Update dependency talos to v1.9.2 #59
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.7.6->1.9.2Release Notes
siderolabs/talos (talos)
v1.9.2Compare Source
Talos 1.9.2 (2025-01-16)
Welcome to the v1.9.2 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
auditd
Kernel parameter
talos.auditd.disabled=1can be used to disable Talos built-inauditdservice.kube-apiserver Authorization Config
When using
.cluster.apiServer.authorizationConfigthe user provided order for the authorizers is honoured andNodeandRBACauthorizers are always added to the end if not explicitly specified.Eg: If user provides only
Webhookauthorizer, the final order will beWebhook,Node,RBAC.To provide a specific order for
NodeorRBACexplicitly, user can provide the authorizer in the order they want.Eg:
Usage of
authorization-modeCLI argument will not support this form of customization.Component Updates
Talos is built with Go 1.23.4.
Contributors
Changes
18 commits
09758b3release(v1.9.2): prepare release207f863feat: update containerd to 2.0.2582064dfix: add informer resync period for node status watcher244fd6efeat: add a kernel parameter to disable built-in auditd28327e0fix: kube-apiserver authorizers orderff9aa80fix: a couple of imager panics/crashes44e2cc9feat: update Linux to 6.12.99fd295bfix: detect GPT before ZFS7b59573fix: extfs repair and resize5f6bfe0fix: merge of VolumeConfig documents with sizes0c05e1cfeat: update Linux to 6.12.8b61ab0afix: partition alignment on disks with 4k sectorsc4a69d3fix: yet another dashboard panicdec3c6efix: disable NRI plugin in a different waydfb54c8fix: request previous IP address in discovery6b1fe3dfix: mount selinuxfs only when SELinux is enabled5e893e1fix: update field name for bus path disk selector9219fc0fix: exclude disks with empty transport for disk selectorChanges from siderolabs/pkgs
6 commits
c1f06e5feat: update containerd to v2.0.2ef38c38feat: update Linux to 6.12.9a7487d6fix: adjust kernel options around ACPI/PCI/EFI376259afeat: update Linux to 6.12.88e435cdfix: update config-arm64 to add Rasperry Pi watchdog supportdaabb47fix: dvb was missing I2C_MUX support and si2168 driverDependency Changes
Previous release can be found at v1.9.1
Images
v1.9.1Compare Source
Talos 1.9.1 (2024-12-26)
Welcome to the v1.9.1 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Talos is built with Go 1.23.4.
Contributors
Changes
15 commits
348472frelease(v1.9.1): prepare releasee702542fix: ignore member not found error on leave cluster2125206test: use node informer instead of raw watch73c25eefix: talosctl support and race testsedd7844fix: update go-blockdevice to v2.0.9c1f975cfix: use correct default search domainff91a75fix: reduce installer image9cebe5efix: fixFailed to initialize SELinux labeling handleudev error852cf5afeat: bring Linux 6.12.6, CNI plugins 1.6.15f83c83docs: document Kubernetes service registry incompat with K8s 1.323f87286fix: dashboard crash on CPU dataf84ba2adocs: fix several typos972044echore: support gcr.io auth for cache and image gen7908c93fix: make talosctl time work with PTP time sync48cb3a6fix: restore previous disk serial fetchingChanges from siderolabs/go-talos-support
1 commit
0f784bdfix: avoid deadlock on context cancelChanges from siderolabs/pkgs
3 commits
45c4ba4fix: patch containerd with CNI deadlock fix13c5fc6feat: update Linux to 6.12.66ed389efeat: update Linux firmware to2024121Dependency Changes
Previous release can be found at v1.9.0
Images
v1.9.0Compare Source
44 commits
