v1.4.0-alpha.1

[smira]

Talos 1.4.0-alpha.1 (2023-01-26)

Welcome to the v1.4.0-alpha.1 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

etcd Maintenance

Talos adds new APIs to make it easier to perform etcd maintenance operations.

These APIs are available via new talosctl etcd sub-commands:

• talosctl etcd alarm list|disarm
• talosctl etcd defrag
• talosctl etcd status

See also etcd maintenance guide.

Component Updates

• Linux: 6.1.7
• containerd: v1.6.15
• Kubernetes: v1.26.1
• etcd: v3.5.7

Talos is built with Go 1.19.5.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Utku Ozdemir
• Serge Logvinov
• Spencer Smith
• Steve Francis
• Cees-Jan Kiewiet
• Chris van de Sande
• Lance R. Vick
• Matthias Riegler
• Michael Vorburger
• Murtaza Udaipurwala
• Nico Berlee
• Niklas Wik
• Rowan Smith
• Samuel Kees
• Seán C McCord
• Tim Jones
• Tim van Druenen
• Victor Seva

Changes

82 commits

• 92bc15f7f release(v1.4.0-alpha.1): prepare release
• e3da4754e feat: update Linux to 6.1.7
• 006449e46 test: build integration test early in the pipeline
• 09aa71264 fix: renovate config
• 2d136f187 feat: set markdown and html descriptions in config json schema
• f0804027a fix: renovate config
• 812a2877c chore: bump deps + renovate cleanup
• aa9f66c1c fix: mark DigitalOcean anchor IP as scope link
• bb4937f1b feat: enable renovate
• 3e0057162 fix: unwrap gRPC errors on stop/remove pods check
• 00e52ae07 fix: build correctly etcd initial cluster URL
• ae83b10ae feat: create JSON schema for v1alpha1.Config
• 703d96595 feat: update Kubernetes to 1.26.1, etcd to 3.5.7
• 965e64591 docs: update to use talosctl install script
• c5954f434 chore: bump deps
• bb50f6a56 chore: preallocate disk images for QEMU VMs
• d4b8b35de feat: generate kernel module dependency tree
• 18122ae73 fix: service restart (including extension services)
• 680fd5e45 fix: bump COSI runtime with the panic controller restart fix
• 0b65bbfc8 fix: handle overwriting tags in syslinux ADV
• 70d9428a1 fix: kubespan MSS clamping
• 683b4ccb4 chore: update Go to 1.19.5 and kernel to 6.1.4
• 062c7d754 test: fix integration test on cp endpoint update
• 8e9fc13d7 feat: implement enum generator for proto files
• 771b0dc06 docs: update left over rpi_4 ref to rpi_generic
• 6c04b5f79 chore: bump dependencies
• 0a5a8802e feat: use 'localhost' endpoint for controlplane nodes
• b0775ebf2 feat: add ISO wipe GRUB boot option
• 29020cb9c fix: report fatal sequence errors as reboots
• 96629d5ba feat: implement etcd maintenance commands
• 80fed3194 feat: include Kubernetes controlplane endpoint as one of the endpoints
• c6cb36cc1 docs: fix auditpolicy example typo
• ba8265bc5 feat: new talosctl config remove to remove context
• fcb19ff51 fix: implement upgrade version checks for Talos 1.4
• 80f150ac8 feat: enable ipv6 on gcp
• 8db622f3d docs: add Vandebron to adopters list
• f6a86ae90 fix: oralce cloud zone
• 89dbb0ecf release(v1.4.0-alpha.0): prepare release
• 31fb90535 feat: update Linux 6.1.1, containerd 1.6.14
• a0c0352dd fix: send diagnostic output to stderr consistently
• 9a5f4c08a fix: default the manifest namespace if not set
• 3c6cce5fe docs: update last release for Talos 1.2.x
• 703624c43 docs: fix the 1.3 release date
• 386c9293a docs: update nvidia-container-runtime version
• ff83d9fd7 fix: improve talosctl completion
• 31ff431fa chore: add schulz systemtechnik to the list
• 97bef7c47 docs: vsphere.sh > vmware.sh
• 34babe858 chore: make organization selection an interface
• a9643b477 fix: use proper key usage for apid client certificate
• 171aa9467 fix: disable Wireless Lan using dtoverlay
• 2e84d2ab3 chore: update conformance product.yaml
• b7763843a feat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.
• afc45ad63 docs: mark Talos 1.3 docs as default
• 873bd3807 fix: redact service account key in config in RedactSecrets method
• b3aebfadf feat: validate Talos API access roles in machine config
• 40761e17d docs: fork docs for Talos 1.4
• 474604cd2 docs: update documentation for Talos 1.3
• faf49218c feat: add more checks for K8s upgrade
• 5b992bd86 fix: allow empty dnsDomain in machine config
• eb332cfcb feat: add health check for a minimal memory / disk size
• d04970dfa fix: ignore k8s additional addresses if nil
• 63c17104c feat: update Kubernets to 1.26.0
• f7a9a90db chore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)
• cf7adc51c feat: add RedactSecrets method to v1alpha1.Config
• 4c31b9b1a docs: clarify what the deal is with /var
• a8ebcca4a chore: remove watchErr from metal.getResource
• 1253513bd fix: fix nil pointer panic and incorrect error output
• 82e8c9e1f fix: workaround panic in the kubelet service controller
• a505b8909 fix: update COSI and reset restart backoff on success
• e92fdcbad chore: bump kernel to 5.15.81
• f0dddca2a docs: expand help for 'talosctl get'
• fcffc8879 fix: add ext4 filesystem detection
• 5b2960eff fix: introduce 'overridePath' setting and fix Talos resolver
• 0219d1124 fix: use only kube-apiserver endpoints for Talos API access endpoints
• dc5e0f4af fix: report errors to Equinix Metal event API
• 7ab140a94 feat: add talosctl machineconfig patch command
• d3cf06114 fix: ignore many more filesystems in IMA
• 44e2799b8 feat: add stdout and single config type support to talosctl gen config
• 4452f0e17 docs: bump talos version
• 38e57bd12 feat: update Kubernetes to v1.26.0-rc.1
• 4cd125d49 fix: correctly handle new watch event types
• 881b84152 feat: update Flannel to 0.20.2

