v1.1.0

[smira]

Talos 1.1.0 (2022-06-22)

Welcome to the v1.1.0 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Kubernetes API Server Anonymous Auth

Anonymous authentication is now disabled by default for the kube-apiserver (CIS compliance).

To enable anonymous authentication, update the machine config with:

cluster:
    apiServer:
        extraArgs:
            anonymous-auth: true

Apply Config --dry-run

The commands talosctl apply-config, talosctl patch mc and talosctl edit mc now support --dry-run flag.
If enabled it just prints out the selected config application mode and the configuration diff.

Apply Config --mode=try

The commands talosctl apply-config, talosctl patch mc and talosctl edit mc now support the new mode called try.
In this mode the config change is applied for a period of time and then reverted back to the state it was before the change.
--timeout parameter can be used to customize the config rollback timeout.
This new mode can be used only with the parts of the config that can be changed without a reboot and can help to check that
the new configuration doesn't break the node.
Can be especially useful to check network interfaces changes that may lead to the loss of connectivity to the node.

IPv6 in Docker-based Talos Clusters

The command talosctl cluster create now enables IPv6 by default for the Docker containers
created for Talos nodes. This allows to use IPv6 addresses in Kubernetes networking.

If talosctl cluster create fails to work on Linux due to the lack of IPv6 support,
please use the flag --disable-docker-ipv6 to revert the change.

drop some default rules shipped by eudev

Drops some default eudev rules that doesn't make sense in the context of Talos OS.
Especially the ones around sound devices, cd-roms and renaming the network interfaces to be predictable

Network Device Selector

Talos machine configuration supports specifying network interfaces by selectors instead of interface name.
See documentation for more details.

Pod Security Admission

Pod Security Admission controller is enabled by default with the following policy:

apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- configuration:
    apiVersion: pod-security.admission.config.k8s.io/v1alpha1
    defaults:
      audit: restricted
      audit-version: latest
      enforce: baseline
      enforce-version: latest
      warn: restricted
      warn-version: latest
    exemptions:
      namespaces:
      - kube-system
      runtimeClasses: []
      usernames: []
    kind: PodSecurityConfiguration
  name: PodSecurity
  path: ""

The policy is part of the Talos machine configuration, and it can be modified to suite your needs.

Support RockPi 4 variants A and B

Talos now supports RockPi variants A and B in addition to RockPi 4C

Raspberry Pi PoE hat fan

Talos now enables the Raspberry Pi PoE fan control by pulling in the poe overlay that works with upstream kernel

Component Updates

• Linux: 5.15.48
• Containerd: v1.6.6
• Kubernetes: 1.24.2
• Flannel: 0.18.1
• runc: 1.1.2
• CoreDNS: v1.9.3

Talos is built with Go 1.18.3

x86-64 Architecture

Talos is built for x86-64 architecture with support for x86-64-v2 microarchitecture level,
so Talos no longer runs on processors supporting only baseline x86-64 microarchitecture (before 2009).

Contributors

• Andrey Smirnov
• Noel Georgi
• Tim Jones
• Dmitriy Matrenichev
• Spencer Smith
• Artem Chernyshev
• Serge Logvinov
• Philipp Sauter
• Andrew Rynhard
• Steve Francis
• Steve Francis
• Andrei Dobre
• Bastiaan Schaap
• Bᴇʀɴᴅ Sᴄʜᴏʀɢᴇʀs
• Caleb Woodbine
• Daniel Höxtermann
• Gerard de Leeuw
• Han Cen
• Jori Huisman
• Jorik Jonker
• Nat Allan
• Nico Berlee
• Philipp Sauter
• Rio Kierkels
• Sebastian Hasler
• Seán C McCord
• Suraj Shirvankar
• Tames McTigue
• Tim Jones
• Tomasz Zurkowski
• William Ashton

