Talos 1.10 Release Checklist

[smira]

Previous: #9249

This is a tentative list of features, no commitment on the list.

Major Tasks

Beta Give feedback

1. Volume Management #8367
   6 of 11
   EPIC +1
   
2. Distributed Image Cache
3. Structured /var #8016
   1 of 1
   +0
   
4. K8s DNS resolver on the host
5. SELinux Protection
6. KubeSpan segmentation #8364
   0 of 2
   +0
7. feat: implement distributed image store #7120
   Stale +1
8. Switch to systemd-boot on UEFI systems #8062
   +0
9. Multiple Machine Configurations (history of Machine Configs, automatic rollback)

Smaller Tasks

Beta Give feedback

1. Epic: Multi-document machine configuration and fully reactive Talos core #7223
   3 of 5
   +0
2. resources for network and disk usage (for Omni dashboard)
3. Add documentation about CIS hardening and compliance verification #4174
   +0
4. Audit Talos k8s as per Kubernetes Security Checklist #6199
   +0
5. Set kernel.kptr_restrict = 2 #8746
   +0
6. Talos: snapshot kernel cmdline network config as META conrents #8286
   +0
7. Talos upgrade to optionally store log to Ephemeral partition #7364
   +0
8. Use NTS for NTP time sync #8779
   +0
9. allow ethtool configuration, e.g. TCP checksum offloading #9173
   +0
10. Security Guarantees of LUKS Encryption using TPM for User Data on EPHEMERAL #8972
    +0
11. Github Actions Workflow Talos in Docker & QEMU #8242
    +0
12. .cluster.etcd changes to restart etcd in a safe way
13. Add digest to all container images references in manifests and documentation #6987
    +0
14. SBOM generation #7088
    +0
15. xfs_scrub controller #9545
    +0
    
16. Unable to change cluster.endpoint without downtime #9609
    +0
17. Support for routing rules and tables #7184
    +0
18. GCP ILB support / support scope local routes to be configured #4109
    +0
19. Trusted (Secure Boot) PoC #7141
    21 of 21
    +0
    
20. TPM event log #7752
    +0
21. IMA signed kernel modules #7688
    +0
22. Talos performance monitoring #7806
    +0
23. Ability to rotate secret encryption keys used in apiserver #8702
    +0
24. Allow to set a webhook backend for the audit logs #8597
    +0
25. KernelParamSpecController fails to handle sysctl params that can't be read before being written #9347
    +0
26. IPv6-only support / improvements #9372
    0 of 3
    +0
27. Can't configure hugepages kernel args, image factory changes order in kernel command line. image-factory#154
    +0
28. bug: kube-router and KubeSpan don't play nice together #9814
    +0
29. drop cgroupsv1 support in !container mode
30. drop support for legacy iptables in the kernel

Continuous Integration

Beta Give feedback

1. e2e aws with k8s conformance (CSI,External IP
2. update ci longhorn for v2 tests #9669
   +0

Document Updates

Beta Give feedback

No tasks being tracked yet.