v0.10.2

[smira]

Talos 0.10.2 (2021-05-13)

Welcome to the v0.10.2 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/talos-systems/talos/issues.

Disaster Recovery

• support for creating etcd snapshots (backups) with talosctl etcd snapshot command.
• etcd cluster can be recovered from a snapshot using talosctl boostrap --recover-from= command.

Install Disk Selector

Install section of the machine config now has diskSelector field that allows querying install disk using the list of qualifiers:

...
  install:
    diskSelector:
      size: >= 500GB
      model: WDC*
...

talosctl disks -n <node> -i can be used to check allowed disk qualifiers when the node is running in the maintenance mode.

Inline Kubernetes Manifests

• boostrap manifests can now be submitted in the configuration body using the cluster.inlineManifests field.

Optmizations

• Talos system services now run without container images on initramfs from the single executable; this change reduces RAM usage, initramfs size and boot time..

SBCs

• u-boot version was updated to fix the boot and USB issues on Raspberry Pi 4 8GiB version.
• added support for Rock Pi 4.

Time Synchronization

• timed service was replaced with a time sync controller, no machine configuration changes.
• Talos now prefers last successful time server (by IP address) on each sync attempt (improves sync accuracy).

Contributors

• Andrey Smirnov
• Alexey Palazhchenko
• Artem Chernyshev
• Spencer Smith
• Seán C McCord
• Andrew Rynhard
• Jorik Jonker
• Branden Cash
• Brandon McNama
• Brandon Nason
• Jorik Jonker
• Lennard Klein
• Matt Zahorik
• bzub