Changes

292 commits

• d55a18714 release(v1.1.0): prepare release
• 6d6567512 docs: fix the vendor information for Kubernetes conformance tests
• 707f2a3e9 chore: bump kubernetes to v1.24.2
• ed09dee4f fix: make talosctl bootstrap accept only single node
• 86352abe0 test: fix csi tests
• 9409975b1 fix: support SideroLink "secure" gRPC connection
• 6cd38e519 chore: bump kernel to 5.15.48
• 08f2ea1e3 chore: bump kernel to 5.15.47
• 83b430ac5 release(v1.1.0-beta.2): prepare release
• 2d1a94e08 fix: correctly validate reboot mode in CLI
• 4eeb6ebe1 feat: build Talos images with system extensions included
• b94a4ec5f chore: run xfs_repair on xfs filesystem returing EUCLEAN
• 09e4f38ba chore: revert day-two tests for csi tests
• 10ac9dc95 fix: respect local API server port
• 1e4417d1a feat: disallow anonymous requests by default (kube-apiserver)
• d5f16f067 chore: bump kernel to 5.15.46
• 9289c4ca8 release(v1.1.0-beta.1): prepare release
• b75318520 feat: update containerd 1.6.6, Linux 5.15.45, Flannel 0.18.1
• e23d1979b fix: add ovmf image path for rhel
• 6229eefe7 fix: wait for /var to be mounted in kubelet service controller
• 4712e73c4 fix: improve vip operator shutdown sequence
• 3860129d7 chore: bump golang to 1.18.3
• f8422f217 release(v1.1.0-beta.0): prepare release
• 98bbab12e chore: bump dependencies
• 0a6fc906f fix: table align hosts file
• be644c96e fix: flannel ipv6 compatibility
• 99e8f1261 feat: add support for equinix metal events
• 1ba8a6b94 chore: update go yaml to the latest version
• 400a88dc5 chore: disable kexec on rpi4 and rockpi
• 48423a983 chore: bump kernel to 5.15.44
• 458e44c27 feat: include azure public IPs from standard LB SKU into extips
• 19edbb5bd docs: fix typo in main page
• 4ad773f01 feat: update CoreDNS to 1.9.3
• 7a4062904 chore: update Sidero Labs go modules to released versions
• e40153aef fix: introduce more route protocols as constants
• 3ed254976 feat: update Kubernetes to 1.24.1
• ceae420a8 chore: update tools/pkgs/extras to 1.1.0
• f9c46fb18 fix: unmarshal HardwareAddr without stdlib help
• f2e94d602 fix: implement unmarshaling from YAML for LinkStatus
• fe858041b feat: enable version API in maintenance mode
• 875f67a6e fix: correctly parse empty route flags from YAML
• 00515b4ba chore: rename memory to memorymodules
• 9c4b7d6e8 feat: update Flannel to 0.18.0
• c5297009e feat: support join token as part of siderolink kernel parameter
• 0dc4ad58e chore: bump kernel to 5.15.43
• 610884aa0 docs: correct the install-image tag in the Developing Talos section
• af5ac30a7 feat: enable passing custom kernel args to the ISO creator
• b7d068f60 chore: add cloud-image-uploader to go workspace
• 88efd75d3 docs: fix install script url
• 3f88030ca test: use use correct method to generate Wireguard private key
• 8c675c669 chore: siderolink maintenance mode
• 4551cbd7f fix: cluster creation error message formatting
• bafa1f49d fix: improve error message when creating cluster
• f03002ec6 feat: add support for disabling search domains
• a1b6f21a8 chore: bump dependencies
• 1156daac2 fix: azure hostname definition
• 33a631f02 feat: look up Links PCI vendor/product via PCI ID database
• 40e57efa4 chore: fix reference to talosconfig
• 30eeb851b docs: extension service security options
• bf7a6443e feat: add 'etcd membership is consistent across nodes' health check
• 4b3935fa4 docs: fix 1.1.x support matrix
• efcdc16c5 chore: add go.work
• 20286c908 feat: add cpu/ram info as resource
• c3f29031b feat: add ethtool ioctl as additional source of information
• 34d9a875a chore: go-smbios updates
• f477eb882 chore: bump kernel to 5.15.41
• 5bac5e91a docs: fix "double-base64-encode" in cert/key examples
• 396e1386c feat: implement network device selector
• 5a8e011db fix: match for WSL platform in case-insentive way
• ee8113b5f docs: add vector logging example
• 14985674c fix: allow SideroLink IPs in NodeAddresses
• 63f23e905 feat: openstack dhcp-v6 types
• 5ec4e9096 chore: bump kernel to 5.15.40
• 8cef958dd docs: update jetson nano docs
• 554edd3e8 chore: bump dependencies
• f2d89735f feat: extend the extension service spec with container security options
• 850cfba72 chore: fix type order in deep-copy generation line
• 5a91f6076 fix: ignore completed pods in cluster health check
• 488ce753f docs: tidy up adopters
• 290f968fe release(v1.1.0-alpha.2): prepare release
• a6e436582 feat: implement DeepCopy using code generation
• 91a49c4e7 fix: dhcpv6 leasetime segfault loop
• afb679586 fix: reset certificate SANs on update
• c87432fe1 fix: detect WSL for talosctl cluster create on Docker
• 166d2585c chore: bump kernel and runc
• 8d9b0cde0 chore: update deps to go 1.18.2
• 86741d998 fix: append hostname to cluster SANs when port is not specified
• 9885bbe17 docs: fix typos, edited for clarity
• 7fd1c80c3 fix: ignore failures to dial wireguard client
• b8e7cdb70 docs: add vultr guide
• c2be65b66 fix: openstack unable to parseIP
• 2ae0e3a56 test: add a test for version of Go Talos was built with
• bef1a13fa docs: update latest Talos in 1.0 docs to 1.0.4
• b52962c44 chore: bump dependencies
• 79ae76a6f fix: properly set allowSchedulingOnMasters in the interactive install
• 2b7e7d4dc feat: print the status of services during boot
