initial commit
Changes from siderolabs/go-circular
Changes from siderolabs/go-cmd
5 commits
Changes from siderolabs/go-debug
6 commits
Changes from siderolabs/go-kmsg
4 commits
Changes from siderolabs/go-kubeconfig
Changes from siderolabs/go-loadbalancer
12 commits
f54e3c9chore: update dependencies to siderolabs, rekres438b71dchore: update package path and rekres5341eecfeat: implement public method to check if the route is Healthyb578d47feat: add a way to configure loadbalancer optionsc54d95dfeat: implement control plane loadbalancer4a6e29erefactor: clean up names, fix the lingering goroutinesaf87d1cchore: apply new Kres rulesa445702feat: allow dial timeout and keep alive period to be configurable3c8f347feat: provide a way to configure logger for the loadbalancerda8e987feat: implement Reconcile - ability to change upstream list on the fly8b1dfa6feat: copy initial version from talos-systems/talosc2f6a8fInitial commit
Changes from siderolabs/go-procfs
10 commits
a062a4cchore: rekres, rename8cbc42dfeat: provide an option to overwrite some args in AppendAll24d06a9refactor: remove talos kernel default argsa82654efeat: implement SetAll method16ce2effix: update cmdline.Set() to drop the value being overwritten5a9a4a7feat: update kernel args for new KSPP requirements57c7311refactor: change directory layouta077c96fix: fix go module name698666fchore: move package to new repodabb425Initial commit
Changes from siderolabs/go-retry
9 commits
6d45449chore: rekres, renamec78cc95fix: implementerrors.Isfor all errors in the set7885e16feat: add ExpectedErrorf3d83f61feat: deprecate UnexpectedErrorb9dc1a9feat: add support forcontext.Contextin Retry8c63d29fix: correctly implement error interfaces on wrapped errors752f081feat: add an option to log errors being retried073067bfeat: copy initial version from talos-systems/talosc7968c5Initial commit
Changes from siderolabs/go-smbios
11 commits
10c1dd8fix: check for end of the slice properly9ca8ce7chore: treat invalid strings as emptydbc5f79chore: rekres+rename3f1e775feat: rework destructuring of SMBIOS information and added some testsfd5ec8cfix: remove useless (?) goroutines leading to data race errord3a32befix: return UUID in middle endian only on SMBIOS >= 2.6fb425d4feat: add memory device0bb4f96feat: add physical memory array8019619feat: supply wake-up type in SMBIOS info94b8c4efeat: initial implementation864ed80Initial commit
Changes from siderolabs/go-tail
Changes from siderolabs/grpc-proxy
51 commits
4cc7bbechore: rename to siderolabs/grpc-proxy, rekres2c586dbfeat: pass fullMethodName to GetConnection6dfa2ccfix: ignore errors on duplicateSetHeadercallsb076302fix: use io.EOF error when no backend connections are available82daca0docs: update READMEfa6843achore: fix spellingc0a87d9chore: major cleanup of the code and buildca3bc61fix: ignore some errors so that we don't spam the logs5c579a7feat: allow different formats for messages streaming/unary6c9f7b3fix: allow mode to be set for each request being proxiedcc91c09refactor: provide better public API, enforce proxying moded8d3a75chore: update import paths after repo movedbf07a4Merge pull request #7 from smira/one2many-4fc0d27dMore tests, small code fixes, updated README.d9ce0b1Merge pull request #6 from smira/one2many-32d37ba4Support for one2many streaming calls, tests.817b035Merge pull request #5 from smira/one2many-2436b338More unary one-2-many tests, error propagation.1f0cb46Merge pull request #4 from smira/one2many-1992a975Proxying one to many: first iterationa0988ffMerge pull request #3 from smira/small-fixupse3111efSmall fixups in preparation to add one-to-many proxying.6d76ffcMerge pull request #2 from smira/backend-concept2aad63aAdd concept of a 'Backend', but still one to one proxying7cc4610Merge pull request #1 from smira/build37f01f3Rework build to use GitHub Actions, linting updates.0f1106eMove error checking further up (#34)d5b35f6Update gRPC and fix tests (#27)67591ebBreak StreamDirector interface, fix metadata propagation for gRPC-Go>1.5. (#20)97396d9Merge pull request #11 from mwitkow/fix-close-bug3fcbd37fixup closing connsa8f5f87fixup tests, extend readme428fa1cFix a channel closing bugaf55d61Merge pull request #10 from mwitkow/bugfix/streaming-fixde4d3dbremove spurious printfs84242c4fix the "i don't know who finished" case9b22f41fix full duplex streamingc2f7c98update readmed654141update READMEf457856move to proxy subdirectory4889d78Add fixup scriptsef60a37version 2 of the grpc-proxy, this time with fewer grpc upstream deps07aeac1Merge pull request #2 from daniellowtw/mastere5c3df5Fix compatibility with latest grpc library52be0a5bugfix: fix gRPC Java deadlock, due to different dispatch logic822df7dFix reference to mwitkow.28341d1move out forward logic to method, allowing for use asgrpc.Servernot found handler.89e28b4add reference to upstream grpc bug00dd588merge upstreamgrpc.Serverchanges changing the dispatch logic77edc97move to upstreamprotobuffromgogodb71c3einitial commit, tested and working.
Changes from siderolabs/net
12 commits
19eb1c4feat: switch to usenetip.Addrinstead ofnet.IP5b21171chore: rename, rekres409926afix: parse correctly some IPv6 CIDRsb4b7181feat: add a way to filter list of IPs for the machine0abe5bdfeat: implement FilterIPs function0519054feat: add ParseCIDR52c7509feat: add a function to format IPs in CIDR notation005a94ffeat: add methods to manage CIDR list, check for non-local IPv68b56890feat: add ValidateEndpointURI402fa79chore: apply kres to get the latest build scriptsc7bc477chore: initial version of the package393246achore: initial commit
Changes from siderolabs/pkgs
39 commits
8b975a7chore: bump depsb153ce6chore: bump deps535b8f9chore: update packages version66c77e9feat: re-enable build kernel with BTF enabled98ef073feat: enable INET_DIAG and FANOTFY_PERMISSIONS8fe5cbcchore: update dependencies554c0fefeat: add fanotify and kprobes kernel options54d7e5cfix: drbd package nameb4cb9e2feat: add 'drbd' package91e73b3feat: update dependenciesb6d0d96chore: bump kernel to 5.15.72b16dfe9chore: bump go to 1.19.2861cc32chore: bump kernel to 5.15.710ac7773chore: use generic raspberry pi u-bootd5633d4chore: bump kernel to 5.15.7039c0d43feat: add generic rpi_arm64_defconfig configurationed269cachore: bump kernel to 5.15.69f2f8333fix: no slack notifications on failure6f0af33chore: disable drone slack pipeline for renovate32aea3fchore: disable drone for renovate/dependabot44579f0fix: rollback xfsprogs to 5.18.0792c0e3feat: add gasket driver package07f1898chore: update depsf78f410chore: enable conntrack zones and timestamps049b3c6chore: enable intel ice drivers606ff32chore: bump depseee5c8achore: disable irc in conntrack70e6c46chore: bump kernel to 5.15.64e510321chore: update renovate configd1fa510feat: enable renovate bote427a77chore: bump runc to v1.1.440e1215chore: enable nfsv4.2 client support15efadachore: bump kernel to 5.15.63e70e3c1fix: nvidia oss pkg name30b8d79chore: bump kernel to 5.15.62862c392chore: bump gcc to 12.2.02ecd14efix: containerd version01df058feat: add NanoPi R4S configurationd4cb33bchore: bump containerd to v1.6.8
Changes from siderolabs/siderolink
19 commits
575c5ccrefactor: drop dependency on Talos machinery package61ab1c4fix: include MachineStatusEvent into the list of supported events16a84ebchore: rename to siderolabs/siderolinkca470c7chore: update Talos to the latest master, migrate netaddr -> netip/x93b65f0fix: ignore 'exist' error on interface managmeent3c4d9e0chore: move IP to interface binding into NewDevicef0b5e39feat: use kernel wireguard implementation when available1d2b7e1feat: allow setting peer endpoint using peer event5d085d6feat: exposewgDevice.Peersfrom thewireguard.Devicewrapper3a5be65fix: use correct method to generate Wireguard private key8318a7efeat: accept join token in Provision payloadb38c192fix: build on Windows9902ad2feat: pass request context and node address to the events sink adapterd0612a7refactor: pass in listener to the log receiverd86cdd5feat: implement logreceiver for kernel logsf7cadbcfix: handle duplicate peer updates0755b24feat: initial implementation of SideroLinkee73ea9feat: add Talos events sink proto files and the reference implementation1e2cd9dInitial commit
Changes from siderolabs/tools
22 commits
e8f92b3chore: bump tools3b5f89achore: update dependencies6402b99feat: update OpenSSL to 1.1.1r00e91b1feat: update releasesa264809chore: bump go to 1.19.2858cfe7fix: no slack notifications on failureed85950chore: disable drone slack pipeline for renovate5df6589chore: disable drone for renovate/dependabot1f00d2efix: revert gawk to 5.1.1feeda1fchore: bump grpc-go8542014chore: bump depse5c4968chore: update renovate configf34f94dchore: update renovate configcef4cc6chore: update renovate configbab8e9echore: add libbpf to tools0a15f7bchore: build pahole properlya322d06chore: remove imgc7ff47bfeat: enable renovate dependency updates (3/3)6e095cffeat: enable renovate dependency updates (2/n)bad1ad1feat: add renovatebot7d6f9c3chore: bump gcc to 12.2.02719b4bchore: bump toolchain
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.1 new
- github.com/BurntSushi/toml v1.2.0 -> v1.2.1
- github.com/aws/aws-sdk-go v1.44.76 -> v1.44.136
- github.com/containerd/containerd v1.6.8 -> v1.6.9
- github.com/cosi-project/runtime v0.1.1 -> v0.2.0-alpha.3
- github.com/docker/docker v20.10.17 -> v20.10.21
- github.com/emicklei/dot v1.0.0 -> v1.1.0
- github.com/fsnotify/fsnotify v1.5.4 -> v1.6.0
- github.com/gdamore/tcell/v2 v2.5.2 -> v2.5.3
- github.com/google/go-cmp v0.5.8 -> v0.5.9
- github.com/google/nftables 2eca00135732 -> 130caa4c31c9
- github.com/hetznercloud/hcloud-go v1.35.2 -> v1.37.0
- github.com/insomniacslk/dhcp 509691fd59ec -> 5308ebe5334c
- github.com/jsimonetti/rtnetlink v1.2.2 -> v1.2.3
- github.com/mdlayher/ethtool 856bd6cb8a38 -> 0e16326d06d1
- github.com/mdlayher/genetlink v1.2.0 -> v1.3.0
- github.com/mdlayher/netlink v1.6.0 -> v1.7.0
- github.com/opencontainers/image-spec c5a74bcca799 -> v1.1.0-rc2
- github.com/packethost/packngo v0.25.0 -> v0.29.0
- github.com/pmorjan/kmod v1.0.0 -> v1.1.0
- github.com/rivo/tview 0e6b21a48e96 -> 04a46906d2e9
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.9 -> v1.0.0-beta.10
- github.com/siderolabs/crypto v0.4.0 new
- github.com/siderolabs/discovery-api v0.1.1 new
- github.com/siderolabs/discovery-client v0.1.1 -> v0.1.3
- github.com/siderolabs/extras v1.2.0 -> v1.3.0-alpha.0-2-gb155fa0
- github.com/siderolabs/gen v0.4.0 new
- github.com/siderolabs/go-blockdevice v0.4.1 new
- github.com/siderolabs/go-circular v0.1.0 new
- github.com/siderolabs/go-cmd v0.1.1 new
- github.com/siderolabs/go-debug v0.2.2 new
- github.com/siderolabs/go-kmsg v0.1.2 new
- github.com/siderolabs/go-kubeconfig v0.1.0 new
- github.com/siderolabs/go-loadbalancer v0.2.1 new
- github.com/siderolabs/go-procfs v0.1.1 new
- github.com/siderolabs/go-retry v0.3.2 new
- github.com/siderolabs/go-smbios v0.3.1 new
- github.com/siderolabs/go-tail v0.1.0 new
- github.com/siderolabs/grpc-proxy v0.4.0 new
- github.com/siderolabs/net v0.4.0 new
- github.com/siderolabs/pkgs v1.2.0-8-g970860d -> v1.3.0-alpha.0-38-g8b975a7
- github.com/siderolabs/siderolink v0.3.0 new
- github.com/siderolabs/talos/pkg/machinery v1.3.0-alpha.1 new
- github.com/siderolabs/tools v1.2.0 -> v1.3.0-alpha.0-21-ge8f92b3
- github.com/spf13/cobra v1.5.0 -> v1.6.1
- github.com/stretchr/testify v1.8.0 -> v1.8.1
- github.com/u-root/u-root v0.9.0 -> v0.10.0
- github.com/vmware-tanzu/sonobuoy v0.56.9 -> v0.56.11
- go.etcd.io/etcd/api/v3 v3.5.4 -> v3.5.5
- go.etcd.io/etcd/client/pkg/v3 v3.5.4 -> v3.5.5
- go.etcd.io/etcd/client/v3 v3.5.4 -> v3.5.5
- go.etcd.io/etcd/etcdutl/v3 v3.5.4 -> v3.5.5
- go.uber.org/atomic v1.9.0 -> v1.10.0
- go.uber.org/zap v1.22.0 -> v1.23.0
- go4.org/netipx 797b0c90d8ab new
- golang.org/x/net 3211cb980234 -> v0.2.0
- golang.org/x/sync 886fb9371eb4 -> v0.1.0
- golang.org/x/sys fbc7d0a398ab -> v0.2.0
- golang.org/x/term a9ba230a4035 -> v0.2.0
- golang.org/x/time e5dcc9cfc0b9 -> v0.2.0
- golang.zx2c4.com/wireguard/wgctrl 3d4a969bb56b -> 97bc4ad4a1cb
- google.golang.org/grpc v1.48.0 -> v1.50.1
- k8s.io/api v0.25.0 -> v0.26.0-beta.0
- k8s.io/apimachinery v0.25.0 -> v0.26.0-beta.0
- k8s.io/apiserver v0.25.0 -> v0.26.0-beta.0
- k8s.io/client-go v0.25.0 -> v0.26.0-beta.0
- k8s.io/component-base v0.25.0 -> v0.26.0-beta.0
- k8s.io/cri-api v0.25.0 -> v0.26.0-beta.0
- k8s.io/klog/v2 v2.70.1 -> v2.80.1
- k8s.io/kubectl v0.25.0 -> v0.26.0-beta.0
- k8s.io/kubelet v0.25.0 -> v0.26.0-beta.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.65 -> v1.2.66
Previous release can be found at v1.2.0
Talos 1.3.0-alpha.1 (2022-10-28)
Welcome to the v1.3.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
kube-apiserver Audit Policy
Talos now supports setting custom audit policy for kube-apiserver in the machine configuration.
Kernel Command Line ip= Argument
Talos now supports referencing interface name via enxMAC address notation:
ip=172.20.0.2::172.20.0.1:255.255.255.0::enx7085c2dfbc59
etcd Consistency Check
Talos enables --experimental-compact-hash-check-enabled option by default to improve etcd store consistency guarantees.
This options is only available with etcd >= v3.5.5, so Talos doesn't support version of etcd before v3.5.5.
Exocale Platform
Talos now supports new platform: Exoscale.
Exoscale provides a firewall, TCP load balancer and autoscale groups. It works well with CCM and Kubernetes node autoscaler.
Kernel Modules
Talos now supports settings kernel module parameters.
Eg:
machine:
kernel:
modules:
- name: "br_netfilter"
parameters:
- nf_conntrack_max=131072
KubeSpan
KubeSpan MTU link size is now configurable via network.kubespan.mtu setting in the machine configuration.
Routes
Talos now supports setting MTU for a specific route.
Nano Pi R4S
Talos now supports the Nano Pi R4S SBC.
Raspberry Generic Images
The Raspberry Pi 4 specific image has been deprecated and will be removed in the v1.4 release of Talos. Talos now ships a generic Raspberry Pi image that should support more Raspberry Pi variants. Refer to the docs at https://www.talos.dev/v1.3/talos-guides/install/single-board-computers/rpi_generic/ to find which ones are supported.
Encryption with secretbox
By default new clusters will use secretbox for encryption instead of AESCBC.
If both are configured secretbox will take precedence.
Old clusters may keep using AESCBC.
To enable secretbox you may add an encryption secret at cluster.secretboxEncryptionSecret.
You should keep aescbcEncryptionSecret however, even if secretbox is enabled older data will still be encrypted with AESCBC.
How to generate the secret:
dd if=/dev/random of=/dev/stdout bs=32 count=1 | base64
Static Pod Manifests
The directory "/etc/kubernetes/manifests" is now deprecated.
Static pods should always be configured in machine.pods.
To reenable support you may set machine.kubelet.disableManifestsDirectory.
Eg:
machine:
kubelet:
disableManifestsDirectory: no
Component Updates
- Kubernetes: v1.26.0-alpha.2
- Flannel: v0.20.0
- CoreDNS: v1.10.0
- etcd: v3.5.5
- Linux: 5.15.74
Talos is built with Go 1.19.2.
Contributors
- Andrey Smirnov
- Noel Georgi
- Andrey Smirnov
- Michal Witkowski
- Artem Chernyshev
- Dmitriy Matrenichev
- Artem Chernyshev
- Serge Logvinov
- Andrey Smirnov
- Philipp Sauter
- Steve Francis
- Alexey Palazhchenko
- Andrew Rynhard
- Tim Jones
- Utku Ozdemir
- Andrew Rynhard
- Kris Reeves
- Marvin Drees
- Spencer Smith
- Branden Cash
- Brandon Nason
- Cameron Brunner
- DJAlPee
- Daniel Low
- Gerard de Leeuw
- Jack Wink
- Jon Stelly
- Matt Zahorik
- Maxim Makarov
- Olli Janatuinen
- Pau Campana
- Rubens Farias
- Sander Maijers
- Seán C McCord
- Spencer Smith
- emattiza
- killcity
Changes
149 commits
869f3b5a5feat: network configuration improvements on the OpenStack platform29f2195e1feat: support exoscale cloud8b4ae08d1fix: etcd snapshot command on Windows8bfa7ac1dfeat: platform metadata resource7e50e24c0fix: properly cleanup legacy static pod manifests directory6ee47bcc6fix: support serving config for qemu launcher on IPv66c3d11b49docs: admission control patch note4ea3b99b5fix: serve static pod files on 127.0.0.1 instead of localhost23842114ffeat: support encryption with secretboxf6773c472docs: talos support on equinix metalb307160f6chore: bump dependenciesd7edd0e2erefactor: use go-circular, go-kubeconfig, and go-tailc6e1702ecfeat: use URL-based manifests to present static pods to the kubelet136a795e5docs: update system requirements to mention dedicated disk usage879e8c0bfchore: update kernel with BTF supportceb0cd99afeat: implement Talos API auth using SideroV1 signaturese6fba7d3bchore: update dependencies93e55b85fchore: bump golangci-lint to v1.50.0aa3d9b4cafix: regenerate cert on node labeling retry021c73c35fix: lowercase nodenameb902036e1docs: update office hours time link7fcb8c681feat: update Flannel to v0.20.0dc70d892afix: support setting KubeSpan link MTU7d52bad37feat: update Linux to 5.15.739c78b3afffeat: update Kubernetes to v1.26.0-alpha.294913a672docs: add lofty to talos adopters0a0bdfe16docs: add Tremor Video to adoptersb7b1d4fd6feat: use readonly containersd210338e3fix: skip protobuf full unmarshaling for some talosctl commandsb3c679d18chore: bump dependencies993743f63fix: skip hostname via DHCP on OpenStack platformdb076e7b5feat: pin interface by mac address in cmdline args63de93722fix: update go-smbios to v0.3.149e9f808echore: bump kernel and goc7372144ddocs: add constraints to upgrade docsc71c8ca18docs: consolidate, simplify and correct various docs06f76bfebchore: bump dependenciesb1c421b9achore: publish ami's with imds v2 enabled195c40ab5docs: add information about applicable use cases of disk encryption54a687fb8docs: consolidate and expand on discovery service139c62d76feat: allow upgrades in maintenance mode (only over SideroLink)48dee4805feat: support mtu for routes1c43c72aedocs: fix talos required kernel params67cc45ae3release(v1.3.0-alpha.0): prepare release18c377a4dfeat: customize audit policy23c9ea46bfix: raspberry pi installf17cdee16feat: jsonpath filter for talosctl get outputs6bd3cca1achore: generic raspberry pi imagesd914ab8bbchore: add vulncheck tool as a lintera0151aa13feat: add generic rpi u-boot support30f851d09chore: bump dependences8b2235c3bfix: lookup Equinix Metal bond slaves using 'permanent addr'b3257ebb1chore: bump kernel to 5.15.700b2767c16feat: implement 'permanent addr' in link statusesc90e20251fix: kubeconfig permissionfc48849d0chore: move maps/slices/ordered to gen module8b09bd4b0feat: update Kubernetes to v1.26.0-alpha.1276d4175bchore: bump extension versions in testing357b770cbfix: cryptsetup delete slot711128839fix: continue applying bootstrap manifests on some errorsce12c7b38chore: update COSI runtime to v0.2.0-alpha.11b435c0b3chore: bump kernel + ice drivers18e041f1edocs: fix typo in patching example0ad6452cafeat: update CoreDNS to v1.10.0479f3f52echore: bump dependenciese07c6ae99feat: update Kubernetes to v1.25.113fdfaffctest: fix up default branch nameef181321adocs: add component diagram; K8s & Talos Linuxaade73643docs: fix missing variable in OpenEBS docs472590aa8chore: return InvalidArgument on invalid config in maintenance modee5cabd42cfeat: enable etcd consistency hashcheck015535d90fix: update discovery client with the redirect fixd0c8e7699chore: bump kernel and go985b0c2e7chore: remove go.work.sum69124f102feat: update etcd to v3.5.51985a796cdocs: update docs for pod security94b088f02fix: set etcd options consistently92ae7ef4bfix: fix protoenc encoding for enums and types with custom encoders93809017cdocs: cpu scaling governor knowledgebase7b270ff33test: fix api controller test2dadcd669fix: stop worker nodes from acting as apid routers9eaf33f3ffix: never sign client certificate requests in trustd436749124feat: environment vars for extension service0c0cb671echore: mark machine configuration validation failure as InvalidArgumentf424e5340fix: stop containers more thoroughly12827b861chore: move "implements" checks to compile time3a67c42cbfix: kill the task processes when cleaning up stale task14a79e325chore: bump dependencies9beee92e7docs: fix double vv in Kubernetes version688272515fix: use different username for Talos Kubernetes API access161a52a9efeat: check apid client certificate extended key usage9dadc4a59fix: include all node addresses into etcd cert SANs71bfd3e43feat: update CoreDNS to 1.9.49df8f1ff1fix: list COSI APIs for the apid authenticator31462450ffix: pass a pointer to specs.Mount into protoenc.Marshale626540dfchore: avoid double API request logging in trustdf62d17125chore: update crypto to use new import path siderolabs/cryptoef27dd855chore: bump dependencies6472ae00bfix: automatically discard VIPs for etcd advertised addresses5e21cca52feat: support setting kernel parametersbd56621cdfeat: add structprotogen toolcdb6bb2ccfeat: add Nano Pi R4S support36c1f1d6efix: flip the client-server version checkcd6c53a97docs: fork docs for v1.30847400f7fix: prevent panic on health check if a member has no IPs7471d7f01feat: update Flannel to v0.19.2148c75cfbdocs: consolidate the control-plane documentation353154281fix: drop kube-system SA default binding4f37b668bchore: remove capi hacks1369afea8docs: make 1.2.0 docs default ones7627cb0e3docs: add newtalosctl gen secrets8aa60a37achore: bump kernel to 5.15.64a798dbd5ddocs: update docs for upcoming 1.2.0 releaseb2fec3c97fix: properly handleconfigContextbeingnilin Talos client1c0977b3afix: change the type of returned gRPC connection object from the client41848e421fix: expose Talos client gRPC connection via the functionConn2e9be4af8chore: bump dependenciesd283aba3atest: fix cli reboot test0b339a9dcfeat: track progress of action API calls072349812fix: update COSI to the version with gRPC Wait fix89d57aa81fix: always abort the maintenance servicef6fa74619fix: limit apid backoff max delayd7ef346dbfix: get command in the case 'nodes' are not set in the context4e9c32256fix: correctly render hosts.toml with multiple endpointscdd0f08bcfeat: check client <> server version in some Talos commands446b0af58chore: bump kernel and runc8c203ce9bfeat: remove the machine from the discovery service on resetb59ca5810chore: move from inet.af/netaddr to net/netip and go4.org/netipx053af1d59fix: update etcd certificates when node addresses changes11edb2c6ftest: re-enable upgrade tests0310e2089chore: bump github.com/siderolabs/protoenc to v0.1.529bd63240chore: remove old build tags syntaxb500d0aa9chore: bump k8s to v1.25.029e574be7docs: update to v1.2.0-beta.126b549f2achore: bump dependencies8c3ac4c42chore: limit GOMAXPROCS for Talos services361e85b74fix: properly read kexec disabled sysctlcfe6c2bc2docs: nvidia oss drivers2f2d97b6bfix: don't wait for the hostname in maintenance modeb15a63924chore: bump kernel to 5.15.62a0d94be30fix: stable default hostname biasda4cd34effeat: update etcd advertised peer addresses on the flyfaf92ce01chore: bump kubernetes to v1.25.0-rc.152de919e3chore: bump containerd to v1.6.87d43fc79bfix: make 'ca', 'crt' and 'key' flags optional for 'talosctl config add'fd467e02cfix: handle grub config being empty in theRevertfunction9492aca65fix: clean upcancelCtxMuleftovers in PriorityLock61e3eb2eafix: talosctl edit mc loop32db7a7f5fix: surroundcancelCtxwith the mutex
Changes since v1.3.0-alpha.0
43 commits
869f3b5a5feat: network configuration improvements on the OpenStack platform29f2195e1feat: support exoscale cloud8b4ae08d1fix: etcd snapshot command on Windows8bfa7ac1dfeat: platform metadata resource7e50e24c0fix: properly cleanup legacy static pod manifests directory6ee47bcc6fix: support serving config for qemu launcher on IPv66c3d11b49docs: admission control patch note4ea3b99b5fix: serve static pod files on 127.0.0.1 instead of localhost23842114ffeat: support encryption with secretboxf6773c472docs: talos support on equinix metalb307160f6chore: bump dependenciesd7edd0e2erefactor: use go-circular, go-kubeconfig, and go-tailc6e1702ecfeat: use URL-based manifests to present static pods to the kubelet136a795e5docs: update system requirements to mention dedicated disk usage879e8c0bfchore: update kernel with BTF supportceb0cd99afeat: implement Talos API auth using SideroV1 signaturese6fba7d3bchore: update dependencies93e55b85fchore: bump golangci-lint to v1.50.0aa3d9b4cafix: regenerate cert on node labeling retry021c73c35fix: lowercase nodenameb902036e1docs: update office hours time link7fcb8c681feat: update Flannel to v0.20.0dc70d892afix: support setting KubeSpan link MTU7d52bad37feat: update Linux to 5.15.739c78b3afffeat: update Kubernetes to v1.26.0-alpha.294913a672docs: add lofty to talos adopters0a0bdfe16docs: add Tremor Video to adoptersb7b1d4fd6feat: use readonly containersd210338e3fix: skip protobuf full unmarshaling for some talosctl commandsb3c679d18chore: bump dependencies993743f63fix: skip hostname via DHCP on OpenStack platformdb076e7b5feat: pin interface by mac address in cmdline args63de93722fix: update go-smbios to v0.3.149e9f808echore: bump kernel and goc7372144ddocs: add constraints to upgrade docsc71c8ca18docs: consolidate, simplify and correct various docs06f76bfebchore: bump dependenciesb1c421b9achore: publish ami's with imds v2 enabled195c40ab5docs: add information about applicable use cases of disk encryption54a687fb8docs: consolidate and expand on discovery service139c62d76feat: allow upgrades in maintenance mode (only over SideroLink)48dee4805feat: support mtu for routes1c43c72aedocs: fix talos required kernel params
Changes from siderolabs/crypto
27 commits
c3225eefeat: allow CSR template subject field to be overridden8570669chore: rename to siderolabs/cryptoe9df1b8feat: add support for generating keys from RSA-SHA256 CAs510b0d2chore: add json tags6fa2d93fix: deepcopy nil fields asnil9a63cbafix: add back support for generating ECDSA keys with P-256 and SHA512893bc66fix: use SHA256 for ECDSA-P256deec8d4chore: implement DeepCopy methods for PEMEncoded* typesd3cb772feat: make possible to change KeyUsage6bc5bb5chore: remove unused argumentcd18ef6feat: add support for several organizations97c888bchore: add options to CSR7776057chore: fix typos80df078chore: remove named result parameters15bdd28chore: minor updates4f80b97fix: verify CSR signature before issuing a certificate39584f1feat: support for key/certificate types RSA, Ed25519, ECDSAcf75519fix: function NewKeyPair should create certificate with proper subject751c95afeat: add 'PEMEncodedKey' which allows to transport keys in YAML562c3b6feat: add support for public RSA key in RSAKeybda0e9cfeat: enable more conversions between encoded and raw versionse0dd56afeat: add NotBefore option for x509 cert creation12a4897feat: add support for SPKI fingerprint generation and matchingd0c3eeffix: implement NewKeyPair196679efeat: movepkg/grpc/tlsfromgithub.com/talos-systems/talosas./tls1ff6242chore: initial version as imported from talos-systems/talos835063echore: initial commit
Changes from siderolabs/discovery-api
3 commits
Changes from siderolabs/discovery-client
Changes from siderolabs/extras
2 commits
Changes from siderolabs/gen
6 commits
b3b6db8fix: fix Copy documentation and implementation521f737feat: add xerrors package which contains additions to the std errors726e066fix: rename tuples.go to pair.go and set proper package named8d7d25chore: minor additions338a650chore: add initial implementation and documentation4fd8667Initial commit
Changes from siderolabs/go-blockdevice
55 commits
dcf6044chore: rekres and rename9c4af49fix: cryptsetup remove slot74ea471feat: add freebsd stubs9fa801cfeat: add ReadOnly attribute to Diskfccee8bchore: rekres the source, fix issuesd9c3a27feat: support probing FAT12/FAT16 filesystemsb374eb4fix: align partition to 1M boundary by defaultec428fefix: lookup filesystem labels on the actual device path7b9de26feat: read symlink fullpath in block device list function6928ee4refactor: rewrite GPT serialize/deserialize functions0c7e429refactor: simplify middle endian functions15b182dfix: return partition table not exist when trying to read an empty devb9517d5fix: resize partition70d2865fix: try to find cdrom disks667bf53fix: revert gpt partition not foundd7d4cddfix: gpt partition not found33afba3fix: also open in readonly mode when runningAlllookup methode367f9dfeat: make probe always open blockdevices in readonly moded981156fix: allow Build for Windowsfe24303fix: perform correct PMBR partition calculations2ec0c3cfix: preserve the PMBR bootable flag when opening GPT partition87816a8feat: align partition to minimum I/O sizec34b59ffeat: expose more encryption options in the LUKS module30c2bc3feat: mark MBR bootable1292574fix: make disk type matcher parser case insensitiveb77400efix: properly detect nvme and sd card disk types1d830a2fix: revert mark the EFI partition in PMBR as bootablebec914ffix: mark the EFI partition in PMBR as bootable776b37dfeat: add options to probe disk by various sysblock parametersbb3ad73fix: align partition start to physical sector size8f976c2feat: replace exec.Command with go-cmd module1cf7f25fix: properly handle no child processes error from cmd.Wait04a9851feat: implement luks encryption providerb0375e4feat: add an option to open block device with exclusive flock5a1c7f7refactor: add devname into gpt.Partition, refactor probe packagef2728a5fix: keep contents of PMBR when writing it2878460fix: write second copy of partition entries943b08bfix: blockdevice reset should read partition table from disk5b4ee44fix: ignore/dev/ramdevices98754ecrefactor: rewrite GPT library2a1baadfix: correctly build paths formmcblkdevices8076344fix: return proper disk size from GetDisks function8742133chore: add common method to list available disks using /sys/blockc4b5833feat: implement "fast" wipeb4e67d7feat: return resize status from Resize() functionceae64efix: sync kernel partition table incrementally2cb9516fix: return correct error value from blkpg functionscebe43drefactor: exposeInsertAtmethod via interfacec40dcd8fix: properly inform kernel about partition deletionbb8ac5dfeat: implement disk wiping via several methods23fb7dcfeat: expose partition name (label)ff3a821feat: implement 'InsertAt' method to insert partitions at any position3d1ce4ffix: calculate last lba of partition correctlyb71540ffeat: copy initial version from talos-systems/talosca3c078Initial commit
Changes from siderolabs/go-circular
Changes from siderolabs/go-kubeconfig
Changes from siderolabs/go-loadbalancer
11 commits
438b71dchore: update package path and rekres5341eecfeat: implement public method to check if the route is Healthyb578d47feat: add a way to configure loadbalancer optionsc54d95dfeat: implement control plane loadbalancer4a6e29erefactor: clean up names, fix the lingering goroutinesaf87d1cchore: apply new Kres rulesa445702feat: allow dial timeout and keep alive period to be configurable3c8f347feat: provide a way to configure logger for the loadbalancerda8e987feat: implement Reconcile - ability to change upstream list on the fly8b1dfa6feat: copy initial version from talos-systems/talosc2f6a8fInitial commit
Changes from siderolabs/go-smbios
11 commits
10c1dd8fix: check for end of the slice properly9ca8ce7chore: treat invalid strings as emptydbc5f79chore: rekres+rename3f1e775feat: rework destructuring of SMBIOS information and added some testsfd5ec8cfix: remove useless (?) goroutines leading to data race errord3a32befix: return UUID in middle endian only on SMBIOS >= 2.6fb425d4feat: add memory device0bb4f96feat: add physical memory array8019619feat: supply wake-up type in SMBIOS info94b8c4efeat: initial implementation864ed80Initial commit
Changes from siderolabs/go-tail
Changes from siderolabs/grpc-proxy
51 commits
4cc7bbechore: rename to siderolabs/grpc-proxy, rekres2c586dbfeat: pass fullMethodName to GetConnection6dfa2ccfix: ignore errors on duplicateSetHeadercallsb076302fix: use io.EOF error when no backend connections are available82daca0docs: update READMEfa6843achore: fix spellingc0a87d9chore: major cleanup of the code and buildca3bc61fix: ignore some errors so that we don't spam the logs5c579a7feat: allow different formats for messages streaming/unary6c9f7b3fix: allow mode to be set for each request being proxiedcc91c09refactor: provide better public API, enforce proxying moded8d3a75chore: update import paths after repo movedbf07a4Merge pull request #7 from smira/one2many-4fc0d27dMore tests, small code fixes, updated README.d9ce0b1Merge pull request #6 from smira/one2many-32d37ba4Support for one2many streaming calls, tests.817b035Merge pull request #5 from smira/one2many-2436b338More unary one-2-many tests, error propagation.1f0cb46Merge pull request #4 from smira/one2many-1992a975Proxying one to many: first iterationa0988ffMerge pull request #3 from smira/small-fixupse3111efSmall fixups in preparation to add one-to-many proxying.6d76ffcMerge pull request #2 from smira/backend-concept2aad63aAdd concept of a 'Backend', but still one to one proxying7cc4610Merge pull request #1 from smira/build37f01f3Rework build to use GitHub Actions, linting updates.0f1106eMove error checking further up (#34)d5b35f6Update gRPC and fix tests (#27)67591ebBreak StreamDirector interface, fix metadata propagation for gRPC-Go>1.5. (#20)97396d9Merge pull request #11 from mwitkow/fix-close-bug3fcbd37fixup closing connsa8f5f87fixup tests, extend readme428fa1cFix a channel closing bugaf55d61Merge pull request #10 from mwitkow/bugfix/streaming-fixde4d3dbremove spurious printfs84242c4fix the "i don't know who finished" case9b22f41fix full duplex streamingc2f7c98update readmed654141update READMEf457856move to proxy subdirectory4889d78Add fixup scriptsef60a37version 2 of the grpc-proxy, this time with fewer grpc upstream deps07aeac1Merge pull request #2 from daniellowtw/mastere5c3df5Fix compatibility with latest grpc library52be0a5bugfix: fix gRPC Java deadlock, due to different dispatch logic822df7dFix reference to mwitkow.28341d1move out forward logic to method, allowing for use asgrpc.Servernot found handler.89e28b4add reference to upstream grpc bug00dd588merge upstreamgrpc.Serverchanges changing the dispatch logic77edc97move to upstreamprotobuffromgogodb71c3einitial commit, tested and working.
Changes from siderolabs/pkgs
36 commits
66c77e9feat: re-enable build kernel with BTF enabled98ef073feat: enable INET_DIAG and FANOTFY_PERMISSIONS8fe5cbcchore: update dependencies554c0fefeat: add fanotify and kprobes kernel options54d7e5cfix: drbd package nameb4cb9e2feat: add 'drbd' package91e73b3feat: update dependenciesb6d0d96chore: bump kernel to 5.15.72b16dfe9chore: bump go to 1.19.2861cc32chore: bump kernel to 5.15.710ac7773chore: use generic raspberry pi u-bootd5633d4chore: bump kernel to 5.15.7039c0d43feat: add generic rpi_arm64_defconfig configurationed269cachore: bump kernel to 5.15.69f2f8333fix: no slack notifications on failure6f0af33chore: disable drone slack pipeline for renovate32aea3fchore: disable drone for renovate/dependabot44579f0fix: rollback xfsprogs to 5.18.0792c0e3feat: add gasket driver package07f1898chore: update depsf78f410chore: enable conntrack zones and timestamps049b3c6chore: enable intel ice drivers606ff32chore: bump depseee5c8achore: disable irc in conntrack70e6c46chore: bump kernel to 5.15.64e510321chore: update renovate configd1fa510feat: enable renovate bote427a77chore: bump runc to v1.1.440e1215chore: enable nfsv4.2 client support15efadachore: bump kernel to 5.15.63e70e3c1fix: nvidia oss pkg name30b8d79chore: bump kernel to 5.15.62862c392chore: bump gcc to 12.2.02ecd14efix: containerd version01df058feat: add NanoPi R4S configurationd4cb33bchore: bump containerd to v1.6.8
Changes from siderolabs/siderolink
18 commits
61ab1c4fix: include MachineStatusEvent into the list of supported events16a84ebchore: rename to siderolabs/siderolinkca470c7chore: update Talos to the latest master, migrate netaddr -> netip/x93b65f0fix: ignore 'exist' error on interface managmeent3c4d9e0chore: move IP to interface binding into NewDevicef0b5e39feat: use kernel wireguard implementation when available1d2b7e1feat: allow setting peer endpoint using peer event5d085d6feat: exposewgDevice.Peersfrom thewireguard.Devicewrapper3a5be65fix: use correct method to generate Wireguard private key8318a7efeat: accept join token in Provision payloadb38c192fix: build on Windows9902ad2feat: pass request context and node address to the events sink adapterd0612a7refactor: pass in listener to the log receiverd86cdd5feat: implement logreceiver for kernel logsf7cadbcfix: handle duplicate peer updates0755b24feat: initial implementation of SideroLinkee73ea9feat: add Talos events sink proto files and the reference implementation1e2cd9dInitial commit
Changes from siderolabs/tools
21 commits
3b5f89achore: update dependencies6402b99feat: update OpenSSL to 1.1.1r00e91b1feat: update releasesa264809chore: bump go to 1.19.2858cfe7fix: no slack notifications on failureed85950chore: disable drone slack pipeline for renovate5df6589chore: disable drone for renovate/dependabot1f00d2efix: revert gawk to 5.1.1feeda1fchore: bump grpc-go8542014chore: bump depse5c4968chore: update renovate configf34f94dchore: update renovate configcef4cc6chore: update renovate configbab8e9echore: add libbpf to tools0a15f7bchore: build pahole properlya322d06chore: remove imgc7ff47bfeat: enable renovate dependency updates (3/3)6e095cffeat: enable renovate dependency updates (2/n)bad1ad1feat: add renovatebot7d6f9c3chore: bump gcc to 12.2.02719b4bchore: bump toolchain
Dependency Changes
- cloud.google.com/go/compute v1.8.0 -> v1.10.0
- github.com/BurntSushi/toml v1.2.0 -> v1.2.1
- github.com/aws/aws-sdk-go v1.44.76 -> v1.44.122
- github.com/containerd/containerd v1.6.8 -> v1.6.9
- github.com/cosi-project/runtime v0.1.1 -> e8a8fdcc7548
- github.com/docker/docker v20.10.17 -> v20.10.20
- github.com/fsnotify/fsnotify v1.5.4 -> v1.6.0
- github.com/google/go-cmp v0.5.8 -> v0.5.9
- github.com/google/nftables 2eca00135732 -> 4f5cd5826fbd
- github.com/hetznercloud/hcloud-go v1.35.2 -> v1.35.3
- github.com/insomniacslk/dhcp 509691fd59ec -> 5308ebe5334c
- github.com/jsimonetti/rtnetlink v1.2.2 -> v1.2.3
- github.com/mdlayher/ethtool 856bd6cb8a38 -> 0e16326d06d1
- github.com/mdlayher/netlink v1.6.0 -> v1.6.2
- github.com/opencontainers/image-spec c5a74bcca799 -> v1.1.0-rc2
- github.com/packethost/packngo v0.25.0 -> v0.28.1
- github.com/rivo/tview 0e6b21a48e96 -> 2e69b7385a37
- github.com/siderolabs/crypto v0.4.0 new
- github.com/siderolabs/discovery-api v0.1.1 new
- github.com/siderolabs/discovery-client v0.1.1 -> v0.1.2
- github.com/siderolabs/extras v1.2.0 -> v1.3.0-alpha.0-1-g8f00d77
- github.com/siderolabs/gen v0.4.0 new
- github.com/siderolabs/go-blockdevice v0.4.0 new
- github.com/siderolabs/go-circular v0.1.0 new
- github.com/siderolabs/go-kubeconfig v0.1.0 new
- github.com/siderolabs/go-loadbalancer v0.2.0 new
- github.com/siderolabs/go-smbios v0.3.1 new
- github.com/siderolabs/go-tail v0.1.0 new
- github.com/siderolabs/grpc-proxy v0.4.0 new
- github.com/siderolabs/pkgs v1.2.0-8-g970860d -> v1.3.0-alpha.0-35-g66c77e9
- github.com/siderolabs/siderolink v0.2.0 new
- github.com/siderolabs/tools v1.2.0 -> v1.3.0-alpha.0-20-g3b5f89a
- github.com/spf13/cobra v1.5.0 -> v1.6.1
- github.com/stretchr/testify v1.8.0 -> v1.8.1
- github.com/u-root/u-root v0.9.0 -> v0.10.0
- github.com/vmware-tanzu/sonobuoy v0.56.9 -> v0.56.10
- go.etcd.io/etcd/api/v3 v3.5.4 -> v3.5.5
- go.etcd.io/etcd/client/pkg/v3 v3.5.4 -> v3.5.5
- go.etcd.io/etcd/client/v3 v3.5.4 -> v3.5.5
- go.etcd.io/etcd/etcdutl/v3 v3.5.4 -> v3.5.5
- go.uber.org/atomic v1.9.0 -> v1.10.0
- go.uber.org/zap v1.22.0 -> v1.23.0
- go4.org/netipx 797b0c90d8ab new
- golang.org/x/net 3211cb980234 -> v0.1.0
- golang.org/x/sync 886fb9371eb4 -> v0.1.0
- golang.org/x/sys fbc7d0a398ab -> v0.1.0
- golang.org/x/term a9ba230a4035 -> v0.1.0
- golang.org/x/time e5dcc9cfc0b9 -> v0.1.0
- golang.zx2c4.com/wireguard/wgctrl 3d4a969bb56b -> 473347a5e6e3
- google.golang.org/grpc v1.48.0 -> v1.50.1
- k8s.io/api v0.25.0 -> v0.26.0-alpha.2
- k8s.io/apimachinery v0.25.0 -> v0.26.0-alpha.2
- k8s.io/apiserver v0.25.0 -> v0.26.0-alpha.2
- k8s.io/client-go v0.25.0 -> v0.26.0-alpha.2
- k8s.io/component-base v0.25.0 -> v0.26.0-alpha.2
- k8s.io/cri-api v0.25.0 -> v0.26.0-alpha.2
- k8s.io/kubectl v0.25.0 -> v0.26.0-alpha.2
- k8s.io/kubelet v0.25.0 -> v0.26.0-alpha.2
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.65 -> v1.2.66
Previous release can be found at v1.2.0
Talos 1.3.0-alpha.0 (2022-09-28)
Welcome to the v1.3.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
kube-apiserver Audit Policy
Talos now supports setting custom audit policy for kube-apiserver in the machine configuration.
etcd Consistency Check
Talos enables --experimental-compact-hash-check-enabled option by default to improve etcd store consistency guarantees.
This options is only available with etcd >= v3.5.5, so Talos doesn't support version of etcd before v3.5.5.
Kernel Modules
Talos now supports settings kernel module parameters.
Eg:
machine:
kernel:
modules:
- name: "br_netfilter"
parameters:
- nf_conntrack_max=131072
Nano Pi R4S
Talos now supports the Nano Pi R4S SBC.
Raspberry Generic Images
The Raspberry Pi 4 specific image has been deprecated and will be removed in the v1.4 release of Talos. Talos now ships a generic Raspberry Pi image that should support more Raspberry Pi variants. Refer to the docs at https://www.talos.dev/v1.3/talos-guides/install/single-board-computers/rpi_generic/ to find which ones are supported.
