mirror of
https://github.com/siderolabs/talos.git
synced 2026-04-16 03:01:08 +02:00
91 lines
2.4 KiB
TOML
91 lines
2.4 KiB
TOML
# commit to be tagged for new release
|
|
commit = "HEAD"
|
|
|
|
project_name = "Talos"
|
|
github_repo = "siderolabs/talos"
|
|
match_deps = "^github.com/((talos-systems|siderolabs)/[a-zA-Z0-9-]+)$"
|
|
ignore_deps = ["github.com/coredns/coredns"]
|
|
|
|
# previous release
|
|
previous = "v1.9.0"
|
|
|
|
pre_release = true
|
|
|
|
preface = """
|
|
"""
|
|
|
|
[notes]
|
|
[notes.updates]
|
|
title = "Component Updates"
|
|
description = """\
|
|
* Linux: 6.12.9
|
|
* CNI plugins: 1.6.1
|
|
* runc: 1.2.4
|
|
|
|
Talos is built with Go 1.23.4.
|
|
"""
|
|
|
|
[notes.driver-rebind]
|
|
title = "Driver Rebind"
|
|
description = """\
|
|
Talos 1.10 now supports a new machine config document named `PCIDriverRebindConfig` that allows rebinding the driver of a PCI device to a different target driver.
|
|
See the [documentation](https://www.talos.dev/v1.10/reference/configuration/hardware/pcidriverrebindconfig/) for more information.
|
|
"""
|
|
|
|
[notes.cgroupsv1]
|
|
title = "cgroups v1"
|
|
description = """\
|
|
Talos Linux no longer supports `cgroupsv1` when running in non-container mode.
|
|
The kernel argument `talos.unified_cgroup_hierarchy` is now ignored.
|
|
"""
|
|
|
|
[notes.auditd]
|
|
title = "auditd"
|
|
description = """\
|
|
Kernel parameter `talos.auditd.disabled=1` can be used to disable Talos built-in `auditd` service.
|
|
"""
|
|
|
|
[notes.kube-apiserver-authorization-config]
|
|
title = "kube-apiserver Authorization Config"
|
|
description = """\
|
|
When using `.cluster.apiServer.authorizationConfig` the user provided order for the authorizers is honoured and `Node` and `RBAC` authorizers are always added to the end if not explicitly specified.
|
|
|
|
Eg: If user provides only `Webhook` authorizer, the final order will be `Webhook`, `Node`, `RBAC`.
|
|
|
|
To provide a specific order for `Node` or `RBAC` explicitly, user can provide the authorizer in the order they want.
|
|
|
|
Eg:
|
|
|
|
```yaml
|
|
cluster:
|
|
apiServer:
|
|
authorizationConfig:
|
|
- type: Node
|
|
name: Node
|
|
- type: Webhook
|
|
name: Webhook
|
|
webhook:
|
|
connectionInfo:
|
|
type: InClusterConfig
|
|
...
|
|
- type: RBAC
|
|
name: rbac
|
|
```
|
|
|
|
Usage of `authorization-mode` CLI argument will not support this form of customization.
|
|
"""
|
|
|
|
[make_deps]
|
|
|
|
[make_deps.tools]
|
|
variable = "TOOLS"
|
|
repository = "github.com/siderolabs/tools"
|
|
|
|
[make_deps.pkgs]
|
|
variable = "PKGS"
|
|
repository = "github.com/siderolabs/pkgs"
|
|
|
|
[make_deps.extras]
|
|
variable = "EXTRAS"
|
|
repository = "github.com/siderolabs/extras"
|