• 802d4a23c fix: load kubelet system service in StartAllServices task
• 67019c434 fix: add source path for ovmf flash image
• da7b24ba5 chore: bump kernel to 5.15.38
• 8ca8effd6 chore: add Equinix Managed Services NL to adopters
• 8bc97a30f fix: remove D-Bus sockets before listen attempts
• 54cfa039a fix: use json.Unmarshal instead of yaml.Unmarshal
• 6d30c4822 docs: update networking resource documentation
• bc88de729 chore: bump coredns to v1.9.2
• c6722b637 docs: when mentioning partitions, link to partition docs
• b189e8426 chore: fix incorrect ManifestSpec.MarshalYAML signature
• 5d5280200 feat: add more hardware information to the link status resources
• 2ff6db749 chore: add Nedap Security Atlas as adopter
• 89cab200b chore: bump kubernetes to v1.24.0
• 09d16349f chore: refactor StaticPod and StaticPodStatus into typed.Resource
• d2935f98c chore: refactor LinkRefresh and LinkStatus into typed.Resource
• b52e0b9b9 fix: talosctl throws error if gen option and --input-dir flags are combined
• 0e15de3a8 docs: add adopters file
• bb932c297 chore: bump containerd to v1.6.4
• 4eaaa2d59 chore: bump kernel to 5.15.37
• 89dde8f2c chore: refactor remaining resources into typed.Resource
• bd089e702 chore: bump dependencies
• 3136334b9 docs: fix links in VMware documentation
• 403df0e18 docs: provide example on using config generation package
• 635192861 chore: redo pointer with github.com/siderolabs/go-pointer module
• a269f740c docs: copy knowledge base to v1.0 docs
• 483201026 fix: return an error if there is no byte slice in ReadonlyProvider
• 6e7486f09 fix: allow graceful node shutdown to be overridden
• 867d38f28 feat: add bond slaves ordering
• 03ef62ad8 fix: include Go primitive types into unstructured deepcopy
• f06e6acf2 chore: bump kernel to 5.15.36
• c0d386abb fix: don't mount D-Bus socket via mount under recursive bind mount
• 9a8ff76df refactor: rewrite perf resource to use typed.Resource
• 71d04c4d5 refactor: rewrite runtime resources to use typed.Resource
• 7568d51fc fix: trigger CRI config merge on correct resource update
• c456dbcb9 docs: remove references to init nodes
• 1973095d1 feat: update containerd to 1.6.3
• b51292d88 docs: reformat config reference
• c0709d970 feat: increase aio-max-nr and inotify.max_user_instances
• 85b328e99 refactor: convert secrets resources to use typed.Resource
• e91350acd refactor: convert time & v1alpha1 resources to use typed.Resource
• 45464412e chore: bump dependencies
• 0af6b35a6 feat: update etcd to 3.5.4
• 7ad27751c docs: fix analytics and sitemap
• 55ff876dc chore: bump K8s Go modules to 1.24.0-rc.0
• f1f43131f fix: strip 'v' prefix from versions on Kubernetes upgrade
• ec621477b chore: tune QEMU disk provisioner options
• b085343dc feat: use discovery information for etcd join (and other etcd calls)
• 2b03057b9 feat: implement a new mode try in the config manipulation commands
• 51a68c31f chore: allow mounting files from the host
• f3e330a0a docs: fix network dependency
• 7ba39bd60 docs: clarify discovery service
• 8057d076a release(v1.1.0-alpha.1): prepare release
• 1d5c08e74 chore: bump kernel to 5.15.35
• 9bf23e516 feat: update Kubernetes to 1.24.0-rc.0
• d78ed320b docs: fix the docs reference to star registry redirects
• 257dfb870 fix: run the 'post' stage of the service always
• 992e23023 fix: correctly handle stopping services with reverse dependencies
• bb7a50bd5 docs: fix netlify redirects
• 486f79bc7 docs: fix netlify deploy url
• e8cbedb05 docs: add canonical link ref
• 0fe4a7832 docs: improve latest-version banner
• 23984efcd fix: detect lingering mounts in the installer correctly
• 54dba925f chore: refactor network resource to use typed resource
• 4eb9f45cc refactor: split polymorphic K8sControlPlane into typed resources
• 68dfdd331 fix: provide logger to the etcd snapshot restore
• f190403f0 docs: add how to get config after interactive setup
• fac7b9466 docs: improve vip caveats documentation
• 250df9e67 docs: improve rook-ceph description
• b5c1d868d docs: add talos/kubernetes config faq
• 39721ee93 chore: bump dependencies
• 610945774 chore: bump tools and pkgs
• 2b68c8b67 fix: enable long timestamps for xfs
• be00d7749 chore: implement cluster resources using cosi typed resource
• 460d5ab13 docs: fix extension services alias
• bbdfda2dd chore: xfs quota support in kernel
• 8ff8fc77f chore: enable rpi4 poe hat fan control
• 2b9722d1f feat: add dry-run flag in apply-config and edit commands
• 8af50fcd2 fix: correct cri package import path
• ce09ede83 feat: update etcd to 3.5.3
• 13f41badd chore: bump kernel to 5.15.34
• fa57b5d92 docs: reorganize documentation
• a91eb9358 chore: bump deps
• 0aad0df2e refactor: remove String() for resource implementation
• a4060513c feat: build Talos with support for x86-64-v2 microarchitecture
• 8faebd410 chore: bump tools and pkgs
• 8499b7e7d chore: bump dependencies
• a7ba7ea67 feat: migrate to go 1.18
• 9dace93b5 feat: enable Pod Security Admission by default
• c382cb8cd docs: update vmware docs
• da0e638f0 docs: stableize tools versioning
• f2d2267e7 docs: use template for netlify redirects
• 88f1d8fcc docs: update sitemap to point to direct url
• a6eebee36 chore: update eudev
• 0cb84e8c1 fix: correctly parse tags out of images
• 17d09739f docs: enable nested arrow