Component Updates
- Kubernetes: v1.26.0-alpha.1
- Flannel: v0.19.2
- CoreDNS: v1.10.0
- etcd: v3.5.5
- Linux: 5.15.70
Contributors
- Andrey Smirnov
- Noel Georgi
- Andrey Smirnov
- Artem Chernyshev
- Dmitriy Matrenichev
- Artem Chernyshev
- Alexey Palazhchenko
- Serge Logvinov
- Andrew Rynhard
- Utku Ozdemir
- Kris Reeves
- Marvin Drees
- Philipp Sauter
- Andrew Rynhard
- Branden Cash
- Matt Zahorik
- Olli Janatuinen
- Pau Campana
- Sander Maijers
- Seán C McCord
- Spencer Smith
- Steve Francis
- Tim Jones
Changes
105 commits
18c377a4dfeat: customize audit policy23c9ea46bfix: raspberry pi installf17cdee16feat: jsonpath filter for talosctl get outputs6bd3cca1achore: generic raspberry pi imagesd914ab8bbchore: add vulncheck tool as a lintera0151aa13feat: add generic rpi u-boot support30f851d09chore: bump dependences8b2235c3bfix: lookup Equinix Metal bond slaves using 'permanent addr'b3257ebb1chore: bump kernel to 5.15.700b2767c16feat: implement 'permanent addr' in link statusesc90e20251fix: kubeconfig permissionfc48849d0chore: move maps/slices/ordered to gen module8b09bd4b0feat: update Kubernetes to v1.26.0-alpha.1276d4175bchore: bump extension versions in testing357b770cbfix: cryptsetup delete slot711128839fix: continue applying bootstrap manifests on some errorsce12c7b38chore: update COSI runtime to v0.2.0-alpha.11b435c0b3chore: bump kernel + ice drivers18e041f1edocs: fix typo in patching example0ad6452cafeat: update CoreDNS to v1.10.0479f3f52echore: bump dependenciese07c6ae99feat: update Kubernetes to v1.25.113fdfaffctest: fix up default branch nameef181321adocs: add component diagram; K8s & Talos Linuxaade73643docs: fix missing variable in OpenEBS docs472590aa8chore: return InvalidArgument on invalid config in maintenance modee5cabd42cfeat: enable etcd consistency hashcheck015535d90fix: update discovery client with the redirect fixd0c8e7699chore: bump kernel and go985b0c2e7chore: remove go.work.sum69124f102feat: update etcd to v3.5.51985a796cdocs: update docs for pod security94b088f02fix: set etcd options consistently92ae7ef4bfix: fix protoenc encoding for enums and types with custom encoders93809017cdocs: cpu scaling governor knowledgebase7b270ff33test: fix api controller test2dadcd669fix: stop worker nodes from acting as apid routers9eaf33f3ffix: never sign client certificate requests in trustd436749124feat: environment vars for extension service0c0cb671echore: mark machine configuration validation failure as InvalidArgumentf424e5340fix: stop containers more thoroughly12827b861chore: move "implements" checks to compile time3a67c42cbfix: kill the task processes when cleaning up stale task14a79e325chore: bump dependencies9beee92e7docs: fix double vv in Kubernetes version688272515fix: use different username for Talos Kubernetes API access161a52a9efeat: check apid client certificate extended key usage9dadc4a59fix: include all node addresses into etcd cert SANs71bfd3e43feat: update CoreDNS to 1.9.49df8f1ff1fix: list COSI APIs for the apid authenticator31462450ffix: pass a pointer to specs.Mount into protoenc.Marshale626540dfchore: avoid double API request logging in trustdf62d17125chore: update crypto to use new import path siderolabs/cryptoef27dd855chore: bump dependencies6472ae00bfix: automatically discard VIPs for etcd advertised addresses5e21cca52feat: support setting kernel parametersbd56621cdfeat: add structprotogen toolcdb6bb2ccfeat: add Nano Pi R4S support36c1f1d6efix: flip the client-server version checkcd6c53a97docs: fork docs for v1.30847400f7fix: prevent panic on health check if a member has no IPs7471d7f01feat: update Flannel to v0.19.2148c75cfbdocs: consolidate the control-plane documentation353154281fix: drop kube-system SA default binding4f37b668bchore: remove capi hacks1369afea8docs: make 1.2.0 docs default ones7627cb0e3docs: add newtalosctl gen secrets8aa60a37achore: bump kernel to 5.15.64a798dbd5ddocs: update docs for upcoming 1.2.0 releaseb2fec3c97fix: properly handleconfigContextbeingnilin Talos client1c0977b3afix: change the type of returned gRPC connection object from the client41848e421fix: expose Talos client gRPC connection via the functionConn2e9be4af8chore: bump dependenciesd283aba3atest: fix cli reboot test0b339a9dcfeat: track progress of action API calls072349812fix: update COSI to the version with gRPC Wait fix89d57aa81fix: always abort the maintenance servicef6fa74619fix: limit apid backoff max delayd7ef346dbfix: get command in the case 'nodes' are not set in the context4e9c32256fix: correctly render hosts.toml with multiple endpointscdd0f08bcfeat: check client <> server version in some Talos commands446b0af58chore: bump kernel and runc8c203ce9bfeat: remove the machine from the discovery service on resetb59ca5810chore: move from inet.af/netaddr to net/netip and go4.org/netipx053af1d59fix: update etcd certificates when node addresses changes11edb2c6ftest: re-enable upgrade tests0310e2089chore: bump github.com/siderolabs/protoenc to v0.1.529bd63240chore: remove old build tags syntaxb500d0aa9chore: bump k8s to v1.25.029e574be7docs: update to v1.2.0-beta.126b549f2achore: bump dependencies8c3ac4c42chore: limit GOMAXPROCS for Talos services361e85b74fix: properly read kexec disabled sysctlcfe6c2bc2docs: nvidia oss drivers2f2d97b6bfix: don't wait for the hostname in maintenance modeb15a63924chore: bump kernel to 5.15.62a0d94be30fix: stable default hostname biasda4cd34effeat: update etcd advertised peer addresses on the flyfaf92ce01chore: bump kubernetes to v1.25.0-rc.152de919e3chore: bump containerd to v1.6.87d43fc79bfix: make 'ca', 'crt' and 'key' flags optional for 'talosctl config add'fd467e02cfix: handle grub config being empty in theRevertfunction9492aca65fix: clean upcancelCtxMuleftovers in PriorityLock61e3eb2eafix: talosctl edit mc loop32db7a7f5fix: surroundcancelCtxwith the mutex
Changes from siderolabs/crypto
27 commits
c3225eefeat: allow CSR template subject field to be overridden8570669chore: rename to siderolabs/cryptoe9df1b8feat: add support for generating keys from RSA-SHA256 CAs510b0d2chore: add json tags6fa2d93fix: deepcopy nil fields asnil9a63cbafix: add back support for generating ECDSA keys with P-256 and SHA512893bc66fix: use SHA256 for ECDSA-P256deec8d4chore: implement DeepCopy methods for PEMEncoded* typesd3cb772feat: make possible to change KeyUsage6bc5bb5chore: remove unused argumentcd18ef6feat: add support for several organizations97c888bchore: add options to CSR7776057chore: fix typos80df078chore: remove named result parameters15bdd28chore: minor updates4f80b97fix: verify CSR signature before issuing a certificate39584f1feat: support for key/certificate types RSA, Ed25519, ECDSAcf75519fix: function NewKeyPair should create certificate with proper subject751c95afeat: add 'PEMEncodedKey' which allows to transport keys in YAML562c3b6feat: add support for public RSA key in RSAKeybda0e9cfeat: enable more conversions between encoded and raw versionse0dd56afeat: add NotBefore option for x509 cert creation12a4897feat: add support for SPKI fingerprint generation and matchingd0c3eeffix: implement NewKeyPair196679efeat: movepkg/grpc/tlsfromgithub.com/talos-systems/talosas./tls1ff6242chore: initial version as imported from talos-systems/talos835063echore: initial commit
Changes from siderolabs/discovery-api
3 commits
Changes from siderolabs/discovery-client
Changes from siderolabs/gen
4 commits
Changes from siderolabs/go-blockdevice
55 commits
dcf6044chore: rekres and rename9c4af49fix: cryptsetup remove slot74ea471feat: add freebsd stubs9fa801cfeat: add ReadOnly attribute to Diskfccee8bchore: rekres the source, fix issuesd9c3a27feat: support probing FAT12/FAT16 filesystemsb374eb4fix: align partition to 1M boundary by defaultec428fefix: lookup filesystem labels on the actual device path7b9de26feat: read symlink fullpath in block device list function6928ee4refactor: rewrite GPT serialize/deserialize functions0c7e429refactor: simplify middle endian functions15b182dfix: return partition table not exist when trying to read an empty devb9517d5fix: resize partition70d2865fix: try to find cdrom disks667bf53fix: revert gpt partition not foundd7d4cddfix: gpt partition not found33afba3fix: also open in readonly mode when runningAlllookup methode367f9dfeat: make probe always open blockdevices in readonly moded981156fix: allow Build for Windowsfe24303fix: perform correct PMBR partition calculations2ec0c3cfix: preserve the PMBR bootable flag when opening GPT partition87816a8feat: align partition to minimum I/O sizec34b59ffeat: expose more encryption options in the LUKS module30c2bc3feat: mark MBR bootable1292574fix: make disk type matcher parser case insensitiveb77400efix: properly detect nvme and sd card disk types1d830a2fix: revert mark the EFI partition in PMBR as bootablebec914ffix: mark the EFI partition in PMBR as bootable776b37dfeat: add options to probe disk by various sysblock parametersbb3ad73fix: align partition start to physical sector size8f976c2feat: replace exec.Command with go-cmd module1cf7f25fix: properly handle no child processes error from cmd.Wait04a9851feat: implement luks encryption providerb0375e4feat: add an option to open block device with exclusive flock5a1c7f7refactor: add devname into gpt.Partition, refactor probe packagef2728a5fix: keep contents of PMBR when writing it2878460fix: write second copy of partition entries943b08bfix: blockdevice reset should read partition table from disk5b4ee44fix: ignore/dev/ramdevices98754ecrefactor: rewrite GPT library2a1baadfix: correctly build paths formmcblkdevices8076344fix: return proper disk size from GetDisks function8742133chore: add common method to list available disks using /sys/blockc4b5833feat: implement "fast" wipeb4e67d7feat: return resize status from Resize() functionceae64efix: sync kernel partition table incrementally2cb9516fix: return correct error value from blkpg functionscebe43drefactor: exposeInsertAtmethod via interfacec40dcd8fix: properly inform kernel about partition deletionbb8ac5dfeat: implement disk wiping via several methods23fb7dcfeat: expose partition name (label)ff3a821feat: implement 'InsertAt' method to insert partitions at any position3d1ce4ffix: calculate last lba of partition correctlyb71540ffeat: copy initial version from talos-systems/talosca3c078Initial commit
Changes from siderolabs/pkgs
26 commits
0ac7773chore: use generic raspberry pi u-bootd5633d4chore: bump kernel to 5.15.7039c0d43feat: add generic rpi_arm64_defconfig configurationed269cachore: bump kernel to 5.15.69f2f8333fix: no slack notifications on failure6f0af33chore: disable drone slack pipeline for renovate32aea3fchore: disable drone for renovate/dependabot44579f0fix: rollback xfsprogs to 5.18.0792c0e3feat: add gasket driver package07f1898chore: update depsf78f410chore: enable conntrack zones and timestamps049b3c6chore: enable intel ice drivers606ff32chore: bump depseee5c8achore: disable irc in conntrack70e6c46chore: bump kernel to 5.15.64e510321chore: update renovate configd1fa510feat: enable renovate bote427a77chore: bump runc to v1.1.440e1215chore: enable nfsv4.2 client support15efadachore: bump kernel to 5.15.63e70e3c1fix: nvidia oss pkg name30b8d79chore: bump kernel to 5.15.62862c392chore: bump gcc to 12.2.02ecd14efix: containerd version01df058feat: add NanoPi R4S configurationd4cb33bchore: bump containerd to v1.6.8
Changes from siderolabs/tools
15 commits
5df6589chore: disable drone for renovate/dependabot1f00d2efix: revert gawk to 5.1.1feeda1fchore: bump grpc-go8542014chore: bump depse5c4968chore: update renovate configf34f94dchore: update renovate configcef4cc6chore: update renovate configbab8e9echore: add libbpf to tools0a15f7bchore: build pahole properlya322d06chore: remove imgc7ff47bfeat: enable renovate dependency updates (3/3)6e095cffeat: enable renovate dependency updates (2/n)bad1ad1feat: add renovatebot7d6f9c3chore: bump gcc to 12.2.02719b4bchore: bump toolchain
Dependency Changes
- cloud.google.com/go/compute v1.8.0 -> v1.10.0
- github.com/aws/aws-sdk-go v1.44.76 -> v1.44.105
- github.com/cosi-project/runtime v0.1.1 -> v0.2.0-alpha.1
- github.com/docker/docker v20.10.17 -> v20.10.18
- github.com/google/go-cmp v0.5.8 -> v0.5.9
- github.com/google/nftables 2eca00135732 -> cbeb0fb1eccf
- github.com/hetznercloud/hcloud-go v1.35.2 -> v1.35.3
- github.com/insomniacslk/dhcp 509691fd59ec -> 043f1726f02e
- github.com/mdlayher/ethtool 856bd6cb8a38 -> 0e16326d06d1
- github.com/mdlayher/netlink v1.6.0 -> v1.6.2
- github.com/opencontainers/image-spec c5a74bcca799 -> v1.1.0-rc1
- github.com/packethost/packngo v0.25.0 -> v0.26.0
- github.com/rivo/tview 0e6b21a48e96 -> 2e69b7385a37
- github.com/siderolabs/crypto v0.4.0 new
- github.com/siderolabs/discovery-api v0.1.1 new
- github.com/siderolabs/discovery-client v0.1.1 -> v0.1.2
- github.com/siderolabs/gen v0.2.0 new
- github.com/siderolabs/go-blockdevice v0.4.0 new
- github.com/siderolabs/pkgs v1.2.0-8-g970860d -> v1.3.0-alpha.0-25-g0ac7773
- github.com/siderolabs/tools v1.2.0 -> v1.3.0-alpha.0-14-g5df6589
- github.com/vmware-tanzu/sonobuoy v0.56.9 -> v0.56.10
- go.etcd.io/etcd/api/v3 v3.5.4 -> v3.5.5
- go.etcd.io/etcd/client/pkg/v3 v3.5.4 -> v3.5.5
- go.etcd.io/etcd/client/v3 v3.5.4 -> v3.5.5
- go.etcd.io/etcd/etcdutl/v3 v3.5.4 -> v3.5.5
- go.uber.org/atomic v1.9.0 -> v1.10.0
- go.uber.org/zap v1.22.0 -> v1.23.0
- go4.org/netipx 797b0c90d8ab new
- golang.org/x/net 3211cb980234 -> 8be639271d50
- golang.org/x/sync 886fb9371eb4 -> 7f9b1623fab7
- golang.org/x/sys fbc7d0a398ab -> fb04ddd9f9c8
- golang.org/x/term a9ba230a4035 -> 7a66f970e087
- golang.org/x/time e5dcc9cfc0b9 -> f3bd1da661af
- golang.zx2c4.com/wireguard/wgctrl 3d4a969bb56b -> 473347a5e6e3
- google.golang.org/grpc v1.48.0 -> v1.49.0
- k8s.io/api v0.25.0 -> v0.26.0-alpha.1
- k8s.io/apimachinery v0.25.0 -> v0.26.0-alpha.1
- k8s.io/apiserver v0.25.0 -> v0.26.0-alpha.1
- k8s.io/client-go v0.25.0 -> v0.26.0-alpha.1
- k8s.io/component-base v0.25.0 -> v0.26.0-alpha.1
- k8s.io/cri-api v0.25.0 -> v0.26.0-alpha.1
- k8s.io/kubectl v0.25.0 -> v0.26.0-alpha.1
- k8s.io/kubelet v0.25.0 -> v0.26.0-alpha.1
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.65 -> v1.2.66
Previous release can be found at v1.2.0
Talos 1.2.0-alpha.2 (2022-08-10)
Welcome to the v1.2.0-alpha.2 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Talos API access from Kubernetes
Talos now supports access to its API from within Kubernetes. It can be configured in the machine config as below:
machine:
features:
kubernetesTalosAPIAccess:
enabled: true
allowedRoles:
- os:reader
allowedKubernetesNamespaces:
- kube-system
This feature introduces a new custom resource definition, serviceaccounts.talos.dev.
Creating custom resources of this type will provide credentials to access Talos API from within Kubernetes.
The new CLI subcommand talosctl inject serviceaccount can be used to configure Kubernetes manifests with Talos service accounts as below:
talosctl inject serviceaccount -f manifests.yaml > manifests-injected.yaml
kubectl apply -f manifests-injected.yaml
See documentation for more details.
Generating Talos secrets from PKI directory
It is now possible to generate a secrets bundle from a Kubernetes PKI directory (e.g. /etc/kubernetes/pki).
You can also specify a bootstrap token to be used in the secrets bundle.
This secrets bundle can then be used to generate a machine config.
This facilitates migrating clusters (e.g. created using kubeadm) to Talos.
talosctl gen secrets --kubernetes-bootstrap-token znzio1.1ifu15frz7jd59pv --from-kubernetes-pki /etc/kubernetes/pki
talosctl gen config --with-secrets secrets.yaml my-cluster https://172.20.0.1:6443
Kubernetes ControlPlane Components
Talos now run all Kubernetes Control Plane Components with the CRI default Seccomp Profile and other recommendations as described in KEP-2568.
Kubelet Default Runtime Seccomp Profile
Talos now runs Kubelet with the CRI default Seccomp Profile enabled.
This can be disabled by setting .machine.kubelet.defaultRuntimeSeccompProfileEnabled to false.
This is not enabled automatically on upgrades, so upgrading to Talos v1.2 needs this to be explicitly enabled.
Kubernetes Control Plane labels and taints
Talos now defaults to node-role.kubernetes.io/control-plane label/taint.
On upgrades Talos now removes the node-role.kubernetes.io/master label/taint on control-plane nodes and replaces it with the node-role.kubernetes.io/control-plane label/taint.
Workloads that tolerate the old taints or having node selectors with the old labels will need to be updated.
Kubernetes Discovery Backend
Kubernetes cluster discovery backend is now disabled by default for new clusters. This backend doesn't provide any benefits over the Discovery Service based backend, while it causes issues for KubeSpan enabled clusters when control plane endpoint is KubeSpan-routed.
For air-gapped installations when the Discovery Service is not enabled, Kubernetes Discovery Backend can be enabled by applying the following machine configuration patch:
cluster:
discovery:
registries:
kubernetes:
disabled: false
KubeSpan Kubernetes Network Advertisement
KubeSpan no longer by default advertises Kubernetes pod networks of the node over KubeSpan. This means that CNI should handle encapsulation of pod-to-pod traffic into the node-to-node tunnel, and node-to-node traffic will be handled by KubeSpan. This provides better compatibility with popular CNIs like Calico and Cilium.
Old behavior can be restored by setting .machine.kubespan.advertiseKubernetesNetworks = true in the machine config.
MachineConfig .cluster.allowSchedulingOnMasters deprecated
The .cluster.allowSchedulingOnMasters is deprecated and replaced by .cluster.allowSchedulingOnControlPlanes.
The .cluster.allowSchedulingOnMasters will be removed in a future release of Talos.
If both .cluster.allowSchedulingOnMasters and .cluster.allowSchedulingOnControlPlanes are set to true, the .cluster.allowSchedulingOnControlPlanes will be used.
k8s.gcr.io mirror configuration
Talos now defaults to adding a registry mirror configuration in the machineconfig for k8s.gcr.io pointing to both registry.k8s.io and k8s.gcr.io unless overridden.
This is in line with the Kubernetes 1.25 release having the new registry.k8s.io registry endpoint.
This is only enabled by default on newly generated configurations and not on upgrades. This can be enabled with a machine configuration as follows:
machine:
registries:
mirrors:
k8s.gcr.io:
endpoints:
- https://registry.k8s.io
- https://k8s.gcr.io
Network bridge support
Talos now supports configuring Linux bridges. It can be configured in the machine config like the following:
machine:
network:
interfaces:
- interface: br0
bridge:
stp:
enabled: true
interfaces:
- eth0
- eth1
See documentation for more details.
VLAN support in cmdline arguments
Talos now supports dracut-style vlan kernel argument to allow
installing Talos Linux in networks where ports are not tagged
with a default VLAN:
vlan=eth1.5:eth1 ip=172.20.0.2::172.20.0.1:255.255.255.0::eth1.5:::::
Packet Capture
Talos now supports capturing packets on a network interface with talosctl pcap command:
talosctl pcap --interface eth0
Seccomp Profiles
Talos now supports creating custom seccomp profiles on the host machine which in turn can be used by Kubernetes workloads. It can be configured in the machine config as below:
machine:
seccompProfiles:
- name: audit.json
value:
defaultAction: SCMP_ACT_LOG
- name: deny.json
value: {"defaultAction":"SCMP_ACT_LOG"}
This profile data can be either configured as a YAML definition or as a JSON string.
The profiles are created on the host under /var/lib/seccomp/profiles and bind mounted at /var/lib/kubelet/seccomp/profiles so Kubelet can use it.
See documentation for more details.
Stable Default Hostname
Talos now generates the default hostname (when there is no explicitly specified hostname) for the nodes based on the
node id (e.g. talos-2gd-76y) instead of using the DHCP assigned IP address (e.g. talos-172-20-0-2).
This ensures that the node hostname is not changed when DHCP assigns a new IP to a node.
Strategic merge machine configuration patching
In addition to JSON (RFC6902) patches Talos now supports strategic merge patching.
For example, machine hostname can be set with the following patch:
machine:
network:
hostname: worker1
Patch format is detected automatically.
Variable substitution for URL query parameter in the talos.config kernel parameter
The kernel parameter talos.config can now substitute system information into placeholders inside its URL query values. This example shows all supported variables:
http://example.com/metadata?h=${hostname}&m=${mac}&s=${serial}&u=${uuid}
talosctl
--masters flag on talosctl cluster create is deprecated. Use --controlplanes instead.
Component Updates
- Linux: 5.15.59
- Flannel 0.19.1
- containerd 1.16.7
- Kubernetes: v1.25.0-beta.0
Talos is built with Go 1.19.
Contributors
- Andrey Smirnov
- Noel Georgi
- Utku Ozdemir
- Dmitriy Matrenichev
- Philipp Sauter
- Tim Jones
- Artem Chernyshev
- Spencer Smith
- Davincible
- Eirik Askheim
- AMet
- Alex Wied
- Bermi Ferrer
- Christoph Schmatzler
- Dennis Marttinen
- Eng Zer Jun
- Flightkick
- Florian Klink
- Gwyn
- Han Cen
- Larry Rosenman
- Markus Reiter
- Matthew Richardson
- Nico Berlee
- Rio Kierkels
- RyanSquared
- Serge Logvinov
- Seán C McCord
- Steve Francis
- Tommy Botten Jensen
- hobyte
- nett_hier
- zebernst
Changes
164 commits
5dd1b4002feat: disable Kubernetes discovery backend by defaultb62b18a97feat: bump k8s to v1.25.0-beta.07b80a747bfeat: add protobuf encoding/decoding for Go structs00c3ee3acdocs: remove obsolete references to init nodes6eefa9d9cfix: properly filter resources in maintenance serverfa5aad01adocs: fix issues in GCP docs98f056603chore: bump dependencies84e712a9ffeat: introduce Talos API access from Kubernetesd7be30892chore: bump kernel to 5.15.59c2c2d65bcrefactor: use COSI access filter for resource access1dee0579efeat: add support for proxying one-to-one toapid86eb01cd6docs: add missing dev tools4fd676c04docs: fix typo in theila name856beb21cfeat: containerd 1.6.7, Flannel 1.19.1e97b9f6d3feat: support dhcp options for vlan92314e47brefactor: use controllers/resources to feed trustd with data80d298abffeat: support skipping node registration7795de313fix: use controllers/resources for etcd configurationf9b664c94fix: reload trusted CA list when client is recreated8847ccd03fix: shutdown some streaming API calls when machined API is shuting downf95b53726fix: allow files in extension spec1a8f6ec8efix: don't advertise Kubernetes pod networks over KubeSpan by defaulte3d4a0e4dfix: make reset work even if the node is not bootstrapped/not joineda6b010a8bchore: update Go to 1.19, Linux to 5.15.58fb058a7c9test: useT.TempDirto create temporary test directory6fc38bae6fix: iterate over etcd members endpoints for member promotionc70b692fbfix: update default address if removed from the hostcf620d473feat: read talosconfig from secrets directory1ad8e6122fix: keep entire vlan id when parsing cmdlinefe2ee3b10feat: implement MachineStatus resource670d274c4chore: bump dependencies08d2612e0docs: bond devices are comma separatedc3c3e14dbchore: add gotagsrewrite tool and use it to add tags to resources2e790526frefactor: make apid stop gracefully and be stopped late0cdf22243fix: retry Conflict errors when upgrading k8s manifests1db097f50release(v1.2.0-alpha.1): prepare release5ac4947b6feat: enable default seccomp profile for kubelete5994ff7afix: skipResetDuringBoottest if theClusterconfig is unknown8028e1074fix: wait for boot done when rebooting a node in the integration testsae1bec59efeat: allow running only one sequence at a timeec05aee04fix: correctly unwrap errors when streaming7c7f2d8c3feat: refactor disk size matcher to be compatible with DeepEqual3addea83bfeat: introduce support for Talos API access from Kubernetes34d3a4164docs: add missing <> to relrefc4d2d20c4fix: enable stable hostnames for worker configs as well0326bac1fchore: bump kernel to 5.15.5786820c33fchore: bump dependencies6e7dfeeb3fix: data race in packet capture (part 2)c11e1dae7docs: fix spelling and grammar errors30f7851d2chore: bump golangci-lint from 1.45.2 to 1.47.22cce9112dchore: bump goimports from 0.1.10 to 0.1.1118756c7fffix: folder permissions of overlay mounted folders47c35dc47feat: set stable default hostname based on machine-id1ed3df295chore: support glibc apps extension speca2aea9726fix: write etcd PKI files in a controllerbb4abc096fix: regenerate kubelet certs when hostname changesd650afb6cchore: fix typo inpowercycle644e803adfix: use masks and different firewall mark for KubeSpan80444a43dfix: remove data race in pcap capture04a45dff2docs: remove katacoda links065b59276feat: implement packet capture API7c006cabcfeat: update Kubernetes to 1.24.3551290195chore: bump dependencies1677bcc4bfix: skip bond itself when matching interface (Equinix Metal)f1c2b5c55feat: implement strategic merge patching for API server admission configbe98cb82bfeat: follow KEP-2568 non-root enhancements87ea1d961fix: update kubelet kubeconfig when cluster control plane endpoint changesa75fe7600feat: gen secrets from kubernetes pki dira1d7b535adocs: add kubeadm migration guide9e0c56581docs: guide for setting up synology-csi driverf0b8eea5erefactor: remove bootstrap sequence89c7da899docs: add documentation for vagrant & libvirt014b85fdcdocs: improve talos kubernetes upgrade note88bb017eddocs: remove old docs from sitec92c90655feat: build talosctl for FreeBSD616da3069docs: update last release for 1.1091e6ef0efeat: resubstitute talos.config url variables on retryec74ab38afeat: update Go to 1.18.4, Linux to 5.15.54641f6a1e4feat: expose strategic merge config patches6e3d2d647docs: fix disk encryption paramsc43d6a31ddocs: fix typos551887528chore: bump dependencies626ef05e6fix: correct SANs for etcd certs83ce92c5fdocs: fix theila docs8a038d40efix: stabilize etcd join and promote sequences136122556fix: use correct etcd cert pathc170ec0b0chore: bump kernel to 5.15.53d924901b7feat: add cli subcommand to generate secrets34aabedd8feat: more circular pkg from internal to pkg4f044e466feat: implement strategic merge machine config patchingc2a512608fix: avoid double append oftalos.platformkernel argument27dfe7c03fix: perform accurate conflict resolution on overal (kubespan)e437445b4chore: bump kernel to 5.15.52d27a6a4acfeat: add vlan support to cmdlinefdca5d8a9chore: bump dependenciesae3840dbcrefactor: move kubeconfig package under public api184e113f3chore: disable systeminfo controller in container86a0a7bdfrefactor: use pointer types more in machine config structs3a1eb10e6docs: update the Proxmoxkvm64note30e220fcddocs: kernel cmdline params updated on upgrades915de9cf9docs: fix bridge documentation52cd12951test: bump Talos versions in upgrade tests022581d80release(v1.2.0-alpha.0): prepare release643e81cfefeat: add SenseLabs to ADOPTERS.mdbdfee2b3bchore: bump kernel to 5.15.5136c44a651fix: provide CA certificates in/etc/ssl/certs/ca-certificates.crt7ebd9bccedocs: fix pod security talos resource name57b625e0arefactor: avoid recreating grpc clients in service health checksa68a00f1bdocs: recommend setting "host" Processor Type on proxmox923600a73chore: bump kernel to 5.15.50758a9bf59docs: add theila uib81016e62chore: update blockdevice library to v0.3.3284a2f959fix: filter static pods correctly and optimize fetching61abf3111docs: change command for cluster create to keep $HOME with sudo6ae1e9bf2chore: bump dependencies2deff6b6efeat: add support for variable substitution in talos.config kernel parameter103c94225fix: update crypto library with support for RSA-SHA*448de7194docs: add UpCloud installation guide07014e0a8fix: generate correct bootstrap manifests when only IPv6 CIDR is used465edbb47fix: look for qemu-kvm binary63caa281afix: create native image format for DigitalOceanf15ce549efix: siderlink api assume port 443 with https schema797596229feat: add support for configuring network bridges2b23fabccdocs: use SVG image for K8s conformanced4606c33echore: bump kernel to 5.15.49cfb640222docs: update docs for release 1.1b816d0b60docs: fix the vendor information for Kubernetes conformance testsa167a5402test: fix CLI nodes discovery without provisioner data916a30682docs: add twitter meta info80090a3edtest: fix health endpoint cli test when discovery is disabled3c263bb44chore: bump dependenciese8113527fchore: bump kubernetes to v1.24.2068f1b6d0feat: add ctest package and base for test suite2aad3a1e4chore: bump kernel to 5.15.48a31a858e0docs: snippets for logging api server audit logs89aaaef9fchore: bump kernel to 5.15.476759fcd4afeat: use discovery service on cluster health checksf54d90787fix: enable orderly poweroff in hyper-v on Azure35475ce45docs: openebs jiva example with iscsi-tools extension8d2be5e31feat: extend node definition used in health checks7a11b4deffix: maketalosctl bootstrapaccept only single node217fba288test: fix csi tests90bf34feddocs: fork docs for Talos 1.2a0dd010a8docs: add link to discovery service in kubespanc0371410efix: support SideroLink "secure" gRPC connectionb03709620feat: build Talos images with system extensions included43def7490chore: bump kernel and runc4dbbf4ac5chore: add generic methods and use them part #27114292b6docs: fix latest release version in docsda2985fe1fix: respect local API server porte03266667fix: correctly validate reboot mode in CLI70fc42409chore: add generic methods and use them3ae8bdd92chore: runxfs_repairon xfs filesystem returingEUCLEAN0c91c89f4chore: revert day-two tests for csi testsf71b58312feat: disallow anonymous requests by default (kube-apiserver)c19dd1b89feat: add 'etcd members should be control plane nodes' health checkf2997c0f2chore: bump dependenciesf3efec4b5feat: update containerd 1.6.6, Linux 5.15.45, Flannel 0.18.127f8e50cefix: add ovmf image path for rhel87e7de30cdocs: fix required portsc126f2ee8chore: bump golang to 1.18.3c1aed6240fix: wait for/varto be mounted in kubelet service controllerd7a64f5d2fix: improve vip operator shutdown sequence7b9dfcb85chore: add 'make go-mod-outdated'
Changes since v1.2.0-alpha.1
35 commits
5dd1b4002feat: disable Kubernetes discovery backend by defaultb62b18a97feat: bump k8s to v1.25.0-beta.07b80a747bfeat: add protobuf encoding/decoding for Go structs00c3ee3acdocs: remove obsolete references to init nodes6eefa9d9cfix: properly filter resources in maintenance serverfa5aad01adocs: fix issues in GCP docs98f056603chore: bump dependencies84e712a9ffeat: introduce Talos API access from Kubernetesd7be30892chore: bump kernel to 5.15.59c2c2d65bcrefactor: use COSI access filter for resource access1dee0579efeat: add support for proxying one-to-one toapid86eb01cd6docs: add missing dev tools4fd676c04docs: fix typo in theila name856beb21cfeat: containerd 1.6.7, Flannel 1.19.1e97b9f6d3feat: support dhcp options for vlan92314e47brefactor: use controllers/resources to feed trustd with data80d298abffeat: support skipping node registration7795de313fix: use controllers/resources for etcd configurationf9b664c94fix: reload trusted CA list when client is recreated8847ccd03fix: shutdown some streaming API calls when machined API is shuting downf95b53726fix: allow files in extension spec1a8f6ec8efix: don't advertise Kubernetes pod networks over KubeSpan by defaulte3d4a0e4dfix: make reset work even if the node is not bootstrapped/not joineda6b010a8bchore: update Go to 1.19, Linux to 5.15.58fb058a7c9test: useT.TempDirto create temporary test directory6fc38bae6fix: iterate over etcd members endpoints for member promotionc70b692fbfix: update default address if removed from the hostcf620d473feat: read talosconfig from secrets directory1ad8e6122fix: keep entire vlan id when parsing cmdlinefe2ee3b10feat: implement MachineStatus resource670d274c4chore: bump dependencies08d2612e0docs: bond devices are comma separatedc3c3e14dbchore: add gotagsrewrite tool and use it to add tags to resources2e790526frefactor: make apid stop gracefully and be stopped late0cdf22243fix: retry Conflict errors when upgrading k8s manifests
Changes from siderolabs/extras
3 commits
Changes from siderolabs/pkgs
28 commits
7783ee3chore: bump kernel to 5.15.59360d596feat: update containerd to 1.6.76feece4feat: update Go to 1.199ad3aebchore: bump kernel to 5.15.58dcc0311chore: bump kernel to 5.15.57b943a9dchore: update Go to 1.18.4a44e324chore: bump kernel to 5.15.54247f567chore: bump kernel to 5.15.534fe9867chore: bump openssl to 1.1.1q9ee662cchore: bump kernel to 5.15.524412db8chore: bump kernel to 5.15.516fedbdcchore: bump toolsf1f44e6chore: bump kernel to 5.15.50388af5echore: bump openssl to 1.1.1ped75c50chore: enableRANDOM_TRUST_BOOTLOADERby default7c243f6chore: bump kernel to 5.15.496e1269echore: bump kernel to 5.15.485d671a3chore: bump nvidia drivers to 515.48.07b35d835chore: bump kernel to 5.15.476604d6bfeat: hyperv arm64c474058chore: bump nvidia driver to 515.43.045bc7e34feat: update runc to 1.1.3, libseccomp to 2.5.4c02cd7achore: bump kernel to 5.15.46b9c72a5feat: update containerd to 1.6.6f7786a3chore: bump kernel to 5.15.45b1c207dfeat: update containerd to 1.6.54d47830chore: bump golang to 1.18.3dc21e30chore: bump kernel to 5.15.44
Changes from siderolabs/tools
7 commits
Changes from talos-systems/crypto
Changes from talos-systems/go-blockdevice
Changes from talos-systems/grpc-proxy
Dependency Changes
- cloud.google.com/go/compute v1.6.1 -> v1.7.0
- github.com/BurntSushi/toml v1.1.0 -> v1.2.0
- github.com/aws/aws-sdk-go v1.44.24 -> v1.44.71
- github.com/containerd/containerd v1.6.4 -> v1.6.8
- github.com/containernetworking/cni v1.1.0 -> v1.1.2
- github.com/cosi-project/runtime 95d06feaf8b5 -> cd5f564066ad
- github.com/docker/docker v20.10.16 -> v20.10.17
- github.com/emicklei/dot v0.16.0 -> v1.0.0
- github.com/google/gopacket v1.1.19 new
- github.com/google/nftables a9775fb167d2 -> 2eca00135732
- github.com/hashicorp/go-getter v1.6.1 -> v1.6.2
- github.com/hashicorp/go-version v1.5.0 -> v1.6.0
- github.com/hetznercloud/hcloud-go v1.33.2 -> v1.35.2
- github.com/jsimonetti/rtnetlink v1.2.0 -> v1.2.1
- github.com/martinlindhe/base36 v1.1.1 new
- github.com/packethost/packngo v0.24.0 -> v0.25.0
- github.com/prometheus/procfs v0.7.3 -> v0.8.0
- github.com/rivo/tview 9994674d60a8 -> 37ad0bb93703
- github.com/siderolabs/extras v1.1.0-1-g5800284 -> v1.2.0-alpha.0-2-gda35a63
- github.com/siderolabs/pkgs v1.1.0-8-gfa9a488 -> v1.2.0-alpha.0-27-g7783ee3
- github.com/siderolabs/tools v1.1.0-1-g134974c -> v1.2.0-alpha.0-6-gcd35510
- github.com/spf13/cobra v1.4.0 -> v1.5.0
- github.com/stretchr/testify v1.7.1 -> v1.8.0
- github.com/talos-systems/crypto v0.3.5 -> e9df1b8ca74c
- github.com/talos-systems/go-blockdevice v0.3.2 -> v0.3.4
- github.com/talos-systems/grpc-proxy v0.3.0 -> v0.3.1
- github.com/u-root/u-root v0.8.0 -> v0.9.0
- github.com/vishvananda/netlink v1.2.0-beta -> v1.2.1-beta.2
- github.com/vmware-tanzu/sonobuoy v0.56.6 -> v0.56.9
- github.com/vmware/govmomi v0.28.0 -> v0.29.0
- golang.org/x/net 5463443f8c37 -> a33c5aa5df48
- golang.org/x/sync 0976fa681c29 -> 886fb9371eb4
- golang.org/x/sys bc2c85ada10a -> 1c4a2a72c664
- golang.org/x/term 065cf7ba2467 -> a9ba230a4035
- golang.org/x/time 583f2d630306 -> e5dcc9cfc0b9
- google.golang.org/grpc v1.46.2 -> v1.48.0
- google.golang.org/protobuf v1.28.0 -> v1.28.1
- gopkg.in/yaml.v3 496545a6307b -> v3.0.1
- inet.af/netaddr c74959edd3b6 -> 097006376321
- k8s.io/api v0.24.2 -> v0.25.0-beta.0
- k8s.io/apimachinery v0.24.2 -> v0.25.0-beta.0
- k8s.io/apiserver v0.24.2 -> v0.25.0-beta.0
- k8s.io/client-go v0.24.2 -> v0.25.0-beta.0
- k8s.io/component-base v0.24.2 -> v0.25.0-beta.0
- k8s.io/cri-api v0.24.2 -> v0.25.0-beta.0
- k8s.io/kubectl v0.24.2 -> v0.25.0-beta.0
- k8s.io/kubelet v0.24.2 -> v0.25.0-beta.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.64 -> v1.2.65
Previous release can be found at v1.1.0
Talos 1.2.0-alpha.1 (2022-07-28)
Welcome to the v1.2.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Generating Talos secrets from PKI directory
It is now possible to generate a secrets bundle from a Kubernetes PKI directory (e.g. /etc/kubernetes/pki).
You can also specify a bootstrap token to be used in the secrets bundle.
This secrets bundle can then be used to generate a machine config.
This facilitates migrating clusters (e.g. created using kubeadm) to Talos.
talosctl gen secrets --kubernetes-bootstrap-token znzio1.1ifu15frz7jd59pv --from-kubernetes-pki /etc/kubernetes/pki
talosctl gen config --with-secrets secrets.yaml my-cluster https://172.20.0.1:6443
Kubernetes ControlPlane Components
Talos now run all Kubernetes Control Plane Components with the CRI default Seccomp Profile and other recommendations as described in KEP-2568.
Kubelet Default Runtime Seccomp Profile
Talos now runs Kubelet with the CRI default Seccomp Profile enabled.
This can be disabled by setting .machine.kubelet.defaultRuntimeSeccompProfileEnabled to false.
This is not enabled automatically on upgrades, so upgrading to Talos v1.2 needs this to be explicitly enabled.
Network bridge support
Talos now supports configuring Linux bridges. It can be configured in the machine config like the following:
machine:
network:
interfaces:
- interface: br0
bridge:
stp:
enabled: true
interfaces:
- eth0
- eth1
See documentation for more details.
VLAN support in cmdline arguments
Talos now supports dracut-style vlan kernel argument to allow
installing Talos Linux in networks where ports are not tagged
with a default VLAN:
vlan=eth1.5:eth1 ip=172.20.0.2::172.20.0.1:255.255.255.0::eth1.5:::::
Packet Capture
Talos now supports capturing packets on a network interface with talosctl pcap command:
talosctl pcap --interface eth0
Seccomp Profiles
Talos now supports creating custom seccomp profiles on the host machine which in turn can be used by Kubernetes workloads. It can be configured in the machine config as below:
machine:
seccompProfiles:
- name: audit.json
value:
defaultAction: SCMP_ACT_LOG
- name: deny.json
value: {"defaultAction":"SCMP_ACT_LOG"}
This profile data can be either configured as a YAML definition or as a JSON string.
The profiles are created on the host under /var/lib/seccomp/profiles and bind mounted at /var/lib/kubelet/seccomp/profiles so Kubelet can use it.
See documentation for more details.
Stable Default Hostname
Talos now generates the default hostname (when there is no explicitly specified hostname) for the nodes based on the
node id (e.g. talos-2gd-76y) instead of using the DHCP assigned IP address (e.g. talos-172-20-0-2).
This ensures that the node hostname is not changed when DHCP assigns a new IP to a node.
Strategic merge machine configuration patching
In addition to JSON (RFC6902) patches Talos now supports strategic merge patching.
For example, machine hostname can be set with the following patch:
machine:
network:
hostname: worker1
Patch format is detected automatically.
Variable substitution for URL query parameter in the talos.config kernel parameter
The kernel parameter talos.config can now substitute system information into placeholders inside its URL query values. This example shows all supported variables:
http://example.com/metadata?h=${hostname}&m=${mac}&s=${serial}&u=${uuid}
Component Updates
- Linux: 5.15.57
Talos is built with Go 1.18.4.
