github siderolabs/image-factory v1.2.0

6 hours ago

image-factory 1.2.0 (2026-04-28)

Welcome to the v1.2.0 release of image-factory!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/image-factory/issues.

Authentication Support (Enterprise)

Image Factory Enterprise now supports API key-based authentication.
When enabled, all schematic access requires the caller to be authenticated.
Each schematic records its owner at creation time, making schematics private to the user who created them.
Authentication is configured via a set of usernames and associated API keys.

Note: This feature is enterprise-only and is subject to the BUSL-1.1 license.

French Locale

The Image Factory frontend now includes a French (fr) locale, adding translations for the web interface.

Stable Resolution for 'latest' Tag

The latest tag in the registry frontend now resolves to the latest non-prerelease (stable) version instead of being passed through to the upstream registry.

New /talosctl/:version Endpoint

A new /talosctl/:version endpoint has been added that lists all downloadable talosctl binaries for a given Talos version.

Contributors

  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • Edward Sammut Alessi
  • Quentin Joly
  • Utku Ozdemir

Changes

7 commits

  • ccffefc release(v1.2.0): prepare release
  • 4abeff4 feat: add /talosctl/:version endpoint to list downloadable talosctls
  • 405b488 feat(i18n): add french locale
  • c6ad082 feat(registry): resolve latest tag to stable version
  • 471706d chore: drop update to talos main tests
  • 403cd5a fix: centralize schematic ownership enforcement
  • f1cceee feat: implement authentication support

Changes from siderolabs/talos

26 commits

  • b9e9c6579 release(v1.13.0): prepare release
  • 5e2fc260a fix: revert add extraArgs from service-account-issuer
  • 17448fcd2 fix: revert use append instead of prepend in service-account-issuer
  • 4b9fe000f feat: add quirk for talosctl factory downloads
  • f62c33113 refactor: make all controller unit-test follow modern patterns
  • cd317d533 feat: support auth for Image Factory in cluster create
  • 92ca9e16f feat: update Kubernetes to v1.36.0
  • e9afea74d test: fix OOM test flake
  • d34a61c8d fix(talosctl): ensure uncordon runs after reboot/upgrade errors
  • f9531d352 test: fix a flake in the manifest sync test
  • 9f04f2c4e fix: watch kubelet's kubeconfig and time out for cache sync
  • f3bab2baf chore(ci): nvidia update helm values
  • d4d018b54 fix: propagate route table down to the resource
  • ffa0bcf61 chore(ci): bump gpu operator version
  • 8035e6e49 fix: do not flip machine stage to rebooting during shutdown
  • 10606bdfe fix: boot entry detection
  • 23393a5ea fix: zfs extensions test
  • a922d1540 fix: return failed precondition on upgrade when not installed
  • 252799a00 fix: reduce memory dashboard usage
  • 8180cb11c fix: wrong slot of encryption key was logged
  • b6bcd47e6 feat: update Flannel to 0.28.4
  • 370c035ab fix: audit trustd code for security
  • 3e1c6fd84 chore: bump container registry library
  • dacd73313 chore: update sign images to support image name suffix
  • 1a519a410 test: allow more tests to run in FIPS strict mode
  • cb969aa9f feat: update Linux to 6.18.24

Dependency Changes

  • github.com/fsnotify/fsnotify v1.9.0 new
  • github.com/siderolabs/talos v1.13.0-rc.0 -> v1.13.0
  • github.com/siderolabs/talos/pkg/machinery v1.13.0-rc.0 -> v1.13.0
  • golang.org/x/crypto v0.50.0 new

Previous release can be found at v1.1.0

Don't miss a new image-factory release

NewReleases is sending notifications on new releases.