3925 Commits

Author SHA1 Message Date
Andrey Smirnov
993743f634
fix: skip hostname via DHCP on OpenStack platform
Introduce new DHCP operator option to skip hostname request/response,
and use that in OpenStack platform.

OpenStack configures interface with DHCP, while providing dummy hostname
over DHCP and proper hostname over metadata. As operators override
platform settings, DHCP hostname takes over OpenStack hostname. As a
fix, ignore DHCP hostname while on OpenStack.

Fixes #6350

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-10-10 14:18:46 +04:00
Serge Logvinov
db076e7b5a
feat: pin interface by mac address in cmdline args
Example, set interface IP address by MAC:

```cmdline: ip=172.20.0.2::172.20.0.1:255.255.255.0::enx001122aabbcc```

Interface MAC is `00:11:22:aa:bb:cc`.

Source: https://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-10-10 13:56:42 +04:00
Andrey Smirnov
63de937227
fix: update go-smbios to v0.3.1
See https://github.com/siderolabs/go-smbios/pull/14

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-10-09 12:53:03 +04:00
Noel Georgi
49e9f808e7
chore: bump kernel and go
Bump kernel to [5.15.72](https://github.com/siderolabs/pkgs/pull/601)
Bump Go to 1.19.2
 - https://github.com/siderolabs/pkgs/pull/599
 - https://github.com/siderolabs/extras/pull/62

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-10-06 07:15:06 +05:30
Steve Francis
c7372144de
docs: add constraints to upgrade docs
This PR clarifies the upgrade docs a bit.

Signed-off-by: Steve Francis <steve.francis@talos-systems.com>
2022-10-05 21:12:59 -04:00
Steve Francis
c71c8ca18f
docs: consolidate, simplify and correct various docs
This PR updates various docs to clarify them.

Signed-off-by: Steve Francis <steve.francis@talos-systems.com>
2022-10-04 12:14:35 -04:00
Andrey Smirnov
06f76bfebb
chore: bump dependencies
Update to some dependencies moved to siderolabs/ path.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-10-04 14:47:27 +04:00
Noel Georgi
b1c421b9ad
chore: publish ami's with imds v2 enabled
Publish AMI's with IMDS v2 enabled.

Ref: https://aws.amazon.com/about-aws/whats-new/2022/10/amazon-machine-images-support-instance-metadata-service-version-2-default/

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-10-04 13:45:54 +05:30
Steve Francis
195c40ab59
docs: add information about applicable use cases of disk encryption
This PR clarifies the docs on disk encryption.

Signed-off-by: Steve Francis <steve.francis@talos-systems.com>
2022-10-03 21:17:07 -04:00
Steve Francis
54a687fb8e
docs: consolidate and expand on discovery service
This PR expands the explanation of the discover service.

Signed-off-by: Steve Francis <steve.francis@talos-systems.com>
2022-10-03 20:53:24 -04:00
Andrey Smirnov
139c62d762
feat: allow upgrades in maintenance mode (only over SideroLink)
This implements a simple way to upgrade Talos node running in
maintenance mode (only if Talos is installed, i.e. if `STATE` and
`EPHEMERAL` partitions are wiped).

Upgrade is only available over SideroLink for security reasons.

Upgrade in maintenance mode doesn't support any options, and it works
without machine configuration, so proxy environment variables are not
available, registry mirrors can't be used, and extensions are not
installed.

Fixes #6224

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-30 21:16:15 +04:00
Noel Georgi
48dee48057
feat: support mtu for routes
Support setting MTU for routes.

Fixes: #6324

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-30 16:38:22 +05:30
Noel Georgi
1c43c72aeb
docs: fix talos required kernel params
Fix Talos required kernel parameters. `talos.config` is optional.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-29 01:53:55 +05:30
Andrey Smirnov
67cc45ae3f
release(v1.3.0-alpha.0): prepare release
This is the official v1.3.0-alpha.0 release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-28 17:45:28 +04:00
Serge Logvinov
18c377a4d1
feat: customize audit policy
Add resource `AuditPolicyConfigs.kubernetes.talos.dev`.
