v0.2.0-alpha.0

theila 0.2.0-alpha.0 (2022-03-24)

Welcome to the v0.2.0-alpha.0 release of theila!
This is a pre-release of theila

Please try out the release binaries and report any issues at
https://github.com/siderolabs/theila/issues.

The New UI

Sidero UI is getting the next iteration of the design.
The color scheme was aligned to the new Sidero company color scheme.

Main changes UX-wise:

• all clusters are now placed in the context dropdown: both kubeconfig clusters and CAPI clusters.
• now it is possible to see Kubernetes upgrades history (dropped after theila restart as of now).
• pod information has got more details.
• servers list is now also available for CAPI clusters.
• now the UI provides summary page for cluster resources usage.

Contributors

• Andrey Smirnov
• Artem Chernyshev
• Alexey Palazhchenko
• Serge Logvinov
• Noel Georgi
• Andrey Smirnov
• Spencer Smith
• Seán C McCord
• evgeniybryzh
• Andrew Rynhard
• Artem Chernyshev
• Steve Francis
• Alexey Palazhchenko
• Florian Klink
• Nico Berlee
• Rui Lopes
• Spencer Smith
• Andrey Smirnov
• Bernard Sébastien
• Branden Cash
• Charlie Haley
• Eric Wohltman
• Jori Huisman
• Lennard Klein
• Matt Layher
• Michael Fornaro
• Niklas Metje
• Olli Janatuinen
• Philipp Sauter
• Rohit Dandamudi
• Shahar Naveh
• Tim Jones
• Utku Ozdemir
• Volodymyr Mazurets
• nebulait

Changes

34 commits

• d0a083d release(v0.2.0-alpha.0): prepare release
• 53878ee fix: properly update servers menu item when the context is changed
• b4cb9c7 feat: restyle TMonitor page
• f0377e2 fix: invert chart value for cpu, storage and memory on the overview page
• 6ea6ecf fix: update capi-utils to fix talosconfig requests for CAPI clusters
• e3796d3 chore: update capi-utils
• 39186eb feat: implement overview page, cluster dropdown, ongoing tasks
• 59f2b27 docs: update README.md
• 2b7831f feat: add Kubernetes and Servers pages
• 4451a5b fix: properly set TaskStatus namespace in the initial call
• 4545464 fix: add new fields to the TaskStatus spec, update Talos
• 891cf3b docs: describe client context types, usage
• 309b515 feat: update k8s upgrades tasks structure for the new UI representation
• 5aa8ca2 feat: add NodesPage
• db434e0 feat: add TPagination component
• 0b51727 feat: add Pods, Dashboard, Upgrade views, etc
• c549b8b feat: add Overview and Upgrade Kubernetes pages
• cec2e85 chore: define constants for all used resource types
• 962bdaf feat: add TSideBar
• fa28ccb feat: add TheHeader component
• f3418a5 feat: button;icons;config
• db30f50 fix: add frontend/node_modules to gitignore
• a675b86 fix: properly pass label selector to the metadata in ClusterListItem
• 7911d6a chore: add ability to start local development server for the frontend
• 076fee1 feat: use CAPI utils for CAPI requests
• 5ed5ba2 fix: more websocket client bugfixes
• 6fe22ad fix: reset reconnect timeouts after the client is reconnected
• c4b144a fix: talosconfig/kubeconfig when using the default context
• b439a37 fix: properly handle Same-Origin header in websockets
• ffffed1 fix: read node name from nodename resource instead of hostname
• 2d6f984 fix: use secure websockets if the page itself is using https
• 799f2d2 feat: rework the node overview page
• 0d0eaf4 fix: make charts height resize depending on the screen height
• 7de0101 fix: use polyfill to fix streaming APIs on Firefox

Changes from talos-systems/capi-utils

26 commits

• e994250 fix: use correct name for getting talosconfig secret
• 3a6f8ee feat: read talosconfig from secret instead of status
• dc4a2f3 chore: update libs, rekres, update Go version (#25)
• e8c3bf9 feat: pass through an option to wait for providers to be set up
• 144451c feat: switch to CAPI v1beta1
• 151aac2 fix: properly define calico version
• 658f48a feat: support getting cluster template files by http urls
• e0cadf5 feat: add method to fetch a k8s client
• b018ea2 feat: add ability to pass custom Proxy implementation in clusterapi
• b2f8f83 feat: update cluster API library to the latest version
• f2a34fd chore: do not rely on ENV variables to configure CAPI client
• 9587089 feat: add API method to get CAPI version
• 3053852 chore: update go mod to remove requires
• 2e0c2fe feat: allow for specifying namespace in infra providers
• e5fdc2a feat: enable builds of darwin/windows
• 028c7d3 fix: call sync until number of replicas != actual replicas
• 0fbad9a fix: sync talos config and nodes list after scaling
• c1830ba feat: support scaling cluster nodes up and down
• 5e78193 feat: add ability to detect CAPI version and installed infra providers
• c20b1a8 fix: do CAPI init once if several infra providers are defined
• 83353b6 fix: remove lots of unused indirect dependencies
• 9a6b78a chore: move provider creation code to the common method
• c2adaee feat: add DestroyCluster function
• 81aabe0 feat: support bootstrapping AWS clusters
• 64a30e7 feat: add the code for bootstrapping CAPI using kubeconfig
• 6f52762 Initial commit