• 1e4320b64 chore: add support for rockpi 4A and 4B
• d1869d948 docs: update to Sidero Metal, mention clusterctl
• 18d0038ec fix: avoid panic in DHCPv6 operator on nil dereference
• 9e3d438db docs: fix code fence formatting
• b3f1bb2cf fix: add support for FAT12/16 filesystems
• 8619f95c5 chore: bump dependencies
• 8c4f72004 docs: override sitemap.xml to only include latest results
• 5192ba4e2 docs: fix a typo in QEMU VM setup guide
• 663e3e879 refactor: change the stages for embed files generation
• 19bf12af0 fix: enable IPv6 in Docker-based Talos clusters
• 3889a5839 docs: update config.yaml, storage.md, digital-rebar.md
• 25d19131d release(v1.1.0-alpha.0): prepare release
• 2ca5279e5 fix: retry manifest updates in upgrade-k8s
• eeb756168 feat: use kexec when resetting a node
• 1ed1f73e5 test: bump CAPI to 1.1.3
• 2ee1d2c72 feat: update Kuberentes to 1.24.0-beta.0
• c26fa4ccc test: push GITHUB_TOKEN to the e2e-aws/gcp steps
• 95d900de7 feat: use kubeconfig env var
• 0b407dd17 feat: add dhcp-v6 NTP/DHCP-DUID
• a140a6bad docs: update releases shortcode in upgrade guide
• 12931dced fix: align partitions on 1M boundary
• 37f868e37 fix: validate empty TLS config for registries
• ca8b9c0a3 feat: update Kubernetes to 1.24.0-alpha.4
• d9ec6b215 chore: drop dirty from abbreviated tag
• 08624fd0b docs: add banner to main page
• fc23c7a59 test: bump versions for upgrade tests
• 4bfe68610 feat: update runc to 1.1.1
• b315ed953 chore: use go:embed instead of ldflags
• a5d64fc81 feat: update Flannel to 0.17.0
• 6d6eb3f6a docs: fork docs for 1.1
• 1d55f05d1 docs: update index page
• ad6b7ec1a fix: enable etcd consistency on check startup
• 65a31f753 docs: re-add GA token
• 741c04832 docs: mark 1.0 docs as latest
• e97433c8a docs: update jetson nano
• 6665e0f00 docs: code block copying
• c41f2b216 docs: update whats-new-v1.0
• 0a36fbbf3 docs: add release notes for 1.0
• bd0035f6a docs: add NVIDIA docs
• efa3f2898 fix: correctly find partitions with config data (metal-iso)
• 9ebeec0d0 docs: fix incorrect path for talosconfig
• 9fef4540e docs: fix non-latest download links
• f8ef6a081 docs: add rook ceph configuration guide
• e2666f58f chore: bump kernel to 5.15.32
• 957b2f233 chore: bump dependencies
• 0fd2aa08b fix: correctly escape '.' in volume names
• 108fd03a7 fix: give up virtual IPs before the kubelet workloads are shut down
• 856e1333d fix: use 'localhost' endpoint in docker provisioner on Windows
• c5da38609 docs: use variables and templates in the docs
• 4c83847b9 docs: target search results
• 67fb72d96 docs: add algolia versions to all content
• 5344d6e7c docs: fix extension service path dependency
• 9b9191c5e fix: increase intiial window and connection window sizes
• 7a88a0224 docs: show archived/pre-release banner based on version
• e403470bf docs: filter algolia results by latest
• 0497d5f9f docs: tag latest docs for search
• a25425483 feat: update containerd to 1.6.2, Linux to 5.15.31
• 9b6422fcc feat: update CoreDNS to 1.9.1
• 020856f80 docs: remove second search bar
• 5f27f4c63 docs: update asset links
• 9ff42b432 docs: fix redirects for /docs URLs
• 7283efd56 chore: update the talosctl CNI download url
• e0eee7fcc test: use clusterctl.yaml overrides after org rename
• 73966f51e docs: fix extensions
• f9766edb5 docs: remove empty doc file
• e06e1473b feat: update golangci-lint to 1.45.0 and gofumpt to 0.3.0
• a92c614b2 docs: add enterprise link to docs header
• 0ae7174ba docs: update search settings and redirects
• 883d401f9 chore: rename github organization to siderolabs
• d1294d014 chore: add day-two tests for e2e-qemu
• a6240e4b6 feat: update Linux to 5.15.30
• e3fda049f docs: overhaul all the docs
• f47750726 fix: the etcd recovery client and tests
• 69e07cddc fix: trigger properly udevd on types and actions
• 47d0e629d fix: clean up custom udev rules if the config is cleared
• b6691b350 chore: bump dependencies
• 27af5d41c feat: pause the boot process on some failures instead of rebooting
• 58cb9db1e feat: allow hardlinks in the system extension images
• 1e982808f fix: ignore pod CIDRs for kubelet node IPs
• 5e0c80f61 fix: ignore connection reset errors on k8s upgrade
• c156580a3 fix: split regular network operation configuration and virtual IP
• cd4d4c605 feat: relax extensions file structure validation
• 50594ab1a fix: ignore terminated pods in pod health checks
• 9d69fb6b4 feat: update Kubernetes to 1.23.5
• 327ce5aba fix: invert the condition to skip kubelet kernel checks
• cf85b3f07 docs: update cilium inline install
• 84ee1795d docs: update logo
• cc7719c9d docs: improve comments in security proto
• caf800fe8 feat: implement D-Bus systemd-compatible shutdown for kubelet
• 6bec08429 feat: add talosctl completions to copy, usage, logs, restart and service
• 355b1a4be fix: refresh etcd certs on startup/join
• d256b5c5e docs: fix spelling mistakes
• 5fdedae20 chore: bump kernel to 5.15.28
• 18a21b5f2 chore: add dependency images-essential -> images
• 714e5eca6 chore: bump dependencies
• 58be4067e docs: update README.md
• c5fb20930 docs: add loki note
• f448cb4f3 feat: bump boot partition size to 1000 MiB
• a095acb09 chore: fix equinixMetal platform name
• 2a7f9a445 fix: check for IPv6 before applying accept_ra
• 59681b8c9 fix: backport fixes from release-1.0 branch