It can be changed through machine config `cluster.apiServer.auditPolicy`

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-28 13:46:44 +04:00
Noel Georgi
23c9ea46bb
fix: raspberry pi install
Fix raspberry pi install.

Some fixes were missed from #6388

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-28 01:09:28 +05:30
Philipp Sauter
f17cdee167
feat: jsonpath filter for talosctl get outputs
We add a filter to the `talosctl get` command that allows users to
specify a jsonpath filter. Now they can reduce the information that is
printed to only the parts they are interested in.

Fixes #6109

Signed-off-by: Philipp Sauter <philipp.sauter@siderolabs.com>
2022-09-27 20:47:11 +02:00
Noel Georgi
6bd3cca1a8
chore: generic raspberry pi images
Use generic Raspberry Pi images. Deprecate the RPi4 specific image.

Ref: https://github.com/siderolabs/pkgs/pull/596

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-27 16:39:12 +05:30
Andrey Smirnov
d914ab8bb4
chore: add vulncheck tool as a linter
See https://go.dev/security/vuln/

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-27 14:40:50 +04:00
Kris Reeves
a0151aa13e
feat: add generic rpi u-boot support
This commit adds support for building Talos for the
Compute Module 4 and other generic Raspberry Pi
hardware.

Fixes: #6273

Signed-off-by: Kris Reeves <kris@pressbuttonllc.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-26 21:04:07 +05:30
Andrey Smirnov
30f851d093
chore: bump dependences
go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-26 18:37:38 +04:00
Andrey Smirnov
8b2235c3b6
fix: lookup Equinix Metal bond slaves using 'permanent addr'
See #6333

Using permanent address fixes issues with mis-matching the links after
they got bonded.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-26 18:10:39 +04:00
Noel Georgi
b3257ebb1c
chore: bump kernel to 5.15.70
Bump kernel to [5.15.70](https://github.com/siderolabs/pkgs/pull/594)

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-26 17:34:47 +05:30
Andrey Smirnov
0b2767c164
feat: implement 'permanent addr' in link statuses
Permanent address is only available for physical links, and it might be
different from the 'hardware address': when bonding, 'hardware address'
gets overridden from the bond master, while 'permanent address' still
shows MAC of the interface.

This part of the fix for incorrect bonding issue on Equinix Metal.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-26 14:45:46 +04:00
Serge Logvinov
c90e20251d
fix: kubeconfig permission
Set kubeconfig permission to `-rw-------`

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-23 15:00:43 +04:00
Dmitriy Matrenichev
fc48849d00
chore: move maps/slices/ordered to gen module
Use github.com/siderolabs/gen

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2022-09-21 20:22:43 +03:00
Andrey Smirnov
8b09bd4b04
feat: update Kubernetes to v1.26.0-alpha.1
Talos 1.3.0 will ship with Kubernetes 1.26.0.

See https://github.com/kubernetes/kubernetes/releases/tag/v1.26.0-alpha.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-21 18:42:31 +04:00
Andrey Smirnov
276d4175bb
chore: bump extension versions in testing
Test with recent versions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-21 17:16:31 +04:00
Noel Georgi
357b770cb5
fix: cryptsetup delete slot
Fix cryptsetup delete slot.

Fixes: #6298

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-21 16:37:54 +05:30
Andrey Smirnov
7111288393
fix: continue applying bootstrap manifests on some errors
Fixes #6302

This allows Talos to proceed if some manifest is invalid (or malformed),
while aborts the loop on connection errors (when `kube-apiserver` is not
ready).

This fixes a problem when a single resource might stop all manifests
from being applied and preventing a cluster bootstrap.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-20 22:27:17 +04:00
Andrey Smirnov
ce12c7b380
chore: update COSI runtime to v0.2.0-alpha.1
This adds metadata annotations and fixes some hanging watch loops.