Contributors
- Andrey Smirnov
- Noel Georgi
- Utku Ozdemir
- Dmitriy Matrenichev
- Philipp Sauter
- Tim Jones
- Spencer Smith
- Artem Chernyshev
- Davincible
- AMet
- Alex Wied
- Bermi Ferrer
- Christoph Schmatzler
- Dennis Marttinen
- Eirik Askheim
- Florian Klink
- Han Cen
- Larry Rosenman
- Markus Reiter
- Matthew Richardson
- Nico Berlee
- Rio Kierkels
- RyanSquared
- Serge Logvinov
- Seán C McCord
- hobyte
- nett_hier
- zebernst
Changes
128 commits
5ac4947b6feat: enable default seccomp profile for kubelete5994ff7afix: skipResetDuringBoottest if theClusterconfig is unknown8028e1074fix: wait for boot done when rebooting a node in the integration testsae1bec59efeat: allow running only one sequence at a timeec05aee04fix: correctly unwrap errors when streaming7c7f2d8c3feat: refactor disk size matcher to be compatible with DeepEqual3addea83bfeat: introduce support for Talos API access from Kubernetes34d3a4164docs: add missing <> to relrefc4d2d20c4fix: enable stable hostnames for worker configs as well0326bac1fchore: bump kernel to 5.15.5786820c33fchore: bump dependencies6e7dfeeb3fix: data race in packet capture (part 2)c11e1dae7docs: fix spelling and grammar errors30f7851d2chore: bump golangci-lint from 1.45.2 to 1.47.22cce9112dchore: bump goimports from 0.1.10 to 0.1.1118756c7fffix: folder permissions of overlay mounted folders47c35dc47feat: set stable default hostname based on machine-id1ed3df295chore: support glibc apps extension speca2aea9726fix: write etcd PKI files in a controllerbb4abc096fix: regenerate kubelet certs when hostname changesd650afb6cchore: fix typo inpowercycle644e803adfix: use masks and different firewall mark for KubeSpan80444a43dfix: remove data race in pcap capture04a45dff2docs: remove katacoda links065b59276feat: implement packet capture API7c006cabcfeat: update Kubernetes to 1.24.3551290195chore: bump dependencies1677bcc4bfix: skip bond itself when matching interface (Equinix Metal)f1c2b5c55feat: implement strategic merge patching for API server admission configbe98cb82bfeat: follow KEP-2568 non-root enhancements87ea1d961fix: update kubelet kubeconfig when cluster control plane endpoint changesa75fe7600feat: gen secrets from kubernetes pki dira1d7b535adocs: add kubeadm migration guide9e0c56581docs: guide for setting up synology-csi driverf0b8eea5erefactor: remove bootstrap sequence89c7da899docs: add documentation for vagrant & libvirt014b85fdcdocs: improve talos kubernetes upgrade note88bb017eddocs: remove old docs from sitec92c90655feat: build talosctl for FreeBSD616da3069docs: update last release for 1.1091e6ef0efeat: resubstitute talos.config url variables on retryec74ab38afeat: update Go to 1.18.4, Linux to 5.15.54641f6a1e4feat: expose strategic merge config patches6e3d2d647docs: fix disk encryption paramsc43d6a31ddocs: fix typos551887528chore: bump dependencies626ef05e6fix: correct SANs for etcd certs83ce92c5fdocs: fix theila docs8a038d40efix: stabilize etcd join and promote sequences136122556fix: use correct etcd cert pathc170ec0b0chore: bump kernel to 5.15.53d924901b7feat: add cli subcommand to generate secrets34aabedd8feat: more circular pkg from internal to pkg4f044e466feat: implement strategic merge machine config patchingc2a512608fix: avoid double append oftalos.platformkernel argument27dfe7c03fix: perform accurate conflict resolution on overal (kubespan)e437445b4chore: bump kernel to 5.15.52d27a6a4acfeat: add vlan support to cmdlinefdca5d8a9chore: bump dependenciesae3840dbcrefactor: move kubeconfig package under public api184e113f3chore: disable systeminfo controller in container86a0a7bdfrefactor: use pointer types more in machine config structs3a1eb10e6docs: update the Proxmoxkvm64note30e220fcddocs: kernel cmdline params updated on upgrades915de9cf9docs: fix bridge documentation52cd12951test: bump Talos versions in upgrade tests022581d80release(v1.2.0-alpha.0): prepare release643e81cfefeat: add SenseLabs to ADOPTERS.mdbdfee2b3bchore: bump kernel to 5.15.5136c44a651fix: provide CA certificates in/etc/ssl/certs/ca-certificates.crt7ebd9bccedocs: fix pod security talos resource name57b625e0arefactor: avoid recreating grpc clients in service health checksa68a00f1bdocs: recommend setting "host" Processor Type on proxmox923600a73chore: bump kernel to 5.15.50758a9bf59docs: add theila uib81016e62chore: update blockdevice library to v0.3.3284a2f959fix: filter static pods correctly and optimize fetching61abf3111docs: change command for cluster create to keep $HOME with sudo6ae1e9bf2chore: bump dependencies2deff6b6efeat: add support for variable substitution in talos.config kernel parameter103c94225fix: update crypto library with support for RSA-SHA*448de7194docs: add UpCloud installation guide07014e0a8fix: generate correct bootstrap manifests when only IPv6 CIDR is used465edbb47fix: look for qemu-kvm binary63caa281afix: create native image format for DigitalOceanf15ce549efix: siderlink api assume port 443 with https schema797596229feat: add support for configuring network bridges2b23fabccdocs: use SVG image for K8s conformanced4606c33echore: bump kernel to 5.15.49cfb640222docs: update docs for release 1.1b816d0b60docs: fix the vendor information for Kubernetes conformance testsa167a5402test: fix CLI nodes discovery without provisioner data916a30682docs: add twitter meta info80090a3edtest: fix health endpoint cli test when discovery is disabled3c263bb44chore: bump dependenciese8113527fchore: bump kubernetes to v1.24.2068f1b6d0feat: add ctest package and base for test suite2aad3a1e4chore: bump kernel to 5.15.48a31a858e0docs: snippets for logging api server audit logs89aaaef9fchore: bump kernel to 5.15.476759fcd4afeat: use discovery service on cluster health checksf54d90787fix: enable orderly poweroff in hyper-v on Azure35475ce45docs: openebs jiva example with iscsi-tools extension8d2be5e31feat: extend node definition used in health checks7a11b4deffix: maketalosctl bootstrapaccept only single node217fba288test: fix csi tests90bf34feddocs: fork docs for Talos 1.2a0dd010a8docs: add link to discovery service in kubespanc0371410efix: support SideroLink "secure" gRPC connectionb03709620feat: build Talos images with system extensions included43def7490chore: bump kernel and runc4dbbf4ac5chore: add generic methods and use them part #27114292b6docs: fix latest release version in docsda2985fe1fix: respect local API server porte03266667fix: correctly validate reboot mode in CLI70fc42409chore: add generic methods and use them3ae8bdd92chore: runxfs_repairon xfs filesystem returingEUCLEAN0c91c89f4chore: revert day-two tests for csi testsf71b58312feat: disallow anonymous requests by default (kube-apiserver)c19dd1b89feat: add 'etcd members should be control plane nodes' health checkf2997c0f2chore: bump dependenciesf3efec4b5feat: update containerd 1.6.6, Linux 5.15.45, Flannel 0.18.127f8e50cefix: add ovmf image path for rhel87e7de30cdocs: fix required portsc126f2ee8chore: bump golang to 1.18.3c1aed6240fix: wait for/varto be mounted in kubelet service controllerd7a64f5d2fix: improve vip operator shutdown sequence7b9dfcb85chore: add 'make go-mod-outdated'
Changes since v1.2.0-alpha.0
66 commits
5ac4947b6feat: enable default seccomp profile for kubelete5994ff7afix: skipResetDuringBoottest if theClusterconfig is unknown8028e1074fix: wait for boot done when rebooting a node in the integration testsae1bec59efeat: allow running only one sequence at a timeec05aee04fix: correctly unwrap errors when streaming7c7f2d8c3feat: refactor disk size matcher to be compatible with DeepEqual3addea83bfeat: introduce support for Talos API access from Kubernetes34d3a4164docs: add missing <> to relrefc4d2d20c4fix: enable stable hostnames for worker configs as well0326bac1fchore: bump kernel to 5.15.5786820c33fchore: bump dependencies6e7dfeeb3fix: data race in packet capture (part 2)c11e1dae7docs: fix spelling and grammar errors30f7851d2chore: bump golangci-lint from 1.45.2 to 1.47.22cce9112dchore: bump goimports from 0.1.10 to 0.1.1118756c7fffix: folder permissions of overlay mounted folders47c35dc47feat: set stable default hostname based on machine-id1ed3df295chore: support glibc apps extension speca2aea9726fix: write etcd PKI files in a controllerbb4abc096fix: regenerate kubelet certs when hostname changesd650afb6cchore: fix typo inpowercycle644e803adfix: use masks and different firewall mark for KubeSpan80444a43dfix: remove data race in pcap capture04a45dff2docs: remove katacoda links065b59276feat: implement packet capture API7c006cabcfeat: update Kubernetes to 1.24.3551290195chore: bump dependencies1677bcc4bfix: skip bond itself when matching interface (Equinix Metal)f1c2b5c55feat: implement strategic merge patching for API server admission configbe98cb82bfeat: follow KEP-2568 non-root enhancements87ea1d961fix: update kubelet kubeconfig when cluster control plane endpoint changesa75fe7600feat: gen secrets from kubernetes pki dira1d7b535adocs: add kubeadm migration guide9e0c56581docs: guide for setting up synology-csi driverf0b8eea5erefactor: remove bootstrap sequence89c7da899docs: add documentation for vagrant & libvirt014b85fdcdocs: improve talos kubernetes upgrade note88bb017eddocs: remove old docs from sitec92c90655feat: build talosctl for FreeBSD616da3069docs: update last release for 1.1091e6ef0efeat: resubstitute talos.config url variables on retryec74ab38afeat: update Go to 1.18.4, Linux to 5.15.54641f6a1e4feat: expose strategic merge config patches6e3d2d647docs: fix disk encryption paramsc43d6a31ddocs: fix typos551887528chore: bump dependencies626ef05e6fix: correct SANs for etcd certs83ce92c5fdocs: fix theila docs8a038d40efix: stabilize etcd join and promote sequences136122556fix: use correct etcd cert pathc170ec0b0chore: bump kernel to 5.15.53d924901b7feat: add cli subcommand to generate secrets34aabedd8feat: more circular pkg from internal to pkg4f044e466feat: implement strategic merge machine config patchingc2a512608fix: avoid double append oftalos.platformkernel argument27dfe7c03fix: perform accurate conflict resolution on overal (kubespan)e437445b4chore: bump kernel to 5.15.52d27a6a4acfeat: add vlan support to cmdlinefdca5d8a9chore: bump dependenciesae3840dbcrefactor: move kubeconfig package under public api184e113f3chore: disable systeminfo controller in container86a0a7bdfrefactor: use pointer types more in machine config structs3a1eb10e6docs: update the Proxmoxkvm64note30e220fcddocs: kernel cmdline params updated on upgrades915de9cf9docs: fix bridge documentation52cd12951test: bump Talos versions in upgrade tests
Changes from siderolabs/extras
Changes from siderolabs/pkgs
24 commits
dcc0311chore: bump kernel to 5.15.57b943a9dchore: update Go to 1.18.4a44e324chore: bump kernel to 5.15.54247f567chore: bump kernel to 5.15.534fe9867chore: bump openssl to 1.1.1q9ee662cchore: bump kernel to 5.15.524412db8chore: bump kernel to 5.15.516fedbdcchore: bump toolsf1f44e6chore: bump kernel to 5.15.50388af5echore: bump openssl to 1.1.1ped75c50chore: enableRANDOM_TRUST_BOOTLOADERby default7c243f6chore: bump kernel to 5.15.496e1269echore: bump kernel to 5.15.485d671a3chore: bump nvidia drivers to 515.48.07b35d835chore: bump kernel to 5.15.476604d6bfeat: hyperv arm64c474058chore: bump nvidia driver to 515.43.045bc7e34feat: update runc to 1.1.3, libseccomp to 2.5.4c02cd7achore: bump kernel to 5.15.46b9c72a5feat: update containerd to 1.6.6f7786a3chore: bump kernel to 5.15.45b1c207dfeat: update containerd to 1.6.54d47830chore: bump golang to 1.18.3dc21e30chore: bump kernel to 5.15.44
Changes from siderolabs/tools
5 commits
Changes from talos-systems/crypto
Changes from talos-systems/go-blockdevice
Changes from talos-systems/grpc-proxy
Dependency Changes
- cloud.google.com/go/compute v1.6.1 -> v1.7.0
- github.com/BurntSushi/toml v1.1.0 -> v1.2.0
- github.com/aws/aws-sdk-go v1.44.24 -> v1.44.61
- github.com/containerd/containerd v1.6.4 -> v1.6.6
- github.com/containernetworking/cni v1.1.0 -> v1.1.1
- github.com/cosi-project/runtime 95d06feaf8b5 -> 22c6aa1ca7ec
- github.com/docker/docker v20.10.16 -> v20.10.17
- github.com/emicklei/dot v0.16.0 -> v1.0.0
- github.com/google/gopacket v1.1.19 new
- github.com/google/nftables a9775fb167d2 -> a346d51f53b3
- github.com/hashicorp/go-getter v1.6.1 -> v1.6.2
- github.com/hashicorp/go-version v1.5.0 -> v1.6.0
- github.com/hetznercloud/hcloud-go v1.33.2 -> v1.35.1
- github.com/martinlindhe/base36 v1.1.1 new
- github.com/packethost/packngo v0.24.0 -> v0.25.0
- github.com/rivo/tview 9994674d60a8 -> 73bf2902b59a
- github.com/siderolabs/extras v1.1.0-1-g5800284 -> v1.2.0-alpha.0-1-g17a319f
- github.com/siderolabs/pkgs v1.1.0-8-gfa9a488 -> v1.2.0-alpha.0-23-gdcc0311
- github.com/siderolabs/tools v1.1.0-1-g134974c -> v1.2.0-alpha.0-4-g0d669dd
- github.com/spf13/cobra v1.4.0 -> v1.5.0
- github.com/stretchr/testify v1.7.1 -> v1.8.0
- github.com/talos-systems/crypto v0.3.5 -> e9df1b8ca74c
- github.com/talos-systems/go-blockdevice v0.3.2 -> v0.3.4
- github.com/talos-systems/grpc-proxy v0.3.0 -> v0.3.1
- github.com/vishvananda/netlink v1.2.0-beta -> v1.2.1-beta.2
- github.com/vmware-tanzu/sonobuoy v0.56.6 -> v0.56.8
- github.com/vmware/govmomi v0.28.0 -> v0.29.0
- golang.org/x/net 5463443f8c37 -> a158d28d115b
- golang.org/x/sync 0976fa681c29 -> 886fb9371eb4
- golang.org/x/sys bc2c85ada10a -> 8c9f86f7a55f
- golang.org/x/term 065cf7ba2467 -> a9ba230a4035
- golang.org/x/time 583f2d630306 -> e5dcc9cfc0b9
- google.golang.org/grpc v1.46.2 -> v1.48.0
- gopkg.in/yaml.v3 496545a6307b -> v3.0.1
- inet.af/netaddr c74959edd3b6 -> 097006376321
- k8s.io/api v0.24.2 -> v0.24.3
- k8s.io/apiserver v0.24.2 -> v0.24.3
- k8s.io/client-go v0.24.2 -> v0.24.3
- k8s.io/component-base v0.24.2 -> v0.24.3
- k8s.io/kubectl v0.24.2 -> v0.24.3
- k8s.io/kubelet v0.24.2 -> v0.24.3
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.64 -> v1.2.65
Previous release can be found at v1.1.0
Talos 1.2.0-alpha.0 (2022-06-30)
Welcome to the v1.2.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Network bridge support
Talos now supports configuring Linux bridges. It can be configured in the machine config like the following:
spec:
machine:
network:
interfaces:
- interface: br0
bridge:
stp:
enabled: true
interfaces:
- eth0
- eth1
See documentation for more details.
Variable substitution for URL query parameter in the talos.config kernel parameter
The kernel parameter talos.config can now substitute system information into placeholders inside its URL query values. This example shows all supported variables:
http://example.com/metadata?h=${hostname}&m=${mac}&s=${serial}&u=${uuid}
Component Updates
- Linux: 5.15.51
Contributors
- Noel Georgi
- Andrey Smirnov
- Utku Ozdemir
- Philipp Sauter
- Tim Jones
- Dmitriy Matrenichev
- Davincible
- Han Cen
- Rio Kierkels
- RyanSquared
- Serge Logvinov
- Spencer Smith
- hobyte
- nett_hier
Changes
61 commits
643e81cfefeat: add SenseLabs to ADOPTERS.mdbdfee2b3bchore: bump kernel to 5.15.5136c44a651fix: provide CA certificates in/etc/ssl/certs/ca-certificates.crt7ebd9bccedocs: fix pod security talos resource name57b625e0arefactor: avoid recreating grpc clients in service health checksa68a00f1bdocs: recommend setting "host" Processor Type on proxmox923600a73chore: bump kernel to 5.15.50758a9bf59docs: add theila uib81016e62chore: update blockdevice library to v0.3.3284a2f959fix: filter static pods correctly and optimize fetching61abf3111docs: change command for cluster create to keep $HOME with sudo6ae1e9bf2chore: bump dependencies2deff6b6efeat: add support for variable substitution in talos.config kernel parameter103c94225fix: update crypto library with support for RSA-SHA*448de7194docs: add UpCloud installation guide07014e0a8fix: generate correct bootstrap manifests when only IPv6 CIDR is used465edbb47fix: look for qemu-kvm binary63caa281afix: create native image format for DigitalOceanf15ce549efix: siderlink api assume port 443 with https schema797596229feat: add support for configuring network bridges2b23fabccdocs: use SVG image for K8s conformanced4606c33echore: bump kernel to 5.15.49cfb640222docs: update docs for release 1.1b816d0b60docs: fix the vendor information for Kubernetes conformance testsa167a5402test: fix CLI nodes discovery without provisioner data916a30682docs: add twitter meta info80090a3edtest: fix health endpoint cli test when discovery is disabled3c263bb44chore: bump dependenciese8113527fchore: bump kubernetes to v1.24.2068f1b6d0feat: add ctest package and base for test suite2aad3a1e4chore: bump kernel to 5.15.48a31a858e0docs: snippets for logging api server audit logs89aaaef9fchore: bump kernel to 5.15.476759fcd4afeat: use discovery service on cluster health checksf54d90787fix: enable orderly poweroff in hyper-v on Azure35475ce45docs: openebs jiva example with iscsi-tools extension8d2be5e31feat: extend node definition used in health checks7a11b4deffix: maketalosctl bootstrapaccept only single node217fba288test: fix csi tests90bf34feddocs: fork docs for Talos 1.2a0dd010a8docs: add link to discovery service in kubespanc0371410efix: support SideroLink "secure" gRPC connectionb03709620feat: build Talos images with system extensions included43def7490chore: bump kernel and runc4dbbf4ac5chore: add generic methods and use them part #27114292b6docs: fix latest release version in docsda2985fe1fix: respect local API server porte03266667fix: correctly validate reboot mode in CLI70fc42409chore: add generic methods and use them3ae8bdd92chore: runxfs_repairon xfs filesystem returingEUCLEAN0c91c89f4chore: revert day-two tests for csi testsf71b58312feat: disallow anonymous requests by default (kube-apiserver)c19dd1b89feat: add 'etcd members should be control plane nodes' health checkf2997c0f2chore: bump dependenciesf3efec4b5feat: update containerd 1.6.6, Linux 5.15.45, Flannel 0.18.127f8e50cefix: add ovmf image path for rhel87e7de30cdocs: fix required portsc126f2ee8chore: bump golang to 1.18.3c1aed6240fix: wait for/varto be mounted in kubelet service controllerd7a64f5d2fix: improve vip operator shutdown sequence7b9dfcb85chore: add 'make go-mod-outdated'
Changes from siderolabs/extras
Changes from siderolabs/pkgs
18 commits
4412db8chore: bump kernel to 5.15.516fedbdcchore: bump toolsf1f44e6chore: bump kernel to 5.15.50388af5echore: bump openssl to 1.1.1ped75c50chore: enableRANDOM_TRUST_BOOTLOADERby default7c243f6chore: bump kernel to 5.15.496e1269echore: bump kernel to 5.15.485d671a3chore: bump nvidia drivers to 515.48.07b35d835chore: bump kernel to 5.15.476604d6bfeat: hyperv arm64c474058chore: bump nvidia driver to 515.43.045bc7e34feat: update runc to 1.1.3, libseccomp to 2.5.4c02cd7achore: bump kernel to 5.15.46b9c72a5feat: update containerd to 1.6.6f7786a3chore: bump kernel to 5.15.45b1c207dfeat: update containerd to 1.6.54d47830chore: bump golang to 1.18.3dc21e30chore: bump kernel to 5.15.44
Changes from siderolabs/tools
Changes from talos-systems/crypto
Changes from talos-systems/grpc-proxy
Dependency Changes
- cloud.google.com/go/compute v1.6.1 -> v1.7.0
- github.com/aws/aws-sdk-go v1.44.24 -> v1.44.42
- github.com/containerd/containerd v1.6.4 -> v1.6.6
- github.com/containernetworking/cni v1.1.0 -> v1.1.1
- github.com/cosi-project/runtime 95d06feaf8b5 -> ee09cee2aab7
- github.com/docker/docker v20.10.16 -> v20.10.17
- github.com/emicklei/dot v0.16.0 -> v1.0.0
- github.com/google/nftables a9775fb167d2 -> a346d51f53b3
- github.com/hashicorp/go-getter v1.6.1 -> v1.6.2
- github.com/hetznercloud/hcloud-go v1.33.2 -> v1.34.0
- github.com/packethost/packngo v0.24.0 -> v0.25.0
- github.com/rivo/tview 9994674d60a8 -> 691f46d6f500
- github.com/siderolabs/extras v1.1.0-1-g5800284 -> v1.2.0-alpha.0
- github.com/siderolabs/pkgs v1.1.0-8-gfa9a488 -> v1.2.0-alpha.0-17-g4412db8
- github.com/siderolabs/tools v1.1.0-1-g134974c -> v1.2.0-alpha.0
- github.com/spf13/cobra v1.4.0 -> v1.5.0
- github.com/stretchr/testify v1.7.1 -> v1.7.5
- github.com/talos-systems/crypto v0.3.5 -> e9df1b8ca74c
- github.com/talos-systems/grpc-proxy v0.3.0 -> v0.3.1
- github.com/vishvananda/netlink v1.2.0-beta -> v1.2.1-beta.2
- github.com/vmware-tanzu/sonobuoy v0.56.6 -> v0.56.7
- golang.org/x/net 5463443f8c37 -> 1bab6f366d9e
- golang.org/x/sync 0976fa681c29 -> 0de741cfad7f
- golang.org/x/sys bc2c85ada10a -> 87e55d714810
- golang.org/x/time 583f2d630306 -> 579cf78fd858
- google.golang.org/grpc v1.46.2 -> v1.47.0
- gopkg.in/yaml.v3 496545a6307b -> v3.0.1
- inet.af/netaddr c74959edd3b6 -> 097006376321
Previous release can be found at v1.1.0
Talos 1.1.0-alpha.2 (2022-05-12)
Welcome to the v1.1.0-alpha.2 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Apply Config --dry-run
The commands talosctl apply-config, talosctl patch mc and talosctl edit mc now support --dry-run flag.
If enabled it just prints out the selected config application mode and the configuration diff.
Apply Config --mode=try
The commands talosctl apply-config, talosctl patch mc and talosctl edit mc now support the new mode called try.
In this mode the config change is applied for a period of time and then reverted back to the state it was before the change.
--timeout parameter can be used to customize the config rollback timeout.
This new mode can be used only with the parts of the config that can be changed without a reboot and can help to check that
the new configuration doesn't break the node.
Can be especially useful to check network interfaces changes that may lead to the loss of connectivity to the node.
IPv6 in Docker-based Talos Clusters
The command talosctl cluster create now enables IPv6 by default for the Docker containers
created for Talos nodes. This allows to use IPv6 addresses in Kubernetes networking.
If talosctl cluster create fails to work on Linux due to the lack of IPv6 support,
please use the flag --disable-docker-ipv6 to revert the change.
drop some default rules shipped by eudev
Drops some default eudev rules that doesn't make sense in the context of Talos OS. Especially the ones around sound devices, cd-roms and renaming the network interfaces to be predictable
Pod Security Admission
Pod Security Admission controller is enabled by default with the following policy:
apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- configuration:
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
defaults:
audit: restricted
audit-version: latest
enforce: baseline
enforce-version: latest
warn: restricted
warn-version: latest
exemptions:
namespaces:
- kube-system
runtimeClasses: []
usernames: []
kind: PodSecurityConfiguration
name: PodSecurity
path: ""
The policy is part of the Talos machine configuration, and it can be modified to suite your needs.
Support RockPi 4 variants A and B
Talos now supports RockPi variants A and B in addition to RockPi 4C
Raspberry Pi PoE hat fan
Talos now enables the Raspberry Pi PoE fan control by pulling in the poe overlay that works with upstream kernel
Component Updates
- Linux: 5.15.39
- Containerd: v1.6.4
- Kubernetes: 1.24.0
- Flannel: 0.17.0
- runc: 1.1.2
- CoreDNS: v1.9.2
Talos is built with Go 1.18.2
x86-64 Architecture
Talos is built for x86-64 architecture with support for x86-64-v2 microarchitecture level,
so Talos no longer runs on processors supporting only baseline x86-64 microarchitecture (before 2009).
Contributors
- Andrey Smirnov
- Noel Georgi
- Tim Jones
- Dmitriy Matrenichev
- Spencer Smith
- Artem Chernyshev
- Andrew Rynhard
- Serge Logvinov
- Steve Francis
- Philipp Sauter
- Steve Francis
- Andrei Dobre
- Bastiaan Schaap
- Caleb Woodbine
- Daniel Höxtermann
- Jori Huisman
- Jorik Jonker
- Nico Berlee
- Philipp Sauter
- Sebastian Hasler
- Seán C McCord
- Suraj Shirvankar
- Tames McTigue
- Tim Jones
- Tomasz Zurkowski
- William Ashton
Changes
211 commits
91a49c4e7fix: dhcpv6 leasetime segfault loopafb679586fix: reset certificate SANs on updatec87432fe1fix: detect WSL fortalosctl cluster createon Docker166d2585cchore: bump kernel and runc8d9b0cde0chore: update deps to go 1.18.286741d998fix: append hostname to cluster SANs when port is not specified9885bbe17docs: fix typos, edited for clarity7fd1c80c3fix: ignore failures to dial wireguard clientb8e7cdb70docs: add vultr guidec2be65b66fix: openstack unable to parseIP2ae0e3a56test: add a test for version of Go Talos was built withbef1a13fadocs: update latest Talos in 1.0 docs to 1.0.4b52962c44chore: bump dependencies79ae76a6ffix: properly setallowSchedulingOnMastersin the interactive install2b7e7d4dcfeat: print the status of services during boot802d4a23cfix: load kubelet system service in StartAllServices task67019c434fix: add source path for ovmf flash imageda7b24ba5chore: bump kernel to 5.15.388ca8effd6chore: add Equinix Managed Services NL to adopters8bc97a30ffix: remove D-Bus sockets before listen attempts54cfa039afix: use json.Unmarshal instead of yaml.Unmarshal6d30c4822docs: update networking resource documentationbc88de729chore: bump coredns to v1.9.2c6722b637docs: when mentioning partitions, link to partition docsb189e8426chore: fix incorrect ManifestSpec.MarshalYAML signature5d5280200feat: add more hardware information to the link status resources2ff6db749chore: add Nedap Security Atlas as adopter89cab200bchore: bump kubernetes to v1.24.009d16349fchore: refactor StaticPod and StaticPodStatus into typed.Resourced2935f98cchore: refactor LinkRefresh and LinkStatus into typed.Resourceb52e0b9b9fix: talosctl throws error if gen option and --input-dir flags are combined0e15de3a8docs: add adopters filebb932c297chore: bump containerd to v1.6.44eaaa2d59chore: bump kernel to 5.15.3789dde8f2cchore: refactor remaining resources into typed.Resourcebd089e702chore: bump dependencies3136334b9docs: fix links in VMware documentation403df0e18docs: provide example on using config generation package635192861chore: redo pointer with github.com/siderolabs/go-pointer modulea269f740cdocs: copy knowledge base to v1.0 docs483201026fix: return an error if there is no byte slice in ReadonlyProvider6e7486f09fix: allow graceful node shutdown to be overridden867d38f28feat: add bond slaves ordering03ef62ad8fix: include Go primitive types into unstructured deepcopyf06e6acf2chore: bump kernel to 5.15.36c0d386abbfix: don't mount D-Bus socket via mount under recursive bind mount9a8ff76dfrefactor: rewrite perf resource to use typed.Resource71d04c4d5refactor: rewrite runtime resources to use typed.Resource7568d51fcfix: trigger CRI config merge on correct resource updatec456dbcb9docs: remove references to init nodes1973095d1feat: update containerd to 1.6.3b51292d88docs: reformat config referencec0709d970feat: increase aio-max-nr and inotify.max_user_instances85b328e99refactor: convert secrets resources to use typed.Resourcee91350acdrefactor: convert time & v1alpha1 resources to use typed.Resource45464412echore: bump dependencies0af6b35a6feat: update etcd to 3.5.47ad27751cdocs: fix analytics and sitemap55ff876dcchore: bump K8s Go modules to 1.24.0-rc.0f1f43131ffix: strip 'v' prefix from versions on Kubernetes upgradeec621477bchore: tune QEMU disk provisioner optionsb085343dcfeat: use discovery information for etcd join (and other etcd calls)2b03057b9feat: implement a new modetryin the config manipulation commands51a68c31fchore: allow mounting files from the hostf3e330a0adocs: fix network dependency7ba39bd60docs: clarify discovery service8057d076arelease(v1.1.0-alpha.1): prepare release1d5c08e74chore: bump kernel to 5.15.359bf23e516feat: update Kubernetes to 1.24.0-rc.0d78ed320bdocs: fix the docs reference to star registry redirects257dfb870fix: run the 'post' stage of the service always992e23023fix: correctly handle stopping services with reverse dependenciesbb7a50bd5docs: fix netlify redirects486f79bc7docs: fix netlify deploy urle8cbedb05docs: add canonical link ref0fe4a7832docs: improve latest-version banner23984efcdfix: detect lingering mounts in the installer correctly54dba925fchore: refactor network resource to use typed resource4eb9f45ccrefactor: split polymorphic K8sControlPlane into typed resources68dfdd331fix: provide logger to the etcd snapshot restoref190403f0docs: add how to get config after interactive setupfac7b9466docs: improve vip caveats documentation250df9e67docs: improve rook-ceph descriptionb5c1d868ddocs: add talos/kubernetes config faq39721ee93chore: bump dependencies610945774chore: bump tools and pkgs2b68c8b67fix: enable long timestamps for xfsbe00d7749chore: implement cluster resources using cosi typed resource460d5ab13docs: fix extension services aliasbbdfda2ddchore: xfs quota support in kernel8ff8fc77fchore: enable rpi4 poe hat fan control2b9722d1ffeat: adddry-runflag inapply-configandeditcommands8af50fcd2fix: correct cri package import pathce09ede83feat: update etcd to 3.5.313f41baddchore: bump kernel to 5.15.34fa57b5d92docs: reorganize documentationa91eb9358chore: bump deps0aad0df2erefactor: removeString()for resource implementationa4060513cfeat: build Talos with support for x86-64-v2 microarchitecture8faebd410chore: bump tools and pkgs8499b7e7dchore: bump dependenciesa7ba7ea67feat: migrate to go 1.189dace93b5feat: enable Pod Security Admission by defaultc382cb8cddocs: update vmware docsda0e638f0docs: stableize tools versioningf2d2267e7docs: use template for netlify redirects88f1d8fccdocs: update sitemap to point to direct urla6eebee36chore: update eudev0cb84e8c1fix: correctly parse tags out of images17d09739fdocs: enable nested arrow1e4320b64chore: add support for rockpi 4A and 4Bd1869d948docs: update to Sidero Metal, mention clusterctl18d0038ecfix: avoid panic in DHCPv6 operator on nil dereference9e3d438dbdocs: fix code fence formattingb3f1bb2cffix: add support for FAT12/16 filesystems8619f95c5chore: bump dependencies8c4f72004docs: override sitemap.xml to only include latest results5192ba4e2docs: fix a typo in QEMU VM setup guide663e3e879refactor: change the stages for embed files generation19bf12af0fix: enable IPv6 in Docker-based Talos clusters3889a5839docs: update config.yaml, storage.md, digital-rebar.md25d19131drelease(v1.1.0-alpha.0): prepare release2ca5279e5fix: retry manifest updates in upgrade-k8seeb756168feat: use kexec when resetting a node1ed1f73e5test: bump CAPI to 1.1.32ee1d2c72feat: update Kuberentes to 1.24.0-beta.0c26fa4ccctest: push GITHUB_TOKEN to the e2e-aws/gcp steps95d900de7feat: use kubeconfig env var0b407dd17feat: add dhcp-v6 NTP/DHCP-DUIDa140a6baddocs: update releases shortcode in upgrade guide12931dcedfix: align partitions on 1M boundary37f868e37fix: validate empty TLS config for registriesca8b9c0a3feat: update Kubernetes to 1.24.0-alpha.4d9ec6b215chore: drop dirty from abbreviated tag08624fd0bdocs: add banner to main pagefc23c7a59test: bump versions for upgrade tests4bfe68610feat: update runc to 1.1.1b315ed953chore: use go:embed instead of ldflagsa5d64fc81feat: update Flannel to 0.17.06d6eb3f6adocs: fork docs for 1.11d55f05d1docs: update index pagead6b7ec1afix: enable etcd consistency on check startup65a31f753docs: re-add GA token741c04832docs: mark 1.0 docs as lateste97433c8adocs: update jetson nano6665e0f00docs: code block copyingc41f2b216docs: update whats-new-v1.00a36fbbf3docs: add release notes for 1.0bd0035f6adocs: add NVIDIA docsefa3f2898fix: correctly find partitions with config data (metal-iso)9ebeec0d0docs: fix incorrect path for talosconfig9fef4540edocs: fix non-latest download linksf8ef6a081docs: add rook ceph configuration guidee2666f58fchore: bump kernel to 5.15.32957b2f233chore: bump dependencies0fd2aa08bfix: correctly escape '.' in volume names108fd03a7fix: give up virtual IPs before the kubelet workloads are shut down856e1333dfix: use 'localhost' endpoint in docker provisioner on Windowsc5da38609docs: use variables and templates in the docs4c83847b9docs: target search results67fb72d96docs: add algolia versions to all content5344d6e7cdocs: fix extension servicepathdependency9b9191c5efix: increase intiial window and connection window sizes7a88a0224docs: show archived/pre-release banner based on versione403470bfdocs: filter algolia results by latest0497d5f9fdocs: tag latest docs for searcha25425483feat: update containerd to 1.6.2, Linux to 5.15.319b6422fccfeat: update CoreDNS to 1.9.1020856f80docs: remove second search bar5f27f4c63docs: update asset links9ff42b432docs: fix redirects for /docs URLs7283efd56chore: update the talosctl CNI download urle0eee7fcctest: use clusterctl.yaml overrides after org rename73966f51edocs: fix extensionsf9766edb5docs: remove empty doc filee06e1473bfeat: update golangci-lint to 1.45.0 and gofumpt to 0.3.0a92c614b2docs: add enterprise link to docs header0ae7174badocs: update search settings and redirects883d401f9chore: rename github organization to siderolabsd1294d014chore: add day-two tests for e2e-qemua6240e4b6feat: update Linux to 5.15.30e3fda049fdocs: overhaul all the docsf47750726fix: the etcd recovery client and tests69e07cddcfix: trigger properlyudevdon types and actions47d0e629dfix: clean up custom udev rules if the config is clearedb6691b350chore: bump dependencies27af5d41cfeat: pause the boot process on some failures instead of rebooting58cb9db1efeat: allow hardlinks in the system extension images1e982808ffix: ignore pod CIDRs for kubelet node IPs5e0c80f61fix: ignore connection reset errors on k8s upgradec156580a3fix: split regular network operation configuration and virtual IPcd4d4c605feat: relax extensions file structure validation50594ab1afix: ignore terminated pods in pod health checks9d69fb6b4feat: update Kubernetes to 1.23.5327ce5abafix: invert the condition to skip kubelet kernel checkscf85b3f07docs: update cilium inline install84ee1795ddocs: update logocc7719c9ddocs: improve comments in security protocaf800fe8feat: implement D-Bus systemd-compatible shutdown for kubelet6bec08429feat: add talosctl completions to copy, usage, logs, restart and service355b1a4befix: refresh etcd certs on startup/joind256b5c5edocs: fix spelling mistakes5fdedae20chore: bump kernel to 5.15.2818a21b5f2chore: add dependency images-essential -> images714e5eca6chore: bump dependencies58be4067edocs: update README.mdc5fb20930docs: add loki notef448cb4f3feat: bump boot partition size to 1000 MiBa095acb09chore: fix equinixMetal platform name2a7f9a445fix: check for IPv6 before applying accept_ra59681b8c9fix: backport fixes from release-1.0 branch
Changes since v1.1.0-alpha.1
66 commits
91a49c4e7fix: dhcpv6 leasetime segfault loopafb679586fix: reset certificate SANs on updatec87432fe1fix: detect WSL fortalosctl cluster createon Docker166d2585cchore: bump kernel and runc8d9b0cde0chore: update deps to go 1.18.286741d998fix: append hostname to cluster SANs when port is not specified9885bbe17docs: fix typos, edited for clarity7fd1c80c3fix: ignore failures to dial wireguard clientb8e7cdb70docs: add vultr guidec2be65b66fix: openstack unable to parseIP2ae0e3a56test: add a test for version of Go Talos was built withbef1a13fadocs: update latest Talos in 1.0 docs to 1.0.4b52962c44chore: bump dependencies79ae76a6ffix: properly setallowSchedulingOnMastersin the interactive install2b7e7d4dcfeat: print the status of services during boot802d4a23cfix: load kubelet system service in StartAllServices task67019c434fix: add source path for ovmf flash imageda7b24ba5chore: bump kernel to 5.15.388ca8effd6chore: add Equinix Managed Services NL to adopters8bc97a30ffix: remove D-Bus sockets before listen attempts54cfa039afix: use json.Unmarshal instead of yaml.Unmarshal6d30c4822docs: update networking resource documentationbc88de729chore: bump coredns to v1.9.2c6722b637docs: when mentioning partitions, link to partition docsb189e8426chore: fix incorrect ManifestSpec.MarshalYAML signature5d5280200feat: add more hardware information to the link status resources2ff6db749chore: add Nedap Security Atlas as adopter89cab200bchore: bump kubernetes to v1.24.009d16349fchore: refactor StaticPod and StaticPodStatus into typed.Resourced2935f98cchore: refactor LinkRefresh and LinkStatus into typed.Resourceb52e0b9b9fix: talosctl throws error if gen option and --input-dir flags are combined0e15de3a8docs: add adopters filebb932c297chore: bump containerd to v1.6.44eaaa2d59chore: bump kernel to 5.15.3789dde8f2cchore: refactor remaining resources into typed.Resourcebd089e702chore: bump dependencies3136334b9docs: fix links in VMware documentation403df0e18docs: provide example on using config generation package635192861chore: redo pointer with github.com/siderolabs/go-pointer modulea269f740cdocs: copy knowledge base to v1.0 docs483201026fix: return an error if there is no byte slice in ReadonlyProvider6e7486f09fix: allow graceful node shutdown to be overridden867d38f28feat: add bond slaves ordering03ef62ad8fix: include Go primitive types into unstructured deepcopyf06e6acf2chore: bump kernel to 5.15.36c0d386abbfix: don't mount D-Bus socket via mount under recursive bind mount9a8ff76dfrefactor: rewrite perf resource to use typed.Resource71d04c4d5refactor: rewrite runtime resources to use typed.Resource7568d51fcfix: trigger CRI config merge on correct resource updatec456dbcb9docs: remove references to init nodes1973095d1feat: update containerd to 1.6.3b51292d88docs: reformat config referencec0709d970feat: increase aio-max-nr and inotify.max_user_instances85b328e99refactor: convert secrets resources to use typed.Resourcee91350acdrefactor: convert time & v1alpha1 resources to use typed.Resource45464412echore: bump dependencies0af6b35a6feat: update etcd to 3.5.47ad27751cdocs: fix analytics and sitemap55ff876dcchore: bump K8s Go modules to 1.24.0-rc.0f1f43131ffix: strip 'v' prefix from versions on Kubernetes upgradeec621477bchore: tune QEMU disk provisioner optionsb085343dcfeat: use discovery information for etcd join (and other etcd calls)2b03057b9feat: implement a new modetryin the config manipulation commands51a68c31fchore: allow mounting files from the hostf3e330a0adocs: fix network dependency7ba39bd60docs: clarify discovery service
Changes from siderolabs/extras
3 commits
Changes from siderolabs/go-pointer
Changes from siderolabs/pkgs
44 commits
7add479chore: bump kernel to 5.15.390886699chore: bump runc to v1.1.2dd06fa9chore: bump nvidia drivers to 510.68.0291bb939chore: bump Go to 1.18.28bd8397chore: bump kernel to 5.15.38de96a44chore: bump containerd to v1.6.445906c1chore: bump ca-certificates to 2022-04-26d847adcchore: bump kernel to 5.15.37c4cfa72chore: bump util-linux to 2.38e22317dchore: bump tools422ed8echore: bump kernel to 5.15.361e833c6chore: enable nvme hardware monitorfe7c46ffeat: update containerd to 1.6.395f4418chore: bump kernel to 5.15.35201af71chore: bump tools and bldr3de14d7chore: enable xfs quota support6955fd0chore: bump raspberrypi-firmware to 1.202203315b498d8chore: bump linux-firmware 202204019cda5c0chore: bump kernel to 5.15.348b48af6chore: bump toolsff13660chore: bump kernel to 5.15.33415020fchore: bump eudev, remove non-relevant default rules6691342chore: add rockpi4c5bd5fadchore: build u-boot spi image for rockpi4dace49fix: ipxe prompt arm646041fd7chore: update to use latest tools (specifically go 1.18)4b3e70echore: upstream u-boot for jetson nanocc1c8c7feat: update runc to 1.1.13baf4e4chore: enable random trust CPUdf31920chore: disable soundc27751bchore: bump nvidia drivers to 510.60.02ba98e20chore: bump kernel to 5.15.32a76edfdfeat: update containerd to 1.6.20c38670chore: bump kernel to 5.15.31bc4fb0cchore: org update41f291dfeat: update Flannel CNI to 1.0.158603bachore: bump kernel to 5.15.30d3bb262chore: bump kernel to 5.15.2976a24b5chore: update openssl to 1.1.1n490c7b7chore: enable aarch64 NVIDIA driversb794b7achore: bump linux-firmware to 20220310acda207chore: bump kernel to 5.15.28e0fec11chore: bump nvidia driver to 510.540407f05chore: bump kernel to 5.15.27
Changes from siderolabs/tools
18 commits
967ebd9chore: bump curl to 7.83.1e61f856chore: bump go to 1.18.2315890fchore: bump ca-certificates to 2022-04-26a1d3530chore: bump util-linux to 2.38d229fe1chore: update bldre9f123cchore: bump curl to 7.83.08473ef2chore: bump git to 2.36.08c1f801chore: bump coreutils to 9.1533d5c9chore: bump git to 2.35.2a15cbeechore: bump go to 1.18.1718ec10chore: enable conforma60a332chore: bump xz and gzipc8a3d4dchore: update go to 1.181684fdcchore: bump expat to 2.4.87f5e44cchore: bump zlib to 1.2.12bfc99cachore: rename org99be089chore: update openssl to 1.1.1nb63872bchore: update golang to 1.17.8
Changes from talos-systems/go-blockdevice
2 commits
Dependency Changes
- cloud.google.com/go/compute v1.5.0 -> v1.6.1
- github.com/BurntSushi/toml v1.0.0 -> v1.1.0
- github.com/aws/aws-sdk-go v1.43.8 -> v1.44.11
- github.com/containerd/containerd v1.6.2 -> v1.6.4
- github.com/containernetworking/cni v1.0.1 -> v1.1.0
- github.com/containernetworking/plugins v1.1.0 -> v1.1.1
- github.com/cosi-project/runtime 264f8fcd1a4f -> e22a85955e81
- github.com/docker/distribution v2.8.0 -> v2.8.1
- github.com/docker/docker v20.10.12 -> v20.10.15
- github.com/fsnotify/fsnotify v1.5.1 -> v1.5.4
- github.com/gdamore/tcell/v2 f057f0a857a1 -> v2.5.1
- github.com/google/go-cmp v0.5.7 -> v0.5.8
- github.com/google/nftables 211824995dcb -> eeaebcf55295
- github.com/hetznercloud/hcloud-go v1.33.1 -> v1.33.2
- github.com/insomniacslk/dhcp 3c283ff8b7dd -> 1ca156eafb9f
- github.com/jsimonetti/rtnetlink v1.1.0 -> v1.2.0
- github.com/mdlayher/netx 669a06fde734 -> c711c2f8512f
- github.com/opencontainers/image-spec v1.0.2 -> c5a74bcca799
- github.com/packethost/packngo v0.22.0 -> v0.24.0
- github.com/pelletier/go-toml v1.9.4 -> v1.9.5
- github.com/rivo/tview 96063d6082f3 -> 9994674d60a8
- github.com/rs/xid v1.3.0 -> v1.4.0
- github.com/siderolabs/extras v1.0.0 -> v1.1.0-alpha.0-2-ga77a6f4
- github.com/siderolabs/go-pointer v1.0.0 new
- github.com/siderolabs/pkgs v1.0.0-6-g7c293d5 -> v1.1.0-alpha.0-41-g7add479
- github.com/siderolabs/tools v1.0.0-1-g4c77d96 -> v1.1.0-alpha.0-17-g967ebd9
- github.com/spf13/cobra v1.3.0 -> v1.4.0
- github.com/spf13/pflag v1.0.5 new
- github.com/stretchr/testify v1.7.0 -> v1.7.1
- github.com/talos-systems/go-blockdevice v0.3.1 -> d9c3a2738861
- github.com/vishvananda/netlink 650dca95af54 -> v1.2.0-beta
- github.com/vmware-tanzu/sonobuoy v0.56.2 -> v0.56.5
- github.com/vmware/govmomi v0.27.4 -> v0.28.0
- github.com/vmware/vmw-guestinfo cc1fd90d572c -> 510905f0efa3
- go.etcd.io/etcd/api/v3 v3.5.2 -> v3.5.4
- go.etcd.io/etcd/client/pkg/v3 v3.5.2 -> v3.5.4
- go.etcd.io/etcd/client/v3 v3.5.2 -> v3.5.4
- go.etcd.io/etcd/etcdutl/v3 v3.5.2 -> v3.5.4
- golang.org/x/net 27dd8689420f -> 2871e0cb64e4
- golang.org/x/sys 4e6760a101f9 -> 988cb79eb6c6
- golang.org/x/term 03fcf44c2211 -> e5f449aeb171
- golang.org/x/time 0e9765cccd65 -> 583f2d630306
- golang.zx2c4.com/wireguard/wgctrl fde48d68ee68 -> 3d4a969bb56b
- google.golang.org/grpc v1.44.0 -> v1.46.0
- google.golang.org/protobuf v1.27.1 -> v1.28.0
- k8s.io/api v0.23.5 -> v0.24.0
- k8s.io/apimachinery v0.23.5 -> v0.24.0
- k8s.io/apiserver v0.23.5 -> v0.24.0
- k8s.io/client-go v0.23.5 -> v0.24.0
- k8s.io/component-base v0.23.5 -> v0.24.0
- k8s.io/cri-api v0.23.5 -> v0.24.0
- k8s.io/klog/v2 v2.60.1 new
- k8s.io/kubectl v0.23.5 -> v0.24.0
- k8s.io/kubelet v0.23.5 -> v0.24.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.63 -> v1.2.64
Previous release can be found at v1.0.0
Talos 1.1.0-alpha.1 (2022-04-20)
Welcome to the v1.1.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Apply Config --dry-run
The commands talosctl apply-config, talosctl patch mc and talosctl edit mc now support --dry-run flag.
If enabled it just prints out the selected config application mode and the configuration diff.
IPv6 in Docker-based Talos Clusters
The command talosctl cluster create now enables IPv6 by default for the Docker containers
created for Talos nodes. This allows to use IPv6 addresses in Kubernetes networking.
If talosctl cluster create fails to work on Linux due to the lack of IPv6 support,
please use the flag --disable-docker-ipv6 to revert the change.
drop some default rules shipped by eudev
Drops some default eudev rules that doesn't make sense in the context of Talos OS. Especially the ones around sound devices, cd-roms and renaming the network interfaces to be predictable
Pod Security Admission
Pod Security Admission controller is enabled by default with the following policy:
apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- configuration:
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
defaults:
audit: restricted
audit-version: latest
enforce: baseline
enforce-version: latest
warn: restricted
warn-version: latest
exemptions:
namespaces:
- kube-system
runtimeClasses: []
usernames: []
kind: PodSecurityConfiguration
name: PodSecurity
path: ""
The policy is part of the Talos machine configuration, and it can be modified to suite your needs.
Support RockPi 4 variants A and B
Talos now supports RockPi variants A and B in addition to RockPi 4C
Raspberry Pi PoE hat fan
Talos now enables the Raspberry Pi PoE fan control by pulling in the poe overlay that works with upstream kernel
Component Updates
- Linux: 5.15.35
- Kubernetes: 1.24.0-rc.0
- Flannel: 0.17.0
- runc: 1.1.1
Talos is built with Go 1.18.1.
x86-64 Architecture
Talos is built for x86-64 architecture with support for x86-64-v2 microarchitecture level,
so Talos no longer runs on processors supporting only baseline x86-64 microarchitecture (before 2009).