Changes since v1.1.0-beta.2

8 commits

• d55a18714 release(v1.1.0): prepare release
• 6d6567512 docs: fix the vendor information for Kubernetes conformance tests
• 707f2a3e9 chore: bump kubernetes to v1.24.2
• ed09dee4f fix: make talosctl bootstrap accept only single node
• 86352abe0 test: fix csi tests
• 9409975b1 fix: support SideroLink "secure" gRPC connection
• 6cd38e519 chore: bump kernel to 5.15.48
• 08f2ea1e3 chore: bump kernel to 5.15.47

Changes from siderolabs/extras

6 commits

• siderolabs/extras@5800284 chore: bump golang to 1.18.3
• siderolabs/extras@913188a chore: update pkg to 1.1.0
• siderolabs/extras@e2bb56e chore: stable source date epoch
• siderolabs/extras@a77a6f4 chore: bump Go to 1.18.2
• siderolabs/extras@ac3b9a4 chore: bump pkgs
• siderolabs/extras@d4f8e88 chore: update references after org rename

Changes from siderolabs/go-pcidb

2 commits

• siderolabs/go-pcidb@4c9f656 feat: initial implementation
• siderolabs/go-pcidb@be468ce Initial commit

Changes from siderolabs/go-pointer

2 commits

• siderolabs/go-pointer@71ccdf0 chore: implement main functionality
• siderolabs/go-pointer@c1c3b23 Initial commit

