v1.9.0 #9978
smira
announced in
Announcements
v1.9.0
#9978
Replies: 1 comment
-
thank you, I tried the upgrade today for testing, simple and quick. Thank you for this project |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Talos 1.9.0 (2024-12-17)
Welcome to the v1.9.0 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Auditd
Talos Linux now starts an auditd service by default.
Logs can be read with
talosctl logs auditd
.talosctl cgroups
The
talosctl cgroups
command has been added to thetalosctl
tool.This command allows you to view the cgroup resource consumption and limits for a machine, e.g.
talosctl cgroups --preset memory
.cgroups version 1
Support for cgroupsv1 is deprecated, and will be removed in Talos 1.10 (for non-container mode).
Custom search domains for Talos nodes
Talos now allows to supports specifying custom search domains for Talos nodes using
new config field
machine.network.searchDomains
For the host it will look something like this:
For the pods it will look something like this:
Device Selectors
Talos now supports matching on permanent hardware (MAC) address of the network interfaces.
This is specifically useful to match bond members, as they change their hardware addresses when they become part of the bond.
Direct Rendering Manager (DRM)
Starting with Talos 1.9, the
i915
andamdgpu
DRM drivers will be dropped from the Talos squashfs.There will be new system extensions named
i915
andamdgpu
that would contain both the drivers and firmware packaged together.Upgrades via Image Factory will automatically include the new extensions if previously
i915-ucode
oramdgpu-firmware
were used.Image Cache
Talos now supports providing a local Image Cache for container images.
Kube APIServer Authorization Config
Starting with Talos 1.9,
.cluster.apiServer.authorizationConfig
field supports setting Kubernetes API server authorization modesusing the
--authorization-config
flag.The machine config field supports a list of
authorizers
. For instance:For new cluster if the Kubernetes API server supports the
--authorization-config
flag, it'll be used by default instead of the--authorization-mode
flag.By default Talos will always add the
Node
andRBAC
authorizers to the list.When upgrading if either a user-provided
authorization-mode
orauthorization-webhook-*
flag is set via.cluster.apiServer.extraArgs
, it'll be used instead of the newAuthorizationConfig
.Current authorization config can be viewed by running:
talosctl get authorizationconfigs.kubernetes.talos.dev -o yaml
Node Address Sort
Talos supports new experimental address sort algorithm for
NodeAddress
which are used to pick up default addresses for kubelet, etcd, etc.It can be enabled with the following config patch:
OCI Base Runtime Spec
Talos now allows to modify the OCI base runtime spec for the container runtime.
Registry Mirrors
In versions before Talos 1.9, there was a discrepancy between the way Talos itself and CRI plugin resolves registry mirrors:
Talos will never fall back to the default registry if endpoints are configured, while CRI plugin will.
In Talos 1.9 this was fixed, so that by default an upstream registry is used as a fallback in all cases, while new registry mirror
configuration option
.skipFallback
can be used to disable this behavior both for Talos and CRI plugin.talosctl disks
The command
talosctl disks
was removed, please usetalosctl get disks
,talosctl get systemdisk
, andtalosctl get blockdevices
instead.talosctl wipe
The new command
talosctl wipe disk
allows to wipe a disk or a partition which is not used as a volume.udevd
Talos previously used
eudev
to provideudevd
, now it usessystemd-udevd
instead.Component Updates
Talos is built with Go 1.23.4.
User Namespaces
Talos Linux now supports running Kubernetes pods with user namespaces enabled.
Refer to the documentation for more information.
Contributors
Changes
264 commits
RegistriesConfigController
config.Registry
into the separate resourcesystem_disk
condition work properly before installtimeStampWriter
Close
reader--talosconfig
parameter to end of Hetzner guideUserNamespacesSupport
feature gate is not settalosctl cluster create
DNSUpstreamController
andDNSUpstream
resourceextra-disks
when using isotalosctl
tcell_minimal
/dev/net/tun
compatibilityactivateLogicalVolumes
sequencer stepChanges since v1.9.0-beta.1
26 commits
RegistriesConfigController
Changes from siderolabs/crypto
1 commit
Changes from siderolabs/discovery-api
1 commit
Changes from siderolabs/discovery-client
1 commit
Changes from siderolabs/extras
4 commits
Changes from siderolabs/gen
3 commits
Empty
andEmpty2
iteratorsChanges from siderolabs/go-blockdevice
1 commit
Changes from siderolabs/go-circular
1 commit
Changes from siderolabs/go-cmd
3 commits
Changes from siderolabs/go-kubernetes
6 commits
Changes from siderolabs/grpc-proxy
2 commits
Changes from siderolabs/pkgs
66 commits
/run
as state directoryChanges from siderolabs/proto-codec
3 commits
Changes from siderolabs/siderolink
1 commit
Changes from siderolabs/tools
14 commits
Dependency Changes
Previous release can be found at v1.8.0
Images
This discussion was created from the release v1.9.0.
Beta Was this translation helpful? Give feedback.
All reactions