Contributors
- Andrey Smirnov
- Noel Georgi
- Tim Jones
- Spencer Smith
- Dmitriy Matrenichev
- Andrew Rynhard
- Artem Chernyshev
- Steve Francis
- Andrei Dobre
- Caleb Woodbine
- Daniel Höxtermann
- Jori Huisman
- Nico Berlee
- Serge Logvinov
- Seán C McCord
- Steve Francis
- Suraj Shirvankar
- Tim Jones
- Tomasz Zurkowski
- William Ashton
Changes
144 commits
1d5c08e74chore: bump kernel to 5.15.359bf23e516feat: update Kubernetes to 1.24.0-rc.0d78ed320bdocs: fix the docs reference to star registry redirects257dfb870fix: run the 'post' stage of the service always992e23023fix: correctly handle stopping services with reverse dependenciesbb7a50bd5docs: fix netlify redirects486f79bc7docs: fix netlify deploy urle8cbedb05docs: add canonical link ref0fe4a7832docs: improve latest-version banner23984efcdfix: detect lingering mounts in the installer correctly54dba925fchore: refactor network resource to use typed resource4eb9f45ccrefactor: split polymorphic K8sControlPlane into typed resources68dfdd331fix: provide logger to the etcd snapshot restoref190403f0docs: add how to get config after interactive setupfac7b9466docs: improve vip caveats documentation250df9e67docs: improve rook-ceph descriptionb5c1d868ddocs: add talos/kubernetes config faq39721ee93chore: bump dependencies610945774chore: bump tools and pkgs2b68c8b67fix: enable long timestamps for xfsbe00d7749chore: implement cluster resources using cosi typed resource460d5ab13docs: fix extension services aliasbbdfda2ddchore: xfs quota support in kernel8ff8fc77fchore: enable rpi4 poe hat fan control2b9722d1ffeat: adddry-runflag inapply-configandeditcommands8af50fcd2fix: correct cri package import pathce09ede83feat: update etcd to 3.5.313f41baddchore: bump kernel to 5.15.34fa57b5d92docs: reorganize documentationa91eb9358chore: bump deps0aad0df2erefactor: removeString()for resource implementationa4060513cfeat: build Talos with support for x86-64-v2 microarchitecture8faebd410chore: bump tools and pkgs8499b7e7dchore: bump dependenciesa7ba7ea67feat: migrate to go 1.189dace93b5feat: enable Pod Security Admission by defaultc382cb8cddocs: update vmware docsda0e638f0docs: stableize tools versioningf2d2267e7docs: use template for netlify redirects88f1d8fccdocs: update sitemap to point to direct urla6eebee36chore: update eudev0cb84e8c1fix: correctly parse tags out of images17d09739fdocs: enable nested arrow1e4320b64chore: add support for rockpi 4A and 4Bd1869d948docs: update to Sidero Metal, mention clusterctl18d0038ecfix: avoid panic in DHCPv6 operator on nil dereference9e3d438dbdocs: fix code fence formattingb3f1bb2cffix: add support for FAT12/16 filesystems8619f95c5chore: bump dependencies8c4f72004docs: override sitemap.xml to only include latest results5192ba4e2docs: fix a typo in QEMU VM setup guide663e3e879refactor: change the stages for embed files generation19bf12af0fix: enable IPv6 in Docker-based Talos clusters3889a5839docs: update config.yaml, storage.md, digital-rebar.md25d19131drelease(v1.1.0-alpha.0): prepare release2ca5279e5fix: retry manifest updates in upgrade-k8seeb756168feat: use kexec when resetting a node1ed1f73e5test: bump CAPI to 1.1.32ee1d2c72feat: update Kuberentes to 1.24.0-beta.0c26fa4ccctest: push GITHUB_TOKEN to the e2e-aws/gcp steps95d900de7feat: use kubeconfig env var0b407dd17feat: add dhcp-v6 NTP/DHCP-DUIDa140a6baddocs: update releases shortcode in upgrade guide12931dcedfix: align partitions on 1M boundary37f868e37fix: validate empty TLS config for registriesca8b9c0a3feat: update Kubernetes to 1.24.0-alpha.4d9ec6b215chore: drop dirty from abbreviated tag08624fd0bdocs: add banner to main pagefc23c7a59test: bump versions for upgrade tests4bfe68610feat: update runc to 1.1.1b315ed953chore: use go:embed instead of ldflagsa5d64fc81feat: update Flannel to 0.17.06d6eb3f6adocs: fork docs for 1.11d55f05d1docs: update index pagead6b7ec1afix: enable etcd consistency on check startup65a31f753docs: re-add GA token741c04832docs: mark 1.0 docs as lateste97433c8adocs: update jetson nano6665e0f00docs: code block copyingc41f2b216docs: update whats-new-v1.00a36fbbf3docs: add release notes for 1.0bd0035f6adocs: add NVIDIA docsefa3f2898fix: correctly find partitions with config data (metal-iso)9ebeec0d0docs: fix incorrect path for talosconfig9fef4540edocs: fix non-latest download linksf8ef6a081docs: add rook ceph configuration guidee2666f58fchore: bump kernel to 5.15.32957b2f233chore: bump dependencies0fd2aa08bfix: correctly escape '.' in volume names108fd03a7fix: give up virtual IPs before the kubelet workloads are shut down856e1333dfix: use 'localhost' endpoint in docker provisioner on Windowsc5da38609docs: use variables and templates in the docs4c83847b9docs: target search results67fb72d96docs: add algolia versions to all content5344d6e7cdocs: fix extension servicepathdependency9b9191c5efix: increase intiial window and connection window sizes7a88a0224docs: show archived/pre-release banner based on versione403470bfdocs: filter algolia results by latest0497d5f9fdocs: tag latest docs for searcha25425483feat: update containerd to 1.6.2, Linux to 5.15.319b6422fccfeat: update CoreDNS to 1.9.1020856f80docs: remove second search bar5f27f4c63docs: update asset links9ff42b432docs: fix redirects for /docs URLs7283efd56chore: update the talosctl CNI download urle0eee7fcctest: use clusterctl.yaml overrides after org rename73966f51edocs: fix extensionsf9766edb5docs: remove empty doc filee06e1473bfeat: update golangci-lint to 1.45.0 and gofumpt to 0.3.0a92c614b2docs: add enterprise link to docs header0ae7174badocs: update search settings and redirects883d401f9chore: rename github organization to siderolabsd1294d014chore: add day-two tests for e2e-qemua6240e4b6feat: update Linux to 5.15.30e3fda049fdocs: overhaul all the docsf47750726fix: the etcd recovery client and tests69e07cddcfix: trigger properlyudevdon types and actions47d0e629dfix: clean up custom udev rules if the config is clearedb6691b350chore: bump dependencies27af5d41cfeat: pause the boot process on some failures instead of rebooting58cb9db1efeat: allow hardlinks in the system extension images1e982808ffix: ignore pod CIDRs for kubelet node IPs5e0c80f61fix: ignore connection reset errors on k8s upgradec156580a3fix: split regular network operation configuration and virtual IPcd4d4c605feat: relax extensions file structure validation50594ab1afix: ignore terminated pods in pod health checks9d69fb6b4feat: update Kubernetes to 1.23.5327ce5abafix: invert the condition to skip kubelet kernel checkscf85b3f07docs: update cilium inline install84ee1795ddocs: update logocc7719c9ddocs: improve comments in security protocaf800fe8feat: implement D-Bus systemd-compatible shutdown for kubelet6bec08429feat: add talosctl completions to copy, usage, logs, restart and service355b1a4befix: refresh etcd certs on startup/joind256b5c5edocs: fix spelling mistakes5fdedae20chore: bump kernel to 5.15.2818a21b5f2chore: add dependency images-essential -> images714e5eca6chore: bump dependencies58be4067edocs: update README.mdc5fb20930docs: add loki notef448cb4f3feat: bump boot partition size to 1000 MiBa095acb09chore: fix equinixMetal platform name2a7f9a445fix: check for IPv6 before applying accept_ra59681b8c9fix: backport fixes from release-1.0 branch
Changes since v1.1.0-alpha.0
54 commits
1d5c08e74chore: bump kernel to 5.15.359bf23e516feat: update Kubernetes to 1.24.0-rc.0d78ed320bdocs: fix the docs reference to star registry redirects257dfb870fix: run the 'post' stage of the service always992e23023fix: correctly handle stopping services with reverse dependenciesbb7a50bd5docs: fix netlify redirects486f79bc7docs: fix netlify deploy urle8cbedb05docs: add canonical link ref0fe4a7832docs: improve latest-version banner23984efcdfix: detect lingering mounts in the installer correctly54dba925fchore: refactor network resource to use typed resource4eb9f45ccrefactor: split polymorphic K8sControlPlane into typed resources68dfdd331fix: provide logger to the etcd snapshot restoref190403f0docs: add how to get config after interactive setupfac7b9466docs: improve vip caveats documentation250df9e67docs: improve rook-ceph descriptionb5c1d868ddocs: add talos/kubernetes config faq39721ee93chore: bump dependencies610945774chore: bump tools and pkgs2b68c8b67fix: enable long timestamps for xfsbe00d7749chore: implement cluster resources using cosi typed resource460d5ab13docs: fix extension services aliasbbdfda2ddchore: xfs quota support in kernel8ff8fc77fchore: enable rpi4 poe hat fan control2b9722d1ffeat: adddry-runflag inapply-configandeditcommands8af50fcd2fix: correct cri package import pathce09ede83feat: update etcd to 3.5.313f41baddchore: bump kernel to 5.15.34fa57b5d92docs: reorganize documentationa91eb9358chore: bump deps0aad0df2erefactor: removeString()for resource implementationa4060513cfeat: build Talos with support for x86-64-v2 microarchitecture8faebd410chore: bump tools and pkgs8499b7e7dchore: bump dependenciesa7ba7ea67feat: migrate to go 1.189dace93b5feat: enable Pod Security Admission by defaultc382cb8cddocs: update vmware docsda0e638f0docs: stableize tools versioningf2d2267e7docs: use template for netlify redirects88f1d8fccdocs: update sitemap to point to direct urla6eebee36chore: update eudev0cb84e8c1fix: correctly parse tags out of images17d09739fdocs: enable nested arrow1e4320b64chore: add support for rockpi 4A and 4Bd1869d948docs: update to Sidero Metal, mention clusterctl18d0038ecfix: avoid panic in DHCPv6 operator on nil dereference9e3d438dbdocs: fix code fence formattingb3f1bb2cffix: add support for FAT12/16 filesystems8619f95c5chore: bump dependencies8c4f72004docs: override sitemap.xml to only include latest results5192ba4e2docs: fix a typo in QEMU VM setup guide663e3e879refactor: change the stages for embed files generation19bf12af0fix: enable IPv6 in Docker-based Talos clusters3889a5839docs: update config.yaml, storage.md, digital-rebar.md
Changes from siderolabs/extras
Changes from siderolabs/pkgs
31 commits
95f4418chore: bump kernel to 5.15.35201af71chore: bump tools and bldr3de14d7chore: enable xfs quota support6955fd0chore: bump raspberrypi-firmware to 1.202203315b498d8chore: bump linux-firmware 202204019cda5c0chore: bump kernel to 5.15.348b48af6chore: bump toolsff13660chore: bump kernel to 5.15.33415020fchore: bump eudev, remove non-relevant default rules6691342chore: add rockpi4c5bd5fadchore: build u-boot spi image for rockpi4dace49fix: ipxe prompt arm646041fd7chore: update to use latest tools (specifically go 1.18)4b3e70echore: upstream u-boot for jetson nanocc1c8c7feat: update runc to 1.1.13baf4e4chore: enable random trust CPUdf31920chore: disable soundc27751bchore: bump nvidia drivers to 510.60.02ba98e20chore: bump kernel to 5.15.32a76edfdfeat: update containerd to 1.6.20c38670chore: bump kernel to 5.15.31bc4fb0cchore: org update41f291dfeat: update Flannel CNI to 1.0.158603bachore: bump kernel to 5.15.30d3bb262chore: bump kernel to 5.15.2976a24b5chore: update openssl to 1.1.1n490c7b7chore: enable aarch64 NVIDIA driversb794b7achore: bump linux-firmware to 20220310acda207chore: bump kernel to 5.15.28e0fec11chore: bump nvidia driver to 510.540407f05chore: bump kernel to 5.15.27
Changes from siderolabs/tools
11 commits
8c1f801chore: bump coreutils to 9.1533d5c9chore: bump git to 2.35.2a15cbeechore: bump go to 1.18.1718ec10chore: enable conforma60a332chore: bump xz and gzipc8a3d4dchore: update go to 1.181684fdcchore: bump expat to 2.4.87f5e44cchore: bump zlib to 1.2.12bfc99cachore: rename org99be089chore: update openssl to 1.1.1nb63872bchore: update golang to 1.17.8
Changes from talos-systems/go-blockdevice
2 commits
Dependency Changes
- cloud.google.com/go/compute v1.5.0 -> v1.6.0
- github.com/BurntSushi/toml v1.0.0 -> v1.1.0
- github.com/aws/aws-sdk-go v1.43.8 -> v1.43.41
- github.com/containernetworking/plugins v1.1.0 -> v1.1.1
- github.com/cosi-project/runtime 264f8fcd1a4f -> 639b4a2e6120
- github.com/docker/distribution v2.8.0 -> v2.8.1
- github.com/docker/docker v20.10.12 -> v20.10.14
- github.com/gdamore/tcell/v2 f057f0a857a1 -> v2.5.1
- github.com/google/nftables 211824995dcb -> 950e408d48c6
- github.com/insomniacslk/dhcp 3c283ff8b7dd -> 12fbdcb11b41
- github.com/jsimonetti/rtnetlink v1.1.0 -> v1.2.0
- github.com/rivo/tview 96063d6082f3 -> 9994674d60a8
- github.com/rs/xid v1.3.0 -> v1.4.0
- github.com/siderolabs/extras v1.0.0 -> v1.1.0-alpha.0-1-gac3b9a4
- github.com/siderolabs/pkgs v1.0.0-6-g7c293d5 -> v1.1.0-alpha.0-28-g95f4418
- github.com/siderolabs/tools v1.0.0-1-g4c77d96 -> v1.1.0-alpha.0-10-g8c1f801
- github.com/spf13/cobra v1.3.0 -> v1.4.0
- github.com/stretchr/testify v1.7.0 -> v1.7.1
- github.com/talos-systems/go-blockdevice v0.3.1 -> d9c3a2738861
- github.com/vishvananda/netlink 650dca95af54 -> v1.2.0-beta
- github.com/vmware-tanzu/sonobuoy v0.56.2 -> v0.56.4
- github.com/vmware/vmw-guestinfo cc1fd90d572c -> 510905f0efa3
- go.etcd.io/etcd/api/v3 v3.5.2 -> v3.5.3
- go.etcd.io/etcd/client/pkg/v3 v3.5.2 -> v3.5.3
- go.etcd.io/etcd/client/v3 v3.5.2 -> v3.5.3
- go.etcd.io/etcd/etcdutl/v3 v3.5.2 -> v3.5.3
- golang.org/x/net 27dd8689420f -> 290c469a71a5
- golang.org/x/sys 4e6760a101f9 -> 33da011f77ad
- golang.org/x/term 03fcf44c2211 -> e5f449aeb171
- golang.org/x/time 0e9765cccd65 -> 583f2d630306
- golang.zx2c4.com/wireguard/wgctrl fde48d68ee68 -> fec8f2be4827
- google.golang.org/grpc v1.44.0 -> v1.45.0
- google.golang.org/protobuf v1.27.1 -> v1.28.0
- k8s.io/api v0.23.5 -> v0.24.0-beta.0
- k8s.io/apimachinery v0.23.5 -> v0.24.0-beta.0
- k8s.io/apiserver v0.23.5 -> v0.24.0-beta.0
- k8s.io/client-go v0.23.5 -> v0.24.0-beta.0
- k8s.io/component-base v0.23.5 -> v0.24.0-beta.0
- k8s.io/cri-api v0.23.5 -> v0.24.0-beta.0
- k8s.io/kubectl v0.23.5 -> v0.24.0-beta.0
- k8s.io/kubelet v0.23.5 -> v0.24.0-beta.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.63 -> v1.2.64
Previous release can be found at v1.0.0
Talos 1.1.0-alpha.0 (2022-04-01)
Welcome to the v1.1.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Component Updates
- Kubernetes: 1.24.0-beta.0
- Flannel: 0.17.0
- runc: 1.1.1
Contributors
- Andrey Smirnov
- Noel Georgi
- Spencer Smith
- Tim Jones
- Andrew Rynhard
- Dmitriy Matrenichev
- Steve Francis
- Artem Chernyshev
- Caleb Woodbine
- Daniel Höxtermann
- Jori Huisman
- Nico Berlee
- Serge Logvinov
- Seán C McCord
- Suraj Shirvankar
- Tomasz Zurkowski
Changes
90 commits
e860312dfrelease(v1.1.0-alpha.0): prepare release2ca5279e5fix: retry manifest updates in upgrade-k8seeb756168feat: use kexec when resetting a node1ed1f73e5test: bump CAPI to 1.1.32ee1d2c72feat: update Kuberentes to 1.24.0-beta.0c26fa4ccctest: push GITHUB_TOKEN to the e2e-aws/gcp steps95d900de7feat: use kubeconfig env var0b407dd17feat: add dhcp-v6 NTP/DHCP-DUIDa140a6baddocs: update releases shortcode in upgrade guide12931dcedfix: align partitions on 1M boundary37f868e37fix: validate empty TLS config for registriesca8b9c0a3feat: update Kubernetes to 1.24.0-alpha.4d9ec6b215chore: drop dirty from abbreviated tag08624fd0bdocs: add banner to main pagefc23c7a59test: bump versions for upgrade tests4bfe68610feat: update runc to 1.1.1b315ed953chore: use go:embed instead of ldflagsa5d64fc81feat: update Flannel to 0.17.06d6eb3f6adocs: fork docs for 1.11d55f05d1docs: update index pagead6b7ec1afix: enable etcd consistency on check startup65a31f753docs: re-add GA token741c04832docs: mark 1.0 docs as lateste97433c8adocs: update jetson nano6665e0f00docs: code block copyingc41f2b216docs: update whats-new-v1.00a36fbbf3docs: add release notes for 1.0bd0035f6adocs: add NVIDIA docsefa3f2898fix: correctly find partitions with config data (metal-iso)9ebeec0d0docs: fix incorrect path for talosconfig9fef4540edocs: fix non-latest download linksf8ef6a081docs: add rook ceph configuration guidee2666f58fchore: bump kernel to 5.15.32957b2f233chore: bump dependencies0fd2aa08bfix: correctly escape '.' in volume names108fd03a7fix: give up virtual IPs before the kubelet workloads are shut down856e1333dfix: use 'localhost' endpoint in docker provisioner on Windowsc5da38609docs: use variables and templates in the docs4c83847b9docs: target search results67fb72d96docs: add algolia versions to all content5344d6e7cdocs: fix extension servicepathdependency9b9191c5efix: increase intiial window and connection window sizes7a88a0224docs: show archived/pre-release banner based on versione403470bfdocs: filter algolia results by latest0497d5f9fdocs: tag latest docs for searcha25425483feat: update containerd to 1.6.2, Linux to 5.15.319b6422fccfeat: update CoreDNS to 1.9.1020856f80docs: remove second search bar5f27f4c63docs: update asset links9ff42b432docs: fix redirects for /docs URLs7283efd56chore: update the talosctl CNI download urle0eee7fcctest: use clusterctl.yaml overrides after org rename73966f51edocs: fix extensionsf9766edb5docs: remove empty doc filee06e1473bfeat: update golangci-lint to 1.45.0 and gofumpt to 0.3.0a92c614b2docs: add enterprise link to docs header0ae7174badocs: update search settings and redirects883d401f9chore: rename github organization to siderolabsd1294d014chore: add day-two tests for e2e-qemua6240e4b6feat: update Linux to 5.15.30e3fda049fdocs: overhaul all the docsf47750726fix: the etcd recovery client and tests69e07cddcfix: trigger properlyudevdon types and actions47d0e629dfix: clean up custom udev rules if the config is clearedb6691b350chore: bump dependencies27af5d41cfeat: pause the boot process on some failures instead of rebooting58cb9db1efeat: allow hardlinks in the system extension images1e982808ffix: ignore pod CIDRs for kubelet node IPs5e0c80f61fix: ignore connection reset errors on k8s upgradec156580a3fix: split regular network operation configuration and virtual IPcd4d4c605feat: relax extensions file structure validation50594ab1afix: ignore terminated pods in pod health checks9d69fb6b4feat: update Kubernetes to 1.23.5327ce5abafix: invert the condition to skip kubelet kernel checkscf85b3f07docs: update cilium inline install84ee1795ddocs: update logocc7719c9ddocs: improve comments in security protocaf800fe8feat: implement D-Bus systemd-compatible shutdown for kubelet6bec08429feat: add talosctl completions to copy, usage, logs, restart and service355b1a4befix: refresh etcd certs on startup/joind256b5c5edocs: fix spelling mistakes5fdedae20chore: bump kernel to 5.15.2818a21b5f2chore: add dependency images-essential -> images714e5eca6chore: bump dependencies58be4067edocs: update README.mdc5fb20930docs: add loki notef448cb4f3feat: bump boot partition size to 1000 MiBa095acb09chore: fix equinixMetal platform name2a7f9a445fix: check for IPv6 before applying accept_ra59681b8c9fix: backport fixes from release-1.0 branch
Changes from siderolabs/extras
Changes from siderolabs/pkgs
18 commits
4b3e70echore: upstream u-boot for jetson nanocc1c8c7feat: update runc to 1.1.13baf4e4chore: enable random trust CPUdf31920chore: disable soundc27751bchore: bump nvidia drivers to 510.60.02ba98e20chore: bump kernel to 5.15.32a76edfdfeat: update containerd to 1.6.20c38670chore: bump kernel to 5.15.31bc4fb0cchore: org update41f291dfeat: update Flannel CNI to 1.0.158603bachore: bump kernel to 5.15.30d3bb262chore: bump kernel to 5.15.2976a24b5chore: update openssl to 1.1.1n490c7b7chore: enable aarch64 NVIDIA driversb794b7achore: bump linux-firmware to 20220310acda207chore: bump kernel to 5.15.28e0fec11chore: bump nvidia driver to 510.540407f05chore: bump kernel to 5.15.27
Changes from siderolabs/tools
Changes from talos-systems/go-blockdevice
Dependency Changes
- github.com/aws/aws-sdk-go v1.43.8 -> v1.43.26
- github.com/containernetworking/plugins v1.1.0 -> v1.1.1
- github.com/docker/distribution v2.8.0 -> v2.8.1
- github.com/docker/docker v20.10.12 -> v20.10.14
- github.com/jsimonetti/rtnetlink v1.1.0 -> v1.1.1
- github.com/rivo/tview 96063d6082f3 -> 9994674d60a8
- github.com/rs/xid v1.3.0 -> v1.4.0
- github.com/siderolabs/extras v1.0.0 -> v1.1.0-alpha.0
- github.com/siderolabs/pkgs v1.0.0-6-g7c293d5 -> v1.1.0-alpha.0-15-g4b3e70e
- github.com/siderolabs/tools v1.0.0-1-g4c77d96 -> v1.1.0-alpha.0-1-g99be089
- github.com/spf13/cobra v1.3.0 -> v1.4.0
- github.com/stretchr/testify v1.7.0 -> v1.7.1
- github.com/talos-systems/go-blockdevice v0.3.1 -> b374eb48148d
- github.com/vmware-tanzu/sonobuoy v0.56.2 -> v0.56.3
- github.com/vmware/vmw-guestinfo cc1fd90d572c -> 510905f0efa3
- golang.org/x/net 27dd8689420f -> de3da57026de
- golang.org/x/sys 4e6760a101f9 -> 530d0810a4d0
- golang.zx2c4.com/wireguard/wgctrl fde48d68ee68 -> 056925b7df31
- google.golang.org/grpc v1.44.0 -> v1.45.0
- google.golang.org/protobuf v1.27.1 -> v1.28.0
- k8s.io/api v0.23.5 -> v0.24.0-beta.0
- k8s.io/apimachinery v0.23.5 -> v0.24.0-beta.0
- k8s.io/apiserver v0.23.5 -> v0.24.0-beta.0
- k8s.io/client-go v0.23.5 -> v0.24.0-beta.0
- k8s.io/component-base v0.23.5 -> v0.24.0-beta.0
- k8s.io/cri-api v0.23.5 -> v0.24.0-beta.0
- k8s.io/kubectl v0.23.5 -> v0.24.0-beta.0
- k8s.io/kubelet v0.23.5 -> v0.24.0-beta.0
Previous release can be found at v1.0.0
Talos 0.15.0-alpha.2 (2022-02-11)
Welcome to the v0.15.0-alpha.2 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Apply Config Enhancements
talosctl apply/patch/edit cli commands got revamped.
Separate flags --on-reboot, --immediate, --interactive were replaced
with a single --mode flag that can take the following values:
autonew mode that automatically applies the configuration in immediate/reboot mode.no-rebootforce apply immediately, if not possible, then fail.rebootforce reboot with apply config.stagedwrite new machine configuration to STATE, but don't apply it (it will be applied after a reboot).interactivestarts interactive installer, only forapply.
Pinned Kubernets Version
Command talosctl gen config now defaults to Kubernetes version pinning in the generate machine configuration.
Previously default was to omit explicit Kubernetes version, so Talos picked up the default version it was built against.
Old behavior can be achieved by specifying empty flag value: --kubernetes-version=.
Machine Configuration
Talos now preserves machine configuration as it was submitted to the node.
Machine Configuration Patching
talosctl commands which accept JSON patches (gen config, cluster create, patch machineconfig) now support multiple patches, loading patches
from files with @file.json syntax, and support loading from YAML format.
Platform Support
Talos now supports Oracle Cloud.
Platform network configuration was rewritten to avoid modifying Talos machine configuration. Network configuration is performed independent of the machine configuration presence, so it works even if Talos is booted in maintenance mode (without machine configuration is platform userdata).
SBC Support
Talos now supports Jetson Nano SBC.
Static Pods in the Machine Configuration
Talos now accepts static pod definitions in the .machine.pods key of the machine configuration.
Please note that static pod definitions are not validated by Talos.
Static pod definitions can be updated without a node reboot.
System Extensions
System extensions allow extending Talos root filesystem, which enables a set of different features, including custom container runtimes, additional firmware, etc.
System extensions are only activated during Talos installation (or upgrade), and with system extensions installed, Talos root filesystem is still immutable and read-only.
Please see extensions repository and documentation for more information.
Component Updates
- Linux: 5.15.23
- Kubernetes: 1.23.3
- CoreDNS: 1.8.7
- etcd: 3.5.2
- containerd: 1.6.0-rc.0
- runc: 1.1.0
Talos is built with Go 1.17.7
Wipe System Kernel Parameter
Added new kernel parameter talos.experimental.wipe=system which can help resetting system disk for the machine
and start over with a fresh installation.
See Resetting a Machine on how to use it.
Contributors
- Andrey Smirnov
- Noel Georgi
- Artem Chernyshev
- Spencer Smith
- Serge Logvinov
- Seán C McCord
- Florian Klink
- Steve Francis
- Andrew Rynhard
- Anthony Rabbito
- Bernard Sébastien
- Charlie Haley
- Eric Wohltman
- Niklas Metje
- Philipp Sauter
- Shahar Naveh
- Tim Jones
- nebulait
Changes
137 commits
1e9f0ad4cfeat: update Go to 1.17.7, Linux to 5.15.23fef99892dchore: pin kubernetes version totalosctl gen configbcf928134feat: udev extensions support47619f832docs: update system extensions guide with grammar fixes2bcceb6e4chore: disable TIPC and B.A.T.M.A.Nc6bca1b33docs: add guide on system extensions492b156dafeat: implement static pods via machine configuration6fadfa8dbfix: parse properly IPv6 address in the cmdlineip=argd991f3982chore: update the kernel with IGC driver enabledcbc9610befeat: sysctl system optimization8b6d6220dfix: parse interface ip correctly (nocloud)54632b1bedocs: fix developing Talos docs0da370dfetest: unlock CABPT/CACPPT provider versionsdf0e388a4feat: extract firmware part of system extensions into initramfs8899dd349chore: add json-tags for SecretsBundle4f391cd5cchore: bump kernel to 5.15.226bd07406efeat: disable reboots via kexec1e3f2f952fix: validate kubelet node IP subnets correctlyd211bff47feat: enable accept_ra when IPv6 forwarding930205831chore: update kernel to 5.15.21c7186ed08chore: bump dependencies9ee470f95feat: set /etc/localtime to UTCc34768367fix: disable auto-tls for etcd9bffc7e8dfix: pass proper sequence to shutdown sequence on ACPI shutdowne47387e41chore: bump CAPI to 1.0.45462f5ed1feat: update etcd to 3.5.2f6fa12e53docs: update upgrading Talos, Kubernetes, and Docker guides5484579c1feat: allow link scope routes in the machine config56b83b087feat: enable persistence for docker provider949464e4bfix: use leaf certificate in the apid RBAC check446972f21chore: bump kernel to 5.15.19fe40e7b1bfeat: drain node on shutdown7f0b3aae0feat: add multiple config patches, patches from files, YAML support202290be7docs: update Kubernetes upgrade video036644f7achore: bump kernel to 5.15.18dcde2c4f6chore: update k8s upgrade message1c949335cdocs: add documentation for Hyper-V7f9790912fix: clean up containerd state on installer run/validate8b98d8eb3docs: clarify Filebeat example74c03120cdocs: replace Talos upgrades video65e64d425chore: update kernel to stable 5.15.174245f72d3feat: add --extra-uefi-search-paths option7ffeb6c2edocs: update oracle cloud example151c9df09chore: add CSI tests for e2e-qemucdb621c82feat: provide a way to list installed system extensionsabfb25812feat: share/lib/firmwareacross initramfs and rootfsebec5d4a0feat: support full disk path in the diskSelector831f65a07fix: close client provider instead of Talos client in the upgrade module0bf161dfftest: add integration test for system extensions7b3962745fix: handle 404 errors from AWS IMDS correctly85782faa2feat: update Kubernetes to 1.23.3c5e5922e5chore: bump dependenciesb3c3ef29bfeat: install system extensionsa0889600fchore: fix golangci-lint installa50c42980fix: use #!/usr/bin/env bash as shebang instead of #!/bin/bash4464b725cfix: qemu: always use runtime.GOARCH for CNI bundlee7379c81brelease(v0.15.0-alpha.1): prepare release58eb3600ffix: enforce reasonable TLS min tls-min-versionb8d4c5dfafix: use correct error inkernel_param_specModify call handling4961d6867docs: drop talos.interface kernel argb1e61fa5bchore: update Linux to 5.15.16d4b844593feat: support CRI configuration merging and reimplement registry configf94c8c6e1feat: update Kubernetes to 1.23.221f497b3efeat: install readonly overlay mounts during talos chroot sequence9ad5a67d2feat: inject platform network configuration as network resources907f8cbfbdocs: fix patch flagcaa434426docs: add documentation on developing Talos16eeb6776docs: readme updates3c0737027chore: update release notes6d8bea5d5feat: jetson nano SoC1d8955ebefeat: update CoreDNS to 1.8.76af83afd5fix: handle multiple-IP cluster nodes43b2d8137chore: bump dependencies529e80f4fdocs: update home page and footer37630e70cUpdate twitter linkaf440919bfix: avoid panic in config loading/validation4b8e9de59docs: add guide on adding proprietary kernel modules833dc4169docs: rework vmware assets2869b5eeafeat: add oraclecloud.com platform supportf3ec24bebfix: vmware documentation typo2f2bdb26afeat: replace flags with --mode inapply,editandpatchcommandsb09be2a69docs: update index.md and sync across versionsca65b918adocs: add nocloud documentation59437d6d8fix: filter down nameservers for docker-based cluster create194eaa6f2chore: clean up /usr/bin from unneeded files74e727240docs: update office office539af338cdocs: update vmware docs279a3fda7feat: update Go to 1.17.6, containerd to 1.5.93d3088941chore: bump Go dependenciesd02d944ecchore: provide umarshal from YAML methods for network resource specs2e735714dfix: derive machine-id from node identityd8a2721e1test: update CAPI components to latest7dff8a53efix: ignore missing init.yaml for cluster createf4516c7d8chore: bump dependencies944f13221chore: fix release pipelinecb548a368release(v0.15.0-alpha.0): prepare releaseda0b36e61feat: introducetalos.exp.wipekernel param to wipe system diskc079eb32brefactor: use AWS SDK to access AWS metadata service2f4b9d8d6feat: make machine configuration read-only in Talos (almost)524f83d3dfeat: use official Go SDK to fetch GCP instance metadatad2a7e082ctest: retry in discovery testsf4219e530chore: remove unused methods in AWS platform35bc2940efix: kexec on RPI4f235cfbaefix: multiple usability fixesb3fbb2f31test: don't build all images in the default CI pipelinedac550a50docs: fix troubleshooting guide83e8bec6bfeat: update Linux to 5.15.11d5a82b37efeat: removeApplyDynamicConfig3623da136feat: provide a way to load Linux kernel modules4d1514adddocs: update Mayastor deployment processcff1ff6d5feat: shell completion forlist,read19728437efeat: output IPs when etcd needs to be bootstrappedc297d66a1test: attempt number on two on proper retries in CLI time testsdc299da9edocs: add arm64 option to talosctl downloadf49f40a33fix: pass path to conformance retrieve results942c8074fdocs: fork docs for 0.15880a7782cdocs: update documentation for 0.14.0 releasedc9a0cfe9chore: bump Go dependencies773496935fix: config apply immediate17c147488test: retrytalosctl timecall in the testsacf1ac0f1feat: show human-readable aliases intalosctl get rd5532867b0refactor: rewrite the implementation of Processes API80350861afeat: update Kubernetes to 1.23.14c96e936edocs: add cilium guidee3f2acb5erefactor: rewrite the check for unknown keys in the machine configuration4175396a8refactor: use update go-blockdevice library with allocation fixesb58f567a1refactor: optimize Runtime config interface to avoid config marshalingbb355c9abchore: remove govalidator library3af56bd2etest: update capi templates to v1beta1936b4c4cefix: update DHCP library with the panic fixab42886bffix: allow kubelet to be started via the APIec641f729fix: use default time servers in time API if none are configured79f213eecfix: cleanup affiliates2dd0b5b68chore: update Go to 1.17.597ffa7a64feat: upgrade kubelet version intalosctl upgrade-k8s5bc5123ebdocs: documentip=kernel argument8e1d0bfb5feat: update Kubernetes to 1.23.0
Changes since v0.15.0-alpha.1
56 commits
1e9f0ad4cfeat: update Go to 1.17.7, Linux to 5.15.23fef99892dchore: pin kubernetes version totalosctl gen configbcf928134feat: udev extensions support47619f832docs: update system extensions guide with grammar fixes2bcceb6e4chore: disable TIPC and B.A.T.M.A.Nc6bca1b33docs: add guide on system extensions492b156dafeat: implement static pods via machine configuration6fadfa8dbfix: parse properly IPv6 address in the cmdlineip=argd991f3982chore: update the kernel with IGC driver enabledcbc9610befeat: sysctl system optimization8b6d6220dfix: parse interface ip correctly (nocloud)54632b1bedocs: fix developing Talos docs0da370dfetest: unlock CABPT/CACPPT provider versionsdf0e388a4feat: extract firmware part of system extensions into initramfs8899dd349chore: add json-tags for SecretsBundle4f391cd5cchore: bump kernel to 5.15.226bd07406efeat: disable reboots via kexec1e3f2f952fix: validate kubelet node IP subnets correctlyd211bff47feat: enable accept_ra when IPv6 forwarding930205831chore: update kernel to 5.15.21c7186ed08chore: bump dependencies9ee470f95feat: set /etc/localtime to UTCc34768367fix: disable auto-tls for etcd9bffc7e8dfix: pass proper sequence to shutdown sequence on ACPI shutdowne47387e41chore: bump CAPI to 1.0.45462f5ed1feat: update etcd to 3.5.2f6fa12e53docs: update upgrading Talos, Kubernetes, and Docker guides5484579c1feat: allow link scope routes in the machine config56b83b087feat: enable persistence for docker provider949464e4bfix: use leaf certificate in the apid RBAC check446972f21chore: bump kernel to 5.15.19fe40e7b1bfeat: drain node on shutdown7f0b3aae0feat: add multiple config patches, patches from files, YAML support202290be7docs: update Kubernetes upgrade video036644f7achore: bump kernel to 5.15.18dcde2c4f6chore: update k8s upgrade message1c949335cdocs: add documentation for Hyper-V7f9790912fix: clean up containerd state on installer run/validate8b98d8eb3docs: clarify Filebeat example74c03120cdocs: replace Talos upgrades video65e64d425chore: update kernel to stable 5.15.174245f72d3feat: add --extra-uefi-search-paths option7ffeb6c2edocs: update oracle cloud example151c9df09chore: add CSI tests for e2e-qemucdb621c82feat: provide a way to list installed system extensionsabfb25812feat: share/lib/firmwareacross initramfs and rootfsebec5d4a0feat: support full disk path in the diskSelector831f65a07fix: close client provider instead of Talos client in the upgrade module0bf161dfftest: add integration test for system extensions7b3962745fix: handle 404 errors from AWS IMDS correctly85782faa2feat: update Kubernetes to 1.23.3c5e5922e5chore: bump dependenciesb3c3ef29bfeat: install system extensionsa0889600fchore: fix golangci-lint installa50c42980fix: use #!/usr/bin/env bash as shebang instead of #!/bin/bash4464b725cfix: qemu: always use runtime.GOARCH for CNI bundle
Changes from talos-systems/crypto
Changes from talos-systems/extras
3 commits
Changes from talos-systems/go-blockdevice
3 commits
Changes from talos-systems/net
Changes from talos-systems/pkgs
25 commits
6019223chore: bump kernel to 5.15.23ff4b2d8chore: bump tools for Go 1.17.7e34f883chore: disable TIPC and B.A.T.M.A.N2b8cd88feat: add Intel Ethernet Controller I225-V driver407459dfeat: enable zstd squashfs compression and firmware (xz) compression81a4b1cchore: bump kernel to 5.15.22c9a6415chore: bump kernel to 5.15.2190dcd00chore: bump kernel to 5.15.19d457b87chore: bump kernel to 5.15.18dd69678chore: disable ATA-over-Ethernet driver for arm64388ce13chore: bump kernel to 5.15.17c14eb99feat: update Linux to 5.15.165d4d8d6feat: bump containerd to 1.6.0-rc.0, runc to 1.1.05dd08a7feat: jetson nano SoC402b960chore: bump u-boot to 2022.016ce1a40feat: update Go to 1.17.608f2519feat: update containerd to 1.5.9fbb5c5cfeat: add qlcnic drivers to kernel0505e01chore: fix=mkernel build options54aa902feat: enable amdgpu in kernel2779c3ffix: kexec on rpi4950361ffeat: update Linux to 5.15.11ad611bcfeat: provide build instructions for NVIDIA kernel moduleb22723dfeat: update iPXE to the latest available versiona675c67feat: update Go to 1.17.5
Changes from talos-systems/tools
4 commits
Dependency Changes
- cloud.google.com/go/compute v1.2.0 new
- github.com/BurntSushi/toml v0.4.1 -> v1.0.0
- github.com/aws/aws-sdk-go v1.42.47 new
- github.com/containerd/cgroups v1.0.2 -> v1.0.3
- github.com/containerd/containerd v1.5.8 -> v1.6.0-rc.2
- github.com/docker/docker v20.10.11 -> v20.10.12
- github.com/google/go-cmp v0.5.6 -> v0.5.7
- github.com/google/nftables 16a134723a96 -> 91d3b4571db1
- github.com/hashicorp/go-getter v1.5.9 -> v1.5.11
- github.com/hashicorp/go-version v1.4.0 new
- github.com/insomniacslk/dhcp 5297eed8f489 -> 3c283ff8b7dd
- github.com/jsimonetti/rtnetlink fd9a11f42291 -> v1.1.0
- github.com/jxskiss/base62 v1.0.0 -> v1.1.0
- github.com/mdlayher/ethtool 288d040e9d60 -> 81c2608dd90e
- github.com/mdlayher/genetlink v1.0.0 -> v1.2.0
- github.com/mdlayher/netlink v1.4.2 -> v1.6.0
- github.com/opencontainers/image-spec v1.0.2 new
- github.com/packethost/packngo v0.20.0 -> v0.21.0
- github.com/pelletier/go-toml v1.9.4 new
- github.com/pmorjan/kmod v1.0.0 new
- github.com/rivo/tview 2a6de950f73b -> 1f7581b67bd1
- github.com/spf13/cobra v1.2.1 -> v1.3.0
- github.com/talos-systems/crypto v0.3.4 -> 510b0d2753a8
- github.com/talos-systems/extras v0.7.0-1-gd6b73a7 -> v0.8.0-alpha.0-2-g8f607fc
- github.com/talos-systems/go-blockdevice v0.2.5 -> 7b9de26bc6bc
- github.com/talos-systems/net v0.3.1 -> 409926aec1c3
- github.com/talos-systems/pkgs v0.9.0-1-g7a3419a -> v0.10.0-alpha.0-24-g6019223
- github.com/talos-systems/tools v0.9.0-1-gb1146f9 -> v0.10.0-alpha.0-3-g4c9e7a4
- github.com/u-root/u-root v7.0.0 -> v0.8.0
- github.com/vishvananda/netlink f5de75959ad5 -> 650dca95af54
- github.com/vmware-tanzu/sonobuoy v0.55.1 -> v0.56.0
- github.com/vmware/govmomi v0.27.2 -> v0.27.3
- go.etcd.io/etcd/api/v3 v3.5.1 -> v3.5.2
- go.etcd.io/etcd/client/pkg/v3 v3.5.1 -> v3.5.2
- go.etcd.io/etcd/client/v3 v3.5.1 -> v3.5.2
- go.etcd.io/etcd/etcdutl/v3 v3.5.1 -> v3.5.2
- go.uber.org/zap v1.19.1 -> v1.20.0
- golang.org/x/net 491a49abca63 -> cd36cc0744dd
- golang.org/x/sys 97ca703d548d -> 1c1b9b1eba6a
- golang.zx2c4.com/wireguard/wgctrl dd7407c86d22 -> daad0b7ba671
- google.golang.org/grpc v1.42.0 -> v1.44.0
- k8s.io/api v0.23.1 -> v0.23.3
- k8s.io/apimachinery v0.23.1 -> v0.23.3
- k8s.io/client-go v0.23.1 -> v0.23.3
- k8s.io/component-base v0.23.1 -> v0.23.3
- k8s.io/kubectl v0.23.1 -> v0.23.3
- k8s.io/kubelet v0.23.1 -> v0.23.3
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.61 -> v1.2.63
Previous release can be found at v0.14.0
Talos 0.15.0-alpha.1 (2022-01-24)
Welcome to the v0.15.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Apply Config Enhancements
talosctl apply/patch/edit cli commands got revamped.
Separate flags --on-reboot, --immediate, --interactive were replaced
with a single --mode flag that can take the following values:
autonew mode that automatically applies the configuration in immediate/reboot mode.no-rebootforce apply immediately, if not possible, then fail.rebootforce reboot with apply config.stagedwrite new machine configuration to STATE, but don't apply it (it will be applied after a reboot).interactivestarts interactive installer, only forapply.
Machine Configuration
Talos now preserves machine configuration as it was submitted to the node.
Platform Support
Talos now supports Oracle Cloud.
Platform network configuration was rewritten to avoid modifying Talos machine configuration. Network configuration is performed independent of the machine configuration presence, so it works even if Talos is booted in maintenance mode (without machine configuration is platform userdata).
SBC Support
Talos now supports Jetson Nano SBC.
Component Updates
- Linux: 5.15.16
- containerd: 1.5.9
- CoreDNS: 1.8.7
- containerd: 1.6.0-rc.0
- runc: 1.1.0
Talos is built with Go 1.17.6
Wipe System Kernel Parameter
Added new kernel parameter talos.experimental.wipe=system which can help resetting system disk for the machine
and start over with a fresh installation.
See Resetting a Machine on how to use it.
Contributors
- Andrey Smirnov
- Noel Georgi
- Spencer Smith
- Artem Chernyshev
- Seán C McCord
- Steve Francis
- Serge Logvinov
- Andrew Rynhard
- Anthony Rabbito
- Eric Wohltman
- Niklas Metje
- Shahar Naveh
Changes
80 commits
58eb3600ffix: enforce reasonable TLS min tls-min-versionb8d4c5dfafix: use correct error inkernel_param_specModify call handling4961d6867docs: drop talos.interface kernel argb1e61fa5bchore: update Linux to 5.15.16d4b844593feat: support CRI configuration merging and reimplement registry configf94c8c6e1feat: update Kubernetes to 1.23.221f497b3efeat: install readonly overlay mounts during talos chroot sequence9ad5a67d2feat: inject platform network configuration as network resources907f8cbfbdocs: fix patch flagcaa434426docs: add documentation on developing Talos16eeb6776docs: readme updates3c0737027chore: update release notes6d8bea5d5feat: jetson nano SoC1d8955ebefeat: update CoreDNS to 1.8.76af83afd5fix: handle multiple-IP cluster nodes43b2d8137chore: bump dependencies529e80f4fdocs: update home page and footer37630e70cUpdate twitter linkaf440919bfix: avoid panic in config loading/validation4b8e9de59docs: add guide on adding proprietary kernel modules833dc4169docs: rework vmware assets2869b5eeafeat: add oraclecloud.com platform supportf3ec24bebfix: vmware documentation typo2f2bdb26afeat: replace flags with --mode inapply,editandpatchcommandsb09be2a69docs: update index.md and sync across versionsca65b918adocs: add nocloud documentation59437d6d8fix: filter down nameservers for docker-based cluster create194eaa6f2chore: clean up /usr/bin from unneeded files74e727240docs: update office office539af338cdocs: update vmware docs279a3fda7feat: update Go to 1.17.6, containerd to 1.5.93d3088941chore: bump Go dependenciesd02d944ecchore: provide umarshal from YAML methods for network resource specs2e735714dfix: derive machine-id from node identityd8a2721e1test: update CAPI components to latest7dff8a53efix: ignore missing init.yaml for cluster createf4516c7d8chore: bump dependencies944f13221chore: fix release pipelinecb548a368release(v0.15.0-alpha.0): prepare releaseda0b36e61feat: introducetalos.exp.wipekernel param to wipe system diskc079eb32brefactor: use AWS SDK to access AWS metadata service2f4b9d8d6feat: make machine configuration read-only in Talos (almost)524f83d3dfeat: use official Go SDK to fetch GCP instance metadatad2a7e082ctest: retry in discovery testsf4219e530chore: remove unused methods in AWS platform35bc2940efix: kexec on RPI4f235cfbaefix: multiple usability fixesb3fbb2f31test: don't build all images in the default CI pipelinedac550a50docs: fix troubleshooting guide83e8bec6bfeat: update Linux to 5.15.11d5a82b37efeat: removeApplyDynamicConfig3623da136feat: provide a way to load Linux kernel modules4d1514adddocs: update Mayastor deployment processcff1ff6d5feat: shell completion forlist,read19728437efeat: output IPs when etcd needs to be bootstrappedc297d66a1test: attempt number on two on proper retries in CLI time testsdc299da9edocs: add arm64 option to talosctl downloadf49f40a33fix: pass path to conformance retrieve results942c8074fdocs: fork docs for 0.15880a7782cdocs: update documentation for 0.14.0 releasedc9a0cfe9chore: bump Go dependencies773496935fix: config apply immediate17c147488test: retrytalosctl timecall in the testsacf1ac0f1feat: show human-readable aliases intalosctl get rd5532867b0refactor: rewrite the implementation of Processes API80350861afeat: update Kubernetes to 1.23.14c96e936edocs: add cilium guidee3f2acb5erefactor: rewrite the check for unknown keys in the machine configuration4175396a8refactor: use update go-blockdevice library with allocation fixesb58f567a1refactor: optimize Runtime config interface to avoid config marshalingbb355c9abchore: remove govalidator library3af56bd2etest: update capi templates to v1beta1936b4c4cefix: update DHCP library with the panic fixab42886bffix: allow kubelet to be started via the APIec641f729fix: use default time servers in time API if none are configured79f213eecfix: cleanup affiliates2dd0b5b68chore: update Go to 1.17.597ffa7a64feat: upgrade kubelet version intalosctl upgrade-k8s5bc5123ebdocs: documentip=kernel argument8e1d0bfb5feat: update Kubernetes to 1.23.0
Changes since v0.15.0-alpha.0
37 commits
58eb3600ffix: enforce reasonable TLS min tls-min-versionb8d4c5dfafix: use correct error inkernel_param_specModify call handling4961d6867docs: drop talos.interface kernel argb1e61fa5bchore: update Linux to 5.15.16d4b844593feat: support CRI configuration merging and reimplement registry configf94c8c6e1feat: update Kubernetes to 1.23.221f497b3efeat: install readonly overlay mounts during talos chroot sequence9ad5a67d2feat: inject platform network configuration as network resources907f8cbfbdocs: fix patch flagcaa434426docs: add documentation on developing Talos16eeb6776docs: readme updates3c0737027chore: update release notes6d8bea5d5feat: jetson nano SoC1d8955ebefeat: update CoreDNS to 1.8.76af83afd5fix: handle multiple-IP cluster nodes43b2d8137chore: bump dependencies529e80f4fdocs: update home page and footer37630e70cUpdate twitter linkaf440919bfix: avoid panic in config loading/validation4b8e9de59docs: add guide on adding proprietary kernel modules833dc4169docs: rework vmware assets2869b5eeafeat: add oraclecloud.com platform supportf3ec24bebfix: vmware documentation typo2f2bdb26afeat: replace flags with --mode inapply,editandpatchcommandsb09be2a69docs: update index.md and sync across versionsca65b918adocs: add nocloud documentation59437d6d8fix: filter down nameservers for docker-based cluster create194eaa6f2chore: clean up /usr/bin from unneeded files74e727240docs: update office office539af338cdocs: update vmware docs279a3fda7feat: update Go to 1.17.6, containerd to 1.5.93d3088941chore: bump Go dependenciesd02d944ecchore: provide umarshal from YAML methods for network resource specs2e735714dfix: derive machine-id from node identityd8a2721e1test: update CAPI components to latest7dff8a53efix: ignore missing init.yaml for cluster createf4516c7d8chore: bump dependencies
Changes from talos-systems/crypto
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
2 commits
Changes from talos-systems/pkgs
14 commits
c14eb99feat: update Linux to 5.15.165d4d8d6feat: bump containerd to 1.6.0-rc.0, runc to 1.1.05dd08a7feat: jetson nano SoC402b960chore: bump u-boot to 2022.016ce1a40feat: update Go to 1.17.608f2519feat: update containerd to 1.5.9fbb5c5cfeat: add qlcnic drivers to kernel0505e01chore: fix=mkernel build options54aa902feat: enable amdgpu in kernel2779c3ffix: kexec on rpi4950361ffeat: update Linux to 5.15.11ad611bcfeat: provide build instructions for NVIDIA kernel moduleb22723dfeat: update iPXE to the latest available versiona675c67feat: update Go to 1.17.5
Changes from talos-systems/tools
Dependency Changes
- cloud.google.com/go/compute v1.0.0 new
- github.com/BurntSushi/toml v0.4.1 -> v1.0.0
- github.com/aws/aws-sdk-go v1.42.35 new
- github.com/containerd/containerd v1.5.8 -> v1.6.0-rc.0
- github.com/containerd/containerd/api v1.6.0-beta.3 new
- github.com/docker/docker v20.10.11 -> v20.10.12
- github.com/google/nftables 16a134723a96 -> 6f19c4381e13
- github.com/hashicorp/go-getter v1.5.9 -> v1.5.11
- github.com/jsimonetti/rtnetlink fd9a11f42291 -> 9dff439f7e79
- github.com/jxskiss/base62 v1.0.0 -> v1.1.0
- github.com/mdlayher/ethtool 288d040e9d60 -> bc8fdcf6e99c
- github.com/mdlayher/genetlink v1.0.0 -> v1.1.0
- github.com/mdlayher/netlink v1.4.2 -> v1.5.0
- github.com/packethost/packngo v0.20.0 -> v0.21.0
- github.com/pelletier/go-toml v1.9.4 new
- github.com/pmorjan/kmod v1.0.0 new
- github.com/rivo/tview 2a6de950f73b -> 90d72bc664f5
- github.com/spf13/cobra v1.2.1 -> v1.3.0
- github.com/talos-systems/crypto v0.3.4 -> 6fa2d93d0382
- github.com/talos-systems/extras v0.7.0-1-gd6b73a7 -> v0.8.0-alpha.0-1-g7c1f3cc
- github.com/talos-systems/go-blockdevice v0.2.5 -> 6928ee43c303
- github.com/talos-systems/pkgs v0.9.0-1-g7a3419a -> v0.10.0-alpha.0-13-gc14eb99
- github.com/talos-systems/tools v0.9.0-1-gb1146f9 -> v0.10.0-alpha.0-1-g67314b1
- github.com/u-root/u-root v7.0.0 -> v0.8.0
- github.com/vishvananda/netlink f5de75959ad5 -> 650dca95af54
- go.uber.org/zap v1.19.1 -> v1.20.0
- golang.org/x/net 491a49abca63 -> 0dd24b26b47d
- golang.org/x/sys 97ca703d548d -> da31bd327af9
- golang.zx2c4.com/wireguard/wgctrl dd7407c86d22 -> daad0b7ba671
- google.golang.org/grpc v1.42.0 -> v1.43.0
- k8s.io/api v0.23.1 -> v0.23.2
- k8s.io/apimachinery v0.23.1 -> v0.23.2
- k8s.io/client-go v0.23.1 -> v0.23.2
- k8s.io/component-base v0.23.1 -> v0.23.2
- k8s.io/kubectl v0.23.1 -> v0.23.2
- k8s.io/kubelet v0.23.1 -> v0.23.2
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.61 -> v1.2.62
Previous release can be found at v0.14.0
Talos 0.15.0-alpha.0 (2021-12-30)
Welcome to the v0.15.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Machine Configuration
Talos now preserves machine configuration as it was submitted to the node. There is some work still going on various cloud platforms to stop modifying machine configuration on the fly.
