You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Talos Linux and other repositories were migrated from the talos-systems GitHub organization
to the siderolabs organization (github.com/talos-systems -> github.com/siderolabs).
Existing Talos Linux container images (installer, talos, etc.) are mirrored across both organizations,
but please use the new organization name going forward.
For example, when upgrading Talos use ghcr.io/siderolabs instead of ghcr.io/talos-systems:
talosctl apply/patch/edit cli commands got revamped.
Separate flags --on-reboot, --immediate, --interactive were replaced
with a single --mode flag that can take the following values:
auto new mode that automatically applies the configuration in immediate/reboot mode.
no-reboot force apply immediately, if not possible, then fail.
reboot force reboot with apply config.
staged write new machine configuration to STATE, but don't apply it (it will be applied after a reboot).
interactive starts interactive installer, only for apply.
API Server Audit Logs
kube-apiserver is now configured to store its audit logs separately from the kube-apiserver standard logs and directly to file.
The kube-apiserver will maintain the rotation and retirement of these logs, which are stored in /var/log/audit/.
Previously, the audit logs were sent to kube-apiserver's stdout, along with the rest of its logs, to be collected in the usual manner by Kubernetes.
Equinix Metal Platform
talos.platform for Equinix Metal is renamed from packet to equinixMetal, the older name is still supported for backwards compatibility.
Extension Services
Talos now provides a way to extend set of system services Talos runs with extension services.
Extension services should be included in the Talos root filesystem (e.g. via system extensions).
Command talosctl gen config now defaults to Kubernetes version pinning in the generate machine configuration.
Previously default was to omit explicit Kubernetes version, so Talos picked up the default version it was built against.
Old behavior can be achieved by specifying empty flag value: --kubernetes-version=.
Kubelet configuration can now be overridden with the .machine.kubelet.extraConfig machine configuration field.
As most of the kubelet command line arguments are being deprecated, it is recommended to migrate to extraConfig
instead of using extraArgs.
A number of conformance tweaks have been made to the kubelet to allow it to run without protectKernelDefaults.
This includes both kubelet configuration options and sysctls.
Of particular note is that Talos now sets the kernel.panic reboot interval to 10s instead of 1s.
If your kubelet fails to start after the upgrade, please check the kubelet logs to determine the problem.
Talos now performs graceful kubelet shutdown by default on node reboot/shutdown.
Default shutdown timeouts: 20s for regular priority pods and 10s for critical priority pods.
Timeouts can be overridden with the .machine.kubelet.extraConfig machine configuration key: shutdownGracePeriod and shutdownGracePeriodCriticalPods.
Machine Configuration
Talos now preserves machine configuration as it was submitted to the node.
Machine Configuration Patching
talosctl commands which accept JSON patches (gen config, cluster create, patch machineconfig) now support multiple patches, loading patches
from files with @file.json syntax, and support loading from YAML format.
Platform Support
Talos now supports Oracle Cloud.
Platform network configuration was rewritten to avoid modifying Talos machine configuration.
Network configuration is performed independent of the machine configuration presence, so it works
even if Talos is booted in maintenance mode (without machine configuration is platform userdata).
Pod Security Policy
Pod Security Policy Kubernetes feature is deprecated and is going to be removed in Kubernetes 1.25.
Talos by default skips setting up PSP now (see machine configuration .cluster.apiServer.disablePodSecurityPolicy).
SBC Support
Talos now supports Jetson Nano SBC.
Static Pods in the Machine Configuration
Talos now accepts static pod definitions in the .machine.pods key of the machine configuration.
Please note that static pod definitions are not validated by Talos.
Static pod definitions can be updated without a node reboot.
Sysfs Kernel Parameters
Talos now supports setting sysfs kernel parameters (/sys/...).
Use machine configuration field .machine.sysfs to set sysfs kernel parameters.
System Extensions
System extensions allow extending Talos root filesystem, which enables a set of different features, including custom
container runtimes, additional firmware, etc.
System extensions are only activated during Talos installation (or upgrade), and with system extensions installed, Talos
root filesystem is still immutable and read-only.
Added new kernel parameter talos.experimental.wipe=system which can help resetting system disk for the machine
and start over with a fresh installation.
See Resetting a Machine on how to use it.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Talos 1.0.0 (2022-03-29)
Welcome to the v1.0.0 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
GitHub Organization Change
Talos Linux and other repositories were migrated from the
talos-systems
GitHub organizationto the
siderolabs
organization (github.com/talos-systems -> github.com/siderolabs).Existing Talos Linux container images (
installer
,talos
, etc.) are mirrored across both organizations,but please use the new organization name going forward.
For example, when upgrading Talos use
ghcr.io/siderolabs
instead ofghcr.io/talos-systems
:Admission Plugin Configuration
Talos now supports Kubernetes API server admission plugin configuration via the
.cluster.apiServer.admissionControl
machine configuration field.This configuration can be used to enable Pod Security Admission plugin and
define cluster-wide default Pod Security Standards.
