Update dependency talos to v1.9.2#59
Merged
Merged
Conversation
10884c6 to
0d47243
Compare
0d47243 to
c2593da
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.7.6->1.9.2Release Notes
siderolabs/talos (talos)
v1.9.2Compare Source
Talos 1.9.2 (2025-01-16)
Welcome to the v1.9.2 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
auditd
Kernel parameter
talos.auditd.disabled=1can be used to disable Talos built-inauditdservice.kube-apiserver Authorization Config
When using
.cluster.apiServer.authorizationConfigthe user provided order for the authorizers is honoured andNodeandRBACauthorizers are always added to the end if not explicitly specified.Eg: If user provides only
Webhookauthorizer, the final order will beWebhook,Node,RBAC.To provide a specific order for
NodeorRBACexplicitly, user can provide the authorizer in the order they want.Eg:
Usage of
authorization-modeCLI argument will not support this form of customization.Component Updates
Talos is built with Go 1.23.4.
Contributors
Changes
18 commits
09758b3release(v1.9.2): prepare release207f863feat: update containerd to 2.0.2582064dfix: add informer resync period for node status watcher244fd6efeat: add a kernel parameter to disable built-in auditd28327e0fix: kube-apiserver authorizers orderff9aa80fix: a couple of imager panics/crashes44e2cc9feat: update Linux to 6.12.99fd295bfix: detect GPT before ZFS7b59573fix: extfs repair and resize5f6bfe0fix: merge of VolumeConfig documents with sizes0c05e1cfeat: update Linux to 6.12.8b61ab0afix: partition alignment on disks with 4k sectorsc4a69d3fix: yet another dashboard panicdec3c6efix: disable NRI plugin in a different waydfb54c8fix: request previous IP address in discovery6b1fe3dfix: mount selinuxfs only when SELinux is enabled5e893e1fix: update field name for bus path disk selector9219fc0fix: exclude disks with empty transport for disk selectorChanges from siderolabs/pkgs
6 commits
c1f06e5feat: update containerd to v2.0.2ef38c38feat: update Linux to 6.12.9a7487d6fix: adjust kernel options around ACPI/PCI/EFI376259afeat: update Linux to 6.12.88e435cdfix: update config-arm64 to add Rasperry Pi watchdog supportdaabb47fix: dvb was missing I2C_MUX support and si2168 driverDependency Changes
Previous release can be found at v1.9.1
Images
v1.9.1Compare Source
Talos 1.9.1 (2024-12-26)
Welcome to the v1.9.1 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Talos is built with Go 1.23.4.
Contributors
Changes
15 commits
348472frelease(v1.9.1): prepare releasee702542fix: ignore member not found error on leave cluster2125206test: use node informer instead of raw watch73c25eefix: talosctl support and race testsedd7844fix: update go-blockdevice to v2.0.9c1f975cfix: use correct default search domainff91a75fix: reduce installer image9cebe5efix: fixFailed to initialize SELinux labeling handleudev error852cf5afeat: bring Linux 6.12.6, CNI plugins 1.6.15f83c83docs: document Kubernetes service registry incompat with K8s 1.323f87286fix: dashboard crash on CPU dataf84ba2adocs: fix several typos972044echore: support gcr.io auth for cache and image gen7908c93fix: make talosctl time work with PTP time sync48cb3a6fix: restore previous disk serial fetchingChanges from siderolabs/go-talos-support
1 commit
0f784bdfix: avoid deadlock on context cancelChanges from siderolabs/pkgs
3 commits
45c4ba4fix: patch containerd with CNI deadlock fix13c5fc6feat: update Linux to 6.12.66ed389efeat: update Linux firmware to2024121Dependency Changes
Previous release can be found at v1.9.0
Images
v1.9.0Compare Source
44 commits