Component Updates
- Linux: 5.15.11
Wipe System Kernel Parameter
Added new kernel parameter talos.experimental.wipe=system which can help resetting system disk for the machine
and start over with a fresh installation.
See Resetting a Machine on how to use it.
Contributors
- Andrey Smirnov
- Noel Georgi
- Spencer Smith
- Artem Chernyshev
- Niklas Metje
Changes
41 commits
da0b36e61feat: introducetalos.exp.wipekernel param to wipe system diskc079eb32brefactor: use AWS SDK to access AWS metadata service2f4b9d8d6feat: make machine configuration read-only in Talos (almost)524f83d3dfeat: use official Go SDK to fetch GCP instance metadatad2a7e082ctest: retry in discovery testsf4219e530chore: remove unused methods in AWS platform35bc2940efix: kexec on RPI4f235cfbaefix: multiple usability fixesb3fbb2f31test: don't build all images in the default CI pipelinedac550a50docs: fix troubleshooting guide83e8bec6bfeat: update Linux to 5.15.11d5a82b37efeat: removeApplyDynamicConfig3623da136feat: provide a way to load Linux kernel modules4d1514adddocs: update Mayastor deployment processcff1ff6d5feat: shell completion forlist,read19728437efeat: output IPs when etcd needs to be bootstrappedc297d66a1test: attempt number on two on proper retries in CLI time testsdc299da9edocs: add arm64 option to talosctl downloadf49f40a33fix: pass path to conformance retrieve results942c8074fdocs: fork docs for 0.15880a7782cdocs: update documentation for 0.14.0 releasedc9a0cfe9chore: bump Go dependencies773496935fix: config apply immediate17c147488test: retrytalosctl timecall in the testsacf1ac0f1feat: show human-readable aliases intalosctl get rd5532867b0refactor: rewrite the implementation of Processes API80350861afeat: update Kubernetes to 1.23.14c96e936edocs: add cilium guidee3f2acb5erefactor: rewrite the check for unknown keys in the machine configuration4175396a8refactor: use update go-blockdevice library with allocation fixesb58f567a1refactor: optimize Runtime config interface to avoid config marshalingbb355c9abchore: remove govalidator library3af56bd2etest: update capi templates to v1beta1936b4c4cefix: update DHCP library with the panic fixab42886bffix: allow kubelet to be started via the APIec641f729fix: use default time servers in time API if none are configured79f213eecfix: cleanup affiliates2dd0b5b68chore: update Go to 1.17.597ffa7a64feat: upgrade kubelet version intalosctl upgrade-k8s5bc5123ebdocs: documentip=kernel argument8e1d0bfb5feat: update Kubernetes to 1.23.0
Changes from talos-systems/crypto
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
2 commits
Changes from talos-systems/pkgs
5 commits
Changes from talos-systems/tools
Dependency Changes
- cloud.google.com/go v0.99.0 new
- github.com/aws/aws-sdk-go v1.42.25 new
- github.com/docker/docker v20.10.11 -> v20.10.12
- github.com/google/nftables 16a134723a96 -> 6f19c4381e13
- github.com/jsimonetti/rtnetlink fd9a11f42291 -> 9dff439f7e79
- github.com/mdlayher/ethtool 288d040e9d60 -> bc8fdcf6e99c
- github.com/mdlayher/genetlink v1.0.0 -> v1.1.0
- github.com/mdlayher/netlink v1.4.2 -> v1.5.0
- github.com/pmorjan/kmod v1.0.0 new
- github.com/spf13/cobra v1.2.1 -> v1.3.0
- github.com/talos-systems/crypto v0.3.4 -> 6fa2d93d0382
- github.com/talos-systems/extras v0.7.0-1-gd6b73a7 -> v0.8.0-alpha.0
- github.com/talos-systems/go-blockdevice v0.2.5 -> 6928ee43c303
- github.com/talos-systems/pkgs v0.9.0-1-g7a3419a -> v0.10.0-alpha.0-4-g2779c3f
- github.com/talos-systems/tools v0.9.0-1-gb1146f9 -> v0.10.0-alpha.0
- golang.org/x/net 491a49abca63 -> fe4d6282115f
- golang.org/x/sys 97ca703d548d -> 1d35b9e2eb4e
- golang.zx2c4.com/wireguard/wgctrl dd7407c86d22 -> 7a385b3431de
- google.golang.org/grpc v1.42.0 -> v1.43.0
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.61 -> v1.2.62
Previous release can be found at v0.14.0
Talos 0.14.0-alpha.2 (2021-11-30)
Welcome to the v0.14.0-alpha.2 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Kexec and capabilities
When kexec support is disabled
Talos no longer drops Linux capabilities (CAP_SYS_BOOT and CAP_SYS_MODULES) for child processes.
That is helpful for advanced use-cases like Docker-in-Docker.
If you want to permanently disable kexec and capabilities dropping, pass kexec_load_disabled=1 argument to the kernel.
For example:
install:
extraKernelArgs:
- sysctl.kernel.kexec_load_disabled=1
Please note that capabilities are dropped before machine configuration is loaded,
so disabling kexec via machine.sysctls will not be enough.
Cluster Discovery
Cluster Discovery is enabled by default for Talos 0.14.
Cluster Discovery can be disabled with talosctl gen config --with-cluster-discovery=false.
Kubelet
Kubelet service can now be restarted with talosctl service kubelet restart.
Kubelet node IP configuration (.machine.kubelet.nodeIP.validSubnets) can now include negative subnet matches (prefixed with !).
Log Shipping
Talos can now ship system logs
to the configured destination using either JSON-over-UDP or JSON-over-TCP:
see .machine.logging machine configuration option.
NTP Sync
Talos NTP sync process was improved to align better with kernel time adjustment periods and to filter out spikes.
SideroLink
A set of Talos ehancements is going to unlock a number of exciting features in the upcoming release of Sidero:
SideroLink: a point-to-point Wireguard tunnel connecting Talos node back to the provisioning platform (Sidero).- event sink (kernel arg
talos.event.sink=http://10.0.0.1:4000) delivers Talos internal events to the specified destination. - kmsg log delivery (kernel arg
talos.logging.kernel=tcp://10.0.0.1:4001) sends kernel logs as JSON lines over TCP or UDP.
talosctl support
talosctl CLI tool now has a new subcommand called support, that can gather all
cluster information that could help with future debugging in a single run.
Output of the command is a zip archive with all talos service logs, kubernetes pod logs and manifests,
talos resources manifests and so on.
Generated archive does not contain any secret information so it is safe to send it for analysis to a third party.
Component Updates
- Linux: 5.15.5
- etcd: 3.5.1
- containerd: 1.5.8
- Kubernetes: 1.23.0-rc.0
- CoreDNS: 1.8.6
Talos is built with Go 1.17.3
Kubernetes Upgrade Enhancements
talosctl upgrade-k8s now syncs all Talos manifest resources generated from templates.
So there is no need to update CoreDNS, Flannel container manually after running upgrade-k8s anymore.
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Artem Chernyshev
- Serge Logvinov
- Noel Georgi
- Nico Berlee
- Spencer Smith
- Alex Zero
- Andrew Rynhard
- Branden Cash
- David Haines
- Gerard de Leeuw
- Michael Fornaro
- Rui Lopes
Changes
136 commits
e9f4b7b2feat: update Linux to 5.15.54d0a75a3docs: add documentation about logging8d1cbeefchore: add API breaking changes detectored7fb9dbfeat: move kubelet proccesses to /podruntime cgroup2cd3f9befeat: filter out SideroLink addresses by default0f169bf9chore: add API deprecations mechanismeaf6d472refactor: use random port listener in kernel log delivery testsbf4c81e7feat: kernel log (kmsg) delivery controllerf3149780feat: update Kubernetes to 1.23.0-rc.0b824909dfix: disable kexec on RPi43257751bfix: initialize Drainer properlye4bc68bffix: leave only a single IPv4/IPv6 address as kubelet's node IPe6d00741feat: update pkgs - Linux 5.15.4, LibreSSL 3.2.7d5cbc364feat: add GCP ccm7433150ffeat: implement events sink controllerb4a406aetest: pin cluster API templates version to tag v1alpha49427e78dfix: catch panics in network operator runsd1f55f90fix: update blockdevice library to properly handle absent GPT5ac64b2dchore: set version in unit-tests20d39c0bchore: format .proto files852bf4a7feat: talosctl fish completion support6bb75150fix: allow add_key and request_key in kubelet seccomp profile6487b21ffeat: update pkgs for u-boot, containerd, etcf7d1e777feat: provide SideroLink client implementation58892cd6fix: unblock events watch on context cancelcaa76be2fix: containerd failed to load plugin1ffa8e04feat: add ULA prefix for SideroLinkc6a67b86fix: ignore not existing nodes on cordoningf7302525feat: add new event types7c9b082ffeat: update Kubernetes to 1.23.0-beta.0750e31c4fix: ignore EBUSY fromkexec_file_load2d11b595fix: ignore virtual IP as kubelet node IPs030fd349fix: don't run kexec prepare on shutdown and reset6dcce20etest: set proper pod CIDR for Cilium tests695300darelease(v0.14.0-alpha.1): prepare release753a8218refactor: move pkg/resources to machinery0102a64arefactor: remove pkg/resources dependencies on wgtypes, netx7462733bchore: update golangci-lint032c99a0refactor: remove pkg/resources dependencies on k8s and base624a5cff45perf: raspberry PIs clockspeed as fast as firmware allowsa76f6d69feat: allow kubelet to be restarted and provide negative nodeIP subnets189221d5chore: update dependencies41f0aeccdocs: update partition info95105071chore: fix simple issues found by golangci-lintd4b0ca21test: retry upgrade mutex lock failures4357e9a8docs: add Talos partions info8e8687d7fix: use temporary sonobuoy versione4e8e873test: disable e2e-misc test with Canal CNI897da2f6docs: common typosa50483ddfeat: update Linux to 5.15.1a2233bfefix: improve NTP sync process7efc1238fix: parse partition size correctlyd6147eb1chore: update sonobuoyefbae785fix: use etc folder for du cli tests198eea51fix: wait for follow reader to start before writing to the filee7f715ebchore: log KubeSpan IPs overlaps82a1ad16chore: bump dependenciese8fccbf5fix: clear time adjustment error when setting time to specific valuee6f90bb4chore: remove unused parameters785161d1feat: update k8s to 1.23.0-alpha.4fe228d7cfix: do not use yaml.v2 in the support cmd9b48ca21fix: endpoints and nodes in generated talosconfig6e16fd2fchore: update tools, pkgs, and extras261c497cfeat: implementtalosctl supportcommandfc7dc454chore: check our API idiosyncrasiesb1584429feat: use GCP deployment manager3e7d4df9chore: bump dependencies88f24229refactor: get rid of prometheus/procfs dependency in pkg/resourcesdd196d30refactor: prepare for move of pkg/resources to machineryf6110f80fix: remove listening socket to fix Talos in a container restart53bbb13edocs: update docs with emmc boot guide8329d211chore: split polymorphic RootSecret resource into specific typesc97becddchore: remove interfaces and routes APIsd798635dfeat: automatically limit kubelet node IP family based on service CIDRs205a8d6dchore: make nethelpers build on all OSes5b5dd49ffeat: extract JSON fields from more log messageseb4f1182docs: create cluster in hetzner cloud728164e2docs: fix kexec_load_disabled param name in release notesf6328f09fix: fix filename typo01b0f0abrelease(v0.14.0-alpha.0): prepare release8b620653fix: skip generating empty.machine.logging60ad0063fix: don't drop ability to use ambient capabilitiesb6b78e7ftest: add cluster discovery integration tests97d64d16fix: hcloud network config changes4c76865dfeat: multiple logging improvements1d1e1df6fix: handle skipped mounts correctly0a964d92test: fix openstack unit-test stability72f62ac2chore: bump Go and Docker dependencies9c48ebe8fix: gcp fetching externalIP6c297268test: fix e2e k8s versionae5af9d3feat: update Kubernetes to 1.23.0-alpha.328d3a69efeat: openstack config-drive support2258bc49test: update GCP e2e script to work with new templates36b6ace2feat: update Linux to 5.10.7538516a54test: update Talos versions in upgrade testscff20ec7fix: change services OOM score666a2b62feat: azure platform ipv6 supportd32814e3feat: extract JSON fields from log linese77d81fffix: treat literal 'unknown' as a valid machine typec8e404e3test: update vars for AWS clusterad23891bfeat: update CoreDNS version 1.8.641299caefeat: udev rules support5237fdc9feat: send JSON logs over UDP6d44587afeat: coredns service dualstack12f7888bfeat: feed control plane endpoints on workers from cluster discovery431e4fb4chore: bump Go and Docker dependencies89f3b9f8feat: update etcd to 3.5.1e60469a3feat: initial support for JSON logging68c420e3feat: enable cluster discovery by default3e100aa9test: workaround EventsWatch test flakiness9bd4838achore: stop using sonobuoy CLI6ad45951docs: fix field names for bonding configurationd7a3b7b5chore: use discovery-client and discovery-api modulesd6309eeddocs: create docs for Talos 0.14c0fda643fix: attempt to clean up tasks in containerd runner8cf442dachore: bump tools, pkgs, extras0dad5f4dchore: small cleanupe3e2113afeat: upgrade CoreDNS duringupgrade-k8scalld92c98e1docs: fix discovery service documentation linke44b11c5feat: update containerd to 1.5.7, bump Go dependencies24129307docs: make Talos 0.13 docs latest, update documentation31b6e39efix: delete expired affiliates from the discovery service877a2b6ftest: bump CAPI components to v1alpha42ba0e0acdocs: add KubeSpan documentation997873b6fix: use ECDSA-SHA512 when generating certs for Talos < 0.137137166dfix: allow overridingaudit-policy-fileinkube-apiserverstatic pod8fcd4219chore: fix integration-qemu-race91a858b5fix: sort output of the argument builder657f7a56fix: use ECDSA-SHA256 signature algorithm for Kubernetes certs983d2459feat: suppress logging NTP sync to the console022c7335fix: add interface route if DHCP4 router is not directly routeable66a1579efix: don't enable 'no new privs' on the system level423861cffeat: don't drop capabilities if kexec is disabledfacc8c38docs: fix documentation for cluster discoveryce65ca4echore: build using only amd64 builderse9b0f010chore: update docker image in the pipeline
Changes since v0.14.0-alpha.1
34 commits
e9f4b7b2feat: update Linux to 5.15.54d0a75a3docs: add documentation about logging8d1cbeefchore: add API breaking changes detectored7fb9dbfeat: move kubelet proccesses to /podruntime cgroup2cd3f9befeat: filter out SideroLink addresses by default0f169bf9chore: add API deprecations mechanismeaf6d472refactor: use random port listener in kernel log delivery testsbf4c81e7feat: kernel log (kmsg) delivery controllerf3149780feat: update Kubernetes to 1.23.0-rc.0b824909dfix: disable kexec on RPi43257751bfix: initialize Drainer properlye4bc68bffix: leave only a single IPv4/IPv6 address as kubelet's node IPe6d00741feat: update pkgs - Linux 5.15.4, LibreSSL 3.2.7d5cbc364feat: add GCP ccm7433150ffeat: implement events sink controllerb4a406aetest: pin cluster API templates version to tag v1alpha49427e78dfix: catch panics in network operator runsd1f55f90fix: update blockdevice library to properly handle absent GPT5ac64b2dchore: set version in unit-tests20d39c0bchore: format .proto files852bf4a7feat: talosctl fish completion support6bb75150fix: allow add_key and request_key in kubelet seccomp profile6487b21ffeat: update pkgs for u-boot, containerd, etcf7d1e777feat: provide SideroLink client implementation58892cd6fix: unblock events watch on context cancelcaa76be2fix: containerd failed to load plugin1ffa8e04feat: add ULA prefix for SideroLinkc6a67b86fix: ignore not existing nodes on cordoningf7302525feat: add new event types7c9b082ffeat: update Kubernetes to 1.23.0-beta.0750e31c4fix: ignore EBUSY fromkexec_file_load2d11b595fix: ignore virtual IP as kubelet node IPs030fd349fix: don't run kexec prepare on shutdown and reset6dcce20etest: set proper pod CIDR for Cilium tests
Changes from talos-systems/discovery-api
Changes from talos-systems/discovery-client
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
2 commits
Changes from talos-systems/go-smbios
Changes from talos-systems/net
2 commits
Changes from talos-systems/pkgs
22 commits
422276dfeat: update Linux to 5.15.5d385e24chore: update LibreSSL to 3.2.739a3b76feat: update Linux to 5.15.4ca30b50feat: update u-boot to 2021.10cea93f1chore: add conformance79d16b8feat: update containerd to 1.5.81c76107feat: add mdraid 1/0/10740da24feat: bump raspberrypi-firmware to 1.20211029832dae4fix: enable CONFIG_DM_SNAPSHOTf307e64feat: update Linux to 5.15.14f0f238chore: update tools932c3cffeat: update libseccomp to 2.5.37f3311efeat: update cpu governor to schedutilb4cdb99fix: update containerd shas80a63d4feat: update Linux to 5.10.755c98efdfeat: add QLogic QED 25/40/100Gb Ethernet NIC driverbfb2365feat: enable driver for SuperMicro raid controller657e16bfeat: enable Intel VMD driverf7d9d72feat: enable smarpqi driver and related optionsbca3be0feat: enable aqtion device driverb88127achore: update tools971735ffeat: update containerd to 1.5.7
Changes from talos-systems/siderolink
6 commits
d0612a7refactor: pass in listener to the log receiverd86cdd5feat: implement logreceiver for kernel logsf7cadbcfix: handle duplicate peer updates0755b24feat: initial implementation of SideroLinkee73ea9feat: add Talos events sink proto files and the reference implementation1e2cd9dInitial commit
Changes from talos-systems/tools
6 commits
Dependency Changes
- github.com/AlekSi/pointer v1.1.0 -> v1.2.0
- github.com/cenkalti/backoff/v4 v4.1.2 new
- github.com/containerd/cgroups v1.0.1 -> v1.0.2
- github.com/containerd/containerd v1.5.5 -> v1.5.8
- github.com/docker/docker v20.10.8 -> v20.10.11
- github.com/evanphx/json-patch v4.11.0 -> v5.6.0
- github.com/gosuri/uiprogress v0.0.1 new
- github.com/hashicorp/go-getter v1.5.8 -> v1.5.9
- github.com/hetznercloud/hcloud-go v1.32.0 -> v1.33.1
- github.com/insomniacslk/dhcp b95caade3eac -> ad197bcd36fd
- github.com/jsimonetti/rtnetlink 435639c8e6a8 -> 93da33804786
- github.com/jxskiss/base62 4f11678b909b -> v1.0.0
- github.com/mdlayher/ethtool 2b88debcdd43 -> 288d040e9d60
- github.com/rivo/tview ee97a7ab3975 -> badfa0f0b301
- github.com/talos-systems/discovery-api v0.1.0 new
- github.com/talos-systems/discovery-client v0.1.0 new
- github.com/talos-systems/extras v0.6.0 -> v0.7.0-alpha.0-1-g2bb2efc
- github.com/talos-systems/go-blockdevice v0.2.4 -> 15b182db0cd2
- github.com/talos-systems/go-smbios v0.1.0 -> fd5ec8ce4873
- github.com/talos-systems/net v0.3.0 -> b4b718179a1a
- github.com/talos-systems/pkgs v0.8.0 -> v0.9.0-alpha.0-21-g422276d
- github.com/talos-systems/siderolink v0.1.0 new
- github.com/talos-systems/talos/pkg/machinery v0.13.0 ->
1ffa8e0480 - github.com/talos-systems/tools v0.8.0 -> v0.9.0-alpha.0-5-g96e0231
- github.com/vmware-tanzu/sonobuoy v0.53.2 -> v0.55.1
- github.com/vmware/govmomi v0.26.1 -> v0.27.2
- github.com/vmware/vmw-guestinfo 687661b8bd8e -> cc1fd90d572c
- go.etcd.io/etcd/api/v3 v3.5.0 -> v3.5.1
- go.etcd.io/etcd/client/pkg/v3 v3.5.0 -> v3.5.1
- go.etcd.io/etcd/client/v3 v3.5.0 -> v3.5.1
- go.etcd.io/etcd/etcdutl/v3 v3.5.0 -> v3.5.1
- go.uber.org/atomic v1.7.0 new
- golang.org/x/net 3ad01bbaa167 -> d83791d6bcd9
- golang.org/x/sys 39ccf1dd6fa6 -> fe61309f8881
- golang.org/x/term 140adaaadfaf -> 03fcf44c2211
- golang.org/x/time 1f47c861a9ac -> f0f3c7e86c11
- golang.zx2c4.com/wireguard/wgctrl 0a2f4901cba6 -> dd7407c86d22
- google.golang.org/grpc v1.41.0 -> v1.42.0
- inet.af/netaddr 85fa6c94624e -> c74959edd3b6
- k8s.io/api v0.22.2 -> v0.23.0-alpha.4
- k8s.io/apimachinery v0.22.2 -> v0.23.0-alpha.4
- k8s.io/client-go v0.22.2 -> v0.23.0-alpha.4
- k8s.io/cri-api v0.22.2 -> v0.23.0-alpha.4
- k8s.io/kubectl v0.22.2 -> v0.23.0-alpha.4
- k8s.io/kubelet v0.22.2 -> v0.23.0-alpha.4
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.59 -> v1.2.61
- sigs.k8s.io/yaml v1.3.0 new
Previous release can be found at v0.13.0
Talos 0.14.0-alpha.1 (2021-11-15)
Welcome to the v0.14.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Kexec and capabilities
When kexec support is disabled
Talos no longer drops Linux capabilities (CAP_SYS_BOOT and CAP_SYS_MODULES) for child processes.
That is helpful for advanced use-cases like Docker-in-Docker.
If you want to permanently disable kexec and capabilities dropping, pass kexec_load_disabled=1 argument to the kernel.
For example:
install:
extraKernelArgs:
- sysctl.kernel.kexec_load_disabled=1
Please note that capabilities are dropped before machine configuration is loaded,
so disabling kexec via machine.sysctls will not be enough.
Cluster Discovery
Cluster Discovery is enabled by default for Talos 0.14.
Cluster Discovery can be disabled with talosctl gen config --with-cluster-discovery=false.
Kubelet
Kubelet service can now be restarted with talosctl service kubelet restart.
Kubelet node IP configuration (.machine.kubelet.nodeIP.validSubnets) can now include negative subnet matches (prefixed with !).
Log Shipping
Talos can now ship system logs to the configured destination using either JSON-over-UDP or JSON-over-TCP:
see .machine.logging machine configuration option.
talosctl support
talosctl CLI tool now has a new subcommand called support, that can gather all
cluster information that could help with future debugging in a single run.
Output of the command is a zip archive with all talos service logs, kubernetes pod logs and manifests,
talos resources manifests and so on.
Generated archive does not contain any secret information so it is safe to send it for analysis to a third party.
Component Updates
- Linux: 5.15.1
- etcd: 3.5.1
- containerd: 1.5.7
- Kubernetes: 1.23.0-alpha.4
- CoreDNS: 1.8.6
Talos is built with Go 1.17.2
Kubernetes Upgrade Enhancements
talosctl upgrade-k8s now syncs all Talos manifest resources generated from templates.
So there is no need to update CoreDNS, Flannel container manually after running upgrade-k8s anymore.
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Artem Chernyshev
- Serge Logvinov
- Noel Georgi
- Spencer Smith
- Nico Berlee
- Alex Zero
- Andrew Rynhard
- Branden Cash
- David Haines
- Gerard de Leeuw
- Michael Fornaro
- Rui Lopes
Changes
101 commits
753a8218refactor: move pkg/resources to machinery0102a64arefactor: remove pkg/resources dependencies on wgtypes, netx7462733bchore: update golangci-lint032c99a0refactor: remove pkg/resources dependencies on k8s and base624a5cff45perf: raspberry PIs clockspeed as fast as firmware allowsa76f6d69feat: allow kubelet to be restarted and provide negative nodeIP subnets189221d5chore: update dependencies41f0aeccdocs: update partition info95105071chore: fix simple issues found by golangci-lintd4b0ca21test: retry upgrade mutex lock failures4357e9a8docs: add Talos partions info8e8687d7fix: use temporary sonobuoy versione4e8e873test: disable e2e-misc test with Canal CNI897da2f6docs: common typosa50483ddfeat: update Linux to 5.15.1a2233bfefix: improve NTP sync process7efc1238fix: parse partition size correctlyd6147eb1chore: update sonobuoyefbae785fix: use etc folder for du cli tests198eea51fix: wait for follow reader to start before writing to the filee7f715ebchore: log KubeSpan IPs overlaps82a1ad16chore: bump dependenciese8fccbf5fix: clear time adjustment error when setting time to specific valuee6f90bb4chore: remove unused parameters785161d1feat: update k8s to 1.23.0-alpha.4fe228d7cfix: do not use yaml.v2 in the support cmd9b48ca21fix: endpoints and nodes in generated talosconfig6e16fd2fchore: update tools, pkgs, and extras261c497cfeat: implementtalosctl supportcommandfc7dc454chore: check our API idiosyncrasiesb1584429feat: use GCP deployment manager3e7d4df9chore: bump dependencies88f24229refactor: get rid of prometheus/procfs dependency in pkg/resourcesdd196d30refactor: prepare for move of pkg/resources to machineryf6110f80fix: remove listening socket to fix Talos in a container restart53bbb13edocs: update docs with emmc boot guide8329d211chore: split polymorphic RootSecret resource into specific typesc97becddchore: remove interfaces and routes APIsd798635dfeat: automatically limit kubelet node IP family based on service CIDRs205a8d6dchore: make nethelpers build on all OSes5b5dd49ffeat: extract JSON fields from more log messageseb4f1182docs: create cluster in hetzner cloud728164e2docs: fix kexec_load_disabled param name in release notesf6328f09fix: fix filename typo01b0f0abrelease(v0.14.0-alpha.0): prepare release8b620653fix: skip generating empty.machine.logging60ad0063fix: don't drop ability to use ambient capabilitiesb6b78e7ftest: add cluster discovery integration tests97d64d16fix: hcloud network config changes4c76865dfeat: multiple logging improvements1d1e1df6fix: handle skipped mounts correctly0a964d92test: fix openstack unit-test stability72f62ac2chore: bump Go and Docker dependencies9c48ebe8fix: gcp fetching externalIP6c297268test: fix e2e k8s versionae5af9d3feat: update Kubernetes to 1.23.0-alpha.328d3a69efeat: openstack config-drive support2258bc49test: update GCP e2e script to work with new templates36b6ace2feat: update Linux to 5.10.7538516a54test: update Talos versions in upgrade testscff20ec7fix: change services OOM score666a2b62feat: azure platform ipv6 supportd32814e3feat: extract JSON fields from log linese77d81fffix: treat literal 'unknown' as a valid machine typec8e404e3test: update vars for AWS clusterad23891bfeat: update CoreDNS version 1.8.641299caefeat: udev rules support5237fdc9feat: send JSON logs over UDP6d44587afeat: coredns service dualstack12f7888bfeat: feed control plane endpoints on workers from cluster discovery431e4fb4chore: bump Go and Docker dependencies89f3b9f8feat: update etcd to 3.5.1e60469a3feat: initial support for JSON logging68c420e3feat: enable cluster discovery by default3e100aa9test: workaround EventsWatch test flakiness9bd4838achore: stop using sonobuoy CLI6ad45951docs: fix field names for bonding configurationd7a3b7b5chore: use discovery-client and discovery-api modulesd6309eeddocs: create docs for Talos 0.14c0fda643fix: attempt to clean up tasks in containerd runner8cf442dachore: bump tools, pkgs, extras0dad5f4dchore: small cleanupe3e2113afeat: upgrade CoreDNS duringupgrade-k8scalld92c98e1docs: fix discovery service documentation linke44b11c5feat: update containerd to 1.5.7, bump Go dependencies24129307docs: make Talos 0.13 docs latest, update documentation31b6e39efix: delete expired affiliates from the discovery service877a2b6ftest: bump CAPI components to v1alpha42ba0e0acdocs: add KubeSpan documentation997873b6fix: use ECDSA-SHA512 when generating certs for Talos < 0.137137166dfix: allow overridingaudit-policy-fileinkube-apiserverstatic pod8fcd4219chore: fix integration-qemu-race91a858b5fix: sort output of the argument builder657f7a56fix: use ECDSA-SHA256 signature algorithm for Kubernetes certs983d2459feat: suppress logging NTP sync to the console022c7335fix: add interface route if DHCP4 router is not directly routeable66a1579efix: don't enable 'no new privs' on the system level423861cffeat: don't drop capabilities if kexec is disabledfacc8c38docs: fix documentation for cluster discoveryce65ca4echore: build using only amd64 builderse9b0f010chore: update docker image in the pipeline
Changes since v0.14.0-alpha.0
44 commits
753a8218refactor: move pkg/resources to machinery0102a64arefactor: remove pkg/resources dependencies on wgtypes, netx7462733bchore: update golangci-lint032c99a0refactor: remove pkg/resources dependencies on k8s and base624a5cff45perf: raspberry PIs clockspeed as fast as firmware allowsa76f6d69feat: allow kubelet to be restarted and provide negative nodeIP subnets189221d5chore: update dependencies41f0aeccdocs: update partition info95105071chore: fix simple issues found by golangci-lintd4b0ca21test: retry upgrade mutex lock failures4357e9a8docs: add Talos partions info8e8687d7fix: use temporary sonobuoy versione4e8e873test: disable e2e-misc test with Canal CNI897da2f6docs: common typosa50483ddfeat: update Linux to 5.15.1a2233bfefix: improve NTP sync process7efc1238fix: parse partition size correctlyd6147eb1chore: update sonobuoyefbae785fix: use etc folder for du cli tests198eea51fix: wait for follow reader to start before writing to the filee7f715ebchore: log KubeSpan IPs overlaps82a1ad16chore: bump dependenciese8fccbf5fix: clear time adjustment error when setting time to specific valuee6f90bb4chore: remove unused parameters785161d1feat: update k8s to 1.23.0-alpha.4fe228d7cfix: do not use yaml.v2 in the support cmd9b48ca21fix: endpoints and nodes in generated talosconfig6e16fd2fchore: update tools, pkgs, and extras261c497cfeat: implementtalosctl supportcommandfc7dc454chore: check our API idiosyncrasiesb1584429feat: use GCP deployment manager3e7d4df9chore: bump dependencies88f24229refactor: get rid of prometheus/procfs dependency in pkg/resourcesdd196d30refactor: prepare for move of pkg/resources to machineryf6110f80fix: remove listening socket to fix Talos in a container restart53bbb13edocs: update docs with emmc boot guide8329d211chore: split polymorphic RootSecret resource into specific typesc97becddchore: remove interfaces and routes APIsd798635dfeat: automatically limit kubelet node IP family based on service CIDRs205a8d6dchore: make nethelpers build on all OSes5b5dd49ffeat: extract JSON fields from more log messageseb4f1182docs: create cluster in hetzner cloud728164e2docs: fix kexec_load_disabled param name in release notesf6328f09fix: fix filename typo
Changes from talos-systems/discovery-api
Changes from talos-systems/discovery-client
Changes from talos-systems/extras
Changes from talos-systems/net
Changes from talos-systems/pkgs
15 commits
740da24feat: bump raspberrypi-firmware to 1.20211029832dae4fix: enable CONFIG_DM_SNAPSHOTf307e64feat: update Linux to 5.15.14f0f238chore: update tools932c3cffeat: update libseccomp to 2.5.37f3311efeat: update cpu governor to schedutilb4cdb99fix: update containerd shas80a63d4feat: update Linux to 5.10.755c98efdfeat: add QLogic QED 25/40/100Gb Ethernet NIC driverbfb2365feat: enable driver for SuperMicro raid controller657e16bfeat: enable Intel VMD driverf7d9d72feat: enable smarpqi driver and related optionsbca3be0feat: enable aqtion device driverb88127achore: update tools971735ffeat: update containerd to 1.5.7
Changes from talos-systems/tools
6 commits
Dependency Changes
- github.com/AlekSi/pointer v1.1.0 -> v1.2.0
- github.com/containerd/cgroups v1.0.1 -> v1.0.2
- github.com/containerd/containerd v1.5.5 -> v1.5.7
- github.com/docker/docker v20.10.8 -> v20.10.10
- github.com/evanphx/json-patch v4.11.0 -> v4.12.0
- github.com/gosuri/uiprogress v0.0.1 new
- github.com/hashicorp/go-getter v1.5.8 -> v1.5.9
- github.com/hetznercloud/hcloud-go v1.32.0 -> v1.33.1
- github.com/insomniacslk/dhcp b95caade3eac -> ad197bcd36fd
- github.com/jsimonetti/rtnetlink 435639c8e6a8 -> 93da33804786
- github.com/jxskiss/base62 4f11678b909b -> v1.0.0
- github.com/mdlayher/ethtool 2b88debcdd43 -> 288d040e9d60
- github.com/rivo/tview ee97a7ab3975 -> badfa0f0b301
- github.com/talos-systems/discovery-api v0.1.0 new
- github.com/talos-systems/discovery-client v0.1.0 new
- github.com/talos-systems/extras v0.6.0 -> v0.7.0-alpha.0-1-g2bb2efc
- github.com/talos-systems/net v0.3.0 -> 0abe5bdae8f8
- github.com/talos-systems/pkgs v0.8.0 -> v0.9.0-alpha.0-14-g740da24
- github.com/talos-systems/talos/pkg/machinery v0.13.0 -> 000000000000
- github.com/talos-systems/tools v0.8.0 -> v0.9.0-alpha.0-5-g96e0231
- github.com/vmware-tanzu/sonobuoy v0.53.2 -> v0.55.0
- github.com/vmware/govmomi v0.26.1 -> v0.27.1
- github.com/vmware/vmw-guestinfo 687661b8bd8e -> cc1fd90d572c
- go.etcd.io/etcd/api/v3 v3.5.0 -> v3.5.1
- go.etcd.io/etcd/client/pkg/v3 v3.5.0 -> v3.5.1
- go.etcd.io/etcd/client/v3 v3.5.0 -> v3.5.1
- go.etcd.io/etcd/etcdutl/v3 v3.5.0 -> v3.5.1
- golang.org/x/net 3ad01bbaa167 -> 69e39bad7dc2
- golang.org/x/sys 39ccf1dd6fa6 -> 0c823b97ae02
- golang.org/x/term 140adaaadfaf -> 03fcf44c2211
- golang.zx2c4.com/wireguard/wgctrl 0a2f4901cba6 -> 0073765f69ba
- google.golang.org/grpc v1.41.0 -> v1.42.0
- inet.af/netaddr 85fa6c94624e -> c74959edd3b6
- k8s.io/api v0.22.2 -> v0.23.0-alpha.4
- k8s.io/apimachinery v0.22.2 -> v0.23.0-alpha.4
- k8s.io/client-go v0.22.2 -> v0.23.0-alpha.4
- k8s.io/cri-api v0.22.2 -> v0.23.0-alpha.4
- k8s.io/kubectl v0.22.2 -> v0.23.0-alpha.4
- k8s.io/kubelet v0.22.2 -> v0.23.0-alpha.4
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.59 -> v1.2.60
- sigs.k8s.io/yaml v1.3.0 new
Previous release can be found at v0.13.0
Talos 0.14.0-alpha.0 (2021-10-25)
Welcome to the v0.14.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Kexec and capabilities
When kexec support is disabled
Talos no longer drops Linux capabilities (CAP_SYS_BOOT and CAP_SYS_MODULES) for child processes.
That is helpful for advanced use-cases like Docker-in-Docker.
If you want to permanently disable kexec and capabilities dropping, pass kexec_load_disabled=1 argument to the kernel.
For example:
install:
extraKernelArgs:
- kexec_load_disabled=1
Please note that capabilities are dropped before machine configuration is loaded,
so disabling kexec via machine.sysctls will not be enough.
Cluster Discovery
Cluster Discovery is enabled by default for Talos 0.14.
Cluster Discovery can be disabled with talosctl gen config --with-cluster-discovery=false.
Log Shipping
Talos can now ship system logs to the configured destination using either JSON-over-UDP or JSON-over-TCP:
see .machine.logging machine configuration option.
Component Updates
- Linux: 5.10.75
- etcd: 3.5.1
- containerd: 1.5.7
- Kubernetes: 1.23.0-alpha.0
- CoreDNS: 1.8.6
Talos is built with Go 1.17.2
Kubernetes Upgrade Enhancements
talosctl upgrade-k8s now syncs all Talos manifest resources generated from templates.
So there is no need to update CoreDNS, Flannel container manually after running upgrade-k8s anymore.
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Serge Logvinov
- Artem Chernyshev
- Spencer Smith
- Andrew Rynhard
- Branden Cash
- Gerard de Leeuw
Changes
56 commits
8b620653fix: skip generating empty.machine.logging60ad0063fix: don't drop ability to use ambient capabilitiesb6b78e7ftest: add cluster discovery integration tests97d64d16fix: hcloud network config changes4c76865dfeat: multiple logging improvements1d1e1df6fix: handle skipped mounts correctly0a964d92test: fix openstack unit-test stability72f62ac2chore: bump Go and Docker dependencies9c48ebe8fix: gcp fetching externalIP6c297268test: fix e2e k8s versionae5af9d3feat: update Kubernetes to 1.23.0-alpha.328d3a69efeat: openstack config-drive support2258bc49test: update GCP e2e script to work with new templates36b6ace2feat: update Linux to 5.10.7538516a54test: update Talos versions in upgrade testscff20ec7fix: change services OOM score666a2b62feat: azure platform ipv6 supportd32814e3feat: extract JSON fields from log linese77d81fffix: treat literal 'unknown' as a valid machine typec8e404e3test: update vars for AWS clusterad23891bfeat: update CoreDNS version 1.8.641299caefeat: udev rules support5237fdc9feat: send JSON logs over UDP6d44587afeat: coredns service dualstack12f7888bfeat: feed control plane endpoints on workers from cluster discovery431e4fb4chore: bump Go and Docker dependencies89f3b9f8feat: update etcd to 3.5.1e60469a3feat: initial support for JSON logging68c420e3feat: enable cluster discovery by default3e100aa9test: workaround EventsWatch test flakiness9bd4838achore: stop using sonobuoy CLI6ad45951docs: fix field names for bonding configurationd7a3b7b5chore: use discovery-client and discovery-api modulesd6309eeddocs: create docs for Talos 0.14c0fda643fix: attempt to clean up tasks in containerd runner8cf442dachore: bump tools, pkgs, extras0dad5f4dchore: small cleanupe3e2113afeat: upgrade CoreDNS duringupgrade-k8scalld92c98e1docs: fix discovery service documentation linke44b11c5feat: update containerd to 1.5.7, bump Go dependencies24129307docs: make Talos 0.13 docs latest, update documentation31b6e39efix: delete expired affiliates from the discovery service877a2b6ftest: bump CAPI components to v1alpha42ba0e0acdocs: add KubeSpan documentation997873b6fix: use ECDSA-SHA512 when generating certs for Talos < 0.137137166dfix: allow overridingaudit-policy-fileinkube-apiserverstatic pod8fcd4219chore: fix integration-qemu-race91a858b5fix: sort output of the argument builder657f7a56fix: use ECDSA-SHA256 signature algorithm for Kubernetes certs983d2459feat: suppress logging NTP sync to the console022c7335fix: add interface route if DHCP4 router is not directly routeable66a1579efix: don't enable 'no new privs' on the system level423861cffeat: don't drop capabilities if kexec is disabledfacc8c38docs: fix documentation for cluster discoveryce65ca4echore: build using only amd64 builderse9b0f010chore: update docker image in the pipeline
Changes from talos-systems/discovery-api
Changes from talos-systems/discovery-client
Changes from talos-systems/extras
Changes from talos-systems/pkgs
8 commits
80a63d4feat: update Linux to 5.10.755c98efdfeat: add QLogic QED 25/40/100Gb Ethernet NIC driverbfb2365feat: enable driver for SuperMicro raid controller657e16bfeat: enable Intel VMD driverf7d9d72feat: enable smarpqi driver and related optionsbca3be0feat: enable aqtion device driverb88127achore: update tools971735ffeat: update containerd to 1.5.7
Changes from talos-systems/tools
Dependency Changes
- github.com/AlekSi/pointer v1.1.0 -> v1.2.0
- github.com/containerd/cgroups v1.0.1 -> v1.0.2
- github.com/containerd/containerd v1.5.5 -> v1.5.7
- github.com/docker/docker v20.10.8 -> v20.10.9
- github.com/hashicorp/go-getter v1.5.8 -> v1.5.9
- github.com/insomniacslk/dhcp b95caade3eac -> 509557e9f781
- github.com/jsimonetti/rtnetlink 435639c8e6a8 -> e34540a94caa
- github.com/jxskiss/base62 4f11678b909b -> v1.0.0
- github.com/rivo/tview ee97a7ab3975 -> 5508f4b00266
- github.com/talos-systems/discovery-api v0.1.0 new
- github.com/talos-systems/discovery-client v0.1.0 new
- github.com/talos-systems/extras v0.6.0 -> v0.7.0-alpha.0
- github.com/talos-systems/pkgs v0.8.0 -> v0.9.0-alpha.0-7-g80a63d4
- github.com/talos-systems/talos/pkg/machinery v0.13.0 -> 000000000000
- github.com/talos-systems/tools v0.8.0 -> v0.9.0-alpha.0
- github.com/vmware-tanzu/sonobuoy v0.53.2 -> v0.54.0
- github.com/vmware/govmomi v0.26.1 -> v0.27.1
- github.com/vmware/vmw-guestinfo 687661b8bd8e -> cc1fd90d572c
- go.etcd.io/etcd/api/v3 v3.5.0 -> v3.5.1
- go.etcd.io/etcd/client/pkg/v3 v3.5.0 -> v3.5.1
- go.etcd.io/etcd/client/v3 v3.5.0 -> v3.5.1
- go.etcd.io/etcd/etcdutl/v3 v3.5.0 -> v3.5.1
- golang.org/x/net 3ad01bbaa167 -> d418f374d309
- golang.org/x/sys 39ccf1dd6fa6 -> d6a326fbbf70
- golang.org/x/term 140adaaadfaf -> 03fcf44c2211
- golang.zx2c4.com/wireguard/wgctrl 0a2f4901cba6 -> 5be1d6054c42
- k8s.io/api v0.22.2 -> v0.23.0-alpha.3
- k8s.io/apimachinery v0.22.2 -> v0.23.0-alpha.3
- k8s.io/client-go v0.22.2 -> v0.23.0-alpha.3
- k8s.io/cri-api v0.22.2 -> v0.23.0-alpha.3
- k8s.io/kubectl v0.22.2 -> v0.23.0-alpha.3
- k8s.io/kubelet v0.22.2 -> v0.23.0-alpha.3
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.59 -> v1.2.60
- sigs.k8s.io/yaml v1.3.0 new
Previous release can be found at v0.13.0
Talos 0.13.0-alpha.3 (2021-09-29)
Welcome to the v0.13.0-alpha.3 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Hetzner, Scaleway, Upcloud and Vultr
Talos now natively supports three new cloud platforms:
Also generic cloud-init nocloud platform is supported in both networking and storage-based modes.
etcd Advertised Address
The address advertised by etcd can now be controlled with new machine configuration option machine.etcd.subnet.