There should be no functional changes for Talos.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-20 22:02:57 +04:00
Noel Georgi
1b435c0b36
chore: bump kernel + ice drivers
Bump kernel to [5.15.69](https://github.com/siderolabs/pkgs/pull/592)
Add Intel ice drivers

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-20 22:05:02 +05:30
Tim Jones
18e041f1ec
docs: fix typo in patching example
Fix missing 'mc' in talosctl patch example command.

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-09-20 15:03:31 +02:00
Andrey Smirnov
0ad6452ca1
feat: update CoreDNS to v1.10.0
See https://github.com/coredns/coredns/blob/master/notes/coredns-1.10.0.md

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-19 18:29:54 +04:00
Andrey Smirnov
479f3f52ee
chore: bump dependencies
go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-19 18:02:50 +04:00
Andrey Smirnov
e07c6ae99e
feat: update Kubernetes to v1.25.1
See https://github.com/kubernetes/kubernetes/releases/tag/v1.25.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-19 16:23:00 +04:00
Andrey Smirnov
13fdfaffc4
test: fix up default branch name
master -> main

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-19 15:35:44 +04:00
Sander Maijers
ef181321a5
docs: add component diagram; K8s & Talos Linux
- Provide editable component diagram
  (diagrams.net).
- Document for both 1.2 and 1.3.

Signed-off-by: Sander Maijers <3374183+sanmai-NL@users.noreply.github.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-19 12:08:11 +05:30
Andrey Smirnov
aade736435
docs: fix missing variable in OpenEBS docs
With misisng variable it rendered as empty creating confusion for our
users.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-15 22:24:13 +04:00
Andrey Smirnov
472590aa82
chore: return InvalidArgument on invalid config in maintenance mode
Follow-up fix for #6258

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-15 21:46:48 +04:00
Andrey Smirnov
e5cabd42cc
feat: enable etcd consistency hashcheck
This will be only enabled for Talos v1.3.x.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-15 21:03:40 +04:00
Andrey Smirnov
015535d905
fix: update discovery client with the redirect fix
See https://github.com/siderolabs/discovery-client/pull/4

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-15 20:32:33 +04:00
Noel Georgi
d0c8e7699c
chore: bump kernel and go
Bump kernel to 5.15.68
Bump go to 1.19.1

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-15 21:22:55 +05:30
Andrey Smirnov
985b0c2e79
chore: remove go.work.sum
This file receives many updates, and we don't want to handle them.

Everyone can have it on their local machine.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-15 18:43:35 +04:00
Andrey Smirnov
69124f1026
feat: update etcd to v3.5.5
See https://github.com/etcd-io/etcd/releases/tag/v3.5.5

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-15 17:09:02 +04:00
Pau Campana
1985a796c0
docs: update docs for pod security
Add new section to see how to disable admission control in control
plane.

Signed-off-by: Pau Campana <pau.campanya.soler@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-15 14:41:26 +04:00
Andrey Smirnov
94b088f02f
fix: set etcd options consistently
This fixes an issue introduced in #5879: options should be set same way
for both `init` and `controlplane` cases.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-14 22:56:26 +04:00
Dmitriy Matrenichev
92ae7ef4b1
fix: fix protoenc encoding for enums and types with custom encoders
This commit bumps protoenc to v0.2.0 and also adds tests to ensure that encoding fixes are working correctly.

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2022-09-14 17:47:37 +03:00
Noel Georgi
93809017c5
docs: cpu scaling governor knowledgebase
Add docs on setting cpu scaling governor across all CPUs.

Thanks to @nberlee for the [suggestion](https://github.com/siderolabs/talos/issues/4508#issuecomment-1245633679)

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-14 13:20:28 +05:30
Andrey Smirnov
7b270ff33d
test: fix api controller test
Fixing the test to match the implementation.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-09-13 15:26:32 +04:00