Changes from talos-systems/go-retry

8 commits

• c78cc95 fix: implement errors.Is for all errors in the set
• 7885e16 feat: add ExpectedErrorf
• 3d83f61 feat: deprecate UnexpectedError
• b9dc1a9 feat: add support for context.Context in Retry
• 8c63d29 fix: correctly implement error interfaces on wrapped errors
• 752f081 feat: add an option to log errors being retried
• 073067b feat: copy initial version from talos-systems/talos
• c7968c5 Initial commit

Changes from talos-systems/talos

521 commits

• 602e049d release(v1.0.0-beta.1): prepare release
• 06647da3 chore: fix equinixMetal platform name
• 7e31e7d8 feat: bump boot partition size to 1000 MiB
• 83d7aebe fix: check for IPv6 before applying accept_ra
• d785204a chore: disable one commit per PR
• f7ad1b98 release(v1.0.0-beta.0): prepare release
• 0aa23cb3 feat: update pkgs to 1.0 versions, Go 1.17.8
• dc8e9ed4 feat: bond interfaces from kernel cmdline
• 947c77b6 docs: update cilium inline install
• 65447200 chore: update talos-systems modules to released version
• 77158a61 chore: rename v0.15 to v1.0
• 22a4d6b3 feat: update containerd to 1.6.1
• a50747a6 fix: align list and diskusage command flags with their Linux analogs
• d29e9202 chore: remove iSCSI packages from the rootfs image
• 09efa62f chore: re-enable kexec and default to UEFI booting in tests
• 8975a56e docs: fix typo in release notes
• 61461de6 feat: define resource reservation
• 7ddc7f60 feat: support specifying env vars for control plane pods
• 7c1924a3 docs: update cilium docs
• 7b33ffbd chore: update pkgs and extras
• c5992c2b chore: bump dependencies
• de69ab79 fix: scaleway network config
• f81fb9f7 feat: implement sysfs
• 79d9720a fix: set route to metaserver for scaleway platform
• eb40b925 feat: add a way to override kubelet configuration via machine config
• dc237154 chore: update packet to equinix
• 7917b1ac feat: support admission control configuration and Pod Security admission
• 45feb72a feat: fluent-bit example
• 9b0b5501 docs: add katacoda link
• b2bf3117 feat: implement extension services
• 063a9e16 test: pre-fetch CLI tools
• d749643e feat: download metadata on Scaleway using low source port
• 1800b4c7 chore: fix kernel reference errata
• 743a0300 chore: bump github.com/mdlayher/arp@latest
• 614adf0f feat: update xfsprogs to 5.14.2, replace LibreSSL with OpenSSL
• 28c3b495 docs: updates to troubleshooting doc
• 673fe2eb feat: disable PSP by default for Talos >= 0.15
• 4d419a00 feat: store audit logs to disk
• 8ef3d85b chore: bump dependencies
• 8a634d56 chore: bump tools, pkgs, extras
• f40b480b chore: expand Cilium deployment docs
• 3ba8eb00 docs: design concepts page
• a5fb271a feat: enable protectKernelDefaults in kubelet_spec
• b7a1e043 chore: don't append initrd= to the kernel command line
• 4d5cd665 feat: add new grub parser and descriptive grub menu entries
• 6ccfdbaf fix: avoid replacing default gRPC codec in machinery
• 0fe34b35 feat: update Kubernetes to 1.23.4
• 95a564ba fix: prefer logical on merging link specs
• 8b7091a0 fix: correct vultr interface IP calculation
• 5a0fd63c fix: determine openstack interface IP correctly
• 00ccaf13 feat: update CoreDNS to 1.9.0
• a9a47b75 feat: update containerd to 1.6.0
• 961067e8 docs: update getting-started.md
• bddd53fc chore: bump dependencies
• f1a93d28 release(v0.15.0-alpha.2): prepare release
• 1e9f0ad4 feat: update Go to 1.17.7, Linux to 5.15.23
• fef99892 chore: pin kubernetes version to talosctl gen config
• bcf92813 feat: udev extensions support
• 47619f83 docs: update system extensions guide with grammar fixes
• 2bcceb6e chore: disable TIPC and B.A.T.M.A.N
• c6bca1b3 docs: add guide on system extensions
• 492b156d feat: implement static pods via machine configuration
• 6fadfa8d fix: parse properly IPv6 address in the cmdline ip= arg
• d991f398 chore: update the kernel with IGC driver enabled
• cbc9610b feat: sysctl system optimization
• 8b6d6220 fix: parse interface ip correctly (nocloud)
• 54632b1b docs: fix developing Talos docs
• 0da370df test: unlock CABPT/CACPPT provider versions
• df0e388a feat: extract firmware part of system extensions into initramfs
• 8899dd34 chore: add json-tags for SecretsBundle
• 4f391cd5 chore: bump kernel to 5.15.22