Reboots via kexec
Talos now reboots by default via kexec syscall which means BIOS POST process is skipped. On bare-metal hardware BIOS POST process might take 10-15 minutes, so Talos reboots 10-15 minutes faster on bare-metal.
Kexec support can be disabled with the following change to the machine configuration:
machine:
sysctls:
kernel.kexec_load_disabled: "1"
Cluster Discovery and KubeSpan
This release of Talos provides initial support for cluster membership discovery and KubeSpan.
These new features are not enabled by default, to enable them please make following changes to the machine configuration:
machine:
network:
kubespan:
enabled: true
cluster:
discovery:
enabled: true
Windows Support
CLI tool talosctl is now built for Windows and published as part of the release.
Contributors
- Andrey Smirnov
- Artem Chernyshev
- Seán C McCord
- Serge Logvinov
- Alexey Palazhchenko
- Andrew Rynhard
- Olli Janatuinen
- Andrey Smirnov
- Lennard Klein
- Rui Lopes
- Spencer Smith
Changes
100 commits
4044372efeat: harvest discovered endpoints and push them via discovery svc9a51aa83feat: add an option to skip downed peers in KubeSpancbbd7c68feat: publish node's ExternalIPs as node addresses0f60ef6dfix: reset inputs back to initial state in secrets.APIController64cb873efeat: override static pods default args by extra Argsecdd7757test: workaround race in the tests with zaptest package9c67fde7release(v0.13.0-alpha.2): prepare release30ae7142feat: implement integration with Discovery Service353d632afeat: add nocloud platform support628fbf9bchore: update Linux to 5.10.6962acd625fix: check trustd API CA on worker nodesba27bc36feat: implement Hetzner Cloud support for virtual (shared) IP95f440eatest: add fuzz test for configloaderd2cf021dchore: remove deprecated "join" term0e18e280chore: bump dependenciesb450b7cechore: deprecate Interfaces and Routes APIscddcb962fix: find devices without partition tableb1b6d613fix: check for existence of dhcp6 FQDN first519999b8fix: use readonly mode when probing devices withAlllookup2b520420feat: enable resource API in the maintenance mode452893c2fix: make probe open blockdevice in readonly mode96bccdd3test: update CABPT provider to 0.3 released9eb18bffix: containerd log symlinkefa7f48edocs: quicklinks on landing page1cb9f282fix: don't marshal clock with SecretsBundleb27c75b3release(v0.13.0-alpha.1): prepare release9d803d75chore: bump dependencies and drop firecracker support50a24104feat: add operating system version field to discovery085c61b2chore: add a special condition to check for kubeconfig readiness21cdd854fix: add node address to the list of allowed IPs (kubespan)fdd80a12feat: add an option to continue booting on NTP timeoutef368498feat: add routes, routing rules and nftables rules for KubeSpaned12379ffix: patch multi nodes supportd943bb0efeat: update Kubernetes to 1.22.2d0585fb6feat: reboot via kexec3de505c8fix: skip bad cloud-config in OpenStack platforma394d1e2fix: tear down control plane static pods when etcd is stopped1c05089bfeat: implement KubeSpan manager for Wireguard peer stateec7f44effix: completely prevent editing resources other than mc19a8ae97feat: add vultr.com cloud support0ff4c7cdfix: write KubernetesCACert chmodded 0400 instead of 0500a1c9d649fix: update the way results are retrieved for certified conformancea0594540chore: build using Go 1.177c5045bdrelease(v0.13.0-alpha.0): prepare releaseee2dce6cchore: bump dependenciesef022959fix: print etcd member ID in hex5ca1fb82fix: multiple fixes for KubeSpan and Wireguard implementationb1bd6425fix: build platform images3b5f4038feat: add scaleway.com cloud supportf156ab18feat: add upcloud.com cloud supportc3b2429cfix: suppress spurious Kubernetes API server cert updatesff90b575feat: implement KubeSpan peer generation controller14c69df5fix: correctly parse multiple pod/service CIDRs69897dbbfeat: drop some capabilities to be never available51e9836bdocs: promote 0.12 docs to be the latest812d59c7feat: add hetzner.com cloud supportd53e9e89chore: use named constants2dfe7f1fchore: bump tools to the latest version82b130e7docs: document required options for extraMountsaf662210feat: implement Kubernetes cluster discovery registry2c66e1b3feat: provide building of localAffiliatestructure (for the node)d69bd2afchore: enable GPG identity check for Talos8dbd851fchore: update tools/pkgs/extras to the new version0b347570feat: use dynamic NodeAddresses/HostnameStatus in Kubernetes certsbd5b9c96fix: correctly define example forextraMounts01cca099docs: update docs for Talos 0.12 release668627d5feat: add subnet filter for etcd address3c3c281bchore: bump dependencies via dependabotf8bebba2fix: ignore error on duplicate forMountStatus6956edd0feat: add node address filters, filter out k8s addresses for Talos APIcaee24bffeat: implement KubeSpan identity controllerda0f6e7efix: allow updating diskSelector option761ccaf3feat: provide machine configuration for KubeSpan and cluster discoverya81e30cbdocs: add bootstrap command to VMware docs97da354cfix: do not panic on invalid machine configsc4048e26fix: don't extract nil IPs in the GCP platformba169c6ffeat: provide talosctl.exe for Windows6312f473fix: properly handle omitempty fields in the validator7f22879afeat: provide random node identity032e7c6bchore: import yaml.v3 consistently80b5f0e7fix: validate IP address returned as HTTP response in platform codec9af8f7fdocs: fork docs for 0.1385cda1b9feat: provide MountStatus resource for system partition mounts950f122cchore: update versions in upgrade tests83fdb772feat: provide first NIC hardware addr as a resource5f5ac12ffix: properly case the VMware name0a6048f4fix: don't allow bootstrap if etcd data directory is not emptye24b93b4fix: cgroup delegate751f64f9docs: add release notes for 0.12, support matrix57a77696feat: update Kubernetes to 1.22.1244b08ccchore: bump dependencies576ba195fix: do not set KSPP kernel params in container modeb8c92edefix: don't support cgroups nesting in process runner9bb0b797test: adapt tests to the cgroupsv21abc12befix: extramount should haveyaml:",inline"tag2b614e43feat: check if cluster has deprecated resources versions0b86edabfix: don't panic if the machine config doesn't have network (EM)8bef41e4fix: make sure file mode is same (reproducibility issue)fcfca55achore: do not check that go mod tidy gives empty output5ce92ca5docs: ensure azure VMs are 0 indexed
Changes since v0.13.0-alpha.2
6 commits
4044372efeat: harvest discovered endpoints and push them via discovery svc9a51aa83feat: add an option to skip downed peers in KubeSpancbbd7c68feat: publish node's ExternalIPs as node addresses0f60ef6dfix: reset inputs back to initial state in secrets.APIController64cb873efeat: override static pods default args by extra Argsecdd7757test: workaround race in the tests with zaptest package
Changes from talos-systems/discovery-service
17 commits
b2e2079fix: properly encrypt IPv6 endpointse9d5dfafix: enable connections to endpoints with public certs509e9b2feat: implement client wrapper around discovery service API6195466feat: enable vtprotobuf, watch batching, more limits7174ec1feat: implement new discovery service1a43970feat: add node and cluster validation6454cfcrefactor: kresify, fix linter and rename to Kubespan managerd782452add redis database backend924fed4refactor to flexible addressescd02b5arevert to string IDs576288fadd self-reported IPs6ad15castrong typing and known endpoint API3437ff2fixes from testingd3fd1f3add Name to Nodeeb0e8baadd simple client pkg5e0c1dfadd cluster hash groupingf982696initial commit
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
6 commits
Changes from talos-systems/pkgs
7 commits
Changes from talos-systems/tools
5 commits
Dependency Changes
- github.com/containerd/go-cni v1.0.2 -> v1.1.0
- github.com/containernetworking/cni v0.8.1 -> v1.0.1
- github.com/containernetworking/plugins v0.9.1 -> v1.0.1
- github.com/cosi-project/runtime 25f235cd0682 -> 5cb7f5002d77
- github.com/fatih/color v1.12.0 -> v1.13.0
- github.com/fsnotify/fsnotify v1.4.9 -> v1.5.1
- github.com/gdamore/tcell/v2 v2.4.0 -> f057f0a857a1
- github.com/google/nftables 16a134723a96 new
- github.com/hashicorp/go-getter v1.5.7 -> v1.5.8
- github.com/hetznercloud/hcloud-go v1.32.0 new
- github.com/insomniacslk/dhcp 1cac67f12b1e -> b95caade3eac
- github.com/jsimonetti/rtnetlink 9c52e516c709 -> 435639c8e6a8
- github.com/jxskiss/base62 4f11678b909b new
- github.com/mattn/go-isatty v0.0.13 -> v0.0.14
- github.com/mdlayher/netx 669a06fde734 new
- github.com/packethost/packngo v0.19.0 -> v0.19.1
- github.com/prometheus/procfs v0.7.2 -> v0.7.3
- github.com/rivo/tview 29d673af0ce2 -> ee97a7ab3975
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.7 new
- github.com/talos-systems/discovery-service b2e2079088a5 new
- github.com/talos-systems/extras v0.5.0 -> v0.6.0-alpha.0
- github.com/talos-systems/go-blockdevice v0.2.3 -> 70d28650b398
- github.com/talos-systems/pkgs v0.7.0 -> v0.8.0-alpha.0-4-g28cda67
- github.com/talos-systems/tools v0.7.0-1-ga33ccc1 -> v0.8.0-alpha.0-3-g2790b55
- github.com/vishvananda/netlink f5de75959ad5 new
- github.com/vmware-tanzu/sonobuoy v0.53.1 -> v0.53.2
- github.com/vmware/govmomi v0.26.0 -> v0.26.1
- github.com/vultr/metadata v1.0.3 new
- go.uber.org/zap v1.19.0 -> v1.19.1
- golang.org/x/net 853a461950ff -> 3ad01bbaa167
- golang.org/x/sys 0f9fa26af87c -> 39ccf1dd6fa6
- golang.org/x/term 6886f2dfbf5b -> 140adaaadfaf
- golang.zx2c4.com/wireguard/wgctrl 92e472f520a5 -> 0a2f4901cba6
- google.golang.org/grpc v1.40.0 -> v1.41.0
- inet.af/netaddr ce7a8ad02cc1 -> 85fa6c94624e
- k8s.io/api v0.22.1 -> v0.22.2
- k8s.io/apimachinery v0.22.1 -> v0.22.2
- k8s.io/client-go v0.22.1 -> v0.22.2
- k8s.io/kubectl v0.22.1 -> v0.22.2
- k8s.io/kubelet v0.22.1 -> v0.22.2
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.59 new
Previous release can be found at v0.12.0
Talos 0.13.0-alpha.2 (2021-09-28)
Welcome to the v0.13.0-alpha.2 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Hetzner, Scaleway, Upcloud and Vultr
Talos now natively supports three new cloud platforms:
Also generic cloud-init nocloud platform is supported in both networking and storage-based modes.
etcd Advertised Address
The address advertised by etcd can now be controlled with new machine configuration option machine.etcd.subnet.
Reboots via kexec
Talos now reboots by default via kexec syscall which means BIOS POST process is skipped. On bare-metal hardware BIOS POST process might take 10-15 minutes, so Talos reboots 10-15 minutes faster on bare-metal.
Kexec support can be disabled with the following change to the machine configuration:
machine:
sysctls:
kernel.kexec_load_disabled: "1"
Cluster Discovery and KubeSpan
This release of Talos provides initial support for cluster membership discovery and KubeSpan.
These new features are not enabled by default, to enable them please make following changes to the machine configuration:
machine:
network:
kubespan:
enabled: true
cluster:
discovery:
enabled: true
Windows Support
CLI tool talosctl is now built for Windows and published as part of the release.
Contributors
- Andrey Smirnov
- Artem Chernyshev
- Seán C McCord
- Serge Logvinov
- Alexey Palazhchenko
- Andrew Rynhard
- Olli Janatuinen
- Andrey Smirnov
- Lennard Klein
- Rui Lopes
- Spencer Smith
Changes
93 commits
30ae7142feat: implement integration with Discovery Service353d632afeat: add nocloud platform support628fbf9bchore: update Linux to 5.10.6962acd625fix: check trustd API CA on worker nodesba27bc36feat: implement Hetzner Cloud support for virtual (shared) IP95f440eatest: add fuzz test for configloaderd2cf021dchore: remove deprecated "join" term0e18e280chore: bump dependenciesb450b7cechore: deprecate Interfaces and Routes APIscddcb962fix: find devices without partition tableb1b6d613fix: check for existence of dhcp6 FQDN first519999b8fix: use readonly mode when probing devices withAlllookup2b520420feat: enable resource API in the maintenance mode452893c2fix: make probe open blockdevice in readonly mode96bccdd3test: update CABPT provider to 0.3 released9eb18bffix: containerd log symlinkefa7f48edocs: quicklinks on landing page1cb9f282fix: don't marshal clock with SecretsBundleb27c75b3release(v0.13.0-alpha.1): prepare release9d803d75chore: bump dependencies and drop firecracker support50a24104feat: add operating system version field to discovery085c61b2chore: add a special condition to check for kubeconfig readiness21cdd854fix: add node address to the list of allowed IPs (kubespan)fdd80a12feat: add an option to continue booting on NTP timeoutef368498feat: add routes, routing rules and nftables rules for KubeSpaned12379ffix: patch multi nodes supportd943bb0efeat: update Kubernetes to 1.22.2d0585fb6feat: reboot via kexec3de505c8fix: skip bad cloud-config in OpenStack platforma394d1e2fix: tear down control plane static pods when etcd is stopped1c05089bfeat: implement KubeSpan manager for Wireguard peer stateec7f44effix: completely prevent editing resources other than mc19a8ae97feat: add vultr.com cloud support0ff4c7cdfix: write KubernetesCACert chmodded 0400 instead of 0500a1c9d649fix: update the way results are retrieved for certified conformancea0594540chore: build using Go 1.177c5045bdrelease(v0.13.0-alpha.0): prepare releaseee2dce6cchore: bump dependenciesef022959fix: print etcd member ID in hex5ca1fb82fix: multiple fixes for KubeSpan and Wireguard implementationb1bd6425fix: build platform images3b5f4038feat: add scaleway.com cloud supportf156ab18feat: add upcloud.com cloud supportc3b2429cfix: suppress spurious Kubernetes API server cert updatesff90b575feat: implement KubeSpan peer generation controller14c69df5fix: correctly parse multiple pod/service CIDRs69897dbbfeat: drop some capabilities to be never available51e9836bdocs: promote 0.12 docs to be the latest812d59c7feat: add hetzner.com cloud supportd53e9e89chore: use named constants2dfe7f1fchore: bump tools to the latest version82b130e7docs: document required options for extraMountsaf662210feat: implement Kubernetes cluster discovery registry2c66e1b3feat: provide building of localAffiliatestructure (for the node)d69bd2afchore: enable GPG identity check for Talos8dbd851fchore: update tools/pkgs/extras to the new version0b347570feat: use dynamic NodeAddresses/HostnameStatus in Kubernetes certsbd5b9c96fix: correctly define example forextraMounts01cca099docs: update docs for Talos 0.12 release668627d5feat: add subnet filter for etcd address3c3c281bchore: bump dependencies via dependabotf8bebba2fix: ignore error on duplicate forMountStatus6956edd0feat: add node address filters, filter out k8s addresses for Talos APIcaee24bffeat: implement KubeSpan identity controllerda0f6e7efix: allow updating diskSelector option761ccaf3feat: provide machine configuration for KubeSpan and cluster discoverya81e30cbdocs: add bootstrap command to VMware docs97da354cfix: do not panic on invalid machine configsc4048e26fix: don't extract nil IPs in the GCP platformba169c6ffeat: provide talosctl.exe for Windows6312f473fix: properly handle omitempty fields in the validator7f22879afeat: provide random node identity032e7c6bchore: import yaml.v3 consistently80b5f0e7fix: validate IP address returned as HTTP response in platform codec9af8f7fdocs: fork docs for 0.1385cda1b9feat: provide MountStatus resource for system partition mounts950f122cchore: update versions in upgrade tests83fdb772feat: provide first NIC hardware addr as a resource5f5ac12ffix: properly case the VMware name0a6048f4fix: don't allow bootstrap if etcd data directory is not emptye24b93b4fix: cgroup delegate751f64f9docs: add release notes for 0.12, support matrix57a77696feat: update Kubernetes to 1.22.1244b08ccchore: bump dependencies576ba195fix: do not set KSPP kernel params in container modeb8c92edefix: don't support cgroups nesting in process runner9bb0b797test: adapt tests to the cgroupsv21abc12befix: extramount should haveyaml:",inline"tag2b614e43feat: check if cluster has deprecated resources versions0b86edabfix: don't panic if the machine config doesn't have network (EM)8bef41e4fix: make sure file mode is same (reproducibility issue)fcfca55achore: do not check that go mod tidy gives empty output5ce92ca5docs: ensure azure VMs are 0 indexed
Changes since v0.13.0-alpha.1
18 commits
30ae7142feat: implement integration with Discovery Service353d632afeat: add nocloud platform support628fbf9bchore: update Linux to 5.10.6962acd625fix: check trustd API CA on worker nodesba27bc36feat: implement Hetzner Cloud support for virtual (shared) IP95f440eatest: add fuzz test for configloaderd2cf021dchore: remove deprecated "join" term0e18e280chore: bump dependenciesb450b7cechore: deprecate Interfaces and Routes APIscddcb962fix: find devices without partition tableb1b6d613fix: check for existence of dhcp6 FQDN first519999b8fix: use readonly mode when probing devices withAlllookup2b520420feat: enable resource API in the maintenance mode452893c2fix: make probe open blockdevice in readonly mode96bccdd3test: update CABPT provider to 0.3 released9eb18bffix: containerd log symlinkefa7f48edocs: quicklinks on landing page1cb9f282fix: don't marshal clock with SecretsBundle
Changes from talos-systems/discovery-service
16 commits
e9d5dfafix: enable connections to endpoints with public certs509e9b2feat: implement client wrapper around discovery service API6195466feat: enable vtprotobuf, watch batching, more limits7174ec1feat: implement new discovery service1a43970feat: add node and cluster validation6454cfcrefactor: kresify, fix linter and rename to Kubespan managerd782452add redis database backend924fed4refactor to flexible addressescd02b5arevert to string IDs576288fadd self-reported IPs6ad15castrong typing and known endpoint API3437ff2fixes from testingd3fd1f3add Name to Nodeeb0e8baadd simple client pkg5e0c1dfadd cluster hash groupingf982696initial commit
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
6 commits
Changes from talos-systems/pkgs
7 commits
Changes from talos-systems/tools
5 commits
Dependency Changes
- github.com/containerd/go-cni v1.0.2 -> v1.1.0
- github.com/containernetworking/cni v0.8.1 -> v1.0.1
- github.com/containernetworking/plugins v0.9.1 -> v1.0.1
- github.com/cosi-project/runtime 25f235cd0682 -> 5cb7f5002d77
- github.com/fatih/color v1.12.0 -> v1.13.0
- github.com/fsnotify/fsnotify v1.4.9 -> v1.5.1
- github.com/gdamore/tcell/v2 v2.4.0 -> f057f0a857a1
- github.com/google/nftables 16a134723a96 new
- github.com/hashicorp/go-getter v1.5.7 -> v1.5.8
- github.com/hetznercloud/hcloud-go v1.32.0 new
- github.com/insomniacslk/dhcp 1cac67f12b1e -> b95caade3eac
- github.com/jsimonetti/rtnetlink 9c52e516c709 -> 435639c8e6a8
- github.com/jxskiss/base62 4f11678b909b new
- github.com/mattn/go-isatty v0.0.13 -> v0.0.14
- github.com/mdlayher/netx 669a06fde734 new
- github.com/packethost/packngo v0.19.0 -> v0.19.1
- github.com/prometheus/procfs v0.7.2 -> v0.7.3
- github.com/rivo/tview 29d673af0ce2 -> ee97a7ab3975
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.7 new
- github.com/talos-systems/discovery-service e9d5dfa15e92 new
- github.com/talos-systems/extras v0.5.0 -> v0.6.0-alpha.0
- github.com/talos-systems/go-blockdevice v0.2.3 -> 70d28650b398
- github.com/talos-systems/pkgs v0.7.0 -> v0.8.0-alpha.0-4-g28cda67
- github.com/talos-systems/tools v0.7.0-1-ga33ccc1 -> v0.8.0-alpha.0-3-g2790b55
- github.com/vishvananda/netlink f5de75959ad5 new
- github.com/vmware-tanzu/sonobuoy v0.53.1 -> v0.53.2
- github.com/vmware/govmomi v0.26.0 -> v0.26.1
- github.com/vultr/metadata v1.0.3 new
- go.uber.org/zap v1.19.0 -> v1.19.1
- golang.org/x/net 853a461950ff -> 3ad01bbaa167
- golang.org/x/sys 0f9fa26af87c -> 39ccf1dd6fa6
- golang.org/x/term 6886f2dfbf5b -> 140adaaadfaf
- golang.zx2c4.com/wireguard/wgctrl 92e472f520a5 -> 0a2f4901cba6
- google.golang.org/grpc v1.40.0 -> v1.41.0
- inet.af/netaddr ce7a8ad02cc1 -> 85fa6c94624e
- k8s.io/api v0.22.1 -> v0.22.2
- k8s.io/apimachinery v0.22.1 -> v0.22.2
- k8s.io/client-go v0.22.1 -> v0.22.2
- k8s.io/kubectl v0.22.1 -> v0.22.2
- k8s.io/kubelet v0.22.1 -> v0.22.2
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.59 new
Previous release can be found at v0.12.0
Talos 0.13.0-alpha.1 (2021-09-20)
Welcome to the v0.13.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Hetzner, Scaleway, Upcloud and Vultr
Talos now natively supports three new cloud platforms:
etcd Advertised Address
The address advertised by etcd can now be controlled with new machine configuration option machine.etcd.subnet.
Reboots via kexec
Talos now reboots by default via kexec syscall which means BIOS POST process is skipped. On bare-metal hardware BIOS POST process might take 10-15 minutes, so Talos reboots 10-15 minutes faster on bare-metal.
Kexec support can be disabled with the following change to the machine configuration:
machine:
sysctls:
kernel.kexec_load_disabled: "1"
Cluster Discovery and KubeSpan
This release of Talos provides initial support for cluster membership discovery and KubeSpan.
These new features are not enabled by default, to enable them please make following changes to the machine configuration:
machine:
network:
kubespan:
enabled: true
cluster:
discovery:
enabled: true
Windows Support
CLI tool talosctl is now built for Windows and published as part of the release.
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Artem Chernyshev
- Serge Logvinov
- Andrew Rynhard
- Olli Janatuinen
- Andrey Smirnov
- Lennard Klein
- Rui Lopes
- Spencer Smith
Changes
74 commits
9d803d75chore: bump dependencies and drop firecracker support50a24104feat: add operating system version field to discovery085c61b2chore: add a special condition to check for kubeconfig readiness21cdd854fix: add node address to the list of allowed IPs (kubespan)fdd80a12feat: add an option to continue booting on NTP timeoutef368498feat: add routes, routing rules and nftables rules for KubeSpaned12379ffix: patch multi nodes supportd943bb0efeat: update Kubernetes to 1.22.2d0585fb6feat: reboot via kexec3de505c8fix: skip bad cloud-config in OpenStack platforma394d1e2fix: tear down control plane static pods when etcd is stopped1c05089bfeat: implement KubeSpan manager for Wireguard peer stateec7f44effix: completely prevent editing resources other than mc19a8ae97feat: add vultr.com cloud support0ff4c7cdfix: write KubernetesCACert chmodded 0400 instead of 0500a1c9d649fix: update the way results are retrieved for certified conformancea0594540chore: build using Go 1.177c5045bdrelease(v0.13.0-alpha.0): prepare releaseee2dce6cchore: bump dependenciesef022959fix: print etcd member ID in hex5ca1fb82fix: multiple fixes for KubeSpan and Wireguard implementationb1bd6425fix: build platform images3b5f4038feat: add scaleway.com cloud supportf156ab18feat: add upcloud.com cloud supportc3b2429cfix: suppress spurious Kubernetes API server cert updatesff90b575feat: implement KubeSpan peer generation controller14c69df5fix: correctly parse multiple pod/service CIDRs69897dbbfeat: drop some capabilities to be never available51e9836bdocs: promote 0.12 docs to be the latest812d59c7feat: add hetzner.com cloud supportd53e9e89chore: use named constants2dfe7f1fchore: bump tools to the latest version82b130e7docs: document required options for extraMountsaf662210feat: implement Kubernetes cluster discovery registry2c66e1b3feat: provide building of localAffiliatestructure (for the node)d69bd2afchore: enable GPG identity check for Talos8dbd851fchore: update tools/pkgs/extras to the new version0b347570feat: use dynamic NodeAddresses/HostnameStatus in Kubernetes certsbd5b9c96fix: correctly define example forextraMounts01cca099docs: update docs for Talos 0.12 release668627d5feat: add subnet filter for etcd address3c3c281bchore: bump dependencies via dependabotf8bebba2fix: ignore error on duplicate forMountStatus6956edd0feat: add node address filters, filter out k8s addresses for Talos APIcaee24bffeat: implement KubeSpan identity controllerda0f6e7efix: allow updating diskSelector option761ccaf3feat: provide machine configuration for KubeSpan and cluster discoverya81e30cbdocs: add bootstrap command to VMware docs97da354cfix: do not panic on invalid machine configsc4048e26fix: don't extract nil IPs in the GCP platformba169c6ffeat: provide talosctl.exe for Windows6312f473fix: properly handle omitempty fields in the validator7f22879afeat: provide random node identity032e7c6bchore: import yaml.v3 consistently80b5f0e7fix: validate IP address returned as HTTP response in platform codec9af8f7fdocs: fork docs for 0.1385cda1b9feat: provide MountStatus resource for system partition mounts950f122cchore: update versions in upgrade tests83fdb772feat: provide first NIC hardware addr as a resource5f5ac12ffix: properly case the VMware name0a6048f4fix: don't allow bootstrap if etcd data directory is not emptye24b93b4fix: cgroup delegate751f64f9docs: add release notes for 0.12, support matrix57a77696feat: update Kubernetes to 1.22.1244b08ccchore: bump dependencies576ba195fix: do not set KSPP kernel params in container modeb8c92edefix: don't support cgroups nesting in process runner9bb0b797test: adapt tests to the cgroupsv21abc12befix: extramount should haveyaml:",inline"tag2b614e43feat: check if cluster has deprecated resources versions0b86edabfix: don't panic if the machine config doesn't have network (EM)8bef41e4fix: make sure file mode is same (reproducibility issue)fcfca55achore: do not check that go mod tidy gives empty output5ce92ca5docs: ensure azure VMs are 0 indexed
Changes since v0.13.0-alpha.0
17 commits
9d803d75chore: bump dependencies and drop firecracker support50a24104feat: add operating system version field to discovery085c61b2chore: add a special condition to check for kubeconfig readiness21cdd854fix: add node address to the list of allowed IPs (kubespan)fdd80a12feat: add an option to continue booting on NTP timeoutef368498feat: add routes, routing rules and nftables rules for KubeSpaned12379ffix: patch multi nodes supportd943bb0efeat: update Kubernetes to 1.22.2d0585fb6feat: reboot via kexec3de505c8fix: skip bad cloud-config in OpenStack platforma394d1e2fix: tear down control plane static pods when etcd is stopped1c05089bfeat: implement KubeSpan manager for Wireguard peer stateec7f44effix: completely prevent editing resources other than mc19a8ae97feat: add vultr.com cloud support0ff4c7cdfix: write KubernetesCACert chmodded 0400 instead of 0500a1c9d649fix: update the way results are retrieved for certified conformancea0594540chore: build using Go 1.17
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
Changes from talos-systems/pkgs
6 commits
Changes from talos-systems/tools
5 commits
Dependency Changes
- github.com/containerd/go-cni v1.0.2 -> v1.1.0
- github.com/containernetworking/cni v0.8.1 -> v1.0.1
- github.com/containernetworking/plugins v0.9.1 -> v1.0.1
- github.com/cosi-project/runtime 25f235cd0682 -> 5cb7f5002d77
- github.com/fsnotify/fsnotify v1.4.9 -> v1.5.1
- github.com/gdamore/tcell/v2 v2.4.0 -> f057f0a857a1
- github.com/google/nftables 16a134723a96 new
- github.com/hashicorp/go-getter v1.5.7 -> v1.5.8
- github.com/insomniacslk/dhcp 1cac67f12b1e -> b95caade3eac
- github.com/jsimonetti/rtnetlink 9c52e516c709 -> 4cc3c1489576
- github.com/jxskiss/base62 4f11678b909b new
- github.com/mattn/go-isatty v0.0.13 -> v0.0.14
- github.com/mdlayher/netx 669a06fde734 new
- github.com/packethost/packngo v0.19.0 -> v0.19.1
- github.com/prometheus/procfs v0.7.2 -> v0.7.3
- github.com/rivo/tview 29d673af0ce2 -> f7430b878d17
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.7 new
- github.com/talos-systems/extras v0.5.0 -> v0.6.0-alpha.0
- github.com/talos-systems/go-blockdevice v0.2.3 -> d9811569588b
- github.com/talos-systems/pkgs v0.7.0 -> v0.8.0-alpha.0-3-gdb90f93
- github.com/talos-systems/tools v0.7.0-1-ga33ccc1 -> v0.8.0-alpha.0-3-g2790b55
- github.com/vishvananda/netlink f5de75959ad5 new
- github.com/vmware-tanzu/sonobuoy v0.53.1 -> v0.53.2
- github.com/vmware/govmomi v0.26.0 -> v0.26.1
- github.com/vultr/metadata v1.0.3 new
- go.uber.org/zap v1.19.0 -> v1.19.1
- golang.org/x/net 853a461950ff -> 978cfadd31cf
- golang.org/x/sys 0f9fa26af87c -> d61c044b1678
- golang.org/x/term 6886f2dfbf5b -> 140adaaadfaf
- golang.zx2c4.com/wireguard/wgctrl 92e472f520a5 -> 91d1988e44de
- inet.af/netaddr ce7a8ad02cc1 -> 85fa6c94624e
- k8s.io/api v0.22.1 -> v0.22.2
- k8s.io/apimachinery v0.22.1 -> v0.22.2
- k8s.io/client-go v0.22.1 -> v0.22.2
- k8s.io/kubectl v0.22.1 -> v0.22.2
- k8s.io/kubelet v0.22.1 -> v0.22.2
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.58 new
Previous release can be found at v0.12.0
Talos 0.13.0-alpha.0 (2021-09-13)
Welcome to the v0.13.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Hetzner, Scaleway and Upcloud
Talos now natively supports three new cloud platforms:
etcd Advertised Address
The address advertised by etcd can now be controlled with new machine configuration option machine.etcd.subnet.
Cluster Discovery and KubeSpan
This release of Talos provides some initial support for cluster membership discovery and KubeSpan.
These new features are not enabled by default.
Windows Support
CLI tool talosctl is now built for Windows and published as part of the release.
Contributors
- Andrey Smirnov
- Artem Chernyshev
- Alexey Palazhchenko
- Serge Logvinov
- Andrew Rynhard
- Olli Janatuinen
- Andrey Smirnov
- Rui Lopes
- Spencer Smith
Changes
55 commits
ef022959fix: print etcd member ID in hex5ca1fb82fix: multiple fixes for KubeSpan and Wireguard implementationb1bd6425fix: build platform images3b5f4038feat: add scaleway.com cloud supportf156ab18feat: add upcloud.com cloud supportc3b2429cfix: suppress spurious Kubernetes API server cert updatesff90b575feat: implement KubeSpan peer generation controller14c69df5fix: correctly parse multiple pod/service CIDRs69897dbbfeat: drop some capabilities to be never available51e9836bdocs: promote 0.12 docs to be the latest812d59c7feat: add hetzner.com cloud supportd53e9e89chore: use named constants2dfe7f1fchore: bump tools to the latest version82b130e7docs: document required options for extraMountsaf662210feat: implement Kubernetes cluster discovery registry2c66e1b3feat: provide building of localAffiliatestructure (for the node)d69bd2afchore: enable GPG identity check for Talos8dbd851fchore: update tools/pkgs/extras to the new version0b347570feat: use dynamic NodeAddresses/HostnameStatus in Kubernetes certsbd5b9c96fix: correctly define example forextraMounts01cca099docs: update docs for Talos 0.12 release668627d5feat: add subnet filter for etcd address3c3c281bchore: bump dependencies via dependabotf8bebba2fix: ignore error on duplicate forMountStatus6956edd0feat: add node address filters, filter out k8s addresses for Talos APIcaee24bffeat: implement KubeSpan identity controllerda0f6e7efix: allow updating diskSelector option761ccaf3feat: provide machine configuration for KubeSpan and cluster discoverya81e30cbdocs: add bootstrap command to VMware docs97da354cfix: do not panic on invalid machine configsc4048e26fix: don't extract nil IPs in the GCP platformba169c6ffeat: provide talosctl.exe for Windows6312f473fix: properly handle omitempty fields in the validator7f22879afeat: provide random node identity032e7c6bchore: import yaml.v3 consistently80b5f0e7fix: validate IP address returned as HTTP response in platform codec9af8f7fdocs: fork docs for 0.1385cda1b9feat: provide MountStatus resource for system partition mounts950f122cchore: update versions in upgrade tests83fdb772feat: provide first NIC hardware addr as a resource5f5ac12ffix: properly case the VMware name0a6048f4fix: don't allow bootstrap if etcd data directory is not emptye24b93b4fix: cgroup delegate751f64f9docs: add release notes for 0.12, support matrix57a77696feat: update Kubernetes to 1.22.1244b08ccchore: bump dependencies576ba195fix: do not set KSPP kernel params in container modeb8c92edefix: don't support cgroups nesting in process runner9bb0b797test: adapt tests to the cgroupsv21abc12befix: extramount should haveyaml:",inline"tag2b614e43feat: check if cluster has deprecated resources versions0b86edabfix: don't panic if the machine config doesn't have network (EM)8bef41e4fix: make sure file mode is same (reproducibility issue)fcfca55achore: do not check that go mod tidy gives empty output5ce92ca5docs: ensure azure VMs are 0 indexed
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
Changes from talos-systems/pkgs
3 commits
Changes from talos-systems/tools
4 commits
Dependency Changes
- github.com/cosi-project/runtime 25f235cd0682 -> 57b048cd66b0
- github.com/fsnotify/fsnotify v1.4.9 -> v1.5.1
- github.com/insomniacslk/dhcp 1cac67f12b1e -> d82598001386
- github.com/jxskiss/base62 4f11678b909b new
- github.com/mdlayher/netx 669a06fde734 new
- github.com/prometheus/procfs v0.7.2 -> v0.7.3
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.7 new
- github.com/talos-systems/extras v0.5.0 -> v0.6.0-alpha.0
- github.com/talos-systems/go-blockdevice v0.2.3 -> d9811569588b
- github.com/talos-systems/pkgs v0.7.0 -> v0.8.0-alpha.0
- github.com/talos-systems/tools v0.7.0-1-ga33ccc1 -> v0.8.0-alpha.0-2-g5b9d214
- github.com/vmware-tanzu/sonobuoy v0.53.1 -> v0.53.2
- github.com/vmware/govmomi v0.26.0 -> v0.26.1
- golang.org/x/net 853a461950ff -> 60bc85c4be6d
- golang.org/x/sys 0f9fa26af87c -> 63515b42dcdf
- kernel.org/pub/linux/libs/security/libcap/cap v1.2.56 new
Previous release can be found at v0.12.0
Talos 0.12.0-alpha.1 (2021-08-13)
Welcome to the v0.12.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Support for Self-hosted Control Plane Dropped
Note
: This item only applies to clusters bootstrapped with Talos <= 0.8.
Talos 0.12 completely removes support for self-hosted Kubernetes control plane (bootkube-based).
Talos 0.9 introduced support for Talos-managed control plane and provided migration path to convert self-hosted control plane
to Talos-managed static pods.
Automated and manual conversion process is available in Talos from 0.9.x to 0.11.x.
For clusters bootstrapped with bootkube (Talos <= 0.8), please make sure control plane is converted to Talos-managed before
before upgrading to Talos 0.12.
Current control plane status can be checked with talosctl get bootstrapstatus before performing upgrade to Talos 0.12.
Cluster API v0.3.x
Cluster API v0.3.x (v1alpha3) is not compatible with Kubernetes 1.22 used by default in Talos 0.12. Talos can be configued to use Kubernetes 1.21 or CAPI v0.4.x components can be used instead.
Machine Config Validation
Unknown keys in the machine config now make the config invalid, so any attempt to apply/edit the configuration with the unknown keys will lead into an error.
Sysctl Configuration
Sysctl Kernel Params configuration was completely rewritten to be based on controllers and resources,
which makes it possible to apply .machine.sysctls in immediate mode (without a reboot).
talosctl get kernelparams returns merged list of KSPP, Kubernetes and user defined params along with
the default values overwritten by Talos.
Equinix Metal
Added support for Equinix Metal IPs for the Talos virtual (shared) IP (option equnixMetal under vip in the machine configuration).
Talos automatically re-assigns IP using the Equinix Metal API when leadership changes.
etcd
New etcd cluster members are now joined in learner mode, which improves cluster resiliency to member join issues.
Join Node Type
Node type join was renamed to worker for clarity. The old value is still accepted in the machine configuration but deprecated.
talosctl gen config now generates worker.yaml instead of join.yaml.
Networking
- multiple static addresses can be specified for the interface with new
.addressesfield (old.cidrfield is deprecated now) - static addresses can be set on interfaces configured with DHCP
Performance
- machined uses less memory and CPU time
- more disk encryption options are exposed via the machine configuration
- disk partitions are now aligned properly with minimum I/O size
- Talos system processes are moved under proper cgroups, resource metrics are now available via the kubelet
- OOM score is set on the system processes making sure they are killed last under memory pressure
Security
- etcd PKI moved to
/system/secrets - kubelet bootstrap CSR auto-signing scoped to kubelet bootstrap tokens only
- enforce default seccomp profile on all system containers
- run system services apid, trustd, and etcd as non-root users
Component Updates
- Linux: 5.10.57
- Kubernetes: 1.22.0
- containerd: 1.5.5
- runc: 1.0.1
- GRUB: 2.06
- Talos is built with Go 1.16.7
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Andrey Smirnov
- Serge Logvinov
- Artem Chernyshev
- Spencer Smith
- Alexey Palazhchenko
- dependabot[bot]
- Andrew Rynhard
- Artem Chernyshev
- Rui Lopes
- Caleb Woodbine
- Seán C McCord
Changes
109 commits
1ed5e545feat: add ClusterID and ClusterSecret228b3761chore: run etcd as non-root user3518219bchore: drop deprecated--no-rebootparam and KernelCurrentRoot const33d1c3e4chore: run apid and trustd services as non-root userdadaa65dfeat: print uid/gid for the files inls -le6fa401bfix: enable seccomp default profile by default8ddbcc96feat: validate if extra fields present in the decoder5b57a980chore: update Go to 1.16.7, Linux to 5.10.57eefe1c21feat: add new etcd members in learner modeb1c66fbafeat: implement Equinix Metal support for virtual (shared) IP62242f97chore: require GPG signaturesfaecae44feat: make ISO builds reproducible887c2326release(v0.12.0-alpha.0): prepare releasea15f0184fix: move etcd PKI under /system/secretseb02afe1fix: match correctly routes on the address familycb948accfeat: allow multiple addresses per interfacee030b2e8chore: use k8s 1.21.3 in CAPI tests for nowe08b4f8ffeat: implement sysctl controllersfdf6b243chore: revert "improve artifacts generation reproducibility"b68ed1ebfix: make route resources ID match closer routing table primary key585f6337fix: correctly handle nodoc for struct fieldsf2d394dcdocs: add AMIs for v0.11.5d0970cbffeat: bootstrap token limit5285a46dfix: maintenance mode reason message009d15e8chore: use etcd client TryLock function on upgrade4dae9ea5chore: use vtprotobuf compiled marshaling in Talos API7ca5749achore: bump dependencies via dependabotb2507b41chore: improve artifacts generation reproducibility1f7dad23chore: update PKGS version (512 cpus, new ca-certficates)1a2e78a2fix: update go-blockdevice6d6ed117chore: use parallel xz with higher compression level571f7db1chore: workaround GitHub new release notes limit09d70b7efeat: update Kubernetes to v1.22.0f25f10e7feat: add an option to disable PSP7c6e4cf2feat: allow both DHCP and static addressing for the interface3c566dbcfix: remove admission plugins enabled by default from the list69ead373fix: preserve PMBR bootable flag correctlydee63051fix: align partitions with minimal I/O size62890229feat: update GRUB to 2.06b9d04928feat: move system processes to cgroups0b8681b4fix: resolve several issues with Wireguard link specsf8f4bf3bdocs: add disk encryptions examples79b8fa64feat: update containerd to 1.5.5539f4209chore: bump dependencies via dependabot0c7ce1cdfeat: remove remnants of bootkube supportd4f9804fchore: fix typos5f027615feat: expose more encryption options to the machine config585152a0chore: bump dependenciesfc66ec59feat: set oom score for main processesdf54584afix: drop linux capabilitiesf65d0b73docs: add 0.11.3 AMIs7332d636fix: bump pkgs for new kernel 5.10.5270d2505bfix: do not require ToVersion to be set when detecting version0953b199chore: update extras to bring a new CNI bundleb6c47f86fix: set the /etc/os-release HOME_URL parameterc780821dfeat: update containerd to 1.5.3, runc to 1.0.1f8f1c83afeat: detect the lowest Kubernetes version in upgrade-k8s CLI command55e17ccdchore: bump dependenciesda6f786cfix: kuberentes => kubernetes typo2e463348fix: pass all logs through the options.Log method4e9c5afbfix: make ethtool optional in link status controllerbf61c2ccfix: write upgrade logs only to the LogOutput if it's defined9c73257cfeat: update Go to 1.16.623ef1d40chore: add ability to redirect talos upgrade module logs to io.Writer33e9d6c9chore: bump github.com/aws/aws-sdk-go in /hack/cloud-image-uploader604434c4chore: bump github.com/prometheus/procfs from 0.6.0 to 0.7.02ea28f62chore: bump node from 16.3.0-alpine to 16.4.2-alpineb358a189fix: correctly pick route scope for link-local destination6848d431feat: can change clusterdns ip lists72b76abffix: workaround issues when IPv6 is fully or partially disabled679b08f4docs: update docs for 0.126fbec9e0fix: cache etcd client used for healthcheckseea750dechore: rename "join" type to "worker"951493acdocs: update what's new for Talos 0.11b47d1098docs: promote 0.11 docs to be the latestd930a265chore: implement DeepCopy for machine configurationfe4ed3c7chore: ignore tags which don't look like semantic versionb969e772chore: update references to old protobuf package2ba8ac9adocs: add documentation directory for 0.12011e2885fix: validate bond slaves addressing10c28758fix: ignore DeadlineExceeded error correctly on bootstrap77fabacechore: ignore future pkg/machinery/vX.Y.Z tags6b661114fix: make COSI runtime history depth smaller9bf899bdfix: make forfeit leadership connect to the right node4708beaefeat: implementtalosctl config infocommand6d13d2cffix: close Kubernetes API clientaaa36f3bfix: ignore 'not a leader' error on forfeit leadership22a41936fix: workaround 'Unauthorized' errors when accessing Kubernetes API71c6f700chore: bump go.mod dependencies915cd8fedocs: add guide for RBACf5721050fix: controlplane keyusage3d772661fix: fill uuid argument correctly in the config download URLd8602025chore: update containerd config version 25949ec4edocs: describe the new network configuration subsystem444d72b4feat: update pkgs versione883c12bfix: make output ofupgrade-k8scommand less scary7f8e50defix: restart the merge controllers on conflict60d73609fix: ignore deadline exceeded errors on bootstrapee06dd69fix: don't print git sha of the release twice in the dashboard07fb61e5fix: issue worker apid certs properly on renewal84817f73chore: bump Talos version in upgrade tests2fa54107chore: fix tests for disabled RBAC78583ba9fix: don't set bond delay options if miimon is not enabledbbf1c091feat: add RBAC totalosctl versionoutput5f6ec3effix: handle cases when merged resource re-appears before being destroyed1e9a0e74fix: documentation typosf228af40chore: bump go.mod dependencies2060ceaachore: add CAPI version to CI setupad047a7dchore: small RBAC improvements
Changes since v0.12.0-alpha.0
12 commits
1ed5e545feat: add ClusterID and ClusterSecret228b3761chore: run etcd as non-root user3518219bchore: drop deprecated--no-rebootparam and KernelCurrentRoot const33d1c3e4chore: run apid and trustd services as non-root userdadaa65dfeat: print uid/gid for the files inls -le6fa401bfix: enable seccomp default profile by default8ddbcc96feat: validate if extra fields present in the decoder5b57a980chore: update Go to 1.16.7, Linux to 5.10.57eefe1c21feat: add new etcd members in learner modeb1c66fbafeat: implement Equinix Metal support for virtual (shared) IP62242f97chore: require GPG signaturesfaecae44feat: make ISO builds reproducible
Changes from talos-systems/crypto
Changes from talos-systems/extras
3 commits
Changes from talos-systems/go-blockdevice
4 commits
Changes from talos-systems/pkgs
17 commits
da4ac04chore: bump tools for Go 1.16.710275fbfeat: update Linux to 5.10.57875c7ecchore: patch grub with support for reproducible ISO builds12856cefeat: increase number of CPUs supported by the kernel to 512cbfabacchore: update ca-certificates to 2021-07-050c011c0feat: update GRUB to 2.065090d14chore: update containerd to v1.5.56653902feat: add kernel drivers for fusion and scsi-isci9b4041fchore: update containerd to v1.5.47b6cc05feat: update kernel to latest 5.10.5265159fbchore: update runc and CNI plugins514ba34feat: disable aufs, devmapper, zfs6bc118fchore: update runc and containerdb6fca88feat: update Go to 1.16.6fd56852chore: updateopen-isnsandopen-iscsid779204chore: update dosfstools to v4.2bc7c0d7feat: add support for hotplug of PCIE devices
Changes from talos-systems/tools
5 commits
Dependency Changes
- github.com/BurntSushi/toml v0.3.1 -> v0.4.1
- github.com/aws/aws-sdk-go v1.38.66 -> v1.40.2
- github.com/containerd/containerd v1.5.2 -> v1.5.5
- github.com/cosi-project/runtime 93ead370bf57 -> 25f235cd0682
- github.com/docker/docker v20.10.7 -> v20.10.8
- github.com/google/uuid v1.2.0 -> v1.3.0
- github.com/hashicorp/go-getter v1.5.4 -> v1.5.6
- github.com/opencontainers/runtime-spec e6143ca7d51d -> 1c3f411f0417
- github.com/packethost/packngo v0.19.0 new
- github.com/prometheus/procfs v0.6.0 -> v0.7.2
- github.com/rivo/tview d4fb0348227b -> 29d673af0ce2
- github.com/spf13/cobra v1.1.3 -> v1.2.1
- github.com/talos-systems/crypto v0.3.1 -> deec8d47700e
- github.com/talos-systems/extras v0.4.0 -> v0.5.0-alpha.0-2-g8ce17e5
- github.com/talos-systems/go-blockdevice v0.2.1 -> v0.2.3
- github.com/talos-systems/pkgs v0.6.0-1-g7b2e126 -> v0.7.0-alpha.0-16-gda4ac04
- github.com/talos-systems/tools v0.6.0 -> v0.7.0-alpha.0-3-g2368154
- github.com/vmware-tanzu/sonobuoy v0.52.0 -> v0.53.0
- go.uber.org/zap v1.17.0 -> v1.18.1
- golang.org/x/net 04defd469f4e -> 853a461950ff
- golang.org/x/sys 59db8d763f22 -> 0f9fa26af87c
- golang.org/x/time 38a9dc6acbc6 -> 1f47c861a9ac
- google.golang.org/grpc v1.38.0 -> v1.39.1
- google.golang.org/protobuf v1.26.0 -> v1.27.1
- inet.af/netaddr bf05d8b52dda -> ce7a8ad02cc1
- k8s.io/api v0.21.2 -> v0.22.0
- k8s.io/apimachinery v0.21.2 -> v0.22.0
- k8s.io/apiserver v0.21.2 -> v0.22.0
- k8s.io/client-go v0.21.2 -> v0.22.0
- k8s.io/cri-api v0.21.2 -> v0.22.0
- k8s.io/kubectl v0.21.2 -> v0.22.0
- k8s.io/kubelet v0.21.2 -> v0.22.0
Previous release can be found at v0.11.0
Talos 0.12.0-alpha.0 (2021-08-11)
Welcome to the v0.12.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Support for Self-hosted Control Plane Dropped
Note
: This item only applies to clusters bootstrapped with Talos <= 0.8.
