siderolabs/talos v0.14.0-alpha.1

on GitHub

Talos 0.14.0-alpha.1 (2021-11-15)

Welcome to the v0.14.0-alpha.1 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at
https://github.com/talos-systems/talos/issues.

Kexec and capabilities

When kexec support is disabled
Talos no longer drops Linux capabilities (CAP_SYS_BOOT and CAP_SYS_MODULES) for child processes.
That is helpful for advanced use-cases like Docker-in-Docker.

If you want to permanently disable kexec and capabilities dropping, pass kexec_load_disabled=1 argument to the kernel.

For example:

install:
  extraKernelArgs:
    - sysctl.kernel.kexec_load_disabled=1

Please note that capabilities are dropped before machine configuration is loaded,
so disabling kexec via machine.sysctls will not be enough.

Cluster Discovery

Cluster Discovery is enabled by default for Talos 0.14.
Cluster Discovery can be disabled with talosctl gen config --with-cluster-discovery=false.

Kubelet

Kubelet service can now be restarted with talosctl service kubelet restart.

Kubelet node IP configuration (.machine.kubelet.nodeIP.validSubnets) can now include negative subnet matches (prefixed with !).

Log Shipping

Talos can now ship system logs to the configured destination using either JSON-over-UDP or JSON-over-TCP:
see .machine.logging machine configuration option.

talosctl support

talosctl CLI tool now has a new subcommand called support, that can gather all
cluster information that could help with future debugging in a single run.

Output of the command is a zip archive with all talos service logs, kubernetes pod logs and manifests,
talos resources manifests and so on.
Generated archive does not contain any secret information so it is safe to send it for analysis to a third party.

Component Updates

• Linux: 5.15.1
• etcd: 3.5.1
• containerd: 1.5.7
• Kubernetes: 1.23.0-alpha.4
• CoreDNS: 1.8.6

Talos is built with Go 1.17.2

Kubernetes Upgrade Enhancements

talosctl upgrade-k8s now syncs all Talos manifest resources generated from templates.

So there is no need to update CoreDNS, Flannel container manually after running upgrade-k8s anymore.

Contributors

• Andrey Smirnov
• Alexey Palazhchenko
• Artem Chernyshev
• Serge Logvinov
• Noel Georgi
• Spencer Smith
• Nico Berlee
• Alex Zero
• Andrew Rynhard
• Branden Cash
• David Haines
• Gerard de Leeuw
• Michael Fornaro
• Rui Lopes

Changes

Changes since v0.14.0-alpha.0

Changes from talos-systems/discovery-api

Changes from talos-systems/discovery-client

Changes from talos-systems/extras

Changes from talos-systems/net

Changes from talos-systems/pkgs

Changes from talos-systems/tools

Dependency Changes

• github.com/AlekSi/pointer v1.1.0 -> v1.2.0
• github.com/containerd/cgroups v1.0.1 -> v1.0.2
• github.com/containerd/containerd v1.5.5 -> v1.5.7
• github.com/docker/docker v20.10.8 -> v20.10.10
• github.com/evanphx/json-patch v4.11.0 -> v4.12.0
• github.com/gosuri/uiprogress v0.0.1 new
• github.com/hashicorp/go-getter v1.5.8 -> v1.5.9
• github.com/hetznercloud/hcloud-go v1.32.0 -> v1.33.1
• github.com/insomniacslk/dhcp b95caade3eac -> ad197bcd36fd
• github.com/jsimonetti/rtnetlink 435639c8e6a8 -> 93da33804786
• github.com/jxskiss/base62 4f11678b909b -> v1.0.0
• github.com/mdlayher/ethtool 2b88debcdd43 -> 288d040e9d60
• github.com/rivo/tview ee97a7ab3975 -> badfa0f0b301
• github.com/talos-systems/discovery-api v0.1.0 new
• github.com/talos-systems/discovery-client v0.1.0 new
• github.com/talos-systems/extras v0.6.0 -> v0.7.0-alpha.0-1-g2bb2efc
• github.com/talos-systems/net v0.3.0 -> 0abe5bdae8f8
• github.com/talos-systems/pkgs v0.8.0 -> v0.9.0-alpha.0-14-g740da24
• github.com/talos-systems/talos/pkg/machinery v0.13.0 -> 000000000000
• github.com/talos-systems/tools v0.8.0 -> v0.9.0-alpha.0-5-g96e0231
• github.com/vmware-tanzu/sonobuoy v0.53.2 -> v0.55.0
• github.com/vmware/govmomi v0.26.1 -> v0.27.1
• github.com/vmware/vmw-guestinfo 687661b8bd8e -> cc1fd90d572c
• go.etcd.io/etcd/api/v3 v3.5.0 -> v3.5.1
• go.etcd.io/etcd/client/pkg/v3 v3.5.0 -> v3.5.1
• go.etcd.io/etcd/client/v3 v3.5.0 -> v3.5.1
• go.etcd.io/etcd/etcdutl/v3 v3.5.0 -> v3.5.1
• golang.org/x/net 3ad01bbaa167 -> 69e39bad7dc2
• golang.org/x/sys 39ccf1dd6fa6 -> 0c823b97ae02
• golang.org/x/term 140adaaadfaf -> 03fcf44c2211
• golang.zx2c4.com/wireguard/wgctrl 0a2f4901cba6 -> 0073765f69ba
• google.golang.org/grpc v1.41.0 -> v1.42.0
• inet.af/netaddr 85fa6c94624e -> c74959edd3b6
• k8s.io/api v0.22.2 -> v0.23.0-alpha.4
• k8s.io/apimachinery v0.22.2 -> v0.23.0-alpha.4
• k8s.io/client-go v0.22.2 -> v0.23.0-alpha.4
• k8s.io/cri-api v0.22.2 -> v0.23.0-alpha.4
• k8s.io/kubectl v0.22.2 -> v0.23.0-alpha.4
• k8s.io/kubelet v0.22.2 -> v0.23.0-alpha.4
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.59 -> v1.2.60
• sigs.k8s.io/yaml v1.3.0 new

Previous release can be found at v0.13.0

Images

quay.io/coreos/flannel:v0.13.0
ghcr.io/talos-systems/install-cni:v0.7.0-alpha.0-1-g2bb2efc
docker.io/coredns/coredns:1.8.6
gcr.io/etcd-development/etcd:v3.5.1
k8s.gcr.io/kube-apiserver:v1.23.0-alpha.4
k8s.gcr.io/kube-controller-manager:v1.23.0-alpha.4
k8s.gcr.io/kube-scheduler:v1.23.0-alpha.4
k8s.gcr.io/kube-proxy:v1.23.0-alpha.4
ghcr.io/talos-systems/kubelet:v1.23.0-alpha.4
ghcr.io/talos-systems/installer:v0.14.0-alpha.1
k8s.gcr.io/pause:3.2