af5d6b8c4fix: show SELinux labels on pseudo-fsf46922fa9chore: fix dockerfile warningsa13f82c59feat: udev: label device nodese899fb37ffeat: label created files in /etc5f68c17edfeat: implement image cache configuration0ffb2187afeat: registry proxy77cf84fb5feat: support generating iso with imagecache5de6275b8chore: image cache generator improvements1a8cc5f8bfeat: add SELinux labels to volumes61b9129e0fix: add directory entries and filemode to tarball4caeae21erefactor: optimize flags and SetLabel6074a870afeat: add e2fsprogs to talos rootfs7ffcf5b93docs: update getting startedc4c1a0d7cfix: make vmware platform common code build on all archescc768037ffeat: implement block device wipe6fb518ae5fix: don't activate LVM volumes in agent mode0e3ed3072fix: no longer leakClosereader4dc58cfdfchore: small fixesf400ae911fix: small fixes for image cache generation93754b7defix: config and platform manifest generation95b2fc946feat: image cache gene4c6186c6chore: remove i915/amdgpu drivers744ad12a6docs: update replicated-local-storage-with-openebs.mdfd713e451feat: add permanent hardware addr to device selectorsd55a96e8crefactor: remove SELinux client_u and client_r3a5b55fd2fix: allow CEL expressions config mergef1b15f580chore: remove replace for safchain/ethtoolf9697a9a0fix: register controlplane node with NoSchedule taint30f8b5a9ffix: registry mirror fallback handling0f41e7743feat: allow for onlink directive (nocloud)e26d0043echore: code cleanup43fe3807afeat: implement tracking of blockdevice secondaries8a7476c3afix: install on non-empty disk8b4253d18feat: update etcd to v3.5.175a0fd5b88refactor: move early initialization functions to pre-initialize phase9916e2cd8chore: update pkgs/tools/extras for Go 1.23.320bbf0235docs: update vultr documentationaea98940bfix: arch linux search paths and names for QEMU provisioner682718d4cfix: use imager incoming version for extension validation9a02ecc49feat: rewrite install disk selector to use CEL expressionseba35f441docs: add note about PSP in Rook-Ceph guide38b80fb1ddocs: add missing--talosconfigparameter to end of Hetzner guidea07f66c91docs: gcp: fix controlplane nodes tags4fe6dc8a0chore: clean dns codev1.8.4Compare Source
Talos 1.8.4 (2024-12-13)
Welcome to the v1.8.4 release of Talos!
Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:
cloud-images.jsontalosctlbinarieskernelinitramfsmetaliso and disk imagestalosctl-cni-bundleAll other release assets can be downloaded from Image Factory.
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.64
runc: 1.2.3
Kubernetes: 1.31.4
etcd: 3.5.17
Talos is built with Go 1.22.10.
Contributors
Changes
17 commits
3c151c8release(v1.8.4): prepare release1fb38e4fix: use mtu network option for podmanacd9fdafix: order volume config by the requested sizec547557fix: install iptables-nft to the host94b342bfix: lock provisioning order of user disk partitionsdf8fe4cfeat: support vlan/bond in v1, vlan in v2 for nocloud3a1727efix: don't reset health status if service doesn't support health checks7ff796ffix: makesystem_diskcondition work properly before install379eefdfix: nocloud network link matching on MAC addressesc87ec03feat: allow for onlink directive (nocloud)aa14ae5fix: small logrus fixesb90863afix: properly halt installation if Talos already installed6d20adefix: make vmware platform common code build on all archesbc2d547fix: allow CEL expressions config merge5188f64fix: install on non-empty disk6f411ccfeat: update etcd to v3.5.177f91e31feat: update Linux 6.6.64, runc 1.2.3Changes from siderolabs/pkgs
7 commits
0698d6echore: bring in KSPP recommendations9ab4a32feat: update Linux to 6.6.6477d6623feat: update runc to v1.2.31afc88cfeat: build host iptables with nftables support4c15185feat: update Linux to 6.6.62, runc to 1.2.288cc7d4feat: enable CONFIG_INTEL_HFI_THERMAL + CONFIG_INTEL_TURBO_MAX_377a1abbfeat: update Go to 1.22.10Changes from siderolabs/tools
1 commit
adfcf5afeat: update Go to 1.22.10Dependency Changes
Previous release can be found at v1.8.3
Images
v1.8.3Compare Source
Talos 1.8.3 (2024-11-13)
Welcome to the v1.8.3 release of Talos!
Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:
cloud-images.jsontalosctlbinarieskernelinitramfsmetaliso and disk imagestalosctl-cni-bundleAll other release assets can be downloaded from Image Factory.
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.60
containerd: 2.0.0
runc: 1.2.1
Talos is built with Go 1.22.9.
Contributors
Changes
15 commits
6494acerelease(v1.8.3): prepare release01c9f45fix: arch linux search paths and names for QEMU provisioner8b5c5f1chore: fix nil pointer dereference in AWS uploaderfbf85ddfix: install disk matcher errorff3fccefeat: add dm-cache dm-cache-smq kernel modules6d872e4feat: allow extra mounts for docker-basedtalosctl cluster create8c193c8fix: update permissions for logging directories in /var5044a41fix: mount /sys/kernel/security conditionally83abb66fix: make route normalization keep family228a943fix: do not trim 0 from process SELinux labeld4a3a2bfix: prevent panic in nocloud platform code5c7b02dfix: update the CRI sandbox image referencef8155c4feat: add parsing of vlanNNNN:ethX style VLAN cmdline argsea19f15fix: generation of SecureBoot isofddaa60feat: update Linux, runc, containerd, goChanges from siderolabs/pkgs
7 commits
9c80a4afeat: update Linux to 6.6.60747c6c7feat: update containerd to v2.0.087c6526feat: enable CONFIG_DM_CACHEb4fa648fix: enable nvme and 2.5gbit ethernet on nanopi-r5s079ea13feat: update Linux to 6.6.59e4bc753feat: update runc to v1.2.1de3dbf5feat: update Go to 1.22.9Changes from siderolabs/tools
1 commit
653182afeat: update Go to 1.22.9Dependency Changes
Previous release can be found at v1.8.2
Images
v1.8.2Compare Source
Talos 1.8.2 (2024-10-28)
Welcome to the v1.8.2 release of Talos!
Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:
cloud-images.jsontalosctlbinarieskernelinitramfsmetaliso and disk imagestalosctl-cni-bundleAll other release assets can be downloaded from Image Factory.
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.58
containerd: 2.0.0-rc.6
runc: 1.2.0
Kubernetes: 1.31.2
Talos is built with Go 1.22.8.
Contributors
Changes
18 commits
88f861arelease(v1.8.2): prepare releasecfc1010fix: include iptables/netfilter ipv6 fixd8e2daffix: wait for udevd to be running before activating LVMe105a3dfix: talosctl process null character0e96e99fix: rework the 'metal-iso' config acquisition7ef5796fix: improve error messages for invalid bridge/bond configurationa3fcbe0chore: rename tpm2.PCRExtent -> tpm2.PCRExtenda9e6e60fix: correct error message for invalid ip=49de0abfix: update incorrect alias for PCIDevice resource9b561acfeat: add Talos 1.9 compatibility guarantees2ea3f85chore: update siderolabs/crypto module and return proper ALPNce47912feat: optionally decode hcloud userdata as base64f20a690fix: json logging panicd855bb8fix: skip ram disksb429e7ffix: do not use pflag csv comma reader for config-patchee44f2ctest: skip no error test in Cilium7d055affix: scaleway metadata9f62fe9feat: update pkgs and KubernetesChanges from siderolabs/crypto
1 commit
58b2f92chore: use HTTP/2 ALPN by defaultChanges from siderolabs/go-circular
1 commit
9a0f7b0fix: multiple data race issuesChanges from siderolabs/pkgs
8 commits
e72b2f4fix: apply netfilter ipv6 fix9aac1a8feat: update containerd to v2.0.0-rc.69668729feat: update Linux to 6.6.589bc27b3feat: update runc to 1.2.0f7cc89efix: default IOMMU mode to 'lazy'7ca4e2cfeat: update Linux to 6.6.57, update Linux firmwaree2c4848feat: update Linux 6.6.56 and protect /proc/memc7729c3feat: enable CONFIG_XFRM_STATISTICSChanges from siderolabs/siderolink
1 commit
1893385fix: initialize tls listener properlyDependency Changes
Previous release can be found at v1.8.1
Images
v1.8.1Compare Source
Talos 1.8.1 (2024-10-08)
Welcome to the v1.8.1 release of Talos!
Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:
cloud-images.jsontalosctlbinarieskernelinitramfsmetaliso and disk imagestalosctl-cni-bundleAll other release assets can be downloaded from Image Factory.
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.54
containerd: 2.0.0-rc.5
Flannel: 0.25.7
Talos is built with Go 1.22.8.
Contributors
Changes
16 commits
477752frelease(v1.8.1): prepare release362c9f8test: skip lvm test if not enough user disks available7930500chore: checkout extensions from release-1.8, not mainf6d6306fix: wipe system partitions correctly via kernel args4d279c6fix: volume encryption with failing keyslots070defafix: update grpc-go the latest patch releasea2d12fdfeat: update Flannel to v0.25.7e2f560bfeat: bring in lpfc kernel module driver788336afeat: enable QEDF drivere4341fafix: make /var/run empty on reboots66228effix: multiple fixes for LVM activation5f4515ffix: prevent file descriptors leaks to child processesa55103echore: ignore more plugins for system containerdffcdc0bfix: build talosctl withouttcell_minimald29f660feat: add support for CI Network config in nocloud01e580bfeat: update Go 1.22.8, Linux, pkgsChanges from siderolabs/pkgs
8 commits
71d23b4feat: update Linux to 6.6.548906a9bfeat: add lpfc kernel module3c57dfffeat: enable QEDF driver1ecbd58feat: update containerd to v2.0.0-rc.547dff98fix: drop the LVM2 udev lvm rule480d765fix: force LVM to use/runas state directoryc663212feat: enable transparent huge pages in madvise mode832f11bfeat: update Go to 1.22.8Changes from siderolabs/tools
1 commit
7719230feat: update Go to 1.22.8Dependency Changes
Previous release can be found at v1.8.0
Images
v1.8.0Compare Source
113 commits
6f7c3a8e5fix: build of talosctl on non-Linux archesf0a59cec7release(v1.8.0-alpha.2): prepare releasec8aed3be4fix: correctly add console args for ttyS0b453385bdfeat: support volume configuration, provisioning, etcb6b16b35fchore: pause sequencer when talos installed and iso bootedeade0a9f2chore: bring inuiomodules81f9fcd9cfix: report errors correctly when pulling, fix EEXISTb309e87b4docs: fix invalid input in field user_datac7474877adocs: kubeProxyReplacement from "disabled" to "false"be2ebf6b4chore: bump dependencies88601bff4chore: drop calico from interactive installer106c17d0bchore: aarch64 qemu local secureboot supportda6263506feat: update Flannel to v0.25.619a44c2b0chore: drop consolettyS0argument75cecb421feat: add Apache Cloudstack support951cf66fdfeat: add Cisco fnic driver2d3bc94bffix(ci): fix broken testsa9551b7cafix: host DNS access with firewall enabled4834a61a8feat: report SELinux labels8fe39eacbchore: move csi tests as go teste4f8cb854fix: merge extension service config files bymountPath5ba1df469chore: add java package to protos823480800fix: add missing host/nvme-rdma5b4b64979fix: bump go-smbios for broken SMIOS tablesf57d1f07efix: add NVMe target kernel modules5ff6cf82cfix: drop /opt mount for containers/tink3c0db34d8docs: update kubespan docs3041d9075fix: always handlePermissionDeniedin dashboard resource watches36f83eea9chore: make qemu check flag consistent with codefe52cb074chore: update protoc-gen-docee4290f68fix: bind HostDNS to 169.254.x link-local addressc312a46f6chore: restructure k8s component health checkse193e7db9docs: fix incorrect path for openebs in documentationbeadbac21docs: update Oracle Cloud Talos custom image docs6f969e364chore: improvecluster createUX on aarch6445cc8688achore: replaceifblocks withmin/maxfunctionsa5bd770bffix: retry with another upstream if the previous failed82e19f38adocs: add high-level overlay development guide872599c9achore: drop image assets from release3c36c41a9feat: provide device extra settle timeout9e348ef35feat: update Kubernetes to 1.31.061a1c946bfeat: bundle (some) CNI plugins with Talos core091da163bchore: support arm64 kexec from zboot kernel images73511c1efchore: fix release notes2bf924c7bfeat: update ISO VolumeID with Talos version9a33dce10docs: fix the VMWare docs12562c2d5docs: fix talos version in vmware.shee67da14cfeat: scaleway routed ipeba5dafb9fix: add dns-resolve-cache to the support bundled4f8100bddocs: fix default openebs folder60e163d54docs: fix typo in doc98d9abdd0chore(ci): fix cilium ci testsbeb9602e3chore: bump github.com/docker/docker to v27.1.1+incompatible0698a4921docs: aws getting started re-write4d7d7a589chore(ci): update nvidia integration tests60e901c1dchore: document slim kubelet image622d66a98chore: bump depsf9f5e0ef5chore: fix k8s tests2ac8d2274chore: supportunsupportedflag for mkfs9b9159d1edocs: update support matrix for nvidia drivers9d3415850fix: fix graph diffs in dashboard when node aliases are used9a126d70echore: generate deepcopy for SecureBootAssets typedff56d824chore: remove arch-specific etcd image tagc9f1dece5feat: update Kubernetes to 1.31.0-rc.149831c56fdocs: replace removed Cilium/kubeProxyReplacement value33a316369docs: update aws.md for loope02bd2093feat: update Kubernetes to 1.31.0-rc.064914b086chore: add test for crun extension7a1c62b8bfeat: publish installed extensions as node labels/annotations3f2058abafix: update containerd configuration and settings81bd20f5adocs: remove deprecated jiva from openebs instructions480ffb88adocs: fix the amd64 PXE boot script URL20fe34dbddocs: fix docker getting started typo0fd7dfd2adocs: update Equinix Guide3d1474ac0feat: update CoreDNS to 1.1.350e5f37efchore: add test for apparmor96492c097docs: extend multus configuration for Cilium19aa44c54fix: generate kubeconfig using proper types240104e45feat: update Linux to 6.6.4332db8db60chore: lock microsoft secureboot certs3ce5492f8feat: runc memfd-bind service341b55cd3docs: update vmware.sh117628aa6chore: add test for gvisor extension with platform kvmfd01571c4feat: update Linux, enable Broadcom MPI3 driverb333ec07dfeat: update etcd to 3.5.15, Flannel to 0.25.5087290178feat: use ethtool ioctl to get link status when netlink api not available395c64290docs: update openebs-jiva helm repof132d3f40chore(ci): remove artifacts directory prefix for checksumsfd54dc191feat(talosctl): append microsoft secure boot certsfd6ddd11efeat: provide POD_IP env var to scheduler and controller-manager407347a7afeat: update Kubernetes to 1.31.0-beta.01b8c9ccbbfix: enforce secureboot enroll option only for supported releasesd52b89cb9chore: ensure tls required on s3 bucketsc288ace7bfix: be more smart when merging DNS resolver configd983e4430fix: panic on shutdown01404edffchore: reduce memory requirement for contrplane nodes980f9ebc0fix: fix log format in cluster provisioningea626a963feat: add label 'exclude-from-external-load-balancers' for cp nodes1cf76cfbcdocs: fix talosctl spellingb07338f54feat: provide machine config document to update trusted CA rootsf14c4795efix: sort ports and merge adjacent ones in the nft rulecf5effabbfeat: provide an option to enforce SecureBoot for TPM enrollment736c1485efix: change the UEFI firmware search path ordera727a1d97chore: make using action tracker easier0aebeff35docs: add missing backslashes398151e64fix: remove host bind mount for/tmpfor trustdce4c404e1chore: redo FilterMessages as generic functionfbde9c556chore: bump deps3bab15214feat: update Kubernetes to 1.31.0-alpha.3c2a5213eedocs: add note about mayastor nvme_tcp init container checkdad9c40c7chore: simplify code963612bccchore: redo EncodeString and EncodeBytes using buffer interfaced9db360abfix: properly output multi-doc machine config inget mc[
v1.7.7](https://redirect.github.com/sConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.