Changes

149 commits

• 8d73bc599 release(v0.10.2): prepare release
• 20ad263b4 feat: update Kubernetes to 1.21.1
• 4941356f4 feat: update go-smbios library
• 747903a10 fix: stop networkd before leaving etcd on 'reset' path
• 6fd98d95b fix: update the way NTP sync uses adjtimex syscall
• f1298f6e3 fix: avoid data race on CRI pod stop
• 994bdb5af feat: update containerd to 1.4.5, runc to 1.0.0-rc94
• d0a3d69d5 release(v0.10.1): prepare release
• 99de689d0 feat: pull kernel with VMware balloon module enabled
• 194baa3d6 fix: properly parse matcher expressions
• c613d3e22 fix: bump crypto library for the CSR verification fix
• 25fa7a191 chore: remove security API ReadFile/WriteFile
• e415c81ad feat: add --config-patch flag by node type
• 801808c54 fix: use both self-signed and Kubernetes CA to verify Kubelet cert
• 905336940 release(v0.10.0): prepare release
• 280b5940c fix: update osType in OVA other3xLinux64Guest"
• b338628dc fix: check if OVF env is empty
• 4e664ce17 chore: list specifically for enabled regions
• c07b5152a release(v0.10.0-beta.1): prepare release
• e1475256e test: implement talosctl conformance command to run e2e tests
• 564b45ba2 fix: update etcd client errors, print etcd join failures
• 9fde88cc4 feat: provide an option to recover etcd from data directory copy
• 54f243c46 feat: update kernel config for rpi to improve performance by 3x
• 8ed75c84a release(v0.10.0-beta.0): prepare release
• e69732ed5 feat: provide Talos machine config with field placeholders and docs
• f0970ea7f fix: zero out manifest contents before setting new value
• 8b8542e3b feat: add support for reading OVF data on VMWare
• 04dbafca7 feat: update Linux to 5.10.29
• 3dc7b8a8a chore: fix import path mismerge
• 2402f20c2 feat: implement inline manifests in the machine configuration
• e26c977d8 fix: check retryable network errors by interface
• 767f3b95e chore: apply coverage analysis to all packages
• 7b0ac4682 test: extend unit-tests for config contract parsing
• d24df8f84 chore: re-import talos-systems/os-runtime as cosi-project/runtime
• cae25909f chore: use Go 1.16 global install command
• d5e2a45db feat: validate the machine configuration in the installer container
• ef24fd6a0 chore: bump dependencies via dependabot
• 94520b03f docs: fixup typo in encryption guide command
• e3585f24b chore: update Linux to 5.10.28, u-boot to final 2021.04 release
• daf220874 test: update upgrade tests to 0.10 release
• 1fcf38f9d feat: add support for "none" CNI type
• 37a5edf04 feat: update Kubernetes to 1.21.0 release
• 30f687b41 fix: document HDMI problem on RPi 4
• 29da22d06 feat: add config validation warnings
• eee7ad13a release(v0.10.0-alpha.2): prepare release
• e0650218a feat: support etcd recovery from snapshot on bootstrap
• 247bd50e0 docs: describe steps to install and boot Talos from the SSD on rockpi4
• e6b4e524f test: update CAPA to 0.6.4
• 28753f6dc fix: trim endpoints/nodes from arguments in talosctl config
• aca63b882 docs: fix "DigitalOcean" spelling
• 33035901f fix: revert mark PMBR EFI partition as bootable
• fbfd1eb2b refactor: pull new version of os-runtime, update code
• 8737ea716 feat: allow external cloud provides configration
• 3909e2d01 chore: update Go to 1.16.3
• 690eb20e9 chore: update blockdevice library for PMBR bootable fix
• a8761b8e1 fix: require leader on etcd member operations
• 3dc84625c fix: make both HDMI ports work on RPi 4
• bd5ae1e0b fix: add a check for overlay mounts in installer pre-flight checks
• df8649cbe refactor: download modules before go generate
• 39ae0415e chore: bump dependencies via dependabot
• e16d6d346 fix: publish rockpi4 image to release artifacts
• 39c6dbcc7 feat: add --config-patch parameter to talosctl gen config
• e664362ce feat: add API and command to save etcd snapshot (backup)
• 61b694b94 fix: create rootfs for system services via /system tmpfs
• abc2e17eb test: update 0.9.x version in upgrade tests to 0.9.1
• a1e641540 fix: retry Kubernetes API errors on cordon/uncordon/etc
• 063d1abe9 fix: print task failure error immediately
• e039172ed fix: ignore EOF errors from Kubernetes API when converting control plane
• 7bcb91a43 docs: fix typo for stage flag
• a43acb215 feat: bring in Linux 5.10.27, support for 32-bit time syscalls
• e2bb5973d release(v0.10.0-alpha.1): prepare release
• 8309312a3 chore: build components with race detector enabled in dev mode