• 6bd07406 feat: disable reboots via kexec
• 1e3f2f95 fix: validate kubelet node IP subnets correctly
• d211bff4 feat: enable accept_ra when IPv6 forwarding
• 93020583 chore: update kernel to 5.15.21
• c7186ed0 chore: bump dependencies
• 9ee470f9 feat: set /etc/localtime to UTC
• c3476836 fix: disable auto-tls for etcd
• 9bffc7e8 fix: pass proper sequence to shutdown sequence on ACPI shutdown
• e47387e4 chore: bump CAPI to 1.0.4
• 5462f5ed feat: update etcd to 3.5.2
• f6fa12e5 docs: update upgrading Talos, Kubernetes, and Docker guides
• 5484579c feat: allow link scope routes in the machine config
• 56b83b08 feat: enable persistence for docker provider
• 949464e4 fix: use leaf certificate in the apid RBAC check
• 446972f2 chore: bump kernel to 5.15.19
• fe40e7b1 feat: drain node on shutdown
• 7f0b3aae feat: add multiple config patches, patches from files, YAML support
• 202290be docs: update Kubernetes upgrade video
• 036644f7 chore: bump kernel to 5.15.18
• dcde2c4f chore: update k8s upgrade message
• 1c949335 docs: add documentation for Hyper-V
• 7f979091 fix: clean up containerd state on installer run/validate
• 8b98d8eb docs: clarify Filebeat example
• 74c03120 docs: replace Talos upgrades video
• 65e64d42 chore: update kernel to stable 5.15.17
• 4245f72d feat: add --extra-uefi-search-paths option
• 7ffeb6c2 docs: update oracle cloud example
• 151c9df0 chore: add CSI tests for e2e-qemu
• cdb621c8 feat: provide a way to list installed system extensions
• abfb2581 feat: share /lib/firmware across initramfs and rootfs
• ebec5d4a feat: support full disk path in the diskSelector
• 831f65a0 fix: close client provider instead of Talos client in the upgrade module
• 0bf161df test: add integration test for system extensions
• 7b396274 fix: handle 404 errors from AWS IMDS correctly
• 85782faa feat: update Kubernetes to 1.23.3
• c5e5922e chore: bump dependencies
• b3c3ef29 feat: install system extensions
• a0889600 chore: fix golangci-lint install
• a50c4298 fix: use #!/usr/bin/env bash as shebang instead of #!/bin/bash
• 4464b725 fix: qemu: always use runtime.GOARCH for CNI bundle
• e7379c81 release(v0.15.0-alpha.1): prepare release
• 58eb3600 fix: enforce reasonable TLS min tls-min-version
• b8d4c5df fix: use correct error in kernel_param_spec Modify call handling
• 4961d686 docs: drop talos.interface kernel arg
• b1e61fa5 chore: update Linux to 5.15.16
• d4b84459 feat: support CRI configuration merging and reimplement registry config
• f94c8c6e feat: update Kubernetes to 1.23.2
• 21f497b3 feat: install readonly overlay mounts during talos chroot sequence
• 9ad5a67d feat: inject platform network configuration as network resources
• 907f8cbf docs: fix patch flag
• caa43442 docs: add documentation on developing Talos
• 16eeb677 docs: readme updates
• 3c073702 chore: update release notes
• 6d8bea5d feat: jetson nano SoC
• 1d8955eb feat: update CoreDNS to 1.8.7
• 6af83afd fix: handle multiple-IP cluster nodes
• 43b2d813 chore: bump dependencies
• 529e80f4 docs: update home page and footer
• 37630e70 Update twitter link
• af440919 fix: avoid panic in config loading/validation
• 4b8e9de5 docs: add guide on adding proprietary kernel modules
• 833dc416 docs: rework vmware assets
• 2869b5ee feat: add oraclecloud.com platform support
• f3ec24be fix: vmware documentation typo
• 2f2bdb26 feat: replace flags with --mode in apply, edit and patch commands
• b09be2a6 docs: update index.md and sync across versions
• ca65b918 docs: add nocloud documentation
• 59437d6d fix: filter down nameservers for docker-based cluster create
• 194eaa6f chore: clean up /usr/bin from unneeded files
• 74e72724 docs: update office office
• 539af338 docs: update vmware docs
• 279a3fda feat: update Go to 1.17.6, containerd to 1.5.9
• 3d308894 chore: bump Go dependencies
• d02d944e chore: provide umarshal from YAML methods for network resource specs
• 2e735714 fix: derive machine-id from node identity
• d8a2721e test: update CAPI components to latest
• 7dff8a53 fix: ignore missing init.yaml for cluster create
• f4516c7d chore: bump dependencies
• 944f1322 chore: fix release pipeline
• cb548a36 release(v0.15.0-alpha.0): prepare release
