siderolabs/talos v1.6.0-beta.0

on GitHub

Talos 1.6.0-beta.0 (2023-12-01)

Welcome to the v1.6.0-beta.0 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Kubelet Credential Provider Configuration

Talos now supports specifying the kubelet credential provider configuration in the Talos configuration file.
It can be set under machine.kubelet.credentialProviderConfig and kubelet will be automatically configured to with the correct flags.
The credential binaries are expected to be present under /usr/local/lib/kubelet/credentialproviders.
Talos System Extensions can be used to install the credential binaries.

Network Device Selectors

Previously, network device selectors only matched the first link, now the configuration is applied to all matching links.

Extension Services

Talos now starts Extension Services early in the boot process, this allows guest agents to be started in maintenance mode.

Linux Firmware

Starting with Talos 1.6, there is no Linux firmware included in the initramfs.
Customers who need Linux firmware can pull them as extension during install time using the image factory service.
If the initial boot requires firmware, a custom iso can be built with the firmware included using the image factory service.
This also ensures that the linux-firmware is not tied to a specific Talos version.

Kernel Arguments

Talos and Imager now supports dropping kernel arguments specified in .machine.install.extraKernelArgs or as --extra-kernel-arg to imager.
Any kernel argument that starts with a - is dropped. Kernel arguments to be dropped can be specified either as -<key> which would remove all arguments that start with <key> or as -<key>=<value> which would remove the exact argument.

Kube-Scheduler Configuration

Talos now supports specifying the kube-scheduler configuration in the Talos configuration file.
It can be set under cluster.scheduler.config and kube-scheduler will be automatically configured to with the correct flags.

KubePrism

KubePrism is enabled by default on port 7445.

Sysctl

Talos now handles sysctl/sysfs key names in line with sysctl.conf(5):

• if the first separator is '/', no conversion is done
• if the first separator is '.', dots and slashes are remapped

Example (both sysctls are equivalent):

machine:
  sysctls:
    net/ipv6/conf/eth0.100/disable_ipv6: "1"
    net.ipv6.conf.eth0/100.disable_ipv6: "1"

talosctl CLI

The command images deprecated in Talos 1.5 was removed, please use talosctl images default instead.

Component Updates

Linux: 6.1.64
containerd: 1.7.10
CoreDNS: 1.11.1
Kubernetes: 1.29.0-rc.1
Flannel: 0.23.0
etcd: 3.5.10
runc: 1.1.10

Talos is built with Go 1.21.4.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Oscar Utbult
• Serge Logvinov
• Andrey Smirnov
• Utku Ozdemir
• Artem Chernyshev
• Nico Berlee
• Radosław Piliszek
• Steve Francis
• Thomas Way
• ndbrew
• Andrei Kvapil
• Christian Rolland
• Drew Hess
• Enno Boland
• Florian Berchtold
• Henry Sachs
• Jacob McSwain
• Jacob McSwain
• Jared Davenport
• Mans Matulewicz
• Nebula
• Sascha Desch
• Spencer Smith
• Thomas Lemarchand
• Tim Jones
• Zachary Milonas
• budimanjojo
• guoguangwu
• mikucat0309