Apply Config Enhancements
talosctl apply/patch/edit
cli commands got revamped.Separate flags
--on-reboot
,--immediate
,--interactive
were replacedwith a single
--mode
flag that can take the following values:auto
new mode that automatically applies the configuration in immediate/reboot mode.no-reboot
force apply immediately, if not possible, then fail.reboot
force reboot with apply config.staged
write new machine configuration to STATE, but don't apply it (it will be applied after a reboot).interactive
starts interactive installer, only forapply
.API Server Audit Logs
kube-apiserver
is now configured to store its audit logs separately from thekube-apiserver
standard logs and directly to file.The
kube-apiserver
will maintain the rotation and retirement of these logs, which are stored in/var/log/audit/
.Previously, the audit logs were sent to
kube-apiserver
'sstdout
, along with the rest of its logs, to be collected in the usual manner by Kubernetes.Equinix Metal Platform
talos.platform
for Equinix Metal is renamed frompacket
toequinixMetal
, the older name is still supported for backwards compatibility.Extension Services
Talos now provides a way to extend set of system services Talos runs with extension services.
Extension services should be included in the Talos root filesystem (e.g. via system extensions).
NVIDIA GPU alpha support
Talos now has alpha support for NVIDIA GPU based workloads.
Check the NVIDA GPU support guide at https://www.talos.dev/v1.0/guides/nvidia-gpu/
Pinned Kubernetes Version
Command
talosctl gen config
now defaults to Kubernetes version pinning in the generate machine configuration.Previously default was to omit explicit Kubernetes version, so Talos picked up the default version it was built against.
Old behavior can be achieved by specifying empty flag value:
--kubernetes-version=
.Kernel Parameters
Talos now supports setting bond interface from Kernel cmdline using the
bond=
option.Reference: https://man7.org/linux/man-pages/man7/dracut.cmdline.7.html
Kubelet
Kubelet configuration can now be overridden with the
.machine.kubelet.extraConfig
machine configuration field.As most of the kubelet command line arguments are being deprecated, it is recommended to migrate to
extraConfig
instead of using
extraArgs
.A number of conformance tweaks have been made to the
kubelet
to allow it to run withoutprotectKernelDefaults
.This includes both kubelet configuration options and sysctls.
Of particular note is that Talos now sets the
kernel.panic
reboot interval to 10s instead of 1s.If your kubelet fails to start after the upgrade, please check the
kubelet
logs to determine the problem.Talos now performs graceful kubelet shutdown by default on node reboot/shutdown.
Default shutdown timeouts: 20s for regular priority pods and 10s for critical priority pods.
Timeouts can be overridden with the
.machine.kubelet.extraConfig
machine configuration key:shutdownGracePeriod
andshutdownGracePeriodCriticalPods
.Machine Configuration
Talos now preserves machine configuration as it was submitted to the node.
Machine Configuration Patching
talosctl
commands which accept JSON patches (gen config
,cluster create
,patch machineconfig
) now support multiple patches, loading patchesfrom files with
@file.json
syntax, and support loading from YAML format.Platform Support
Talos now supports Oracle Cloud.
Platform network configuration was rewritten to avoid modifying Talos machine configuration.
Network configuration is performed independent of the machine configuration presence, so it works
even if Talos is booted in maintenance mode (without machine configuration is platform userdata).
Pod Security Policy
Pod Security Policy Kubernetes feature is deprecated and is going to be removed in Kubernetes 1.25.
Talos by default skips setting up PSP now (see machine configuration
.cluster.apiServer.disablePodSecurityPolicy
).SBC Support
Talos now supports Jetson Nano SBC.
Static Pods in the Machine Configuration
Talos now accepts static pod definitions in the
.machine.pods
key of the machine configuration.Please note that static pod definitions are not validated by Talos.
Static pod definitions can be updated without a node reboot.
Sysfs Kernel Parameters
Talos now supports setting
sysfs
kernel parameters (/sys/...
).Use machine configuration field
.machine.sysfs
to setsysfs
kernel parameters.System Extensions
System extensions allow extending Talos root filesystem, which enables a set of different features, including custom
container runtimes, additional firmware, etc.
System extensions are only activated during Talos installation (or upgrade), and with system extensions installed, Talos
root filesystem is still immutable and read-only.
Please see extensions repository and documentation for more information.
Component Updates
Talos is built with Go 1.17.8
Wipe System Kernel Parameter
Added new kernel parameter
talos.experimental.wipe=system
which can help resetting system disk for the machineand start over with a fresh installation.
See Resetting a Machine on how to use it.
Contributors
Changes
223 commits
metal-iso
)udevd
on types and actionsinitrd=
to the kernel command linetalosctl gen config
ip=
arg/lib/firmware
across initramfs and rootfskernel_param_spec
Modify call handlingapply
,edit
andpatch
commandstalos.exp.wipe
kernel param to wipe system diskApplyDynamicConfig
list
,read
talosctl time
call in the teststalosctl get rd
talosctl upgrade-k8s
ip=
kernel argumentChanges since v1.0.0-beta.3
7 commits
metal-iso
)Changes from siderolabs/extras
6 commits
Changes from siderolabs/pkgs
43 commits
=m
kernel build optionsChanges from siderolabs/tools
8 commits
Changes from talos-systems/crypto
2 commits
nil
Changes from talos-systems/go-blockdevice
4 commits
Changes from talos-systems/grpc-proxy
4 commits
Changes from talos-systems/net
1 commit
Dependency Changes
Previous release can be found at v0.14.0
Images
This discussion was created from the release v1.0.0.
Beta Was this translation helpful? Give feedback.
All reactions