• da0b36e6 feat: introduce talos.exp.wipe kernel param to wipe system disk
• c079eb32 refactor: use AWS SDK to access AWS metadata service
• 2f4b9d8d feat: make machine configuration read-only in Talos (almost)
• 524f83d3 feat: use official Go SDK to fetch GCP instance metadata
• d2a7e082 test: retry in discovery tests
• f4219e53 chore: remove unused methods in AWS platform
• 35bc2940 fix: kexec on RPI4
• f235cfba fix: multiple usability fixes
• b3fbb2f3 test: don't build all images in the default CI pipeline
• dac550a5 docs: fix troubleshooting guide
• 83e8bec6 feat: update Linux to 5.15.11
• d5a82b37 feat: remove ApplyDynamicConfig
• 3623da13 feat: provide a way to load Linux kernel modules
• 4d1514ad docs: update Mayastor deployment process
• cff1ff6d feat: shell completion for list, read
• 19728437 feat: output IPs when etcd needs to be bootstrapped
• c297d66a test: attempt number on two on proper retries in CLI time tests
• dc299da9 docs: add arm64 option to talosctl download
• f49f40a3 fix: pass path to conformance retrieve results
• 942c8074 docs: fork docs for 0.15
• 880a7782 docs: update documentation for 0.14.0 release
• dc9a0cfe chore: bump Go dependencies
• 77349693 fix: config apply immediate
• 17c14748 test: retry talosctl time call in the tests
• acf1ac0f feat: show human-readable aliases in talosctl get rd
• 5532867b refactor: rewrite the implementation of Processes API
• 80350861 feat: update Kubernetes to 1.23.1
• 4c96e936 docs: add cilium guide
• e3f2acb5 refactor: rewrite the check for unknown keys in the machine configuration
• 4175396a refactor: use update go-blockdevice library with allocation fixes
• b58f567a refactor: optimize Runtime config interface to avoid config marshaling
• bb355c9a chore: remove govalidator library
• 3af56bd2 test: update capi templates to v1beta1
• 936b4c4c fix: update DHCP library with the panic fix
• ab42886b fix: allow kubelet to be started via the API
• ec641f72 fix: use default time servers in time API if none are configured
• 79f213ee fix: cleanup affiliates
• 2dd0b5b6 chore: update Go to 1.17.5
• 97ffa7a6 feat: upgrade kubelet version in talosctl upgrade-k8s
• 5bc5123e docs: document ip= kernel argument
• 8e1d0bfb feat: update Kubernetes to 1.23.0
• 1d6f140d fix: make apply-config work reliably in any Talos state
• a5a6c720 chore: remove boot-{arch}.tar.gz artifact
• fc5ec500 fix: relax validation for wireguard endpoints
• cdbd5cff docs: vlan VIP
• 149ffa97 fix: increase boot and etcd join timeouts
• dc9db214 feat: autocomplete nodes, context and resource definitions
• b4b3e213 chore: bump tools/pkgs/extra to final released versions
• d225cf91 fix: tmpfs default permissions
• 8f3e1a4a fix: drop unpacked layers from containerd image store
• 1fc43619 docs: improve clarity for users
• 36c9a65a feat: update deps and Kubernetes to 1.23.0-rc.1
• 64a4f6e7 test: bump Talos versions in upgrade tests
• d2ebda78 feat: update runc to 1.0.3
• adf05072 chore: drop unused package
• 961d1567 chore: update Go to 1.17.4
• d2fd7c21 feat: make kubelet service apply changes immediately
• 4f5d9da9 feat: allow overriding KSPP kernel parameters
• 6377f3df test: uplift capi versions and templates
• 2a0da062 feat: split installer and imager images
• 1a13aaa2 feat: update Linux to 5.15.6
• 73293bc2 feat: can disable controlmanager and scheduler
• 7f992229 feat: add powercycle mode in reboot
• bc69f6ec feat: vip for VLANs
• 99338e5f feat: update Flannel to 0.15.1
• 8370dde1 docs: fix typos
• a5646db2 feat: support MTU for VLAN's
• 4aad0ebf docs: expand logging documentation
• 400225c8 docs: fix GCP docs
• f7c87d1d release(v0.14.0-alpha.2): prepare release
• e9f4b7b2 feat: update Linux to 5.15.5
• 4d0a75a3 docs: add documentation about logging
• 8d1cbeef chore: add API breaking changes detector
• ed7fb9db feat: move kubelet proccesses to /podruntime cgroup
• 2cd3f9be feat: filter out SideroLink addresses by default
• 0f169bf9 chore: add API deprecations mechanism
• eaf6d472 refactor: use random port listener in kernel log delivery tests
• bf4c81e7 feat: kernel log (kmsg) delivery controller
• f3149780 feat: update Kubernetes to 1.23.0-rc.0
• b824909d fix: disable kexec on RPi4
• 3257751b fix: initialize Drainer properly