• 7d9125847 test: fix data race in apply config tests
• 204caf8eb test: fix apply-config integration test, bump clusterctl version
• d812099df fix: address several issues in TUI installer
• 269c9ad09 fix: don't write to config object on access
• a9451f571 feat: update Kubernetes to 1.21.0-beta.1
• 4b42ced4c feat: add ability to disable comments in talosctl gen config
• a0dcfc3d5 fix: workaround race in containerd runner with stdin pipe
• 2ea20f598 feat: replace timed with time sync controller
• c38a161ad test: add unit-test for machine config validation
• a6106815b chore: bump dependencies via dependabot
• 35598f391 chore: refactor: extract ClusterConfig
• 032851844 fix: get rid of data race in encoder and fix concurrent map access
• 4b3580aa5 fix: prevent panic in validate config if machine.install is missing
• d7e9f6d6a chore: build integration tests with -race
• 9f7d67ac7 chore: fix typo
• 672c97073 fix: allow convert-k8s --remove-initialized-keys with K8s cp is down
• fb605a0fc chore: tweak nolintlint settings
• 1f5a0c406 fix: resolve the issue with Kubernetes upgrade
• 74b2b5578 docs: update AWS docs to ensure instances are tagged
• dc21d9b4b chore: remove old file
• 966caf7a6 chore: remove unused module replace directives
• 98b22f1e0 feat: show short options in talosctl kubeconfig
• 51139d54d chore: cache go modules in the build
• 65701aa72 fix: resolve the issue with DHCP lease not being renewed
• 711f5b23b fix: config validation: CNI should apply to cp nodes, encryption config
• 5ff491d96 fix: allow empty list for CNI URLs
• 946e74f04 docs: update path for kernel downloads in qemu docs
• ed272e604 feat: update Kubernetes to 1.21.0-beta.0
• b0209fd29 refactor: move networkd, timed APIs to machined, remove routerd
• 6ffabe516 feat: add ability to find disk by disk properties
• ac8764702 refactor: move apid, routerd, timed and trustd to single executable
• 89a4b09fe refactor: run networkd as a goroutine in machined
• f4a6a19cd chore: update sonobuoy
• dc294db16 chore: bump dependencies via dependabot
• 2b1641a3b docs: add AMIs for Talos 0.9.0
• 79ceb428d docs: make v0.9 the default docs
• a5b62f4dc docs: add documentation for Talos 0.10
• ce795f1ce fix: command etcd remove-member shouldn't remove etcd data directory
• aab49a167 fix: repair zsh completion
• fc9c416a3 fix: build rockpi4 metal image as part of CI build
• 125b86f4e fix: upgrade-k8s bug with empty config values and provision script
• 8b2d228dc chore: add script for starting registry proxies
• f7d276b85 chore: remove old osctl reference
• 5b14d6f2b chore: fix make help output
• f0512dfce feat: update Kubernetes to 1.20.5
• 24cd0a206 feat: publish talosctl container image
• 6e17102c2 chore: remove unused code
• 881044074 docs: add control plane in-depth guide
• ecf034496 chore: bump Go to 1.16.2
• cbc38418d release(v0.10.0-alpha.0): prepare release
• 3455a8e81 chore: use new release tool for changelogs and release notes
• 08271ba93 chore: use Go 1.16 language version
• 7662d033b fix: talosctl health should not check kube-proxy when it is disabled
• 0dbaeb9e6 chore: update tools, use new generators
• e31790f6f fix: properly format spec comments in the resources
• 78d384ebb test: update aws cloud provider version
• 3c5bfbb47 fix: don't touch any partitions on upgrade with --preserve
• 891f90fee chore: update Linux to 5.10.23
• d4d77882e chore: update dependencies via dependabot
• 2e22f20bd docs: minor fixes to getting started
• ca8a5596c chore: fix provision tests after changes to build-container
• 4aae924c6 refactor: provide explicit logger for networkd
• 22f375300 chore: update golanci-lint to 1.38.0
• 83b4e7f74 feat: add Rock pi 4 support
• 1362966ff docs: rewrite getting-started for ISO
• 8e57fc4f5 fix: move containerd CRI config files under /var/
• 6f7df3da1 fix: update output of convert-k8s command
• dce6118c2 docs: add guide for VIP
• ee5d9ffac chore: bump Go to 1.16.1
• 7c529e1cb docs: fix links in the documentation
• f596c7f6b docs: add video for raspberry pi install
• 47324dcae docs: add guide on editing machine configuration
• 99d5f894e chore: update website npm dependencies
• 11056a803 docs: add highlights for 0.9 release
• ae8bedb9a docs: add control plane conversion guide and 0.9 upgrade notes
• ed9673e50 docs: add troubleshooting control plane documentation
• 485cb1262 docs: update Kubernetes upgrade guide