Changes

Changes since v1.6.0-alpha.2

Changes from siderolabs/extras

Changes from siderolabs/gen

Changes from siderolabs/go-blockdevice

Changes from siderolabs/go-kubernetes

Changes from siderolabs/go-procfs

Changes from siderolabs/go-retry

Changes from siderolabs/pkgs

Changes from siderolabs/siderolink

Changes from siderolabs/tools

Dependency Changes

• github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 new
• github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 new
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.0.0 new
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.0.1 new
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.0.1 new
• github.com/aws/aws-sdk-go-v2/config v1.18.32 -> v1.25.6
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.7 -> v1.14.5
• github.com/aws/smithy-go v1.14.0 -> v1.17.0
• github.com/beevik/ntp v1.2.0 -> v1.3.0
• github.com/blang/semver/v4 v4.0.0 new
• github.com/containerd/cgroups/v3 v3.0.2 new
• github.com/containerd/containerd v1.6.23 -> v1.7.9
• github.com/cosi-project/runtime v0.3.1 -> v0.3.19
• github.com/distribution/reference v0.5.0 new
• github.com/docker/docker v24.0.5 -> v24.0.7
• github.com/fatih/color v1.15.0 -> v1.16.0
• github.com/foxboron/go-uefi 32187aa193d0 -> 18b9ba9cd4c3
• github.com/fsnotify/fsnotify v1.6.0 -> v1.7.0
• github.com/google/go-cmp v0.5.9 -> v0.6.0
• github.com/google/go-containerregistry v0.15.2 -> v0.16.1
• github.com/google/uuid v1.3.0 -> v1.4.0
• github.com/gopacket/gopacket v1.1.1 -> v1.2.0
• github.com/hetznercloud/hcloud-go/v2 v2.0.0 -> v2.4.0
• github.com/insomniacslk/dhcp 0f9eb93a696c -> b0416c0f187a
• github.com/jsimonetti/rtnetlink v1.3.4 -> v1.4.0
• github.com/mattn/go-isatty v0.0.19 -> v0.0.20
• github.com/mdp/qrterminal/v3 v3.2.0 new
• github.com/opencontainers/runtime-spec 1c3f411f0417 -> v1.1.0-rc.1
• github.com/pin/tftp/v3 v3.1.0 new
• github.com/prometheus/procfs v0.11.1 -> v0.12.0
• github.com/rivo/tview 6cc0565babaf -> 33a1d271f2b6
• github.com/scaleway/scaleway-sdk-go v1.0.0-beta.20 -> v1.0.0-beta.21
• github.com/siderolabs/extras v1.5.0 -> v1.6.0
• github.com/siderolabs/gen v0.4.5 -> v0.4.7
• github.com/siderolabs/go-blockdevice v0.4.6 -> v0.4.7
• github.com/siderolabs/go-kubernetes v0.2.2 -> v0.2.8
• github.com/siderolabs/go-procfs v0.1.1 -> v0.1.2
• github.com/siderolabs/go-retry v0.3.2 -> v0.3.3
• github.com/siderolabs/pkgs v1.5.0-6-g2f2c9cd -> v1.6.0
• github.com/siderolabs/siderolink v0.3.1 -> v0.3.3
• github.com/siderolabs/talos/pkg/machinery v1.5.0 -> v1.6.0-beta.0
• github.com/siderolabs/tools v1.5.0 -> v1.6.0
• github.com/spf13/cobra v1.7.0 -> v1.8.0
• github.com/vmware-tanzu/sonobuoy v0.56.17 -> v0.57.1
• go.etcd.io/etcd/api/v3 v3.5.9 -> v3.5.10
• go.etcd.io/etcd/client/pkg/v3 v3.5.9 -> v3.5.10
• go.etcd.io/etcd/client/v3 v3.5.9 -> v3.5.10
• go.etcd.io/etcd/etcdutl/v3 v3.5.9 -> v3.5.10
• go.uber.org/zap v1.25.0 -> v1.26.0
• go4.org/netipx ec4c8b891b28 -> 6213f710f925
• golang.org/x/net v0.13.0 -> v0.19.0
• golang.org/x/oauth2 v0.15.0 new
• golang.org/x/sync v0.3.0 -> v0.5.0
• golang.org/x/sys v0.10.0 -> v0.15.0
• golang.org/x/term v0.10.0 -> v0.15.0
• golang.org/x/text v0.11.0 -> v0.14.0
• golang.org/x/time v0.3.0 -> v0.5.0
• google.golang.org/grpc v1.57.0 -> v1.59.0
• k8s.io/api v0.28.0 -> v0.29.0-rc.0
• k8s.io/apimachinery v0.28.0 -> v0.29.0-rc.0
• k8s.io/apiserver v0.28.0 -> v0.29.0-rc.0
• k8s.io/client-go v0.28.0 -> v0.29.0-rc.0
• k8s.io/component-base v0.28.0 -> v0.29.0-rc.0
• k8s.io/cri-api v0.28.0 -> v0.29.0-rc.0
• k8s.io/klog/v2 v2.100.1 -> v2.110.1
• k8s.io/kube-scheduler v0.29.0-rc.0 new
• k8s.io/kubectl v0.28.0 -> v0.29.0-rc.0
• k8s.io/kubelet v0.28.0 -> v0.29.0-rc.0
• sigs.k8s.io/yaml v1.3.0 -> v1.4.0

Previous release can be found at v1.5.0

Images

ghcr.io/siderolabs/flannel:v0.23.0
ghcr.io/siderolabs/install-cni:v1.6.0
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.10
registry.k8s.io/kube-apiserver:v1.29.0-rc.1
registry.k8s.io/kube-controller-manager:v1.29.0-rc.1
registry.k8s.io/kube-scheduler:v1.29.0-rc.1
registry.k8s.io/kube-proxy:v1.29.0-rc.1
ghcr.io/siderolabs/kubelet:v1.29.0-rc.1
ghcr.io/siderolabs/installer:v1.6.0-beta.0
registry.k8s.io/pause:3.8