• e4bc68bf fix: leave only a single IPv4/IPv6 address as kubelet's node IP
• e6d00741 feat: update pkgs - Linux 5.15.4, LibreSSL 3.2.7
• d5cbc364 feat: add GCP ccm
• 7433150f feat: implement events sink controller
• b4a406ae test: pin cluster API templates version to tag v1alpha4
• 9427e78d fix: catch panics in network operator runs
• d1f55f90 fix: update blockdevice library to properly handle absent GPT
• 5ac64b2d chore: set version in unit-tests
• 20d39c0b chore: format .proto files
• 852bf4a7 feat: talosctl fish completion support
• 6bb75150 fix: allow add_key and request_key in kubelet seccomp profile
• 6487b21f feat: update pkgs for u-boot, containerd, etc
• f7d1e777 feat: provide SideroLink client implementation
• 58892cd6 fix: unblock events watch on context cancel
• caa76be2 fix: containerd failed to load plugin
• 1ffa8e04 feat: add ULA prefix for SideroLink
• c6a67b86 fix: ignore not existing nodes on cordoning
• f7302525 feat: add new event types
• 7c9b082f feat: update Kubernetes to 1.23.0-beta.0
• 750e31c4 fix: ignore EBUSY from kexec_file_load
• 2d11b595 fix: ignore virtual IP as kubelet node IPs
• 030fd349 fix: don't run kexec prepare on shutdown and reset
• 6dcce20e test: set proper pod CIDR for Cilium tests
• 695300da release(v0.14.0-alpha.1): prepare release
• 753a8218 refactor: move pkg/resources to machinery
• 0102a64a refactor: remove pkg/resources dependencies on wgtypes, netx
• 7462733b chore: update golangci-lint
• 032c99a0 refactor: remove pkg/resources dependencies on k8s and base62
• 4a5cff45 perf: raspberry PIs clockspeed as fast as firmware allows
• a76f6d69 feat: allow kubelet to be restarted and provide negative nodeIP subnets
• 189221d5 chore: update dependencies
• 41f0aecc docs: update partition info
• 95105071 chore: fix simple issues found by golangci-lint
• d4b0ca21 test: retry upgrade mutex lock failures
• 4357e9a8 docs: add Talos partions info
• 8e8687d7 fix: use temporary sonobuoy version
• e4e8e873 test: disable e2e-misc test with Canal CNI
• 897da2f6 docs: common typos
• a50483dd feat: update Linux to 5.15.1
• a2233bfe fix: improve NTP sync process
• 7efc1238 fix: parse partition size correctly
• d6147eb1 chore: update sonobuoy
• efbae785 fix: use etc folder for du cli tests
• 198eea51 fix: wait for follow reader to start before writing to the file
• e7f715eb chore: log KubeSpan IPs overlaps
• 82a1ad16 chore: bump dependencies
• e8fccbf5 fix: clear time adjustment error when setting time to specific value
• e6f90bb4 chore: remove unused parameters
• 785161d1 feat: update k8s to 1.23.0-alpha.4
• fe228d7c fix: do not use yaml.v2 in the support cmd
• 9b48ca21 fix: endpoints and nodes in generated talosconfig
• 6e16fd2f chore: update tools, pkgs, and extras
• 261c497c feat: implement talosctl support command
• fc7dc454 chore: check our API idiosyncrasies
• b1584429 feat: use GCP deployment manager
• 3e7d4df9 chore: bump dependencies
• 88f24229 refactor: get rid of prometheus/procfs dependency in pkg/resources
• dd196d30 refactor: prepare for move of pkg/resources to machinery
• f6110f80 fix: remove listening socket to fix Talos in a container restart
• 53bbb13e docs: update docs with emmc boot guide
• 8329d211 chore: split polymorphic RootSecret resource into specific types
• c97becdd chore: remove interfaces and routes APIs
• d798635d feat: automatically limit kubelet node IP family based on service CIDRs
• 205a8d6d chore: make nethelpers build on all OSes
• 5b5dd49f feat: extract JSON fields from more log messages
• eb4f1182 docs: create cluster in hetzner cloud
• 728164e2 docs: fix kexec_load_disabled param name in release notes
• f6328f09 fix: fix filename typo
• 01b0f0ab release(v0.14.0-alpha.0): prepare release
• 8b620653 fix: skip generating empty .machine.logging
• 60ad0063 fix: don't drop ability to use ambient capabilities
• b6b78e7f test: add cluster discovery integration tests
• 97d64d16 fix: hcloud network config changes
• 4c76865d feat: multiple logging improvements
• 1d1e1df6 fix: handle skipped mounts correctly
• 0a964d92 test: fix openstack unit-test stability
• 72f62ac2 chore: bump Go and Docker dependencies
• 9c48ebe8 fix: gcp fetching externalIP
• 6c297268 test: fix e2e k8s version