af5d6b8c4fix: show SELinux labels on pseudo-fsf46922fa9chore: fix dockerfile warningsa13f82c59feat: udev: label device nodese899fb37ffeat: label created files in /etc5f68c17edfeat: implement image cache configuration0ffb2187afeat: registry proxy77cf84fb5feat: support generating iso with imagecache5de6275b8chore: image cache generator improvements1a8cc5f8bfeat: add SELinux labels to volumes61b9129e0fix: add directory entries and filemode to tarball4caeae21erefactor: optimize flags and SetLabel6074a870afeat: add e2fsprogs to talos rootfs7ffcf5b93docs: update getting startedc4c1a0d7cfix: make vmware platform common code build on all archescc768037ffeat: implement block device wipe6fb518ae5fix: don't activate LVM volumes in agent mode0e3ed3072fix: no longer leakClosereader4dc58cfdfchore: small fixesf400ae911fix: small fixes for image cache generation93754b7defix: config and platform manifest generation95b2fc946feat: image cache gene4c6186c6chore: remove i915/amdgpu drivers744ad12a6docs: update replicated-local-storage-with-openebs.mdfd713e451feat: add permanent hardware addr to device selectorsd55a96e8crefactor: remove SELinux client_u and client_r3a5b55fd2fix: allow CEL expressions config mergef1b15f580chore: remove replace for safchain/ethtoolf9697a9a0fix: register controlplane node with NoSchedule taint30f8b5a9ffix: registry mirror fallback handling0f41e7743feat: allow for onlink directive (nocloud)e26d0043echore: code cleanup43fe3807afeat: implement tracking of blockdevice secondaries8a7476c3afix: install on non-empty disk8b4253d18feat: update etcd to v3.5.175a0fd5b88refactor: move early initialization functions to pre-initialize phase9916e2cd8chore: update pkgs/tools/extras for Go 1.23.320bbf0235docs: update vultr documentationaea98940bfix: arch linux search paths and names for QEMU provisioner682718d4cfix: use imager incoming version for extension validation9a02ecc49feat: rewrite install disk selector to use CEL expressionseba35f441docs: add note about PSP in Rook-Ceph guide38b80fb1ddocs: add missing--talosconfigparameter to end of Hetzner guidea07f66c91docs: gcp: fix controlplane nodes tags4fe6dc8a0chore: clean dns codev1.8.4Compare Source
Talos 1.8.4 (2024-12-13)
Welcome to the v1.8.4 release of Talos!
Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:
cloud-images.jsontalosctlbinarieskernelinitramfsmetaliso and disk imagestalosctl-cni-bundleAll other release assets can be downloaded from Image Factory.
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.64
runc: 1.2.3
Kubernetes: 1.31.4
etcd: 3.5.17
Talos is built with Go 1.22.10.
Contributors
Changes
17 commits
3c151c8release(v1.8.4): prepare release1fb38e4fix: use mtu network option for podmanacd9fdafix: order volume config by the requested sizec547557fix: install iptables-nft to the host94b342bfix: lock provisioning order of user disk partitionsdf8fe4cfeat: support vlan/bond in v1, vlan in v2 for nocloud3a1727efix: don't reset health status if service doesn't support health checks7ff796ffix: makesystem_diskcondition work properly before install379eefdfix: nocloud network link matching on MAC addressesc87ec03feat: allow for onlink directive (nocloud)aa14ae5fix: small logrus fixesb90863afix: properly halt installation if Talos already installed6d20adefix: make vmware platform common code build on all archesbc2d547fix: allow CEL expressions config merge5188f64fix: install on non-empty disk6f411ccfeat: update etcd to v3.5.177f91e31feat: update Linux 6.6.64, runc 1.2.3Changes from siderolabs/pkgs
7 commits
0698d6echore: bring in KSPP recommendations9ab4a32feat: update Linux to 6.6.6477d6623feat: update runc to v1.2.31afc88cfeat: build host iptables with nftables support4c15185feat: update Linux to 6.6.62, runc to 1.2.288cc7d4feat: enable CONFIG_INTEL_HFI_THERMAL + CONFIG_INTEL_TURBO_MAX_377a1abbfeat: update Go to 1.22.10Changes from siderolabs/tools
1 commit
adfcf5afeat: update Go to 1.22.10Dependency Changes
Previous release can be found at v1.8.3
Images
v1.8.3Compare Source
Talos 1.8.3 (2024-11-13)
Welcome to the v1.8.3 release of Talos!
Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:
cloud-images.jsontalosctlbinarieskernelinitramfsmetaliso and disk imagestalosctl-cni-bundleAll other release assets can be downloaded from Image Factory.
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.60
containerd: 2.0.0
runc: 1.2.1
Talos is built with Go 1.22.9.
Contributors
Changes
15 commits
6494acerelease(v1.8.3): prepare release01c9f45fix: arch linux search paths and names for QEMU provisioner8b5c5f1chore: fix nil pointer dereference in AWS uploaderfbf85ddfix: install disk matcher errorff3fccefeat: add dm-cache dm-cache-smq kernel modules6d872e4feat: allow extra mounts for docker-basedtalosctl cluster create8c193c8fix: update permissions for logging directories in /var5044a41fix: mount /sys/kernel/security conditionally83abb66fix: make route normalization keep family228a943fix: do not trim 0 from process SELinux labeld4a3a2bfix: prevent panic in nocloud platform code5c7b02dfix: update the CRI sandbox image referencef8155c4feat: add parsing of vlanNNNN:ethX style VLAN cmdline argsea19f15fix: generation of SecureBoot isofddaa60feat: update Linux, runc, containerd, goChanges from siderolabs/pkgs
7 commits
9c80a4afeat: update Linux to 6.6.60747c6c7feat: update containerd to v2.0.087c6526feat: enable CONFIG_DM_CACHEb4fa648fix: enable nvme and 2.5gbit ethernet on nanopi-r5s079ea13feat: update Linux to 6.6.59e4bc753feat: update runc to v1.2.1de3dbf5feat: update Go to 1.22.9Changes from siderolabs/tools
1 commit
653182afeat: update Go to 1.22.9Dependency Changes
Previous release can be found at v1.8.2
Images
v1.8.2Compare Source
Talos 1.8.2 (2024-10-28)
Welcome to the v1.8.2 release of Talos!
Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:
cloud-images.jsontalosctlbinarieskernelinitramfsmetaliso and disk imagestalosctl-cni-bundleAll other release assets can be downloaded from Image Factory.
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.58
containerd: 2.0.0-rc.6
runc: 1.2.0
Kubernetes: 1.31.2
Talos is built with Go 1.22.8.
Contributors
Changes
18 commits
88f861arelease(v1.8.2): prepare releasecfc1010fix: include iptables/netfilter ipv6 fixd8e2daffix: wait for udevd to be running before activating LVMe105a3dfix: talosctl process null character0e96e99fix: rework the 'metal-iso' config acquisition7ef5796fix: improve error messages for invalid bridge/bond configurationa3fcbe0chore: rename tpm2.PCRExtent -> tpm2.PCRExtenda9e6e60fix: correct error message for invalid ip=49de0abfix: update incorrect alias for PCIDevice resource9b561acfeat: add Talos 1.9 compatibility guarantees2ea3f85chore: update siderolabs/crypto module and return proper ALPNce47912feat: optionally decode hcloud userdata as base64f20a690fix: json logging panicd855bb8fix: skip ram disksb429e7ffix: do not use pflag csv comma reader for config-patchee44f2ctest: skip no error test in Cilium7d055affix: scaleway metadata9f62fe9feat: update pkgs and KubernetesChanges from siderolabs/crypto
1 commit
58b2f92chore: use HTTP/2 ALPN by defaultChanges from siderolabs/go-circular
1 commit
9a0f7b0fix: multiple data race issuesChanges from siderolabs/pkgs
8 commits
e72b2f4fix: apply netfilter ipv6 fix9aac1a8feat: update containerd to v2.0.0-rc.69668729feat: update Linux to 6.6.589bc27b3feat: update runc to 1.2.0f7cc89efix: default IOMMU mode to 'lazy'7ca4e2cfeat: update Linux to 6.6.57, update Linux firmwaree2c4848feat: update Linux 6.6.56 and protect /proc/memc7729c3feat: enable CONFIG_XFRM_STATISTICSChanges from siderolabs/siderolink
1 commit
1893385fix: initialize tls listener properlyDependency Changes
Previous release can be found at v1.8.1
Images
v1.8.1Compare Source
Talos 1.8.1 (2024-10-08)
Welcome to the v1.8.1 release of Talos!
Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:
cloud-images.jsontalosctlbinarieskernelinitramfsmetaliso and disk imagestalosctl-cni-bundleAll other release assets can be downloaded from Image Factory.
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.54
containerd: 2.0.0-rc.5
Flannel: 0.25.7
Talos is built with Go 1.22.8.
Contributors
Changes
16 commits
477752frelease(v1.8.1): prepare release362c9f8test: skip lvm test if not enough user disks available7930500chore: checkout extensions from release-1.8, not mainf6d6306fix: wipe system partitions correctly via kernel args4d279c6fix: volume encryption with failing keyslots070defafix: update grpc-go the latest patch releasea2d12fdfeat: update Flannel to v0.25.7e2f560bfeat: bring in lpfc kernel module driver788336afeat: enable QEDF drivere4341fafix: make /var/run empty on reboots66228effix: multiple fixes for LVM activation5f4515ffix: prevent file descriptors leaks to child processesa55103echore: ignore more plugins for system containerdffcdc0bfix: build talosctl withouttcell_minimald29f660feat: add support for CI Network config in nocloud01e580bfeat: update Go 1.22.8, Linux, pkgsChanges from siderolabs/pkgs
8 commits
71d23b4feat: update Linux to 6.6.548906a9bfeat: add lpfc kernel module3c57dfffeat: enable QEDF driver1ecbd58feat: update containerd to v2.0.0-rc.547dff98fix: drop the LVM2 udev lvm rule480d765fix: force LVM to use/runas state directoryc663212feat: enable transparent huge pages in madvise mode832f11bfeat: update Go to 1.22.8Changes from siderolabs/tools
1 commit
7719230feat: update Go to 1.22.8Dependency Changes
Previous release can be found at v1.8.0
Images
v1.8.0Compare Source
113 commits
6f7c3a8e5fix: build of talosctl on non-Linux archesf0a59cec7release(v1.8.0-alpha.2): prepare releasec8aed3be4fix: correctly add console args for ttyS0b453385bdfeat: support volume configuration, provisioning, etcb6b16b35fchore: pause sequencer when talos installed and iso bootedeade0a9f2chore: bring inuiomodules81f9fcd9cfix: report errors correctly when pulling, fix EEXISTb309e87b4docs: fix invalid input in field user_datac7474877adocs: kubeProxyReplacement from "disabled" to "false"be2ebf6b4chore: bump dependencies88601bff4chore: drop calico from interactive installer106c17d0bchore: aarch64 qemu local secureboot supportda6263506feat: update Flannel to v0.25.619a44c2b0chore: drop consolettyS0argument75cecb421feat: add Apache Cloudstack support951cf66fdfeat: add Cisco fnic driver2d3bc94bffix(ci): fix broken testsa9551b7cafix: host DNS access with firewall enabled4834a61a8feat: report SELinux labels8fe39eacbchore: move csi tests as go teste4f8cb854fix: merge extension service config files bymountPath5ba1df469chore: add java package to protos823480800fix: add missing host/nvme-rdma5b4b64979fix: bump go-smbios for broken SMIOS tablesf57d1f07efix: add NVMe target kernel modules5ff6cf82cfix: drop /opt mount for containers/tink3c0db34d8docs: update kubespan docs3041d9075fix: always handlePermissionDeniedin dashboard resource watches36f83eea9chore: make qemu check flag consistent with codefe52cb074chore: update protoc-gen-docee4290f68fix: bind HostDNS to 169.254.x link-local addressc312a46f6chore: restructure k8s component health checkse193e7db9docs: fix incorrect path for openebs in documentationbeadbac21docs: update Oracle Cloud Talos custom image docs6f969e364chore: improvecluster createUX on aarch6445cc8688achore: replaceifblocks withmin/maxfunctionsa5bd770bffix: retry with another upstream if the previous failed82e19f38adocs: add high-level overlay development guide872599c9achore: drop image assets from release3c36c41a9feat: provide device extra settle timeout9e348ef35feat: update Kubernetes to 1.31.061a1c946bfeat: bundle (some) CNI plugins with Talos core091da163bchore: support arm64 kexec from zboot kernel images73511c1efchore: fix release notes2bf924c7bfeat: update ISO VolumeID with Talos version9a33dce10docs: fix the VMWare docs12562c2d5docs: fix talos version in vmware.shee67da14cfeat: scaleway routed ipeba5dafb9fix: add dns-resolve-cache to the support bundled4f8100bddocs: fix default openebs folder60e163d54docs: fix typo in doc98d9abdd0chore(ci): fix cilium ci testsbeb9602e3chore: bump github.com/docker/docker to v27.1.1+incompatible0698a4921docs: aws getting started re-write4d7d7a589chore(ci): update nvidia integration tests60e901c1dchore: document slim kubelet image622d66a98chore: bump depsf9f5e0ef5chore: fix k8s tests2ac8d2274chore: supportunsupportedflag for mkfs9b9159d1edocs: update support matrix for nvidia drivers9d3415850fix: fix graph diffs in dashboard when node aliases are used9a126d70echore: generate deepcopy for SecureBootAssets typedff56d824chore: remove arch-specific etcd image tagc9f1dece5feat: update Kubernetes to 1.31.0-rc.149831c56fdocs: replace removed Cilium/kubeProxyReplacement value33a316369docs: update aws.md for loope02bd2093feat: update Kubernetes to 1.31.0-rc.064914b086chore: add test for crun extension7a1c62b8bfeat: publish installed extensions as node labels/annotations3f2058abafix: update containerd configuration and settings81bd20f5adocs: remove deprecated jiva from openebs instructions480ffb88adocs: fix the amd64 PXE boot script URL20fe34dbddocs: fix docker getting started typo0fd7dfd2adocs: update Equinix Guide3d1474ac0feat: update CoreDNS to 1.1.350e5f37efchore: add test for apparmor96492c097docs: extend multus configuration for Cilium19aa44c54fix: generate kubeconfig using proper types240104e45feat: update Linux to 6.6.4332db8db60chore: lock microsoft secureboot certs3ce5492f8feat: runc memfd-bind service341b55cd3docs: update vmware.sh117628aa6chore: add test for gvisor extension with platform kvmfd01571c4feat: update Linux, enable Broadcom MPI3 driverb333ec07dfeat: update etcd to 3.5.15, Flannel to 0.25.5087290178feat: use ethtool ioctl to get link status when netlink api not available395c64290docs: update openebs-jiva helm repof132d3f40chore(ci): remove artifacts directory prefix for checksumsfd54dc191feat(talosctl): append microsoft secure boot certsfd6ddd11efeat: provide POD_IP env var to scheduler and controller-manager407347a7afeat: update Kubernetes to 1.31.0-beta.01b8c9ccbbfix: enforce secureboot enroll option only for supported releasesd52b89cb9chore: ensure tls required on s3 bucketsc288ace7bfix: be more smart when merging DNS resolver configd983e4430fix: panic on shutdown01404edffchore: reduce memory requirement for contrplane nodes980f9ebc0fix: fix log format in cluster provisioningea626a963feat: add label 'exclude-from-external-load-balancers' for cp nodes1cf76cfbcdocs: fix talosctl spellingb07338f54feat: provide machine config document to update trusted CA rootsf14c4795efix: sort ports and merge adjacent ones in the nft rulecf5effabbfeat: provide an option to enforce SecureBoot for TPM enrollment736c1485efix: change the UEFI firmware search path ordera727a1d97chore: make using action tracker easier0aebeff35docs: add missing backslashes398151e64fix: remove host bind mount for/tmpfor trustdce4c404e1chore: redo FilterMessages as generic functionfbde9c556chore: bump deps3bab15214feat: update Kubernetes to 1.31.0-alpha.3c2a5213eedocs: add note about mayastor nvme_tcp init container checkdad9c40c7chore: simplify code963612bccchore: redo EncodeString and EncodeBytes using buffer interfaced9db360abfix: properly output multi-doc machine config inget mc[
v1.7.7](https://redirect.github.com/sConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.