siderolabs/talos v1.1.0-alpha.1

on GitHub

Talos 1.1.0-alpha.1 (2022-04-21)

Welcome to the v1.1.0-alpha.1 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Apply Config --dry-run

The commands talosctl apply-config, talosctl patch mc and talosctl edit mc now support --dry-run flag.
If enabled it just prints out the selected config application mode and the configuration diff.

IPv6 in Docker-based Talos Clusters

The command talosctl cluster create now enables IPv6 by default for the Docker containers
created for Talos nodes. This allows to use IPv6 addresses in Kubernetes networking.

If talosctl cluster create fails to work on Linux due to the lack of IPv6 support,
please use the flag --disable-docker-ipv6 to revert the change.

drop some default rules shipped by eudev

Drops some default eudev rules that doesn't make sense in the context of Talos OS.
Especially the ones around sound devices, cd-roms and renaming the network interfaces to be predictable

Pod Security Admission

Pod Security Admission controller is enabled by default with the following policy:

apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- configuration:
    apiVersion: pod-security.admission.config.k8s.io/v1alpha1
    defaults:
      audit: restricted
      audit-version: latest
      enforce: baseline
      enforce-version: latest
      warn: restricted
      warn-version: latest
    exemptions:
      namespaces:
      - kube-system
      runtimeClasses: []
      usernames: []
    kind: PodSecurityConfiguration
  name: PodSecurity
  path: ""

The policy is part of the Talos machine configuration, and it can be modified to suite your needs.

Support RockPi 4 variants A and B

Talos now supports RockPi variants A and B in addition to RockPi 4C

Raspberry Pi PoE hat fan

Talos now enables the Raspberry Pi PoE fan control by pulling in the poe overlay that works with upstream kernel

Component Updates

• Linux: 5.15.35
• Kubernetes: 1.24.0-rc.0
• Flannel: 0.17.0
• runc: 1.1.1

Talos is built with Go 1.18.1.

x86-64 Architecture

Talos is built for x86-64 architecture with support for x86-64-v2 microarchitecture level,
so Talos no longer runs on processors supporting only baseline x86-64 microarchitecture (before 2009).

Contributors

• Andrey Smirnov
• Noel Georgi
• Tim Jones
• Spencer Smith
• Dmitriy Matrenichev
• Andrew Rynhard
• Artem Chernyshev
• Steve Francis
• Andrei Dobre
• Caleb Woodbine
• Daniel Höxtermann
• Jori Huisman
• Nico Berlee
• Serge Logvinov
• Seán C McCord
• Steve Francis
• Suraj Shirvankar
• Tim Jones
• Tomasz Zurkowski
• William Ashton

Changes

Changes since v1.1.0-alpha.0

Changes from siderolabs/extras

Changes from siderolabs/pkgs

Changes from siderolabs/tools

Changes from talos-systems/go-blockdevice

Dependency Changes

• cloud.google.com/go/compute v1.5.0 -> v1.6.0
• github.com/BurntSushi/toml v1.0.0 -> v1.1.0
• github.com/aws/aws-sdk-go v1.43.8 -> v1.43.41
• github.com/containernetworking/plugins v1.1.0 -> v1.1.1
• github.com/cosi-project/runtime 264f8fcd1a4f -> 639b4a2e6120
• github.com/docker/distribution v2.8.0 -> v2.8.1
• github.com/docker/docker v20.10.12 -> v20.10.14
• github.com/gdamore/tcell/v2 f057f0a857a1 -> v2.5.1
• github.com/google/nftables 211824995dcb -> 950e408d48c6
• github.com/insomniacslk/dhcp 3c283ff8b7dd -> 12fbdcb11b41
• github.com/jsimonetti/rtnetlink v1.1.0 -> v1.2.0
• github.com/rivo/tview 96063d6082f3 -> 9994674d60a8
• github.com/rs/xid v1.3.0 -> v1.4.0
• github.com/siderolabs/extras v1.0.0 -> v1.1.0-alpha.0-1-gac3b9a4
• github.com/siderolabs/pkgs v1.0.0-6-g7c293d5 -> v1.1.0-alpha.0-28-g95f4418
• github.com/siderolabs/tools v1.0.0-1-g4c77d96 -> v1.1.0-alpha.0-10-g8c1f801
• github.com/spf13/cobra v1.3.0 -> v1.4.0
• github.com/stretchr/testify v1.7.0 -> v1.7.1
• github.com/talos-systems/go-blockdevice v0.3.1 -> d9c3a2738861
• github.com/vishvananda/netlink 650dca95af54 -> v1.2.0-beta
• github.com/vmware-tanzu/sonobuoy v0.56.2 -> v0.56.4
• github.com/vmware/vmw-guestinfo cc1fd90d572c -> 510905f0efa3
• go.etcd.io/etcd/api/v3 v3.5.2 -> v3.5.3
• go.etcd.io/etcd/client/pkg/v3 v3.5.2 -> v3.5.3
• go.etcd.io/etcd/client/v3 v3.5.2 -> v3.5.3
• go.etcd.io/etcd/etcdutl/v3 v3.5.2 -> v3.5.3
• golang.org/x/net 27dd8689420f -> 290c469a71a5
• golang.org/x/sys 4e6760a101f9 -> 33da011f77ad
• golang.org/x/term 03fcf44c2211 -> e5f449aeb171
• golang.org/x/time 0e9765cccd65 -> 583f2d630306
• golang.zx2c4.com/wireguard/wgctrl fde48d68ee68 -> fec8f2be4827
• google.golang.org/grpc v1.44.0 -> v1.45.0
• google.golang.org/protobuf v1.27.1 -> v1.28.0
• k8s.io/api v0.23.5 -> v0.24.0-beta.0
• k8s.io/apimachinery v0.23.5 -> v0.24.0-beta.0
• k8s.io/apiserver v0.23.5 -> v0.24.0-beta.0
• k8s.io/client-go v0.23.5 -> v0.24.0-beta.0
• k8s.io/component-base v0.23.5 -> v0.24.0-beta.0
• k8s.io/cri-api v0.23.5 -> v0.24.0-beta.0
• k8s.io/kubectl v0.23.5 -> v0.24.0-beta.0
• k8s.io/kubelet v0.23.5 -> v0.24.0-beta.0
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.63 -> v1.2.64

Previous release can be found at v1.0.0

Images

ghcr.io/siderolabs/flannel:v0.17.0
ghcr.io/siderolabs/install-cni:v1.1.0-alpha.0-1-gac3b9a4
docker.io/coredns/coredns:1.9.1
gcr.io/etcd-development/etcd:v3.5.3
k8s.gcr.io/kube-apiserver:v1.24.0-rc.0
k8s.gcr.io/kube-controller-manager:v1.24.0-rc.0
k8s.gcr.io/kube-scheduler:v1.24.0-rc.0
k8s.gcr.io/kube-proxy:v1.24.0-rc.0
ghcr.io/siderolabs/kubelet:v1.24.0-rc.0
ghcr.io/siderolabs/installer:v1.1.0-alpha.1
k8s.gcr.io/pause:3.6