• ae5af9d3 feat: update Kubernetes to 1.23.0-alpha.3
• 28d3a69e feat: openstack config-drive support
• 2258bc49 test: update GCP e2e script to work with new templates
• 36b6ace2 feat: update Linux to 5.10.75
• 38516a54 test: update Talos versions in upgrade tests
• cff20ec7 fix: change services OOM score
• 666a2b62 feat: azure platform ipv6 support
• d32814e3 feat: extract JSON fields from log lines
• e77d81ff fix: treat literal 'unknown' as a valid machine type
• c8e404e3 test: update vars for AWS cluster
• ad23891b feat: update CoreDNS version 1.8.6
• 41299cae feat: udev rules support
• 5237fdc9 feat: send JSON logs over UDP
• 6d44587a feat: coredns service dualstack
• 12f7888b feat: feed control plane endpoints on workers from cluster discovery
• 431e4fb4 chore: bump Go and Docker dependencies
• 89f3b9f8 feat: update etcd to 3.5.1
• e60469a3 feat: initial support for JSON logging
• 68c420e3 feat: enable cluster discovery by default
• 3e100aa9 test: workaround EventsWatch test flakiness
• 9bd4838a chore: stop using sonobuoy CLI
• 6ad45951 docs: fix field names for bonding configuration
• d7a3b7b5 chore: use discovery-client and discovery-api modules
• d6309eed docs: create docs for Talos 0.14
• c0fda643 fix: attempt to clean up tasks in containerd runner
• 8cf442da chore: bump tools, pkgs, extras
• 0dad5f4d chore: small cleanup
• e3e2113a feat: upgrade CoreDNS during upgrade-k8s call
• d92c98e1 docs: fix discovery service documentation link
• e44b11c5 feat: update containerd to 1.5.7, bump Go dependencies
• 24129307 docs: make Talos 0.13 docs latest, update documentation
• 31b6e39e fix: delete expired affiliates from the discovery service
• 877a2b6f test: bump CAPI components to v1alpha4
• 2ba0e0ac docs: add KubeSpan documentation
• 997873b6 fix: use ECDSA-SHA512 when generating certs for Talos < 0.13
• 7137166d fix: allow overriding audit-policy-file in kube-apiserver static pod
• 8fcd4219 chore: fix integration-qemu-race
• 91a858b5 fix: sort output of the argument builder
• 657f7a56 fix: use ECDSA-SHA256 signature algorithm for Kubernetes certs
• 983d2459 feat: suppress logging NTP sync to the console
• 022c7335 fix: add interface route if DHCP4 router is not directly routeable
• 66a1579e fix: don't enable 'no new privs' on the system level
• 423861cf feat: don't drop capabilities if kexec is disabled
• facc8c38 docs: fix documentation for cluster discovery
• ce65ca4e chore: build using only amd64 builders
• e9b0f010 chore: update docker image in the pipeline
• 5f277713 chore: prepare for 0.13-beta release
• 5e41dd4a feat: add an option to configure kubelet node IP based on subnets
• 72e49029 chore: allow insecure discovery in debug builds
• d52befd1 fix: ignore 404 for AWS external IPs
• 44a63e9a feat: update containerd to 1.5.6
• 0e0fb684 release(v0.13.0-alpha.3): prepare release
• 4044372e feat: harvest discovered endpoints and push them via discovery svc
• 9a51aa83 feat: add an option to skip downed peers in KubeSpan
• cbbd7c68 feat: publish node's ExternalIPs as node addresses
• 0f60ef6d fix: reset inputs back to initial state in secrets.APIController
• 64cb873e feat: override static pods default args by extra Args
• ecdd7757 test: workaround race in the tests with zaptest package
• 9c67fde7 release(v0.13.0-alpha.2): prepare release
• 30ae7142 feat: implement integration with Discovery Service
• 353d632a feat: add nocloud platform support
• 628fbf9b chore: update Linux to 5.10.69
• 62acd625 fix: check trustd API CA on worker nodes
• ba27bc36 feat: implement Hetzner Cloud support for virtual (shared) IP
• 95f440ea test: add fuzz test for configloader
• d2cf021d chore: remove deprecated "join" term
• 0e18e280 chore: bump dependencies
• b450b7ce chore: deprecate Interfaces and Routes APIs
• cddcb962 fix: find devices without partition table
• b1b6d613 fix: check for existence of dhcp6 FQDN first
• 519999b8 fix: use readonly mode when probing devices with All lookup
• 2b520420 feat: enable resource API in the maintenance mode
• 452893c2 fix: make probe open blockdevice in readonly mode
• 96bccdd3 test: update CABPT provider to 0.3 release
• d9eb18bf fix: containerd log symlink
• efa7f48e docs: quicklinks on landing page