Changes from siderolabs/pkgs

60 commits

• siderolabs/pkgs@fa9a488 chore: bump kernel to 5.15.48
• siderolabs/pkgs@5016a9d chore: bump kernel to 5.15.47
• siderolabs/pkgs@0e456be chore: bump kernel to 5.15.46
• siderolabs/pkgs@d523948 feat: update containerd to 1.6.6
• siderolabs/pkgs@a876600 chore: bump kernel to 5.15.45
• siderolabs/pkgs@43644d4 feat: update containerd to 1.6.5
• siderolabs/pkgs@9f61c50 chore: bump golang to 1.18.3
• siderolabs/pkgs@b8ecee8 chore: bump kernel to 5.15.44
• siderolabs/pkgs@f5db31f chore: bump tools to final v1.1.0 release
• siderolabs/pkgs@6b14046 feat: update Flannel CNI to 1.1.0
• siderolabs/pkgs@9b70e9f chore: bump kernel to 5.15.43
• siderolabs/pkgs@1f48da7 chore: stable source date epoch
• siderolabs/pkgs@24e545e feat: azure boot disk defenition
• siderolabs/pkgs@e72fe55 chore: bump kernel to 5.15.41
• siderolabs/pkgs@7305bd7 chore: bump kernel to 5.15.40
• siderolabs/pkgs@cd05ae8 chore: bump u-boot v2022.04
• siderolabs/pkgs@7add479 chore: bump kernel to 5.15.39
• siderolabs/pkgs@0886699 chore: bump runc to v1.1.2
• siderolabs/pkgs@dd06fa9 chore: bump nvidia drivers to 510.68.02
• siderolabs/pkgs@91bb939 chore: bump Go to 1.18.2
• siderolabs/pkgs@8bd8397 chore: bump kernel to 5.15.38
• siderolabs/pkgs@de96a44 chore: bump containerd to v1.6.4
• siderolabs/pkgs@45906c1 chore: bump ca-certificates to 2022-04-26
• siderolabs/pkgs@d847adc chore: bump kernel to 5.15.37
• siderolabs/pkgs@c4cfa72 chore: bump util-linux to 2.38
• siderolabs/pkgs@e22317d chore: bump tools
• siderolabs/pkgs@422ed8e chore: bump kernel to 5.15.36
• siderolabs/pkgs@1e833c6 chore: enable nvme hardware monitor
• siderolabs/pkgs@fe7c46f feat: update containerd to 1.6.3
• siderolabs/pkgs@95f4418 chore: bump kernel to 5.15.35
• siderolabs/pkgs@201af71 chore: bump tools and bldr
• siderolabs/pkgs@3de14d7 chore: enable xfs quota support
• siderolabs/pkgs@6955fd0 chore: bump raspberrypi-firmware to 1.20220331
• siderolabs/pkgs@5b498d8 chore: bump linux-firmware 20220401
• siderolabs/pkgs@9cda5c0 chore: bump kernel to 5.15.34
• siderolabs/pkgs@8b48af6 chore: bump tools
• siderolabs/pkgs@ff13660 chore: bump kernel to 5.15.33
• siderolabs/pkgs@415020f chore: bump eudev, remove non-relevant default rules
• siderolabs/pkgs@6691342 chore: add rockpi4c
• siderolabs/pkgs@5bd5fad chore: build u-boot spi image for rockpi
• siderolabs/pkgs@4dace49 fix: ipxe prompt arm64
• siderolabs/pkgs@6041fd7 chore: update to use latest tools (specifically go 1.18)
• siderolabs/pkgs@4b3e70e chore: upstream u-boot for jetson nano
• siderolabs/pkgs@cc1c8c7 feat: update runc to 1.1.1
• siderolabs/pkgs@3baf4e4 chore: enable random trust CPU
• siderolabs/pkgs@df31920 chore: disable sound
• siderolabs/pkgs@c27751b chore: bump nvidia drivers to 510.60.02
• siderolabs/pkgs@ba98e20 chore: bump kernel to 5.15.32
• siderolabs/pkgs@a76edfd feat: update containerd to 1.6.2
• siderolabs/pkgs@0c38670 chore: bump kernel to 5.15.31
• siderolabs/pkgs@bc4fb0c chore: org update
• siderolabs/pkgs@41f291d feat: update Flannel CNI to 1.0.1
• siderolabs/pkgs@58603ba chore: bump kernel to 5.15.30
• siderolabs/pkgs@d3bb262 chore: bump kernel to 5.15.29
• siderolabs/pkgs@76a24b5 chore: update openssl to 1.1.1n
• siderolabs/pkgs@490c7b7 chore: enable aarch64 NVIDIA drivers
• siderolabs/pkgs@b794b7a chore: bump linux-firmware to 20220310
• siderolabs/pkgs@acda207 chore: bump kernel to 5.15.28
• siderolabs/pkgs@e0fec11 chore: bump nvidia driver to 510.54
• siderolabs/pkgs@0407f05 chore: bump kernel to 5.15.27