Changes since v1.4.0-alpha.0

37 commits

• 92bc15f7f release(v1.4.0-alpha.1): prepare release
• e3da4754e feat: update Linux to 6.1.7
• 006449e46 test: build integration test early in the pipeline
• 09aa71264 fix: renovate config
• 2d136f187 feat: set markdown and html descriptions in config json schema
• f0804027a fix: renovate config
• 812a2877c chore: bump deps + renovate cleanup
• aa9f66c1c fix: mark DigitalOcean anchor IP as scope link
• bb4937f1b feat: enable renovate
• 3e0057162 fix: unwrap gRPC errors on stop/remove pods check
• 00e52ae07 fix: build correctly etcd initial cluster URL
• ae83b10ae feat: create JSON schema for v1alpha1.Config
• 703d96595 feat: update Kubernetes to 1.26.1, etcd to 3.5.7
• 965e64591 docs: update to use talosctl install script
• c5954f434 chore: bump deps
• bb50f6a56 chore: preallocate disk images for QEMU VMs
• d4b8b35de feat: generate kernel module dependency tree
• 18122ae73 fix: service restart (including extension services)
• 680fd5e45 fix: bump COSI runtime with the panic controller restart fix
• 0b65bbfc8 fix: handle overwriting tags in syslinux ADV
• 70d9428a1 fix: kubespan MSS clamping
• 683b4ccb4 chore: update Go to 1.19.5 and kernel to 6.1.4
• 062c7d754 test: fix integration test on cp endpoint update
• 8e9fc13d7 feat: implement enum generator for proto files
• 771b0dc06 docs: update left over rpi_4 ref to rpi_generic
• 6c04b5f79 chore: bump dependencies
• 0a5a8802e feat: use 'localhost' endpoint for controlplane nodes
• b0775ebf2 feat: add ISO wipe GRUB boot option
• 29020cb9c fix: report fatal sequence errors as reboots
• 96629d5ba feat: implement etcd maintenance commands
• 80fed3194 feat: include Kubernetes controlplane endpoint as one of the endpoints
• c6cb36cc1 docs: fix auditpolicy example typo
• ba8265bc5 feat: new talosctl config remove to remove context
• fcb19ff51 fix: implement upgrade version checks for Talos 1.4
• 80f150ac8 feat: enable ipv6 on gcp
• 8db622f3d docs: add Vandebron to adopters list
• f6a86ae90 fix: oralce cloud zone

Changes from siderolabs/extras

3 commits

• siderolabs/extras@8cb4792 chore: update Go to 1.19.5
• siderolabs/extras@3ca2df3 chore: disable provenance in buildx
• siderolabs/extras@55d8452 feat: update releases

Changes from siderolabs/gen

2 commits

• siderolabs/gen@214c1ef chore: set slice.Filter result slice cap to len
• siderolabs/gen@8e89b1e feat: add GetOrCreate and GetOrCall methods

Changes from siderolabs/pkgs

19 commits

• siderolabs/pkgs@987d24a feat: mellanox drivers are modules
• siderolabs/pkgs@b82a015 feat: mellanox oped
• siderolabs/pkgs@057d4f9 chore: bump deps
• siderolabs/pkgs@4ac4138 feat: enable nvme support for raspberrypi cm4
• siderolabs/pkgs@ccb9d39 fix: disable magic sysrq
• siderolabs/pkgs@d33202d chore: bump u-boot to 2023.01
• siderolabs/pkgs@cb83e16 chore: bump dependencies
• siderolabs/pkgs@e561dcb feat: bump Go to 1.19.5
• siderolabs/pkgs@c7797c7 feat: update Linux to 6.1.4, restore RPi support
• siderolabs/pkgs@5e8ebb0 feat: add AMD K10 sensor support
• siderolabs/pkgs@73ac37d chore: disable provenance in buildx
• siderolabs/pkgs@8965bee chore: use default symlinks to /bin in base
• siderolabs/pkgs@325c9bf feat: bump dependencies
• siderolabs/pkgs@165dff6 fix: patch ipmitool IANA URL
• siderolabs/pkgs@c542f39 feat: add kernel support for usb setrial console
• siderolabs/pkgs@f564f45 chore: bump tools, containerd
• siderolabs/pkgs@268ea7c chore: bump deps
• siderolabs/pkgs@dcf3ceb feat: add nitro enclave support in kernel
• siderolabs/pkgs@17ea5e6 chore: bump kernel to 5.15.81