Talos 0.12 completely removes support for self-hosted Kubernetes control plane (bootkube-based).
Talos 0.9 introduced support for Talos-managed control plane and provided migration path to convert self-hosted control plane
to Talos-managed static pods.
Automated and manual conversion process is available in Talos from 0.9.x to 0.11.x.
For clusters bootstrapped with bootkube (Talos <= 0.8), please make sure control plane is converted to Talos-managed before
before upgrading to Talos 0.12.
Current control plane status can be checked with talosctl get bootstrapstatus before performing upgrade to Talos 0.12.
Cluster API v0.3.x
Cluster API v0.3.x (v1alpha3) is not compatible with Kubernetes 1.22 used by default in Talos 0.12. Talos can be configued to use Kubernetes 1.21 or CAPI v0.4.x components can be used instead.
Sysctl Configuration
Sysctl Kernel Params configuration was completely rewritten to be based on controllers and resources,
which makes it possible to apply .machine.sysctls in immediate mode (without a reboot).
talosctl get kernelparams returns merged list of KSPP, Kubernetes and user defined params along with
the default values overwritten by Talos.
Join Node Type
Node type join was renamed to worker for clarity. The old value is still accepted in the machine configuration but deprecated.
talosctl gen config now generates worker.yaml instead of join.yaml.
Networking
- multiple static addresses can be specified for the interface with new
.addressesfield (old.cidrfield is deprecated now) - static addresses can be set on interfaces configured with DHCP
Performance
- machined uses less memory and CPU time
- more disk encryption options are exposed via the machine configuration
- disk partitions are now aligned properly with minimum I/O size
- Talos system processes are moved under proper cgroups, resource metrics are now available via the kubelet
- OOM score is set on the system processes making sure they are killed last under memory pressure
Security
- etcd PKI moved to
/system/secrets - kubelet bootstrap CSR auto-signing scoped to kubelet bootstrap tokens only
Component Updates
- Linux: 5.10.52
- Kubernetes: 1.22.0
- containerd: 1.5.5
- runc: 1.0.1
- GRUB: 2.06
- Talos is built with Go 1.16.6
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Serge Logvinov
- Andrey Smirnov
- Artem Chernyshev
- Spencer Smith
- Alexey Palazhchenko
- dependabot[bot]
- Rui Lopes
- Andrew Rynhard
- Caleb Woodbine
Changes
96 commits
a15f0184fix: move etcd PKI under /system/secretseb02afe1fix: match correctly routes on the address familycb948accfeat: allow multiple addresses per interfacee030b2e8chore: use k8s 1.21.3 in CAPI tests for nowe08b4f8ffeat: implement sysctl controllersfdf6b243chore: revert "improve artifacts generation reproducibility"b68ed1ebfix: make route resources ID match closer routing table primary key585f6337fix: correctly handle nodoc for struct fieldsf2d394dcdocs: add AMIs for v0.11.5d0970cbffeat: bootstrap token limit5285a46dfix: maintenance mode reason message009d15e8chore: use etcd client TryLock function on upgrade4dae9ea5chore: use vtprotobuf compiled marshaling in Talos API7ca5749achore: bump dependencies via dependabotb2507b41chore: improve artifacts generation reproducibility1f7dad23chore: update PKGS version (512 cpus, new ca-certficates)1a2e78a2fix: update go-blockdevice6d6ed117chore: use parallel xz with higher compression level571f7db1chore: workaround GitHub new release notes limit09d70b7efeat: update Kubernetes to v1.22.0f25f10e7feat: add an option to disable PSP7c6e4cf2feat: allow both DHCP and static addressing for the interface3c566dbcfix: remove admission plugins enabled by default from the list69ead373fix: preserve PMBR bootable flag correctlydee63051fix: align partitions with minimal I/O size62890229feat: update GRUB to 2.06b9d04928feat: move system processes to cgroups0b8681b4fix: resolve several issues with Wireguard link specsf8f4bf3bdocs: add disk encryptions examples79b8fa64feat: update containerd to 1.5.5539f4209chore: bump dependencies via dependabot0c7ce1cdfeat: remove remnants of bootkube supportd4f9804fchore: fix typos5f027615feat: expose more encryption options to the machine config585152a0chore: bump dependenciesfc66ec59feat: set oom score for main processesdf54584afix: drop linux capabilitiesf65d0b73docs: add 0.11.3 AMIs7332d636fix: bump pkgs for new kernel 5.10.5270d2505bfix: do not require ToVersion to be set when detecting version0953b199chore: update extras to bring a new CNI bundleb6c47f86fix: set the /etc/os-release HOME_URL parameterc780821dfeat: update containerd to 1.5.3, runc to 1.0.1f8f1c83afeat: detect the lowest Kubernetes version in upgrade-k8s CLI command55e17ccdchore: bump dependenciesda6f786cfix: kuberentes => kubernetes typo2e463348fix: pass all logs through the options.Log method4e9c5afbfix: make ethtool optional in link status controllerbf61c2ccfix: write upgrade logs only to the LogOutput if it's defined9c73257cfeat: update Go to 1.16.623ef1d40chore: add ability to redirect talos upgrade module logs to io.Writer33e9d6c9chore: bump github.com/aws/aws-sdk-go in /hack/cloud-image-uploader604434c4chore: bump github.com/prometheus/procfs from 0.6.0 to 0.7.02ea28f62chore: bump node from 16.3.0-alpine to 16.4.2-alpineb358a189fix: correctly pick route scope for link-local destination6848d431feat: can change clusterdns ip lists72b76abffix: workaround issues when IPv6 is fully or partially disabled679b08f4docs: update docs for 0.126fbec9e0fix: cache etcd client used for healthcheckseea750dechore: rename "join" type to "worker"951493acdocs: update what's new for Talos 0.11b47d1098docs: promote 0.11 docs to be the latestd930a265chore: implement DeepCopy for machine configurationfe4ed3c7chore: ignore tags which don't look like semantic versionb969e772chore: update references to old protobuf package2ba8ac9adocs: add documentation directory for 0.12011e2885fix: validate bond slaves addressing10c28758fix: ignore DeadlineExceeded error correctly on bootstrap77fabacechore: ignore future pkg/machinery/vX.Y.Z tags6b661114fix: make COSI runtime history depth smaller9bf899bdfix: make forfeit leadership connect to the right node4708beaefeat: implementtalosctl config infocommand6d13d2cffix: close Kubernetes API clientaaa36f3bfix: ignore 'not a leader' error on forfeit leadership22a41936fix: workaround 'Unauthorized' errors when accessing Kubernetes API71c6f700chore: bump go.mod dependencies915cd8fedocs: add guide for RBACf5721050fix: controlplane keyusage3d772661fix: fill uuid argument correctly in the config download URLd8602025chore: update containerd config version 25949ec4edocs: describe the new network configuration subsystem444d72b4feat: update pkgs versione883c12bfix: make output ofupgrade-k8scommand less scary7f8e50defix: restart the merge controllers on conflict60d73609fix: ignore deadline exceeded errors on bootstrapee06dd69fix: don't print git sha of the release twice in the dashboard07fb61e5fix: issue worker apid certs properly on renewal84817f73chore: bump Talos version in upgrade tests2fa54107chore: fix tests for disabled RBAC78583ba9fix: don't set bond delay options if miimon is not enabledbbf1c091feat: add RBAC totalosctl versionoutput5f6ec3effix: handle cases when merged resource re-appears before being destroyed1e9a0e74fix: documentation typosf228af40chore: bump go.mod dependencies2060ceaachore: add CAPI version to CI setupad047a7dchore: small RBAC improvements
Changes from talos-systems/crypto
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
4 commits
Changes from talos-systems/pkgs
14 commits
12856cefeat: increase number of CPUs supported by the kernel to 512cbfabacchore: update ca-certificates to 2021-07-050c011c0feat: update GRUB to 2.065090d14chore: update containerd to v1.5.56653902feat: add kernel drivers for fusion and scsi-isci9b4041fchore: update containerd to v1.5.47b6cc05feat: update kernel to latest 5.10.5265159fbchore: update runc and CNI plugins514ba34feat: disable aufs, devmapper, zfs6bc118fchore: update runc and containerdb6fca88feat: update Go to 1.16.6fd56852chore: updateopen-isnsandopen-iscsid779204chore: update dosfstools to v4.2bc7c0d7feat: add support for hotplug of PCIE devices
Changes from talos-systems/tools
4 commits
Dependency Changes
- github.com/BurntSushi/toml v0.3.1 -> v0.4.1
- github.com/aws/aws-sdk-go v1.38.66 -> v1.40.2
- github.com/containerd/containerd v1.5.2 -> v1.5.5
- github.com/cosi-project/runtime 93ead370bf57 -> 25f235cd0682
- github.com/docker/docker v20.10.7 -> v20.10.8
- github.com/google/uuid v1.2.0 -> v1.3.0
- github.com/hashicorp/go-getter v1.5.4 -> v1.5.6
- github.com/opencontainers/runtime-spec e6143ca7d51d -> 1c3f411f0417
- github.com/prometheus/procfs v0.6.0 -> v0.7.2
- github.com/rivo/tview d4fb0348227b -> 29d673af0ce2
- github.com/spf13/cobra v1.1.3 -> v1.2.1
- github.com/talos-systems/crypto v0.3.1 -> deec8d47700e
- github.com/talos-systems/extras v0.4.0 -> v0.5.0-alpha.0-1-g4957f3c
- github.com/talos-systems/go-blockdevice v0.2.1 -> v0.2.3
- github.com/talos-systems/pkgs v0.6.0-1-g7b2e126 -> v0.7.0-alpha.0-13-g12856ce
- github.com/talos-systems/tools v0.6.0 -> v0.7.0-alpha.0-2-g7172a5d
- github.com/vmware-tanzu/sonobuoy v0.52.0 -> v0.53.0
- go.uber.org/zap v1.17.0 -> v1.18.1
- golang.org/x/net 04defd469f4e -> 853a461950ff
- golang.org/x/sys 59db8d763f22 -> 0f9fa26af87c
- golang.org/x/time 38a9dc6acbc6 -> 1f47c861a9ac
- google.golang.org/grpc v1.38.0 -> v1.39.1
- google.golang.org/protobuf v1.26.0 -> v1.27.1
- inet.af/netaddr bf05d8b52dda -> ce7a8ad02cc1
- k8s.io/api v0.21.2 -> v0.22.0
- k8s.io/apimachinery v0.21.2 -> v0.22.0
- k8s.io/apiserver v0.21.2 -> v0.22.0
- k8s.io/client-go v0.21.2 -> v0.22.0
- k8s.io/cri-api v0.21.2 -> v0.22.0
- k8s.io/kubectl v0.21.2 -> v0.22.0
- k8s.io/kubelet v0.21.2 -> v0.22.0
Previous release can be found at v0.11.0
Talos 0.11.0-alpha.2 (2021-06-23)
Welcome to the v0.11.0-alpha.2 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Default to Bootstrap workflow
The init.yaml is no longer an output of talosctl gen config.
We now encourage using the bootstrap API, instead of init node types, as we
intend on deprecating this machine type in the future.
The init.yaml and controlplane.yaml machine configs are identical with the
exception of the machine type.
Users can use a modified controlplane.yaml with the machine type set to
init if they would like to avoid using the bootstrap API.
Component Updates
- containerd was updated to 1.5.2
- Linux kernel was updated to 5.10.45
- Kubernetes was updated to 1.21.2
- etcd was updated to 3.4.16
CoreDNS
Added the flag cluster.coreDNS.disabled to coreDNS deployment during the cluster bootstrap.
Legacy BIOS Support
Added an option to the machine.install section of the machine config that can enable marking MBR partition bootable
for the machines that have legacy BIOS which does not support GPT partitioning scheme.
Multi-arch Installer
Talos installer image (for any arch) now contains artifacts for both amd64 and arm64 architecture.
This means that e.g. images for arm64 SBCs can be generated on amd64 host.
Networking Configuration
Talos networking configuration was completely rewritten to be based on controllers
and resources.
There are no changes to the machine configuration, but any update to .machine.network can now
be applied in immediate mode (without a reboot).
Talos should be setting up network configuration much faster on boot now, not blocking on DHCP for unconfigured
interfaces and skipping the reset network step.
Talos API RBAC
Limited RBAC support in Talos API is now enabled by default for Talos 0.11.
Default talosconfig has os:admin role embedded in the certificate so that all the APIs are available.
Certificates with reduced set of roles can be created with talosctl config new command.
When upgrading from Talos 0.10, RBAC is not enabled by default. Before enabling RBAC, generate talosconfig with
os:admin role first to make sure that administrator still has access to the cluster when RBAC is enabled.
List of available roles:
os:adminrole enables every Talos APIos:readerrole limits access to read-only APIs which do not return sensitive dataos:etcd:backuprole only allowstalosctl etcd snapshotAPI call (for etcd backup automation)
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Artem Chernyshev
- Serge Logvinov
- Jorik Jonker
- Spencer Smith
- Andrew Rynhard
- Andrew LeCody
- Kevin Hellemun
- Seán C McCord
- Boran Car
- Brandon Nason
- Gabor Nyiri
- Gabor Nyiri
- Joost Coelingh
- Lance R. Vick
- Lennard Klein
- Sébastien Bernard
- Sébastien Bernard
Changes
162 commits
0731be90feat: add cloud images to releasesb52b2066feat: split etcd certificates to peer/client33119d2bchore: add an option to launch cluster with bad RTC stated8c2bca1feat: reimplement apid certificate generation on top of COSI3c1b3219chore: refactor CLI tests0fd9ea2dfeat: enable MACVTAP support898673e8chore: update e2e tests to use latest capi releasese26c5583docs: add AMI IDs for Talos 0.10.472ef48f0fix: assign source address to the DHCP default gateway routes004885a3feat: update Linux kernel to 5.10.45, etcd to 3.4.16821f469afeat: skip overlay mount checks with dockerb6e02311feat: use COSI RD's sensitivity for RBAC46751c1afeat: improve security of Kubernetes control plane components0f659622fix: build with custom kernel/rootfs5b5089abfix: mark kube-proxy as system critical priority42c16f67chore: bump dependencies60f78419chore: bump etcd client libraries to final 3.5.0 release2b0de9edfeat: improve security of Kubernetes control plane components48a5c460docs: provide more storage detailse13d905crelease(v0.11.0-alpha.1): prepare release70ac771efix: use localhost API server endpoint for internal communicationa941eb7dfeat: improve security of Kubernetes control plane components3aae94e5feat: provide Kubernetes nodename as a COSI resource06209bbachore: update RBAC rules, remove old APIs9f24b519chore: remove bootkube check from cluster health check4ac9bea2fix: stop etcd client logs from going to the server consolef63ab9ddfeat: implementtalosctl config newcommandfa15a668fix: don't enable RBAC feature in the config for Talos < 0.112dc27d99fix: do not format state partition in the initialize sequenceb609f33cfix: update networking stack after Equnix Metal testing243a3b53fix: separate healthy and unknown flags in the service resource1a1378befix: update retry package with a fix for errors.Iscb83edd7fix: wait for the network to be ready in mainteancne mode96f89071feat: update controller-runtime logs to console level on config.debug973069b6feat: support NFS 4.1654dcad4chore: bump dependencies via dependabotd7394457fix: don't treat ethtool errors as fatalf2ae9cd0feat: replace networkd with new network implementationcaec3063fix: do not complain about empty roles11918a11docs: update community meeting timeaeddb9c0feat: implement platform config controller (hostnames)1ece334dfeat: implement controller which runs network operators744ea8a5fix: do not add bootstrap contents option if tail events is not 05029edfbfix: overwrite nodes in the gRPC metadata6a35c8f1feat: implement virtual IP (shared IP) network operator0f3b8380chore: expose WatchRequest in the resources client11e258b1feat: implement operator configuration controllerce3815e7feat: implement DHCP6 operatorf010d99afeat: implement operator framework with DHCP4 as the first examplef93c9c8ffeat: bring unconfigured links with link carrier up by default02bd657bfeat: implement network.Status resource and controllerda329f00feat: enable RBAC by default0f168a88feat: add configuration for enabling RBACe74f789bfeat: implement EtcFileController to render files in/etc5aede1a8fix: prefer extraConfig over OVF env, skip empty config5ad314fefeat: implement basic RBAC interceptorsc031be81chore: use Go 1.16.58b0763f6chore: bump dependencies via dependabot8b8de11dfeat: implement new controllers for hostname, resolvers and time servers24859b14docs: update Rpi4 firmware guide62c702c4fix: remove conflicting etcd member on rejoin with empty data directoryff62a599fix: drop into maintenance mode if config URL isnone(metal)14e696d0feat: update COSI runtime and add support for tail in the Talos gRPCa71053fcfeat: default to bootstrap workflow76aac4bbfeat: implement CPU and Memory stats controller8f90c6a8feat: parse Talos-specific cmdline paramsed10e139feat: implement NodeAddress controller33db8857fix: use COSI runtime DestroyReady input type6e775363refactor: rename *.Status() to *.TypedSpec() in the resources97627061docs: set static IP on ISO install mode5811f4ddfeat: implement link (interface) controllers046b229bchore: skip building multi-arch installer for race-enabled build73fbb4b5fix: only fetch machine uuid if it's not setf112a540fix: clean up stale snapshots on container startc036b949chore: bump dependenciesa4d67a01feat: add the ability to disable CoreDNS76dbfb36feat: add ability to mark MBR partition bootablee0f5b1e2chore: split mgmt/gen.go into several filesfad1b4f1chore: fix go generate for the machinery1117294arelease(v0.11.0-alpha.0): prepare releasec0962946chore: prepare for 0.11 release series72359765feat: enable GORACE=halt_on_panic=1 in machined binary0acb04adfeat: implement route network controllersf5bf88a4feat: create certificates with os:admin role1db301edfeat: switch controller-runtime to zap.Loggerf7cf64d4fix: add talos.config to the vApp Properties in VMware OVA209527ecdocs: add AMIs for Talos 0.10.359cfd312chore: bump dependencies via dependabot1edb20cffeat: extract config generationaf77c295docs: update wirguard guide4fe69121test: bettertalosctl lstests04ddda96feat: update containerd to 1.5.2, runc to 1.0.0-rc9549c7276bchore: fix markdown linting7270495adocs: add mayastor quickstartd3d9112fdocs: fix spelling/grammar in What's New for Talos 0.982804414test: provide a way to force different boot order in provision librarya1c0e99adocs: add guide for deploying metrics-server6bc6658bfeat: update containerd to 1.5.1c6567faechore: dependabot updates61ccbb3fchore: keep debug symbols in debug builds1ce362e0docs: update customizing kernel build stepsa26174b5fix: properly compose pattern and header in etcd members output0825cf11fix: stop networkd and pods before leaving etcd on upgradebed6b15dfix: properly populate AllowSchedulingOnMasters option in gen config RPC071f0445feat: implement AddressSpec handling76e38b7bfeat: update Kubernetes to 1.21.19b1338d9chore: parse "boolean" variablesc81cfb21chore: allow building with debug handlersc9651673feat: update go-smbios library95c656fbfeat: update containerd to 1.5.0, runc to 1.0.0-rc94db9c35b5feat: implement AddressStatusController1cf011a8chore: bump dependencies via dependabote3f407a1fix: properly pass disk type selector from config to matcher66b2b450feat: add resources and use HTTPS checks in control plane pods4ffd7c0afix: stop networkd before leaving etcd on 'reset' path610d38d3docs: add AMIs for 0.10.1, collapse list of AMIs by default807497ecchore: make conformance pipeline depend on cron-default3c121359feat: implement LinkStatusController0e8de046fix: update go-blockdevice to fix disk type detection4d50a4edfix: update the way NTP sync usesadjtimexsyscall1a85c14afix: avoid data race on CRI pod stop5de8dbc0fix: repair pine64 support38239097fix: properly parse matcher expressionse54b6b7achore: update dependencies via dependabotf2caed0dchore: use extracted talos-systems/go-kmsg library79d804c5docs: fix typosa2bb390efeat: deterministic buildse480fedffeat: add USB serial drivers79299d76docs: add Matrix room links1b3e8b09docs: add survey to README8d51c9bbdocs: update redirects to Talos 0.101092c3a5feat: add Pine64 SBC support63e01754feat: pull kernel with VMware balloon module enabledaeec99d8chore: remove temporary fork0f49722dfeat: add--config-patchflag by node typea01b1d22chore: dump dependencies via dependabotd540a4a4fix: bump crypto library for the CSR verification fixc3a4173echore: remove security API ReadFile/WriteFile38037131chore: update wgctrl dependecyd9ba0fd0docs: create v0.11 docs, promote v0.10 docs, add v0.10 AMIs2261d7edfix: use both self-signed and Kubernetes CA to verify Kubelet certa3537a69docs: update cloud images for Talos v0.9.35b9ee861docs: add what's new for Talos 0.10f1107fa3docs: add survey93623d47docs: update AWS instructionsa739d1b8feat: add support of custom registry CA certificate usage7f468d35fix: update osType in OVA other3xLinux64Guest"4a184b67docs: add etcd backup and restore guide5fb38d3echore: refactor Dockerfile for cross-compilationa8f1e526chore: build talosctl for Darwin / Apple Siliconeb0b64d3chore: list specifically for enabled regions669a0cbdfix: check if OVF env is emptyda92049cchore: use codecov from the build container9996d4b0chore: use REGISTRY_MIRROR_FLAGS if defined05cbe250chore: bump dependencies via dependabot9a91142afeat: print complete member info in etcd membersbb40d6ddfeat: update pkgs versione7a9164btest: implementtalosctl conformancecommand to run e2e tests6cb266e7fix: update etcd client errors, print etcd join failures0bd8b0e8feat: provide an option to recover etcd from data directory copyf9818540chore: fix conform with scopes21018f28chore: bump website node.js dependencies
Changes since v0.11.0-alpha.1
19 commits
0731be90feat: add cloud images to releasesb52b2066feat: split etcd certificates to peer/client33119d2bchore: add an option to launch cluster with bad RTC stated8c2bca1feat: reimplement apid certificate generation on top of COSI3c1b3219chore: refactor CLI tests0fd9ea2dfeat: enable MACVTAP support898673e8chore: update e2e tests to use latest capi releasese26c5583docs: add AMI IDs for Talos 0.10.472ef48f0fix: assign source address to the DHCP default gateway routes004885a3feat: update Linux kernel to 5.10.45, etcd to 3.4.16821f469afeat: skip overlay mount checks with dockerb6e02311feat: use COSI RD's sensitivity for RBAC46751c1afeat: improve security of Kubernetes control plane components0f659622fix: build with custom kernel/rootfs5b5089abfix: mark kube-proxy as system critical priority42c16f67chore: bump dependencies60f78419chore: bump etcd client libraries to final 3.5.0 release2b0de9edfeat: improve security of Kubernetes control plane components48a5c460docs: provide more storage details
Changes from talos-systems/crypto
8 commits
d3cb772feat: make possible to change KeyUsage6bc5bb5chore: remove unused argumentcd18ef6feat: add support for several organizations97c888bchore: add options to CSR7776057chore: fix typos80df078chore: remove named result parameters15bdd28chore: minor updates4f80b97fix: verify CSR signature before issuing a certificate
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
3 commits
Changes from talos-systems/go-debug
5 commits
Changes from talos-systems/go-kmsg
Changes from talos-systems/go-loadbalancer
3 commits
Changes from talos-systems/go-retry
3 commits
Changes from talos-systems/go-smbios
Changes from talos-systems/pkgs
22 commits
41d6cccfeat: enable MACVTAP support96072f8feat: enable adiantum block encryption (both amd64 arm64)f5eac03feat: update Linux to 5.10.45d756119feat: enable HP ILO kernel module (both amd64 arm64)2d51360feat: support NFS 4.1e63e4e9feat: bump tools for Go 1.16.51f8af29feat: update Linux to 5.10.38a3a6650feat: update containerd to 1.5.2c70ea44feat: update runc to 1.0.0-rc95db60235feat: add support for netxen cardf934187feat: update containerd to 1.5.1e8ed5bcfeat: add geneve encapsulation support for openvswitch9f7903cfeat: update containerd to 1.5.0, runc to -rc94d7c0f70feat: add AES-NI support for amd64b0d9cd2fix: buildzbinutility for both amd64 and arm64bb39b97feat: add IPMI support in kernel1148f9afeat: add DS1307 RTC support for arm64350aa6ffeat: add USB serial supportde9c582feat: add Pine64 SBC supportb56f36bfeat: enable VMware baloon kernel modulef87c194feat: add iPXE build with embedded placeholder scripta8b9e71feat: add cpu scaling for rpi
Changes from talos-systems/tools
Dependency Changes
- github.com/aws/aws-sdk-go v1.27.0 new
- github.com/containerd/cgroups 4cbc285b3327 -> v1.0.1
- github.com/containerd/containerd v1.4.4 -> v1.5.2
- github.com/containerd/go-cni v1.0.1 -> v1.0.2
- github.com/containerd/typeurl v1.0.1 -> v1.0.2
- github.com/coreos/go-iptables v0.5.0 -> v0.6.0
- github.com/cosi-project/runtime 10d6103c19ab -> f1649aff7641
- github.com/docker/docker v20.10.4 -> v20.10.7
- github.com/emicklei/dot v0.15.0 -> v0.16.0
- github.com/evanphx/json-patch v4.9.0 -> v4.11.0
- github.com/fatih/color v1.10.0 -> v1.12.0
- github.com/google/go-cmp v0.5.5 -> v0.5.6
- github.com/google/gofuzz v1.2.0 new
- github.com/googleapis/gnostic v0.5.5 new
- github.com/grpc-ecosystem/go-grpc-middleware v1.2.2 -> v1.3.0
- github.com/hashicorp/go-getter v1.5.2 -> v1.5.4
- github.com/imdario/mergo v0.3.12 new
- github.com/insomniacslk/dhcp cc9239ac6294 -> 465dd6c35f6c
- github.com/jsimonetti/rtnetlink 1b79e63a70a0 -> 9c52e516c709
- github.com/magiconair/properties v1.8.5 new
- github.com/mattn/go-isatty v0.0.12 -> v0.0.13
- github.com/mdlayher/arp f72070a231fc new
- github.com/mdlayher/ethtool 2b88debcdd43 new
- github.com/mdlayher/netlink v1.4.0 -> v1.4.1
- github.com/mdlayher/raw 51b895745faf new
- github.com/mitchellh/mapstructure v1.4.1 new
- github.com/opencontainers/runtime-spec 4d89ac9fbff6 -> e6143ca7d51d
- github.com/pelletier/go-toml v1.9.0 new
- github.com/rivo/tview 8a8f78a6dd01 -> d4fb0348227b
- github.com/rs/xid v1.2.1 -> v1.3.0
- github.com/sirupsen/logrus v1.8.1 new
- github.com/spf13/afero v1.6.0 new
- github.com/spf13/cast v1.3.1 new
- github.com/spf13/viper v1.7.1 new
- github.com/talos-systems/crypto 39584f1b6e54 -> d3cb77220384
- github.com/talos-systems/extras v0.3.0 -> v0.3.0-1-g4fe2706
- github.com/talos-systems/go-blockdevice 1d830a25f64f -> v0.2.1
- github.com/talos-systems/go-debug 3d0a6e1bf5e3 new
- github.com/talos-systems/go-kmsg v0.1.0 new
- github.com/talos-systems/go-loadbalancer v0.1.0 -> v0.1.1
- github.com/talos-systems/go-retry b9dc1a990133 -> c78cc953d9e9
- github.com/talos-systems/go-smbios fb425d4727e6 -> d3a32bea731a
- github.com/talos-systems/pkgs v0.5.0-1-g5dd650b -> v0.6.0-alpha.0-12-g41d6ccc
- github.com/talos-systems/talos/pkg/machinery
8ffb55943c-> 000000000000 - github.com/talos-systems/tools v0.5.0 -> v0.5.0-1-gc8c2a18
- github.com/vishvananda/netns 2eb08e3e575f new
- github.com/vmware-tanzu/sonobuoy v0.20.0 -> v0.51.0
- github.com/vmware/govmomi v0.24.0 -> v0.26.0
- go.etcd.io/etcd/api/v3 v3.5.0-alpha.0 -> v3.5.0
- go.etcd.io/etcd/client/pkg/v3 v3.5.0 new
- go.etcd.io/etcd/client/v3 v3.5.0-alpha.0 -> v3.5.0
- go.etcd.io/etcd/etcdutl/v3 v3.5.0 new
- go.uber.org/zap v1.17.0 new
- golang.org/x/net e18ecbb05110 -> 04defd469f4e
- golang.org/x/oauth2 81ed05c6b58c new
- golang.org/x/sys 77cc2087c03b -> 59db8d763f22
- golang.org/x/term 6a3ed077a48d -> 6886f2dfbf5b
- golang.org/x/time f8bda1e9f3ba -> 38a9dc6acbc6
- golang.zx2c4.com/wireguard/wgctrl bd2cb7843e1b -> 92e472f520a5
- google.golang.org/appengine v1.6.7 new
- google.golang.org/grpc v1.37.0 -> v1.38.0
- gopkg.in/ini.v1 v1.62.0 new
- inet.af/netaddr 1d252cf8125e new
- k8s.io/api v0.21.0 -> v0.21.2
- k8s.io/apimachinery v0.21.0 -> v0.21.2
- k8s.io/apiserver v0.21.0 -> v0.21.2
- k8s.io/client-go v0.21.0 -> v0.21.2
- k8s.io/cri-api v0.21.0 -> v0.21.2
- k8s.io/kubectl v0.21.0 -> v0.21.2
- k8s.io/kubelet v0.21.0 -> v0.21.2
- k8s.io/utils 2afb4311ab10 new
- sigs.k8s.io/structured-merge-diff/v4 v4.1.1 new
Previous release can be found at v0.10.0
Talos 0.11.0-alpha.1 (2021-06-18)
Welcome to the v0.11.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Default to Bootstrap workflow
The init.yaml is no longer an output of talosctl gen config.
We now encourage using the bootstrap API, instead of init node types, as we
intend on deprecating this machine type in the future.
The init.yaml and controlplane.yaml machine configs are identical with the
exception of the machine type.
Users can use a modified controlplane.yaml with the machine type set to
init if they would like to avoid using the bootstrap API.
Component Updates
- containerd was updated to 1.5.2
- Linux kernel was updated to 5.10.38
CoreDNS
Added the flag cluster.coreDNS.disabled to coreDNS deployment during the cluster bootstrap.
Legacy BIOS Support
Added an option to the machine.install section of the machine config that can enable marking MBR partition bootable
for the machines that have legacy BIOS which does not support GPT partitioning scheme.
Multi-arch Installer
Talos installer image (for any arch) now contains artifacts for both amd64 and arm64 architecture.
This means that e.g. images for arm64 SBCs can be generated on amd64 host.
Networking Configuration
Talos networking configuration was completely rewritten to be based on controllers
and resources.
There are no changes to the machine configuration, but any update to .machine.network can now
be applied in immediate mode (without a reboot).
Talos should be setting up network configuration much faster on boot now, not blocking on DHCP for unconfigured
interfaces and skipping the reset network step.
Talos API RBAC
Limited RBAC support in Talos API is now enabled by default for Talos 0.11.
Default talosconfig has os:admin role embedded in the certificate so that all the APIs are available.
Certificates with reduced set of roles can be created with talosctl config new command.
When upgrading from Talos 0.10, RBAC is not enabled by default. Before enabling RBAC, generate talosconfig with
os:admin role first to make sure that administrator still have access to the cluster when RBAC is enabled.
List of available roles:
os:adminrole enables every Talos APIos:readerrole limits access to read-only APIs which do not return sensitive informtationos:etcd:backuprole only allowstalosctl etcd snapshotAPI call (for etcd backup automation)
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Artem Chernyshev
- Jorik Jonker
- Spencer Smith
- Andrew Rynhard
- Serge Logvinov
- Andrew LeCody
- Kevin Hellemun
- Boran Car
- Brandon Nason
- Gabor Nyiri
- Joost Coelingh
- Lance R. Vick
- Lennard Klein
- Seán C McCord
- Sébastien Bernard
- Sébastien Bernard
Changes
143 commits
f8e1cf09release(v0.11.0-alpha.1): prepare release70ac771efix: use localhost API server endpoint for internal communicationa941eb7dfeat: improve security of Kubernetes control plane components3aae94e5feat: provide Kubernetes nodename as a COSI resource06209bbachore: update RBAC rules, remove old APIs9f24b519chore: remove bootkube check from cluster health check4ac9bea2fix: stop etcd client logs from going to the server consolef63ab9ddfeat: implementtalosctl config newcommandfa15a668fix: don't enable RBAC feature in the config for Talos < 0.112dc27d99fix: do not format state partition in the initialize sequenceb609f33cfix: update networking stack after Equnix Metal testing243a3b53fix: separate healthy and unknown flags in the service resource1a1378befix: update retry package with a fix for errors.Iscb83edd7fix: wait for the network to be ready in mainteancne mode96f89071feat: update controller-runtime logs to console level on config.debug973069b6feat: support NFS 4.1654dcad4chore: bump dependencies via dependabotd7394457fix: don't treat ethtool errors as fatalf2ae9cd0feat: replace networkd with new network implementationcaec3063fix: do not complain about empty roles11918a11docs: update community meeting timeaeddb9c0feat: implement platform config controller (hostnames)1ece334dfeat: implement controller which runs network operators744ea8a5fix: do not add bootstrap contents option if tail events is not 05029edfbfix: overwrite nodes in the gRPC metadata6a35c8f1feat: implement virtual IP (shared IP) network operator0f3b8380chore: expose WatchRequest in the resources client11e258b1feat: implement operator configuration controllerce3815e7feat: implement DHCP6 operatorf010d99afeat: implement operator framework with DHCP4 as the first examplef93c9c8ffeat: bring unconfigured links with link carrier up by default02bd657bfeat: implement network.Status resource and controllerda329f00feat: enable RBAC by default0f168a88feat: add configuration for enabling RBACe74f789bfeat: implement EtcFileController to render files in/etc5aede1a8fix: prefer extraConfig over OVF env, skip empty config5ad314fefeat: implement basic RBAC interceptorsc031be81chore: use Go 1.16.58b0763f6chore: bump dependencies via dependabot8b8de11dfeat: implement new controllers for hostname, resolvers and time servers24859b14docs: update Rpi4 firmware guide62c702c4fix: remove conflicting etcd member on rejoin with empty data directoryff62a599fix: drop into maintenance mode if config URL isnone(metal)14e696d0feat: update COSI runtime and add support for tail in the Talos gRPCa71053fcfeat: default to bootstrap workflow76aac4bbfeat: implement CPU and Memory stats controller8f90c6a8feat: parse Talos-specific cmdline paramsed10e139feat: implement NodeAddress controller33db8857fix: use COSI runtime DestroyReady input type6e775363refactor: rename *.Status() to *.TypedSpec() in the resources97627061docs: set static IP on ISO install mode5811f4ddfeat: implement link (interface) controllers046b229bchore: skip building multi-arch installer for race-enabled build73fbb4b5fix: only fetch machine uuid if it's not setf112a540fix: clean up stale snapshots on container startc036b949chore: bump dependenciesa4d67a01feat: add the ability to disable CoreDNS76dbfb36feat: add ability to mark MBR partition bootablee0f5b1e2chore: split mgmt/gen.go into several filesfad1b4f1chore: fix go generate for the machinery1117294arelease(v0.11.0-alpha.0): prepare releasec0962946chore: prepare for 0.11 release series72359765feat: enable GORACE=halt_on_panic=1 in machined binary0acb04adfeat: implement route network controllersf5bf88a4feat: create certificates with os:admin role1db301edfeat: switch controller-runtime to zap.Loggerf7cf64d4fix: add talos.config to the vApp Properties in VMware OVA209527ecdocs: add AMIs for Talos 0.10.359cfd312chore: bump dependencies via dependabot1edb20cffeat: extract config generationaf77c295docs: update wirguard guide4fe69121test: bettertalosctl lstests04ddda96feat: update containerd to 1.5.2, runc to 1.0.0-rc9549c7276bchore: fix markdown linting7270495adocs: add mayastor quickstartd3d9112fdocs: fix spelling/grammar in What's New for Talos 0.982804414test: provide a way to force different boot order in provision librarya1c0e99adocs: add guide for deploying metrics-server6bc6658bfeat: update containerd to 1.5.1c6567faechore: dependabot updates61ccbb3fchore: keep debug symbols in debug builds1ce362e0docs: update customizing kernel build stepsa26174b5fix: properly compose pattern and header in etcd members output0825cf11fix: stop networkd and pods before leaving etcd on upgradebed6b15dfix: properly populate AllowSchedulingOnMasters option in gen config RPC071f0445feat: implement AddressSpec handling76e38b7bfeat: update Kubernetes to 1.21.19b1338d9chore: parse "boolean" variablesc81cfb21chore: allow building with debug handlersc9651673feat: update go-smbios library95c656fbfeat: update containerd to 1.5.0, runc to 1.0.0-rc94db9c35b5feat: implement AddressStatusController1cf011a8chore: bump dependencies via dependabote3f407a1fix: properly pass disk type selector from config to matcher66b2b450feat: add resources and use HTTPS checks in control plane pods4ffd7c0afix: stop networkd before leaving etcd on 'reset' path610d38d3docs: add AMIs for 0.10.1, collapse list of AMIs by default807497ecchore: make conformance pipeline depend on cron-default3c121359feat: implement LinkStatusController0e8de046fix: update go-blockdevice to fix disk type detection4d50a4edfix: update the way NTP sync usesadjtimexsyscall1a85c14afix: avoid data race on CRI pod stop5de8dbc0fix: repair pine64 support38239097fix: properly parse matcher expressionse54b6b7achore: update dependencies via dependabotf2caed0dchore: use extracted talos-systems/go-kmsg library79d804c5docs: fix typosa2bb390efeat: deterministic buildse480fedffeat: add USB serial drivers79299d76docs: add Matrix room links1b3e8b09docs: add survey to README8d51c9bbdocs: update redirects to Talos 0.101092c3a5feat: add Pine64 SBC support63e01754feat: pull kernel with VMware balloon module enabledaeec99d8chore: remove temporary fork0f49722dfeat: add--config-patchflag by node typea01b1d22chore: dump dependencies via dependabotd540a4a4fix: bump crypto library for the CSR verification fixc3a4173echore: remove security API ReadFile/WriteFile38037131chore: update wgctrl dependecyd9ba0fd0docs: create v0.11 docs, promote v0.10 docs, add v0.10 AMIs2261d7edfix: use both self-signed and Kubernetes CA to verify Kubelet certa3537a69docs: update cloud images for Talos v0.9.35b9ee861docs: add what's new for Talos 0.10f1107fa3docs: add survey93623d47docs: update AWS instructionsa739d1b8feat: add support of custom registry CA certificate usage7f468d35fix: update osType in OVA other3xLinux64Guest"4a184b67docs: add etcd backup and restore guide5fb38d3echore: refactor Dockerfile for cross-compilationa8f1e526chore: build talosctl for Darwin / Apple Siliconeb0b64d3chore: list specifically for enabled regions669a0cbdfix: check if OVF env is emptyda92049cchore: use codecov from the build container9996d4b0chore: use REGISTRY_MIRROR_FLAGS if defined05cbe250chore: bump dependencies via dependabot9a91142afeat: print complete member info in etcd membersbb40d6ddfeat: update pkgs versione7a9164btest: implementtalosctl conformancecommand to run e2e tests6cb266e7fix: update etcd client errors, print etcd join failures0bd8b0e8feat: provide an option to recover etcd from data directory copyf9818540chore: fix conform with scopes21018f28chore: bump website node.js dependencies
Changes since v0.11.0-alpha.0
60 commits
f8e1cf09release(v0.11.0-alpha.1): prepare release70ac771efix: use localhost API server endpoint for internal communicationa941eb7dfeat: improve security of Kubernetes control plane components3aae94e5feat: provide Kubernetes nodename as a COSI resource06209bbachore: update RBAC rules, remove old APIs9f24b519chore: remove bootkube check from cluster health check4ac9bea2fix: stop etcd client logs from going to the server consolef63ab9ddfeat: implementtalosctl config newcommandfa15a668fix: don't enable RBAC feature in the config for Talos < 0.112dc27d99fix: do not format state partition in the initialize sequenceb609f33cfix: update networking stack after Equnix Metal testing243a3b53fix: separate healthy and unknown flags in the service resource1a1378befix: update retry package with a fix for errors.Iscb83edd7fix: wait for the network to be ready in mainteancne mode96f89071feat: update controller-runtime logs to console level on config.debug973069b6feat: support NFS 4.1654dcad4chore: bump dependencies via dependabotd7394457fix: don't treat ethtool errors as fatalf2ae9cd0feat: replace networkd with new network implementationcaec3063fix: do not complain about empty roles11918a11docs: update community meeting timeaeddb9c0feat: implement platform config controller (hostnames)1ece334dfeat: implement controller which runs network operators744ea8a5fix: do not add bootstrap contents option if tail events is not 05029edfbfix: overwrite nodes in the gRPC metadata6a35c8f1feat: implement virtual IP (shared IP) network operator0f3b8380chore: expose WatchRequest in the resources client11e258b1feat: implement operator configuration controllerce3815e7feat: implement DHCP6 operatorf010d99afeat: implement operator framework with DHCP4 as the first examplef93c9c8ffeat: bring unconfigured links with link carrier up by default02bd657bfeat: implement network.Status resource and controllerda329f00feat: enable RBAC by default0f168a88feat: add configuration for enabling RBACe74f789bfeat: implement EtcFileController to render files in/etc5aede1a8fix: prefer extraConfig over OVF env, skip empty config5ad314fefeat: implement basic RBAC interceptorsc031be81chore: use Go 1.16.58b0763f6chore: bump dependencies via dependabot8b8de11dfeat: implement new controllers for hostname, resolvers and time servers24859b14docs: update Rpi4 firmware guide62c702c4fix: remove conflicting etcd member on rejoin with empty data directoryff62a599fix: drop into maintenance mode if config URL isnone(metal)14e696d0feat: update COSI runtime and add support for tail in the Talos gRPCa71053fcfeat: default to bootstrap workflow76aac4bbfeat: implement CPU and Memory stats controller8f90c6a8feat: parse Talos-specific cmdline paramsed10e139feat: implement NodeAddress controller33db8857fix: use COSI runtime DestroyReady input type6e775363refactor: rename *.Status() to *.TypedSpec() in the resources97627061docs: set static IP on ISO install mode5811f4ddfeat: implement link (interface) controllers046b229bchore: skip building multi-arch installer for race-enabled build73fbb4b5fix: only fetch machine uuid if it's not setf112a540fix: clean up stale snapshots on container startc036b949chore: bump dependenciesa4d67a01feat: add the ability to disable CoreDNS76dbfb36feat: add ability to mark MBR partition bootablee0f5b1e2chore: split mgmt/gen.go into several filesfad1b4f1chore: fix go generate for the machinery
Changes from talos-systems/crypto
7 commits
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
3 commits
Changes from talos-systems/go-debug
5 commits
Changes from talos-systems/go-kmsg
Changes from talos-systems/go-loadbalancer
3 commits
Changes from talos-systems/go-retry
3 commits
Changes from talos-systems/go-smbios
Changes from talos-systems/pkgs
18 commits
2d51360feat: support NFS 4.1e63e4e9feat: bump tools for Go 1.16.51f8af29feat: update Linux to 5.10.38a3a6650feat: update containerd to 1.5.2c70ea44feat: update runc to 1.0.0-rc95db60235feat: add support for netxen cardf934187feat: update containerd to 1.5.1e8ed5bcfeat: add geneve encapsulation support for openvswitch9f7903cfeat: update containerd to 1.5.0, runc to -rc94d7c0f70feat: add AES-NI support for amd64b0d9cd2fix: buildzbinutility for both amd64 and arm64bb39b97feat: add IPMI support in kernel1148f9afeat: add DS1307 RTC support for arm64350aa6ffeat: add USB serial supportde9c582feat: add Pine64 SBC supportb56f36bfeat: enable VMware baloon kernel modulef87c194feat: add iPXE build with embedded placeholder scripta8b9e71feat: add cpu scaling for rpi
Changes from talos-systems/tools
Dependency Changes
- github.com/aws/aws-sdk-go v1.27.0 new
- github.com/containerd/cgroups 4cbc285b3327 -> v1.0.1
- github.com/containerd/containerd v1.4.4 -> v1.5.2
- github.com/containerd/go-cni v1.0.1 -> v1.0.2
- github.com/containerd/typeurl v1.0.1 -> v1.0.2
- github.com/coreos/go-iptables v0.5.0 -> v0.6.0
- github.com/cosi-project/runtime 10d6103c19ab -> ca95c7538d17
- github.com/docker/docker v20.10.4 -> v20.10.7
- github.com/emicklei/dot v0.15.0 -> v0.16.0
- github.com/fatih/color v1.10.0 -> v1.12.0
- github.com/google/go-cmp v0.5.5 -> v0.5.6
- github.com/google/gofuzz v1.2.0 new
- github.com/googleapis/gnostic v0.5.5 new
- github.com/grpc-ecosystem/go-grpc-middleware v1.2.2 -> v1.3.0
- github.com/hashicorp/go-getter v1.5.2 -> v1.5.3
- github.com/imdario/mergo v0.3.12 new
- github.com/insomniacslk/dhcp cc9239ac6294 -> fb4eaaa00ad2
- github.com/jsimonetti/rtnetlink 1b79e63a70a0 -> b34cb89a106b
- github.com/magiconair/properties v1.8.5 new
- github.com/mattn/go-isatty v0.0.12 -> v0.0.13
- github.com/mdlayher/arp f72070a231fc new
- github.com/mdlayher/ethtool 2b88debcdd43 new
- github.com/mdlayher/netlink v1.4.0 -> v1.4.1
- github.com/mdlayher/raw 51b895745faf new
- github.com/mitchellh/mapstructure v1.4.1 new
- github.com/opencontainers/runtime-spec 4d89ac9fbff6 -> e6143ca7d51d
- github.com/pelletier/go-toml v1.9.0 new
- github.com/rivo/tview 8a8f78a6dd01 -> 807e706f86d1
- github.com/rs/xid v1.2.1 -> v1.3.0
- github.com/sirupsen/logrus v1.8.1 new
- github.com/spf13/afero v1.6.0 new
- github.com/spf13/cast v1.3.1 new
- github.com/spf13/viper v1.7.1 new
- github.com/talos-systems/crypto 39584f1b6e54 -> 6bc5bb50c527
- github.com/talos-systems/extras v0.3.0 -> v0.3.0-1-g4fe2706
- github.com/talos-systems/go-blockdevice 1d830a25f64f -> 30c2bc3cb62a
- github.com/talos-systems/go-debug 3d0a6e1bf5e3 new
- github.com/talos-systems/go-kmsg v0.1.0 new
- github.com/talos-systems/go-loadbalancer v0.1.0 -> v0.1.1
- github.com/talos-systems/go-retry b9dc1a990133 -> c78cc953d9e9
- github.com/talos-systems/go-smbios fb425d4727e6 -> d3a32bea731a
- github.com/talos-systems/pkgs v0.5.0-1-g5dd650b -> v0.6.0-alpha.0-8-g2d51360
- github.com/talos-systems/talos/pkg/machinery
8ffb55943c-> 000000000000 - github.com/talos-systems/tools v0.5.0 -> v0.5.0-1-gc8c2a18
- github.com/vishvananda/netns 2eb08e3e575f new
- github.com/vmware-tanzu/sonobuoy v0.20.0 -> v0.51.0
- github.com/vmware/govmomi v0.24.0 -> v0.26.0
- go.etcd.io/etcd/api/v3 v3.5.0-alpha.0 -> v3.5.0-rc.1
- go.etcd.io/etcd/client/pkg/v3 v3.5.0-rc.1 new
- go.etcd.io/etcd/client/v3 v3.5.0-alpha.0 -> v3.5.0-rc.1
- go.etcd.io/etcd/etcdutl/v3 v3.5.0-rc.1 new
- go.uber.org/zap v1.17.0 new
- golang.org/x/net e18ecbb05110 -> abc453219eb5
- golang.org/x/oauth2 81ed05c6b58c new
- golang.org/x/sys 77cc2087c03b -> ebe580a85c40
- golang.org/x/term 6a3ed077a48d -> a79de5458b56
- golang.zx2c4.com/wireguard/wgctrl bd2cb7843e1b -> 92e472f520a5
- google.golang.org/appengine v1.6.7 new
- google.golang.org/grpc v1.37.0 -> v1.38.0
- gopkg.in/ini.v1 v1.62.0 new
- inet.af/netaddr 1d252cf8125e new
- k8s.io/api v0.21.0 -> v0.21.1
- k8s.io/apimachinery v0.21.0 -> v0.21.1
- k8s.io/apiserver v0.21.0 -> v0.21.1
- k8s.io/client-go v0.21.0 -> v0.21.1
- k8s.io/kubectl v0.21.0 -> v0.21.1
- k8s.io/kubelet v0.21.0 -> v0.21.1
- k8s.io/utils 2afb4311ab10 new
- sigs.k8s.io/structured-merge-diff/v4 v4.1.1 new
Previous release can be found at v0.10.0
Talos 0.11.0-alpha.0 (2021-05-26)
Welcome to the v0.11.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Component Updates
- containerd was updated to 1.5.2
- Linux kernel was updated to 5.10.29
Multi-arch Installer
Talos installer image (for any arch) now contains artifacts for both amd64 and arm64 architecture.