Changes from siderolabs/tools

21 commits

• siderolabs/tools@134974c chore: bump golang to 1.18.3
• siderolabs/tools@4a5c229 chore: bump toolchain to v0.6.0
• siderolabs/tools@50e535a chore: stable source date epoch
• siderolabs/tools@967ebd9 chore: bump curl to 7.83.1
• siderolabs/tools@e61f856 chore: bump go to 1.18.2
• siderolabs/tools@315890f chore: bump ca-certificates to 2022-04-26
• siderolabs/tools@a1d3530 chore: bump util-linux to 2.38
• siderolabs/tools@d229fe1 chore: update bldr
• siderolabs/tools@e9f123c chore: bump curl to 7.83.0
• siderolabs/tools@8473ef2 chore: bump git to 2.36.0
• siderolabs/tools@8c1f801 chore: bump coreutils to 9.1
• siderolabs/tools@533d5c9 chore: bump git to 2.35.2
• siderolabs/tools@a15cbee chore: bump go to 1.18.1
• siderolabs/tools@718ec10 chore: enable conform
• siderolabs/tools@a60a332 chore: bump xz and gzip
• siderolabs/tools@c8a3d4d chore: update go to 1.18
• siderolabs/tools@1684fdc chore: bump expat to 2.4.8
• siderolabs/tools@7f5e44c chore: bump zlib to 1.2.12
• siderolabs/tools@bfc99ca chore: rename org
• siderolabs/tools@99be089 chore: update openssl to 1.1.1n
• siderolabs/tools@b63872b chore: update golang to 1.17.8

Changes from talos-systems/go-blockdevice

3 commits

• siderolabs/go-blockdevice@fccee8b chore: rekres the source, fix issues
• siderolabs/go-blockdevice@d9c3a27 feat: support probing FAT12/FAT16 filesystems
• siderolabs/go-blockdevice@b374eb4 fix: align partition to 1M boundary by default

Changes from talos-systems/go-loadbalancer

3 commits

• siderolabs/go-loadbalancer@c54d95d feat: implement control plane loadbalancer
• siderolabs/go-loadbalancer@4a6e29e refactor: clean up names, fix the lingering goroutines
• siderolabs/go-loadbalancer@af87d1c chore: apply new Kres rules

Changes from talos-systems/go-smbios

1 commit

• siderolabs/go-smbios@3f1e775 feat: rework destructuring of SMBIOS information and added some tests

Changes from talos-systems/siderolink

6 commits

• siderolabs/siderolink@1d2b7e1 feat: allow setting peer endpoint using peer event
• siderolabs/siderolink@5d085d6 feat: expose wgDevice.Peers from the wireguard.Device wrapper
• siderolabs/siderolink@3a5be65 fix: use correct method to generate Wireguard private key
• siderolabs/siderolink@8318a7e feat: accept join token in Provision payload
• siderolabs/siderolink@b38c192 fix: build on Windows
• siderolabs/siderolink@9902ad2 feat: pass request context and node address to the events sink adapter