Changes since v0.10.1

7 commits

• 8d73bc599 release(v0.10.2): prepare release
• 20ad263b4 feat: update Kubernetes to 1.21.1
• 4941356f4 feat: update go-smbios library
• 747903a10 fix: stop networkd before leaving etcd on 'reset' path
• 6fd98d95b fix: update the way NTP sync uses adjtimex syscall
• f1298f6e3 fix: avoid data race on CRI pod stop
• 994bdb5af feat: update containerd to 1.4.5, runc to 1.0.0-rc94

Changes from talos-systems/crypto

1 commit

• 4f80b97 fix: verify CSR signature before issuing a certificate

Changes from talos-systems/extras

4 commits

• d39dc41 chore: use 0.5.0 tagged images of pkgs and tools
• cf3934a feat: build with Go 1.16.3
• c0fa0c0 feat: bump Go to 1.16.2
• 5f89d77 feat: bump Go to 1.16.1

Changes from talos-systems/go-blockdevice

3 commits

• 1d830a2 fix: revert mark the EFI partition in PMBR as bootable
• bec914f fix: mark the EFI partition in PMBR as bootable
• 776b37d feat: add options to probe disk by various sysblock parameters

Changes from talos-systems/go-smbios

1 commit

• d3a32be fix: return UUID in middle endian only on SMBIOS >= 2.6

Changes from talos-systems/pkgs

15 commits

• 80ebaa7 feat: update containerd to 1.4.5, runc to 1.0.0-rc94
• 6b85f48 feat: enable VMware baloon kernel module
• 5dd650b feat: add cpu scaling for rpi
• b636cac feat: update Linux to 5.10.29
• cd77b6e chore: update tools tag to v0.5.0
• 98964cb feat: update Linux to 5.10.28
• 009ef35 feat: update uboot to 2021.04 stable
• 9a6cf6b feat: build with Go 1.16.3
• 60ce626 feat: update Linux to 5.10.27, enable 32-bit time syscalls
• fdf4866 feat: bump tools for Go 1.16.2
• 35f9b6f feat: update kernel to 5.10.23
• dbae83e fix: do not use git-lfs for rockpi4 binaries
• 1c6b9a3 feat: bump tools for Go 1.16.1
• c18073f feat: add u-boot for Rock Pi 4
• 6b85a2b feat: upgrade u-boot to 2021.04-rc3

Changes from talos-systems/tools

5 commits

• 1f26def feat: update Go to 1.16.3
• 41b8073 feat: bump protobuf-related tools
• f7bce92 chore: bump Go to 1.16.2
• bcf3380 feat: bump protobuf deps, add protoc-gen-go-grpc
• b49c40e feat: bump Go to 1.16.1

Dependency Changes

• github.com/containerd/containerd v1.4.4 -> v1.4.5
• github.com/coreos/go-semver v0.3.0 new
• github.com/cosi-project/runtime 10d6103c19ab new
• github.com/golang/protobuf v1.4.3 -> v1.5.2
• github.com/google/go-cmp v0.5.4 -> v0.5.5
• github.com/hashicorp/go-multierror v1.1.0 -> v1.1.1
• github.com/talos-systems/crypto 39584f1b6e54 -> 4f80b976b640
• github.com/talos-systems/extras v0.2.0-1-g0db3328 -> v0.3.0
• github.com/talos-systems/go-blockdevice bb3ad73f6983 -> 1d830a25f64f
• github.com/talos-systems/go-smbios fb425d4727e6 -> d3a32bea731a
• github.com/talos-systems/pkgs v0.4.1-2-gd471b60 -> v0.5.0-3-g80ebaa7
• github.com/talos-systems/tools v0.4.0-1-g3b25a7e -> v0.5.0
• github.com/vmware/govmomi v0.24.0 new
• go.etcd.io/etcd/etcdctl/v3 v3.5.0-alpha.0 new
• google.golang.org/grpc v1.36.0 -> v1.37.0
• google.golang.org/protobuf v1.25.0 -> v1.26.0
• k8s.io/api v0.20.5 -> v0.21.0
• k8s.io/apimachinery v0.20.5 -> v0.21.0
• k8s.io/apiserver v0.20.5 -> v0.21.0
• k8s.io/client-go v0.20.5 -> v0.21.0
• k8s.io/cri-api v0.20.5 -> v0.21.0
• k8s.io/kubectl v0.20.5 -> v0.21.0
• k8s.io/kubelet v0.20.5 -> v0.21.0

Previous release can be found at v0.9.0

Images

quay.io/coreos/flannel:v0.13.0
ghcr.io/talos-systems/install-cni:v0.3.0
docker.io/coredns/coredns:1.8.0
gcr.io/etcd-development/etcd:v3.4.15
k8s.gcr.io/kube-apiserver:v1.21.1
k8s.gcr.io/kube-controller-manager:v1.21.1
k8s.gcr.io/kube-scheduler:v1.21.1
k8s.gcr.io/kube-proxy:v1.21.1
ghcr.io/talos-systems/kubelet:v1.21.1
ghcr.io/talos-systems/installer:v0.10.2
k8s.gcr.io/pause:3.2

---

This discussion was created from the release v0.10.2.