This means that e.g. images for arm64 SBCs can be generated on amd64 host.
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Artem Chernyshev
- Jorik Jonker
- Spencer Smith
- Serge Logvinov
- Andrew LeCody
- Andrew Rynhard
- Boran Car
- Brandon Nason
- Gabor Nyiri
- Joost Coelingh
- Kevin Hellemun
- Lance R. Vick
- Lennard Klein
- Seán C McCord
- Sébastien Bernard
- Sébastien Bernard
Changes
82 commits
c0962946chore: prepare for 0.11 release series72359765feat: enable GORACE=halt_on_panic=1 in machined binary0acb04adfeat: implement route network controllersf5bf88a4feat: create certificates with os:admin role1db301edfeat: switch controller-runtime to zap.Loggerf7cf64d4fix: add talos.config to the vApp Properties in VMware OVA209527ecdocs: add AMIs for Talos 0.10.359cfd312chore: bump dependencies via dependabot1edb20cffeat: extract config generationaf77c295docs: update wirguard guide4fe69121test: bettertalosctl lstests04ddda96feat: update containerd to 1.5.2, runc to 1.0.0-rc9549c7276bchore: fix markdown linting7270495adocs: add mayastor quickstartd3d9112fdocs: fix spelling/grammar in What's New for Talos 0.982804414test: provide a way to force different boot order in provision librarya1c0e99adocs: add guide for deploying metrics-server6bc6658bfeat: update containerd to 1.5.1c6567faechore: dependabot updates61ccbb3fchore: keep debug symbols in debug builds1ce362e0docs: update customizing kernel build stepsa26174b5fix: properly compose pattern and header in etcd members output0825cf11fix: stop networkd and pods before leaving etcd on upgradebed6b15dfix: properly populate AllowSchedulingOnMasters option in gen config RPC071f0445feat: implement AddressSpec handling76e38b7bfeat: update Kubernetes to 1.21.19b1338d9chore: parse "boolean" variablesc81cfb21chore: allow building with debug handlersc9651673feat: update go-smbios library95c656fbfeat: update containerd to 1.5.0, runc to 1.0.0-rc94db9c35b5feat: implement AddressStatusController1cf011a8chore: bump dependencies via dependabote3f407a1fix: properly pass disk type selector from config to matcher66b2b450feat: add resources and use HTTPS checks in control plane pods4ffd7c0afix: stop networkd before leaving etcd on 'reset' path610d38d3docs: add AMIs for 0.10.1, collapse list of AMIs by default807497ecchore: make conformance pipeline depend on cron-default3c121359feat: implement LinkStatusController0e8de046fix: update go-blockdevice to fix disk type detection4d50a4edfix: update the way NTP sync usesadjtimexsyscall1a85c14afix: avoid data race on CRI pod stop5de8dbc0fix: repair pine64 support38239097fix: properly parse matcher expressionse54b6b7achore: update dependencies via dependabotf2caed0dchore: use extracted talos-systems/go-kmsg library79d804c5docs: fix typosa2bb390efeat: deterministic buildse480fedffeat: add USB serial drivers79299d76docs: add Matrix room links1b3e8b09docs: add survey to README8d51c9bbdocs: update redirects to Talos 0.101092c3a5feat: add Pine64 SBC support63e01754feat: pull kernel with VMware balloon module enabledaeec99d8chore: remove temporary fork0f49722dfeat: add--config-patchflag by node typea01b1d22chore: dump dependencies via dependabotd540a4a4fix: bump crypto library for the CSR verification fixc3a4173echore: remove security API ReadFile/WriteFile38037131chore: update wgctrl dependecyd9ba0fd0docs: create v0.11 docs, promote v0.10 docs, add v0.10 AMIs2261d7edfix: use both self-signed and Kubernetes CA to verify Kubelet certa3537a69docs: update cloud images for Talos v0.9.35b9ee861docs: add what's new for Talos 0.10f1107fa3docs: add survey93623d47docs: update AWS instructionsa739d1b8feat: add support of custom registry CA certificate usage7f468d35fix: update osType in OVA other3xLinux64Guest"4a184b67docs: add etcd backup and restore guide5fb38d3echore: refactor Dockerfile for cross-compilationa8f1e526chore: build talosctl for Darwin / Apple Siliconeb0b64d3chore: list specifically for enabled regions669a0cbdfix: check if OVF env is emptyda92049cchore: use codecov from the build container9996d4b0chore: use REGISTRY_MIRROR_FLAGS if defined05cbe250chore: bump dependencies via dependabot9a91142afeat: print complete member info in etcd membersbb40d6ddfeat: update pkgs versione7a9164btest: implementtalosctl conformancecommand to run e2e tests6cb266e7fix: update etcd client errors, print etcd join failures0bd8b0e8feat: provide an option to recover etcd from data directory copyf9818540chore: fix conform with scopes21018f28chore: bump website node.js dependencies
Changes from talos-systems/crypto
Changes from talos-systems/go-blockdevice
2 commits
Changes from talos-systems/go-debug
5 commits
Changes from talos-systems/go-kmsg
Changes from talos-systems/go-loadbalancer
3 commits
Changes from talos-systems/go-smbios
Changes from talos-systems/pkgs
15 commits
a3a6650feat: update containerd to 1.5.2c70ea44feat: update runc to 1.0.0-rc95db60235feat: add support for netxen cardf934187feat: update containerd to 1.5.1e8ed5bcfeat: add geneve encapsulation support for openvswitch9f7903cfeat: update containerd to 1.5.0, runc to -rc94d7c0f70feat: add AES-NI support for amd64b0d9cd2fix: buildzbinutility for both amd64 and arm64bb39b97feat: add IPMI support in kernel1148f9afeat: add DS1307 RTC support for arm64350aa6ffeat: add USB serial supportde9c582feat: add Pine64 SBC supportb56f36bfeat: enable VMware baloon kernel modulef87c194feat: add iPXE build with embedded placeholder scripta8b9e71feat: add cpu scaling for rpi
Dependency Changes
- github.com/containerd/cgroups 4cbc285b3327 -> v1.0.1
- github.com/containerd/containerd v1.4.4 -> v1.5.2
- github.com/containerd/go-cni v1.0.1 -> v1.0.2
- github.com/containerd/typeurl v1.0.1 -> v1.0.2
- github.com/coreos/go-iptables v0.5.0 -> v0.6.0
- github.com/cosi-project/runtime 10d6103c19ab -> 8a4533ce68e2
- github.com/docker/docker v20.10.4 -> v20.10.6
- github.com/emicklei/dot v0.15.0 -> v0.16.0
- github.com/fatih/color v1.10.0 -> v1.11.0
- github.com/grpc-ecosystem/go-grpc-middleware v1.2.2 -> v1.3.0
- github.com/hashicorp/go-getter v1.5.2 -> v1.5.3
- github.com/mdlayher/ethtool 2b88debcdd43 new
- github.com/opencontainers/runtime-spec 4d89ac9fbff6 -> e6143ca7d51d
- github.com/plunder-app/kube-vip v0.3.2 -> v0.3.4
- github.com/rs/xid v1.2.1 -> v1.3.0
- github.com/talos-systems/crypto 39584f1b6e54 -> 4f80b976b640
- github.com/talos-systems/go-blockdevice 1d830a25f64f -> 1292574643e0
- github.com/talos-systems/go-debug 3d0a6e1bf5e3 new
- github.com/talos-systems/go-kmsg v0.1.0 new
- github.com/talos-systems/go-loadbalancer v0.1.0 -> v0.1.1
- github.com/talos-systems/go-smbios fb425d4727e6 -> d3a32bea731a
- github.com/talos-systems/pkgs v0.5.0-1-g5dd650b -> v0.6.0-alpha.0-5-ga3a6650
- github.com/vmware-tanzu/sonobuoy v0.20.0 -> v0.50.0
- github.com/vmware/govmomi v0.24.0 -> v0.25.0
- go.etcd.io/etcd/api/v3 v3.5.0-alpha.0 -> v3.5.0-beta.3
- go.etcd.io/etcd/client/pkg/v3 v3.5.0-beta.3 new
- go.etcd.io/etcd/client/v3 v3.5.0-alpha.0 -> v3.5.0-beta.3
- go.etcd.io/etcd/etcdutl/v3 v3.5.0-beta.3 new
- go.uber.org/zap c23abee72d19 new
- golang.org/x/net e18ecbb05110 -> 0714010a04ed
- golang.org/x/sys 77cc2087c03b -> 0981d6026fa6
- golang.org/x/term 6a3ed077a48d -> a79de5458b56
- golang.zx2c4.com/wireguard/wgctrl bd2cb7843e1b -> f9ad6d392236
- google.golang.org/grpc v1.37.0 -> v1.38.0
- inet.af/netaddr 1d252cf8125e new
- k8s.io/api v0.21.0 -> v0.21.1
- k8s.io/apimachinery v0.21.0 -> v0.21.1
- k8s.io/apiserver v0.21.0 -> v0.21.1
- k8s.io/client-go v0.21.0 -> v0.21.1
- k8s.io/kubectl v0.21.0 -> v0.21.1
- k8s.io/kubelet v0.21.0 -> v0.21.1
Previous release can be found at v0.10.0
Talos 0.10.0-alpha.2 (2021-04-08)
Welcome to the v0.10.0-alpha.2 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Disaster Recovery
- support for creating etcd snapshots (backups) with
talosctl etcd snapshotcommand. - etcd cluster can be recovered from a snapshot using
talosctl boostrap --recover-from=command.
Install Disk Selector
Install section of the machine config now has diskSelector field that allows querying install disk using the list of qualifiers:
...
install:
diskSelector:
size: >= 500GB
model: WDC*
...
talosctl disks -n <node> -i can be used to check allowed disk qualifiers when the node is running in the maintenance mode.
Optimizations
- Talos
systemservices now run without container images on initramfs from the single executable; this change reduces RAM usage, initramfs size and boot time..
SBCs
- u-boot version was updated to fix the boot and USB issues on Raspberry Pi 4 8GiB version.
- added support for Rock Pi 4.
Time Syncrhonization
timedservice was replaced with a time sync controller, no machine configuration changes.- Talos now prefers last successful time server (by IP address) on each sync attempt (improves sync accuracy).
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Artem Chernyshev
- Spencer Smith
- Seán C McCord
- Andrew Rynhard
- Branden Cash
- Jorik Jonker
- Matt Zahorik
- bzub
Changes
104 commits
e0650218feat: support etcd recovery from snapshot on bootstrap247bd50edocs: describe steps to install and boot Talos from the SSD on rockpi4e6b4e524test: update CAPA to 0.6.428753f6dfix: trim endpoints/nodes from arguments in talosctl configaca63b88docs: fix "DigitalOcean" spelling33035901fix: revert mark PMBR EFI partition as bootablefbfd1eb2refactor: pull new version of os-runtime, update code8737ea71feat: allow external cloud provides configration3909e2d0chore: update Go to 1.16.3690eb20echore: update blockdevice library for PMBR bootable fixa8761b8efix: require leader on etcd member operations3dc84625fix: make both HDMI ports work on RPi 4bd5ae1e0fix: add a check for overlay mounts in installer pre-flight checksdf8649cbrefactor: download modules beforego generate39ae0415chore: bump dependencies via dependabote16d6d34fix: publish rockpi4 image to release artifacts39c6dbccfeat: add --config-patch parameter to talosctl gen confige664362cfeat: add API and command to save etcd snapshot (backup)61b694b9fix: create rootfs for system services via /system tmpfsabc2e17etest: update 0.9.x version in upgrade tests to 0.9.1a1e64154fix: retry Kubernetes API errors on cordon/uncordon/etc063d1abefix: print task failure error immediatelye039172efix: ignore EOF errors from Kubernetes API when converting control plane7bcb91a4docs: fix typo for stage flaga43acb21feat: bring in Linux 5.10.27, support for 32-bit time syscallse2bb5973release(v0.10.0-alpha.1): prepare release8309312achore: build components with race detector enabled in dev mode7d912584test: fix data race in apply config tests204caf8etest: fix apply-config integration test, bump clusterctl versiond812099dfix: address several issues in TUI installer269c9ad0fix: don't write to config object on accessa9451f57feat: update Kubernetes to 1.21.0-beta.14b42ced4feat: add ability to disable comments in talosctl gen configa0dcfc3dfix: workaround race in containerd runner with stdin pipe2ea20f59feat: replace timed with time sync controllerc38a161atest: add unit-test for machine config validationa6106815chore: bump dependencies via dependabot35598f39chore: refactor: extract ClusterConfig03285184fix: get rid of data race in encoder and fix concurrent map access4b3580aafix: prevent panic in validate config ifmachine.installis missingd7e9f6d6chore: build integration tests with -race9f7d67acchore: fix typo672c9707fix: allowconvert-k8s --remove-initialized-keyswith K8s cp is downfb605a0fchore: tweak nolintlint settings1f5a0c40fix: resolve the issue with Kubernetes upgrade74b2b557docs: update AWS docs to ensure instances are taggeddc21d9b4chore: remove old file966caf7achore: remove unused module replace directives98b22f1efeat: show short options in talosctl kubeconfig51139d54chore: cache go modules in the build65701aa7fix: resolve the issue with DHCP lease not being renewed711f5b23fix: config validation: CNI should apply to cp nodes, encryption config5ff491d9fix: allow empty list for CNI URLs946e74f0docs: update path for kernel downloads in qemu docsed272e60feat: update Kubernetes to 1.21.0-beta.0b0209fd2refactor: move networkd, timed APIs to machined, remove routerd6ffabe51feat: add ability to find disk by disk propertiesac876470refactor: move apid, routerd, timed and trustd to single executable89a4b09frefactor: run networkd as a goroutine in machinedf4a6a19cchore: update sonobuoydc294db1chore: bump dependencies via dependabot2b1641a3docs: add AMIs for Talos 0.9.079ceb428docs: make v0.9 the default docsa5b62f4ddocs: add documentation for Talos 0.10ce795f1cfix: commandetcd remove-membershouldn't remove etcd data directoryaab49a16fix: repair zsh completionfc9c416afix: build rockpi4 metal image as part of CI build125b86f4fix: upgrade-k8s bug with empty config values and provision script8b2d228dchore: add script for starting registry proxiesf7d276b8chore: remove oldosctlreference5b14d6f2chore: fixmake helpoutputf0512dfcfeat: update Kubernetes to 1.20.524cd0a20feat: publish talosctl container image6e17102cchore: remove unused code88104407docs: add control plane in-depth guideecf03449chore: bump Go to 1.16.2cbc38418release(v0.10.0-alpha.0): prepare release3455a8e8chore: use new release tool for changelogs and release notes08271ba9chore: use Go 1.16 language version7662d033fix: talosctl health should not check kube-proxy when it is disabled0dbaeb9echore: update tools, use new generatorse31790f6fix: properly format spec comments in the resources78d384ebtest: update aws cloud provider version3c5bfbb4fix: don't touch any partitions on upgrade with --preserve891f90fechore: update Linux to 5.10.23d4d77882chore: update dependencies via dependabot2e22f20bdocs: minor fixes to getting startedca8a5596chore: fix provision tests after changes to build-container4aae924crefactor: provide explicit logger for networkd22f37530chore: update golanci-lint to 1.38.083b4e7f7feat: add Rock pi 4 support1362966fdocs: rewrite getting-started for ISO8e57fc4ffix: move containerd CRI config files under/var/6f7df3dafix: update output ofconvert-k8scommanddce6118cdocs: add guide for VIPee5d9ffachore: bump Go to 1.16.17c529e1cdocs: fix links in the documentationf596c7f6docs: add video for raspberry pi install47324dcadocs: add guide on editing machine configuration99d5f894chore: update website npm dependencies11056a80docs: add highlights for 0.9 releaseae8bedb9docs: add control plane conversion guide and 0.9 upgrade notesed9673e5docs: add troubleshooting control plane documentation485cb126docs: update Kubernetes upgrade guide
Changes since v0.10.0-alpha.1
25 commits
e0650218feat: support etcd recovery from snapshot on bootstrap247bd50edocs: describe steps to install and boot Talos from the SSD on rockpi4e6b4e524test: update CAPA to 0.6.428753f6dfix: trim endpoints/nodes from arguments in talosctl configaca63b88docs: fix "DigitalOcean" spelling33035901fix: revert mark PMBR EFI partition as bootablefbfd1eb2refactor: pull new version of os-runtime, update code8737ea71feat: allow external cloud provides configration3909e2d0chore: update Go to 1.16.3690eb20echore: update blockdevice library for PMBR bootable fixa8761b8efix: require leader on etcd member operations3dc84625fix: make both HDMI ports work on RPi 4bd5ae1e0fix: add a check for overlay mounts in installer pre-flight checksdf8649cbrefactor: download modules beforego generate39ae0415chore: bump dependencies via dependabote16d6d34fix: publish rockpi4 image to release artifacts39c6dbccfeat: add --config-patch parameter to talosctl gen confige664362cfeat: add API and command to save etcd snapshot (backup)61b694b9fix: create rootfs for system services via /system tmpfsabc2e17etest: update 0.9.x version in upgrade tests to 0.9.1a1e64154fix: retry Kubernetes API errors on cordon/uncordon/etc063d1abefix: print task failure error immediatelye039172efix: ignore EOF errors from Kubernetes API when converting control plane7bcb91a4docs: fix typo for stage flaga43acb21feat: bring in Linux 5.10.27, support for 32-bit time syscalls
Changes from talos-systems/extras
3 commits
Changes from talos-systems/go-blockdevice
3 commits
Changes from talos-systems/os-runtime
5 commits
Changes from talos-systems/pkgs
8 commits
9a6cf6bfeat: build with Go 1.16.360ce626feat: update Linux to 5.10.27, enable 32-bit time syscallsfdf4866feat: bump tools for Go 1.16.235f9b6ffeat: update kernel to 5.10.23dbae83efix: do not use git-lfs for rockpi4 binaries1c6b9a3feat: bump tools for Go 1.16.1c18073ffeat: add u-boot for Rock Pi 46b85a2bfeat: upgrade u-boot to 2021.04-rc3
Changes from talos-systems/tools
5 commits
Dependency Changes
- github.com/coreos/go-semver v0.3.0 new
- github.com/golang/protobuf v1.4.3 -> v1.5.2
- github.com/google/go-cmp v0.5.4 -> v0.5.5
- github.com/hashicorp/go-multierror v1.1.0 -> v1.1.1
- github.com/talos-systems/extras v0.2.0-1-g0db3328 -> v0.3.0-alpha.0-2-gcf3934a
- github.com/talos-systems/go-blockdevice bb3ad73f6983 -> 1d830a25f64f
- github.com/talos-systems/os-runtime 7b3d14457439 -> 86d9e090bdc4
- github.com/talos-systems/pkgs v0.4.1-2-gd471b60 -> v0.5.0-alpha.0-5-g9a6cf6b
- github.com/talos-systems/tools v0.4.0-1-g3b25a7e -> v0.5.0-alpha.0-4-g1f26def
- go.etcd.io/etcd/etcdctl/v3 v3.5.0-alpha.0 new
- google.golang.org/grpc v1.36.0 -> v1.36.1
- google.golang.org/protobuf v1.25.0 -> v1.26.0
- k8s.io/api v0.20.5 -> v0.21.0-rc.0
- k8s.io/apimachinery v0.20.5 -> v0.21.0-rc.0
- k8s.io/apiserver v0.20.5 -> v0.21.0-rc.0
- k8s.io/client-go v0.20.5 -> v0.21.0-rc.0
- k8s.io/cri-api v0.20.5 -> v0.21.0-rc.0
- k8s.io/kubectl v0.20.5 -> v0.21.0-rc.0
- k8s.io/kubelet v0.20.5 -> v0.21.0-rc.0
Previous release can be found at v0.9.0
Talos 0.10.0-alpha.1 (2021-03-31)
Welcome to the v0.10.0-alpha.1 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
Install Disk Selector
Install section of the machine config now has diskSelector field that allows querying install disk using the list of qualifiers:
...
install:
diskSelector:
size: >= 500GB
model: WDC*
...
talosctl disks -n <node> -i can be used to check allowed disk qualifiers when the node is running in the maintenance mode.
Optimizations
- Talos
systemservices now run without container images on initramfs from the single executable; this change reduces RAM usage, initramfs size and boot time..
SBCs
- u-boot version was updated to fix the boot and USB issues on Raspberry Pi 4 8GiB version.
- added support for Rock Pi 4.
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Artem Chernyshev
- Spencer Smith
- Seán C McCord
- Andrew Rynhard
- Jorik Jonker
- bzub
Changes
78 commits
8309312achore: build components with race detector enabled in dev mode7d912584test: fix data race in apply config tests204caf8etest: fix apply-config integration test, bump clusterctl versiond812099dfix: address several issues in TUI installer269c9ad0fix: don't write to config object on accessa9451f57feat: update Kubernetes to 1.21.0-beta.14b42ced4feat: add ability to disable comments in talosctl gen configa0dcfc3dfix: workaround race in containerd runner with stdin pipe2ea20f59feat: replace timed with time sync controllerc38a161atest: add unit-test for machine config validationa6106815chore: bump dependencies via dependabot35598f39chore: refactor: extract ClusterConfig03285184fix: get rid of data race in encoder and fix concurrent map access4b3580aafix: prevent panic in validate config ifmachine.installis missingd7e9f6d6chore: build integration tests with -race9f7d67acchore: fix typo672c9707fix: allowconvert-k8s --remove-initialized-keyswith K8s cp is downfb605a0fchore: tweak nolintlint settings1f5a0c40fix: resolve the issue with Kubernetes upgrade74b2b557docs: update AWS docs to ensure instances are taggeddc21d9b4chore: remove old file966caf7achore: remove unused module replace directives98b22f1efeat: show short options in talosctl kubeconfig51139d54chore: cache go modules in the build65701aa7fix: resolve the issue with DHCP lease not being renewed711f5b23fix: config validation: CNI should apply to cp nodes, encryption config5ff491d9fix: allow empty list for CNI URLs946e74f0docs: update path for kernel downloads in qemu docsed272e60feat: update Kubernetes to 1.21.0-beta.0b0209fd2refactor: move networkd, timed APIs to machined, remove routerd6ffabe51feat: add ability to find disk by disk propertiesac876470refactor: move apid, routerd, timed and trustd to single executable89a4b09frefactor: run networkd as a goroutine in machinedf4a6a19cchore: update sonobuoydc294db1chore: bump dependencies via dependabot2b1641a3docs: add AMIs for Talos 0.9.079ceb428docs: make v0.9 the default docsa5b62f4ddocs: add documentation for Talos 0.10ce795f1cfix: commandetcd remove-membershouldn't remove etcd data directoryaab49a16fix: repair zsh completionfc9c416afix: build rockpi4 metal image as part of CI build125b86f4fix: upgrade-k8s bug with empty config values and provision script8b2d228dchore: add script for starting registry proxiesf7d276b8chore: remove oldosctlreference5b14d6f2chore: fixmake helpoutputf0512dfcfeat: update Kubernetes to 1.20.524cd0a20feat: publish talosctl container image6e17102cchore: remove unused code88104407docs: add control plane in-depth guideecf03449chore: bump Go to 1.16.2cbc38418release(v0.10.0-alpha.0): prepare release3455a8e8chore: use new release tool for changelogs and release notes08271ba9chore: use Go 1.16 language version7662d033fix: talosctl health should not check kube-proxy when it is disabled0dbaeb9echore: update tools, use new generatorse31790f6fix: properly format spec comments in the resources78d384ebtest: update aws cloud provider version3c5bfbb4fix: don't touch any partitions on upgrade with --preserve891f90fechore: update Linux to 5.10.23d4d77882chore: update dependencies via dependabot2e22f20bdocs: minor fixes to getting startedca8a5596chore: fix provision tests after changes to build-container4aae924crefactor: provide explicit logger for networkd22f37530chore: update golanci-lint to 1.38.083b4e7f7feat: add Rock pi 4 support1362966fdocs: rewrite getting-started for ISO8e57fc4ffix: move containerd CRI config files under/var/6f7df3dafix: update output ofconvert-k8scommanddce6118cdocs: add guide for VIPee5d9ffachore: bump Go to 1.16.17c529e1cdocs: fix links in the documentationf596c7f6docs: add video for raspberry pi install47324dcadocs: add guide on editing machine configuration99d5f894chore: update website npm dependencies11056a80docs: add highlights for 0.9 releaseae8bedb9docs: add control plane conversion guide and 0.9 upgrade notesed9673e5docs: add troubleshooting control plane documentation485cb126docs: update Kubernetes upgrade guide
Changes since v0.10.0-alpha.0
50 commits
8309312achore: build components with race detector enabled in dev mode7d912584test: fix data race in apply config tests204caf8etest: fix apply-config integration test, bump clusterctl versiond812099dfix: address several issues in TUI installer269c9ad0fix: don't write to config object on accessa9451f57feat: update Kubernetes to 1.21.0-beta.14b42ced4feat: add ability to disable comments in talosctl gen configa0dcfc3dfix: workaround race in containerd runner with stdin pipe2ea20f59feat: replace timed with time sync controllerc38a161atest: add unit-test for machine config validationa6106815chore: bump dependencies via dependabot35598f39chore: refactor: extract ClusterConfig03285184fix: get rid of data race in encoder and fix concurrent map access4b3580aafix: prevent panic in validate config ifmachine.installis missingd7e9f6d6chore: build integration tests with -race9f7d67acchore: fix typo672c9707fix: allowconvert-k8s --remove-initialized-keyswith K8s cp is downfb605a0fchore: tweak nolintlint settings1f5a0c40fix: resolve the issue with Kubernetes upgrade74b2b557docs: update AWS docs to ensure instances are taggeddc21d9b4chore: remove old file966caf7achore: remove unused module replace directives98b22f1efeat: show short options in talosctl kubeconfig51139d54chore: cache go modules in the build65701aa7fix: resolve the issue with DHCP lease not being renewed711f5b23fix: config validation: CNI should apply to cp nodes, encryption config5ff491d9fix: allow empty list for CNI URLs946e74f0docs: update path for kernel downloads in qemu docsed272e60feat: update Kubernetes to 1.21.0-beta.0b0209fd2refactor: move networkd, timed APIs to machined, remove routerd6ffabe51feat: add ability to find disk by disk propertiesac876470refactor: move apid, routerd, timed and trustd to single executable89a4b09frefactor: run networkd as a goroutine in machinedf4a6a19cchore: update sonobuoydc294db1chore: bump dependencies via dependabot2b1641a3docs: add AMIs for Talos 0.9.079ceb428docs: make v0.9 the default docsa5b62f4ddocs: add documentation for Talos 0.10ce795f1cfix: commandetcd remove-membershouldn't remove etcd data directoryaab49a16fix: repair zsh completionfc9c416afix: build rockpi4 metal image as part of CI build125b86f4fix: upgrade-k8s bug with empty config values and provision script8b2d228dchore: add script for starting registry proxiesf7d276b8chore: remove oldosctlreference5b14d6f2chore: fixmake helpoutputf0512dfcfeat: update Kubernetes to 1.20.524cd0a20feat: publish talosctl container image6e17102cchore: remove unused code88104407docs: add control plane in-depth guideecf03449chore: bump Go to 1.16.2
Changes from talos-systems/extras
Changes from talos-systems/go-blockdevice
Changes from talos-systems/pkgs
6 commits
Changes from talos-systems/tools
4 commits
Dependency Changes
- github.com/coreos/go-semver v0.3.0 new
- github.com/golang/protobuf v1.4.3 -> v1.5.1
- github.com/google/go-cmp v0.5.4 -> v0.5.5
- github.com/hashicorp/go-multierror v1.1.0 -> v1.1.1
- github.com/talos-systems/extras v0.2.0-1-g0db3328 -> v0.3.0-alpha.0-1-gc0fa0c0
- github.com/talos-systems/go-blockdevice bb3ad73f6983 -> 776b37d31de0
- github.com/talos-systems/pkgs v0.4.1-2-gd471b60 -> v0.5.0-alpha.0-3-gfdf4866
- github.com/talos-systems/tools v0.4.0-1-g3b25a7e -> v0.5.0-alpha.0-3-g41b8073
- google.golang.org/grpc v1.36.0 -> v1.36.1
- google.golang.org/protobuf v1.25.0 -> v1.26.0
- k8s.io/api v0.20.5 -> v0.21.0-rc.0
- k8s.io/apimachinery v0.20.5 -> v0.21.0-rc.0
- k8s.io/apiserver v0.20.5 -> v0.21.0-rc.0
- k8s.io/client-go v0.20.5 -> v0.21.0-rc.0
- k8s.io/cri-api v0.20.5 -> v0.21.0-rc.0
- k8s.io/kubectl v0.20.5 -> v0.21.0-rc.0
- k8s.io/kubelet v0.20.5 -> v0.21.0-rc.0
Previous release can be found at v0.9.0
Talos 0.10.0-alpha.0 (2021-03-17)
Welcome to the v0.10.0-alpha.0 release of Talos! This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/talos-systems/talos/issues.
SBCs
- u-boot version was updated to fix the boot and USB issues on Raspberry Pi 4 8GiB version.
- added support for Rock Pi 4.
Contributors
- Andrey Smirnov
- Alexey Palazhchenko
- Artem Chernyshev
- Seán C McCord
- Spencer Smith
- Andrew Rynhard
Changes
27 commits
3455a8e8chore: use new release tool for changelogs and release notes08271ba9chore: use Go 1.16 language version7662d033fix: talosctl health should not check kube-proxy when it is disabled0dbaeb9echore: update tools, use new generatorse31790f6fix: properly format spec comments in the resources78d384ebtest: update aws cloud provider version3c5bfbb4fix: don't touch any partitions on upgrade with --preserve891f90fechore: update Linux to 5.10.23d4d77882chore: update dependencies via dependabot2e22f20bdocs: minor fixes to getting startedca8a5596chore: fix provision tests after changes to build-container4aae924crefactor: provide explicit logger for networkd22f37530chore: update golanci-lint to 1.38.083b4e7f7feat: add Rock pi 4 support1362966fdocs: rewrite getting-started for ISO8e57fc4ffix: move containerd CRI config files under/var/6f7df3dafix: update output ofconvert-k8scommanddce6118cdocs: add guide for VIPee5d9ffachore: bump Go to 1.16.17c529e1cdocs: fix links in the documentationf596c7f6docs: add video for raspberry pi install47324dcadocs: add guide on editing machine configuration99d5f894chore: update website npm dependencies11056a80docs: add highlights for 0.9 releaseae8bedb9docs: add control plane conversion guide and 0.9 upgrade notesed9673e5docs: add troubleshooting control plane documentation485cb126docs: update Kubernetes upgrade guide
Changes since v0.10.0-alpha.0
0 commit
Changes from talos-systems/extras
Changes from talos-systems/os-runtime
Changes from talos-systems/pkgs
5 commits
Changes from talos-systems/tools
Dependency Changes
- github.com/hashicorp/go-multierror v1.1.0 -> v1.1.1
- github.com/talos-systems/extras v0.2.0 -> v0.3.0-alpha.0
- github.com/talos-systems/os-runtime 84c3c875eb2b -> 7b3d14457439
- github.com/talos-systems/pkgs v0.4.1 -> v0.5.0-alpha.0-2-g35f9b6f
- github.com/talos-systems/tools v0.4.0 -> v0.5.0-alpha.0-1-gbcf3380
Previous release can be found at v0.9.0-beta.0
v0.9.0-alpha.5 (2021-03-03)
Chore
- bump Go module dependencies
- properly propagate context object in the controller
Feat
- bypass lock if ACPI reboot/shutdown issued
- add
--on-rebootflag to talosctl edit/patch machineConfig - support JSON output in
talosctl get, event types - rename namespaces, resources, types etc
v0.9.0-alpha.4 (2021-03-02)
Chore
- update provision/upgrade tests to 0.9.0-alpha.3
Docs
- bump v0.8 release version in the SBCs guides
- add disk encryption guide
Feat
- update linux kernel to 5.10.19
Fix
- ignore 'ENOENT' (no such file directory) on mount
- move etcd to
cricontainerd runner
v0.9.0-alpha.3 (2021-03-01)
Chore
- bump dependencies via dependabot
- build both Darwin and Linux versions of talosctl
- bump dependencies via dependabot
- switch CI to stop embedding local registry into the builds
Docs
- update AMI images for 0.8.4
Feat
- implement etcd remove-member cli command
- update etcd to 3.4.15
- talosctl: allow v-prefixed k8s versions
- implement simple layer 2 shared IP for CP
- implement talosctl edit and patch config commands
- bump etcd client library to 3.5.0-alpha.0
Fix
- update in-cluster kubeconfig validity to match other certs
- add ApplyDynamicConfig call in the apply-config --immediate mode
- set hdmi_safe=1 on Raspberry Pi for maximum HDMI compatibility
- show stopped/exited containers via CRI inspector
- make ApplyDynamicConfig idempotent
- improve the drain function
- correctly set service state in the resource
- update the layout of the Disks API to match proxying requirements
- stop and clean up installer container correctly
- sanitize volume name better in static pod extra volumes
Refactor
- add context to the networkd
- split WithNetworkConfig into sub-options
Test
- add integration test with Canal CNI and reset API
- upgrade master to master tests
v0.9.0-alpha.2 (2021-02-20)
Chore
- add default cron pipeline to the list of pipelines
- run default pipeline as part of the
cronpipeline
Docs
- add link to GitHub Discussions as a support forum
Feat
- u-boot 2021.01, ca-certificates update, Linux file ACLs
- support control plane upgrades with Talos managed control plane
- add support for extra volume mounts for control plane pods
- add a warning to boot log if running self-hosted control plane
- add an option to disable kube-proxy manifest
- update Kubernetes to 1.20.4
- add state encryption support
Fix
- redirect warnings in manifest apply k8s client
- handle case when kubelet serving certificates are issued
- correctly escape extra args in kube-proxy manifest
- skip empty manifest YAML sub-documents
Refactor
- split kubernetes/etcd resource generation into subresources
Test
- enable disk encryption key rotation test
- update integration tests to use wrapped client for etcd APIs
v0.9.0-alpha.1 (2021-02-09)
Chore
- update artifacts bucket name in Drone
- rework Drone pipelines
- update dependencies via dependabot
- ci: fix schedules in Drone pipelines
- ci: update gcp templates
Docs
- update AMI list for 0.8.2
- fix typos
Feat
- add a tool and package to convert self-hosted CP to static pods
- implement ephemeral partition encryption
- add resource watch API + CLI
- rename apply-config --no-reboot to --on-reboot
- skip filesystem for state and ephemeral partitions in the installer
- stop all pods before unmounting ephemeral partition
- bump Go to 1.15.8
- support version contract for Talos config generation
- update Linux to 5.10.14
- add an option to force upgrade without checks
- upgrade CoreDNS to 1.8.0
- implement IPv6 DHCP client in networkd
Fix
- correctly unwrap responses for etcd commands
- drop cri dependency on etcd
- move versions to annotations in control plane static pods
- find master node IPs correctly in health checks
- add 3 seconds grub boot timeout
- don't use filename from URL when downloading manifest
- pass attributes when adding routes
- correct response structure for GenerateConfig API
- correctly extract wrapped error messages
- prevent crash in machined on apid service stop
- wait for time sync before generating Kubernetes certificates
- set proper hostname on docker nodes
- mount kubelet secrets from system instead of ephemeral
- allow loading of empty config files
- prefer configured nameservers, fix DHCP6 in container
- refresh control plane endpoints on worker apids on schedule
- update DHCP client to use Request-Ack sequence after an Offer
Refactor
- extract go-cmd into a separate library
Test
- trigger e2e on thrice daily
- update aws templates
- add support for IPv6 in talosctl cluster create
v0.9.0-alpha.0 (2021-02-01)
Chore
- bump dependencies (via dependabot)
- fix import path for fsnotify
- add dependabot config
- enable virtio-balloon and monitor in QEMU provisioner
- update protobuf, grpc-go, prototool
- update upgrade test version used
Docs
- update components.md
- add v0.9 docs
- add modes to validate command
- document omitting DiskPartition size
- update references to 0.8.0, add 0.8.0 AWS AMIs
- fix latest docs
- set latest docs to v0.8
- provide AMIs for 0.8.0-beta.0
- fix SBC docs to point to beta.0 instead of beta.1
- update Talos release for SBCs
Feat
- move to ECDSA keys for all Kubernetes/etcd certs and keys
- update kernel
- mount hugetlbfs
- allow fqdn to be used when registering k8s node
- copy cryptsetup executable from pkgs
- use multi-arch images for k8s and Flannel CNI
- replace bootkube with Talos-managed control plane
- implement resource API in Talos
- update Linux to 5.10.7, musl-libc to 1.2.2
- update Kubernetes to 1.20.2
- support Wireguard networking
- bump pkgs for kernel with CONFIG_IPV6_MULTIPLE_TABLES
- support type filter in list API and CLI
- add commands to manage/query etcd cluster
- support disk image in talosctl cluster create
- update Kubernetes to 1.20.1
Fix
- use hugetlbfs instead of none
- use grpc load-balancing when connecting to trustd
- lower memory usage a bit by disabling memory profiling
- don't probe disks in container mode
- prefix rendered Talos-owned static pod manifests
- bump timeout for worker apid waiting for kubelet client config
- kill all processes and umount all disk on reboot/shutdown
- open blockdevices with exclusive flock for partitioning
- list command unlimited recursion default behavior
- pick first interface valid hostname (vs. last one)
- allow 'console' argument in kernel args to be always overridden
- bring up bonded interfaces correctly on packet
- checkpoint controller-manager and scheduler
- correctly transport gRPC errors from apid
- use SetAll instead of AppendAll when building kernel args
- add more dependencies for bootstrap services
- pass disk image flags to e2e-qemu cluster create command
- ignore pods spun up from checkpoints in health checks
- leave etcd for staged upgrades
- ignore errors on stopping/removing pod sandboxes
- use the correct console on Banana Pi M64
- don't run LabelNodeAsMaster in two sequences
Refactor
- update go-blockdevice and restructure disk interaction code
- define default kernel flags in machinery instead of procfs
Test
- clear connection refused errors after reset
- skip etcd tests on non-HA clusters
v0.8.0-alpha.3 (2020-12-10)
Chore
- update CONTRIBUTING.md
- limit unit-test run concurrency
- bump Go to 1.15.6
- bump dockerfile frontend version
- fix conform for releases
Docs
- update Equinix Metal guide
- add architectural doc on the root file system layout
- add a note on caveats in container mode
- add storage doc
- add guide for custom CAs
- add docs for network connectivity
- improve SBC documentation
Feat
- update kernel to 5.9.13, new KSPP requirements
- reset with system disk wipe spec
- add talosctl merge config command
- add talosctl config contexts
- update Kubernetes to 1.20.0
- implement "staged" (failsafe/backup) upgrades
- allow disabling NoSchedule taint on masters using TUI installer
Fix
- remove kmsg ratelimiting on startup
- zero out partitions without filesystems on install
- make interactive installer work without endpoints provided
Test
- add ISO test
- add support for mounting ISO in talosctl cluster create
- bump Talos release version for upgrade test to 0.7.1
- bump defaults for provision tests resources
v0.8.0-alpha.2 (2020-12-04)
Chore
- publish Rock64 image
- enable thrice daily pipeline
- run integration test thrice daily
- output SBC images as compressed raw images
- build SBC images
- update module dependencies
- drop support for
docker load - fix metal image name
- use IMAGE_TAG instead of TAG for :latest pushes
Docs
- fix typos
- add openstack docs
- ensure port for vbox and proxmox docs
- add console kernel arg to rpi_4 image generation
- add console kernel arg to libretech_all_h3_cc_h5 image generation
Feat
- add support for the Pine64 Rock64
- add TUI for configuring network interfaces settings
- make GenerateConfiguration accept current time as a parameter
- introduce configpatcher package in machinery
- suggest fixed control plane endpoints in talosctl gen config
- update kubernetes to 1.20.0-rc.0
- allow boards to set kernel args
- add support for the Banana Pi M64
- stop including K8s version by default in
talosctl gen config - add support for the Raspberry Pi 4 Model B
- implement network interfaces list API
- bump package for kernel with CIFS support
- upgrade etcd to 3.4.14
- update Containerd and Linux
- add support for installing to SBCs
- add ability to choose CNI config
Fix
- make default generate image arch dynamic based on arch
- stabilize serial console on RPi4, add video console
- make reset work again
- node taint doesn't contain value anymore
- defer resolving config context in client code
- remove value (change to empty) for
NoScheduletaint - prevent endless loop with DHCP requests in networkd
- skip
boardargument to the installer if it's not set - use the dtb from kernel pkg for libretech_all_h3_cc_h5
- prevent crash in
talosctl configcommands - update generated .ova manifest for raw disk size
- security: update Containerd to v1.4.3
Release
- v0.8.0-alpha.2: prepare release
v0.8.0-alpha.1 (2020-11-26)
Chore
- add cloud image uploader (AWS AMIs for now)
- bump K8s to 1.19.4 in e2e scripts with CABPT version
- build arm64 images in CI
- remove maintenance service interface and use machine service
Docs
- provide list of AMIs on AWS documentation page
- add 0.8 docs for the upcoming release
- ensure we configure nodes in guides
- ensure gcp docs have firewall and node info
- add qemu diagram and video walkthrough
- graduate v0.7 docs
- improve configuration reference documentation
- fix small typo in talosctl processes cast
- update asciinemas with talosctl
- add proxmox doc
- add live walkthroughs where applicable
Feat
- support openstack platform
- update Kubernetes to v1.20.0-beta.2
- change UI component for disks selector
- support cluster expansion in the interactive installer
- implement apply configuration without reboot
- make GenerateConfiguration API reuse current node auth
- sync time before installer runs
- set interface MTU in DHCP mode even if DHCP is not successful
- print hint about using interative installer in mainenance mode
- add TUI based talos interactive installer
- support ipv6 routes
- return client config as the second value in GenerateConfiguration
- correctly merge talosconfig (don't ever overwrite)
- drop to maintenance mode in cloud platforms if userdata is missing
- read config from extra guestinfo key (vmware)
- update Go to 1.15.5
- add generate config gRPC API
- upgrade Kubernetes default version to 1.19.4
- add example command in maintenance, enforce cert fingerprint
- add storage API
Fix
- bump blockdevice library for
mmcblkpart name fix - ignore 'not found' errors when stopping/removing CRI pods
- return hostname from packet platform
- make fingerprint clearly optional in a boot hint
- ensure packet nics get all IPs
- use ghcr.io/talos-systems/kubelet
- bump timeout for config downloading on bare metal
Refactor
- drop osd compatibility layer
Release
- v0.8.0-alpha.1: prepare release
Test
- update integration test versions, clean up names