Dependency Changes

• cloud.google.com/go/compute v1.5.0 -> v1.6.1
• github.com/BurntSushi/toml v1.0.0 -> v1.1.0
• github.com/aws/aws-sdk-go v1.43.8 -> v1.44.24
• github.com/containerd/cgroups 2e502f6b9e43 -> v1.0.4
• github.com/containerd/containerd v1.6.2 -> v1.6.4
• github.com/containernetworking/cni v1.0.1 -> v1.1.0
• github.com/containernetworking/plugins v1.1.0 -> v1.1.1
• github.com/cosi-project/runtime 264f8fcd1a4f -> 95d06feaf8b5
• github.com/docker/distribution v2.8.0 -> v2.8.1
• github.com/docker/docker v20.10.12 -> v20.10.16
• github.com/fsnotify/fsnotify v1.5.1 -> v1.5.4
• github.com/gdamore/tcell/v2 f057f0a857a1 -> v2.5.1
• github.com/golang/mock v1.6.0 new
• github.com/google/go-cmp v0.5.7 -> v0.5.8
• github.com/google/nftables 211824995dcb -> a9775fb167d2
• github.com/hashicorp/go-getter v1.5.11 -> v1.6.1
• github.com/hashicorp/go-version v1.4.0 -> v1.5.0
• github.com/hetznercloud/hcloud-go v1.33.1 -> v1.33.2
• github.com/insomniacslk/dhcp 3c283ff8b7dd -> 1ca156eafb9f
• github.com/jsimonetti/rtnetlink v1.1.0 -> v1.2.0
• github.com/mdlayher/arp c37aaafac7f9 -> 6706a2966875
• github.com/mdlayher/netx 669a06fde734 -> c711c2f8512f
• github.com/opencontainers/image-spec v1.0.2 -> c5a74bcca799
• github.com/packethost/packngo v0.22.0 -> v0.24.0
• github.com/pelletier/go-toml v1.9.4 -> v1.9.5
• github.com/rivo/tview 96063d6082f3 -> 9994674d60a8
• github.com/rs/xid v1.3.0 -> v1.4.0
• github.com/ryanuber/go-glob v1.0.0 new
• github.com/safchain/ethtool v0.2.0 new
• github.com/siderolabs/extras v1.0.0 -> v1.1.0-1-g5800284
• github.com/siderolabs/go-pcidb v0.1.0 new
• github.com/siderolabs/go-pointer v1.0.0 new
• github.com/siderolabs/pkgs v1.0.0-6-g7c293d5 -> v1.1.0-8-gfa9a488
• github.com/siderolabs/tools v1.0.0-1-g4c77d96 -> v1.1.0-1-g134974c
• github.com/spf13/cobra v1.3.0 -> v1.4.0
• github.com/spf13/pflag v1.0.5 new
• github.com/stretchr/testify v1.7.0 -> v1.7.1
• github.com/talos-systems/go-blockdevice v0.3.1 -> v0.3.2
• github.com/talos-systems/go-loadbalancer v0.1.1 -> v0.1.2
• github.com/talos-systems/go-smbios v0.1.1 -> v0.2.0
• github.com/talos-systems/siderolink v0.1.0 -> v0.1.2
• github.com/vishvananda/netlink 650dca95af54 -> v1.2.0-beta
• github.com/vmware-tanzu/sonobuoy v0.56.2 -> v0.56.6
• github.com/vmware/govmomi v0.27.4 -> v0.28.0
• github.com/vmware/vmw-guestinfo cc1fd90d572c -> 510905f0efa3
• github.com/vultr/metadata v1.0.3 -> v1.1.0
• go.etcd.io/etcd/api/v3 v3.5.2 -> v3.5.4
• go.etcd.io/etcd/client/pkg/v3 v3.5.2 -> v3.5.4
• go.etcd.io/etcd/client/v3 v3.5.2 -> v3.5.4
• go.etcd.io/etcd/etcdutl/v3 v3.5.2 -> v3.5.4
• golang.org/x/net 27dd8689420f -> 5463443f8c37
• golang.org/x/sync 036812b2e83c -> 0976fa681c29
• golang.org/x/sys 4e6760a101f9 -> bc2c85ada10a
• golang.org/x/term 03fcf44c2211 -> 065cf7ba2467
• golang.org/x/time 0e9765cccd65 -> 583f2d630306
• golang.zx2c4.com/wireguard/wgctrl fde48d68ee68 -> 3d4a969bb56b
• google.golang.org/grpc v1.44.0 -> v1.46.2
• google.golang.org/protobuf v1.27.1 -> v1.28.0
• k8s.io/api v0.23.5 -> v0.24.2
• k8s.io/apimachinery v0.23.5 -> v0.24.2
• k8s.io/apiserver v0.23.5 -> v0.24.2
• k8s.io/client-go v0.23.5 -> v0.24.2
• k8s.io/component-base v0.23.5 -> v0.24.2
• k8s.io/cri-api v0.23.5 -> v0.24.2
• k8s.io/klog/v2 v2.60.1 new
• k8s.io/kubectl v0.23.5 -> v0.24.2
• k8s.io/kubelet v0.23.5 -> v0.24.2
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.63 -> v1.2.64

Previous release can be found at v1.0.0

Images

ghcr.io/siderolabs/flannel:v0.18.1
ghcr.io/siderolabs/install-cni:v1.1.0-1-g5800284
docker.io/coredns/coredns:1.9.3
gcr.io/etcd-development/etcd:v3.5.4
k8s.gcr.io/kube-apiserver:v1.24.2
k8s.gcr.io/kube-controller-manager:v1.24.2
k8s.gcr.io/kube-scheduler:v1.24.2
k8s.gcr.io/kube-proxy:v1.24.2
ghcr.io/siderolabs/kubelet:v1.24.2
ghcr.io/siderolabs/installer:v1.1.0
k8s.gcr.io/pause:3.6

---

This discussion was created from the release v1.1.0.