Changes from siderolabs/tools

14 commits

• siderolabs/tools@28d4a57 chore: reduce renovate noise
• siderolabs/tools@e130fd5 chore: bump deps
• siderolabs/tools@37612fe fix: revert enabling provenance
• siderolabs/tools@e0b01e3 chore: bump deps
• siderolabs/tools@d0e6bd0 feat: add gnutls
• siderolabs/tools@3d34b5d chore: bump dependencies
• siderolabs/tools@763c1d9 feat: update Go to 1.19.5
• siderolabs/tools@136958f chore: disable provenance in buildx
• siderolabs/tools@e2a8692 feat: update releases
• siderolabs/tools@0e48f37 chore: bump protobuf
• siderolabs/tools@a21aa1c chore: bump toolchain and mpc versions
• siderolabs/tools@1a75d0f chore: bump deps
• siderolabs/tools@55bd185 feat: update Go to 1.19.4
• siderolabs/tools@f291f46 chore: bump tools

Dependency Changes

• cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
• github.com/aws/aws-sdk-go v1.44.147 -> v1.44.184
• github.com/containerd/containerd v1.6.12 -> v1.6.15
• github.com/containernetworking/plugins v1.1.1 -> v1.2.0
• github.com/coreos/go-semver v0.3.0 -> v0.3.1
• github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.4
• github.com/docker/docker v20.10.21 -> v20.10.23
• github.com/dustin/go-humanize v1.0.0 -> v1.0.1
• github.com/fatih/color v1.13.0 -> v1.14.1
• github.com/freddierice/go-losetup/v2 v2.0.1 new
• github.com/gdamore/tcell/v2 v2.5.3 -> v2.5.4
• github.com/hetznercloud/hcloud-go v1.37.0 -> v1.39.0
• github.com/insomniacslk/dhcp f26e6d78f622 -> de60144f33f8
• github.com/mattn/go-isatty v0.0.16 -> v0.0.17
• github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
• github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
• github.com/mdlayher/netlink v1.7.0 -> v1.7.1
• github.com/prometheus/procfs v0.8.0 -> v0.9.0
• github.com/rivo/tview db36428c92d9 -> 892d1a2eb0da
• github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.12
• github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0-2-g8cb4792
• github.com/siderolabs/gen v0.4.1 -> v0.4.3
• github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-18-g987d24a
• github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.1
• github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-11-g28d4a57
• github.com/ulikunitz/xz v0.5.11 new
• github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.14
• github.com/vmware/govmomi v0.29.0 -> v0.30.0
• go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
• go.uber.org/zap v1.23.0 -> v1.24.0
• go4.org/netipx 797b0c90d8ab -> 987e16ee2705
• golang.org/x/net v0.4.0 -> v0.5.0
• golang.org/x/sys v0.3.0 -> v0.4.0
• golang.org/x/term v0.3.0 -> v0.4.0
• golang.org/x/time v0.2.0 -> v0.3.0
• google.golang.org/grpc v1.51.0 -> v1.52.0
• k8s.io/api v0.26.0 -> v0.26.1
• k8s.io/apimachinery v0.26.0 -> v0.26.1
• k8s.io/apiserver v0.26.0 -> v0.26.1
• k8s.io/client-go v0.26.0 -> v0.26.1
• k8s.io/component-base v0.26.0 -> v0.26.1
• k8s.io/klog/v2 v2.80.1 -> v2.90.0
• k8s.io/kubectl v0.26.0 -> v0.26.1
• k8s.io/kubelet v0.26.0 -> v0.26.1

Previous release can be found at v1.3.0

Images

ghcr.io/siderolabs/flannel:v0.20.2
ghcr.io/siderolabs/install-cni:v1.4.0-alpha.0-2-g8cb4792
docker.io/coredns/coredns:1.10.0
gcr.io/etcd-development/etcd:v3.5.7
registry.k8s.io/kube-apiserver:v1.26.1
registry.k8s.io/kube-controller-manager:v1.26.1
registry.k8s.io/kube-scheduler:v1.26.1
registry.k8s.io/kube-proxy:v1.26.1
ghcr.io/siderolabs/kubelet:v1.26.1
ghcr.io/siderolabs/installer:v1.4.0-alpha.1
registry.k8s.io/pause:3.6

---

This discussion was created from the release v1.4.0-alpha.1.