v1.6.5

Talos 1.6.5 (2024-02-22)

Welcome to the v1.6.5 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Kubernetes Upgrade

The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.

Component Updates

Kubernetes: 1.29.2
Linux: 6.1.78

Talos is built with Go 1.21.6.

Contributors

• Andrey Smirnov
• Noel Georgi
• Anastasios Papagiannis
• Andrian Zubovic
• Matthieu S
• Utku Ozdemir
• pardomue

Changes

14 commits

• 22803bc5d release(v1.6.5): prepare release
• e5c198a32 feat: update pkgs
• 54c60ddfb feat: allow access to all resources over siderolink in maintenance mode
• c7f5ff73e fix: use MachineStatus resource to check for boot done
• 7d1378240 feat: support AWS KMS for the SecureBoot signing
• c6e7a95cc feat: custom image settings for k8s upgrade
• 0f5e946f4 fix: ensure that Talos runs in a pod (container)
• fd93ce1b6 feat: update kernel with sfc driver and LSM updates
• 36836878f fix: run xfs_repair on invalid argument error
• 6ea29d927 feat: support systemd-boot ISO enroll keys option
• e993215fe fix: unlock the upgrade mutex properly
• 5515a6bab fix: use a separate cgroup for each extension service
• e7935e6b9 feat: update Linux to 6.1.78
• 959627850 feat: update Kubernetes default to 1.29.2

Changes from siderolabs/pkgs

9 commits

• siderolabs/pkgs@6868f38 feat: enable PSI (pressure stall information)
• siderolabs/pkgs@777cae9 feat: update Linux to 6.1.78
• siderolabs/pkgs@f71ff75 feat: enable VRF module
• siderolabs/pkgs@a7e36fb feat: add support for Solarflare SFC9100 and SFC9200 family
• siderolabs/pkgs@7146892 feat: enable CONFIG_SECURITY_PATH and CONFIG_BPF_LSM
• siderolabs/pkgs@73f3c03 feat: backport iPXE update from main
• siderolabs/pkgs@8ff728c chore: set PREEMPT_NONE as recommended for servers
• siderolabs/pkgs@b849795 fix: enable KFD support in kernel
• siderolabs/pkgs@0b8a78b feat: bring Linux to 6.1.76

Dependency Changes

• github.com/aws/aws-sdk-go-v2/service/kms v1.26.5 new
• github.com/siderolabs/pkgs v1.6.0-16-gb77ffb7 -> v1.6.0-25-g6868f38
• github.com/siderolabs/talos/pkg/machinery v1.6.4 -> v1.6.5
• k8s.io/api v0.29.1 -> v0.29.2
• k8s.io/apiserver v0.29.1 -> v0.29.2
• k8s.io/client-go v0.29.1 -> v0.29.2
• k8s.io/component-base v0.29.1 -> v0.29.2
• k8s.io/kube-scheduler v0.29.1 -> v0.29.2
• k8s.io/kubectl v0.29.1 -> v0.29.2
• k8s.io/kubelet v0.29.1 -> v0.29.2
• k8s.io/pod-security-admission v0.29.2 new

Previous release can be found at v1.6.4

Images

ghcr.io/siderolabs/flannel:v0.23.0
ghcr.io/siderolabs/install-cni:v1.6.0-1-g113887a
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.11
registry.k8s.io/kube-apiserver:v1.29.2
registry.k8s.io/kube-controller-manager:v1.29.2
registry.k8s.io/kube-scheduler:v1.29.2
registry.k8s.io/kube-proxy:v1.29.2
ghcr.io/siderolabs/kubelet:v1.29.2
ghcr.io/siderolabs/installer:v1.6.5
registry.k8s.io/pause:3.8