• 1cb9f282 fix: don't marshal clock with SecretsBundle
• b27c75b3 release(v0.13.0-alpha.1): prepare release
• 9d803d75 chore: bump dependencies and drop firecracker support
• 50a24104 feat: add operating system version field to discovery
• 085c61b2 chore: add a special condition to check for kubeconfig readiness
• 21cdd854 fix: add node address to the list of allowed IPs (kubespan)
• fdd80a12 feat: add an option to continue booting on NTP timeout
• ef368498 feat: add routes, routing rules and nftables rules for KubeSpan
• ed12379f fix: patch multi nodes support
• d943bb0e feat: update Kubernetes to 1.22.2
• d0585fb6 feat: reboot via kexec
• 3de505c8 fix: skip bad cloud-config in OpenStack platform
• a394d1e2 fix: tear down control plane static pods when etcd is stopped
• 1c05089b feat: implement KubeSpan manager for Wireguard peer state
• ec7f44ef fix: completely prevent editing resources other than mc
• 19a8ae97 feat: add vultr.com cloud support
• 0ff4c7cd fix: write KubernetesCACert chmodded 0400 instead of 0500
• a1c9d649 fix: update the way results are retrieved for certified conformance
• a0594540 chore: build using Go 1.17
• 7c5045bd release(v0.13.0-alpha.0): prepare release
• ee2dce6c chore: bump dependencies
• ef022959 fix: print etcd member ID in hex
• 5ca1fb82 fix: multiple fixes for KubeSpan and Wireguard implementation
• b1bd6425 fix: build platform images
• 3b5f4038 feat: add scaleway.com cloud support
• f156ab18 feat: add upcloud.com cloud support
• c3b2429c fix: suppress spurious Kubernetes API server cert updates
• ff90b575 feat: implement KubeSpan peer generation controller
• 14c69df5 fix: correctly parse multiple pod/service CIDRs
• 69897dbb feat: drop some capabilities to be never available
• 51e9836b docs: promote 0.12 docs to be the latest
• 812d59c7 feat: add hetzner.com cloud support
• d53e9e89 chore: use named constants
• 2dfe7f1f chore: bump tools to the latest version
• 82b130e7 docs: document required options for extraMounts
• af662210 feat: implement Kubernetes cluster discovery registry
• 2c66e1b3 feat: provide building of local Affiliate structure (for the node)
• d69bd2af chore: enable GPG identity check for Talos
• 8dbd851f chore: update tools/pkgs/extras to the new version
• 0b347570 feat: use dynamic NodeAddresses/HostnameStatus in Kubernetes certs
• bd5b9c96 fix: correctly define example for extraMounts
• 01cca099 docs: update docs for Talos 0.12 release
• 668627d5 feat: add subnet filter for etcd address
• 3c3c281b chore: bump dependencies via dependabot
• f8bebba2 fix: ignore error on duplicate for MountStatus
• 6956edd0 feat: add node address filters, filter out k8s addresses for Talos API
• caee24bf feat: implement KubeSpan identity controller
• da0f6e7e fix: allow updating diskSelector option
• 761ccaf3 feat: provide machine configuration for KubeSpan and cluster discovery
• a81e30cb docs: add bootstrap command to VMware docs
• 97da354c fix: do not panic on invalid machine configs
• c4048e26 fix: don't extract nil IPs in the GCP platform
• ba169c6f feat: provide talosctl.exe for Windows
• 6312f473 fix: properly handle omitempty fields in the validator
• 7f22879a feat: provide random node identity
• 032e7c6b chore: import yaml.v3 consistently
• 80b5f0e7 fix: validate IP address returned as HTTP response in platform code
• c9af8f7f docs: fork docs for 0.13
• 85cda1b9 feat: provide MountStatus resource for system partition mounts
• 950f122c chore: update versions in upgrade tests
• 83fdb772 feat: provide first NIC hardware addr as a resource
• 5f5ac12f fix: properly case the VMware name
• 0a6048f4 fix: don't allow bootstrap if etcd data directory is not empty
• e24b93b4 fix: cgroup delegate
• 751f64f9 docs: add release notes for 0.12, support matrix
• 57a77696 feat: update Kubernetes to 1.22.1
• 244b08cc chore: bump dependencies
• 576ba195 fix: do not set KSPP kernel params in container mode
• b8c92ede fix: don't support cgroups nesting in process runner
• 9bb0b797 test: adapt tests to the cgroupsv2
• 1abc12be fix: extramount should have yaml:",inline" tag
• 2b614e43 feat: check if cluster has deprecated resources versions
• 0b86edab fix: don't panic if the machine config doesn't have network (EM)
• 8bef41e4 fix: make sure file mode is same (reproducibility issue)
• fcfca55a chore: do not check that go mod tidy gives empty output
• 5ce92ca5 docs: ensure azure VMs are 0 indexed
• c601dc73 chore: update versions to final release tags
• 82731124 chore: run e2e-qemu test against Talos with race-detector enabled
• 37ea2c9c feat: support for route source addresses in the configuration
• 0ef8f83a chore: bump dependencies via dependabot
• 2108fd7b feat: update Linux to 5.10.58 and many pkgs updates
• 6ee690d9 release(v0.12.0-alpha.1): prepare release
• 1ed5e545 feat: add ClusterID and ClusterSecret
• 228b3761 chore: run etcd as non-root user
• 3518219b chore: drop deprecated --no-reboot param and KernelCurrentRoot const
• 33d1c3e4 chore: run apid and trustd services as non-root user
• dadaa65d feat: print uid/gid for the files in ls -l
• e6fa401b fix: enable seccomp default profile by default
• 8ddbcc96 feat: validate if extra fields present in the decoder
• 5b57a980 chore: update Go to 1.16.7, Linux to 5.10.57
• eefe1c21 feat: add new etcd members in learner mode
• b1c66fba feat: implement Equinix Metal support for virtual (shared) IP
• 62242f97 chore: require GPG signatures
• faecae44 feat: make ISO builds reproducible
• 887c2326 release(v0.12.0-alpha.0): prepare release
• a15f0184 fix: move etcd PKI under /system/secrets
• eb02afe1 fix: match correctly routes on the address family
• cb948acc feat: allow multiple addresses per interface
• e030b2e8 chore: use k8s 1.21.3 in CAPI tests for now
• e08b4f8f feat: implement sysctl controllers
• fdf6b243 chore: revert "improve artifacts generation reproducibility"
• b68ed1eb fix: make route resources ID match closer routing table primary key
• 585f6337 fix: correctly handle nodoc for struct fields
• f2d394dc docs: add AMIs for v0.11.5
• d0970cbf feat: bootstrap token limit
• 5285a46d fix: maintenance mode reason message
• 009d15e8 chore: use etcd client TryLock function on upgrade
• 4dae9ea5 chore: use vtprotobuf compiled marshaling in Talos API
• 7ca5749a chore: bump dependencies via dependabot
• b2507b41 chore: improve artifacts generation reproducibility
• 1f7dad23 chore: update PKGS version (512 cpus, new ca-certficates)
• 1a2e78a2 fix: update go-blockdevice
• 6d6ed117 chore: use parallel xz with higher compression level
• 571f7db1 chore: workaround GitHub new release notes limit
• 09d70b7e feat: update Kubernetes to v1.22.0
• f25f10e7 feat: add an option to disable PSP
• 7c6e4cf2 feat: allow both DHCP and static addressing for the interface
• 3c566dbc fix: remove admission plugins enabled by default from the list
• 69ead373 fix: preserve PMBR bootable flag correctly
• dee63051 fix: align partitions with minimal I/O size
• 62890229 feat: update GRUB to 2.06
• b9d04928 feat: move system processes to cgroups
• 0b8681b4 fix: resolve several issues with Wireguard link specs
• f8f4bf3b docs: add disk encryptions examples
• 79b8fa64 feat: update containerd to 1.5.5
• 539f4209 chore: bump dependencies via dependabot
• 0c7ce1cd feat: remove remnants of bootkube support
• d4f9804f chore: fix typos
• 5f027615 feat: expose more encryption options to the machine config
• 585152a0 chore: bump dependencies
• fc66ec59 feat: set oom score for main processes
• df54584a fix: drop linux capabilities
• f65d0b73 docs: add 0.11.3 AMIs
• 7332d636 fix: bump pkgs for new kernel 5.10.52

Dependency Changes

• github.com/cosi-project/runtime 25f235cd0682 -> 264f8fcd1a4f
• github.com/pkg/errors v0.9.1 new
• github.com/spf13/cobra v1.2.1 -> v1.3.0
• github.com/talos-systems/capi-utils e994250edede new
• github.com/talos-systems/go-retry v0.3.1 new
• github.com/talos-systems/talos 70d2505b7c88 -> v1.0.0-beta.1
• github.com/talos-systems/talos/pkg/machinery 2e463348b26f -> v1.0.0-beta.1
• go.uber.org/zap v1.18.1 -> v1.21.0
• golang.org/x/oauth2 a8dc77f794b6 -> d3ed0bb246c8
• google.golang.org/grpc v1.39.0 -> v1.44.0
• k8s.io/api v0.21.3 -> v0.23.4
• k8s.io/apiextensions-apiserver v0.19.1 -> v0.23.0
• k8s.io/apimachinery v0.21.3 -> v0.23.4
• k8s.io/client-go v0.21.3 -> v0.23.4
• sigs.k8s.io/cluster-api v0.3.20 -> v1.1.2
• sigs.k8s.io/controller-runtime v0.6.3 -> v0.11.1

Previous release can be found at v0.1.1