301 Commits

Author SHA1 Message Date
Andrey Smirnov
f0512dfce9 feat: update Kubernetes to 1.20.5
See CHANGELOG:
https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#changelog-since-v1204

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-03-19 03:14:46 -07:00
bzub
24cd0a2067 feat: publish talosctl container image
Creates a new container image and corresponding Makefile target.

Signed-off-by: bzub <Bryan.Zubrod@target.com>
2021-03-18 13:25:32 -07:00
Alexey Palazhchenko
ecf034496e chore: bump Go to 1.16.2
Bump tools, pkgs, and extras.

Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@gmail.com>
2021-03-17 10:35:37 -07:00
Alexey Palazhchenko
0dbaeb9e65 chore: update tools, use new generators
To stay current.

Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@gmail.com>
2021-03-16 11:17:15 -07:00
Alexey Palazhchenko
891f90fee9 chore: update Linux to 5.10.23
Update pkgs.

Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@gmail.com>
2021-03-15 09:52:02 -07:00
Andrey Smirnov
ca8a5596c7 chore: fix provision tests after changes to build-container
CNI was removed from build-container which works fine for
`talosctl cluster create` clusters as it installs its own CNI, but fails
for upgrade tests as they were never updated for the CNI bundle.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-03-12 09:59:15 -08:00
Artem Chernyshev
83b4e7f744 feat: add Rock pi 4 support
Another nice addition to the list of supported SBCs.

Signed-off-by: Artem Chernyshev <artem.0xD2@gmail.com>
2021-03-12 05:08:29 -08:00
Andrey Smirnov
ee5d9ffac6 chore: bump Go to 1.16.1
This is major Go update to 1.16.x branch.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-03-11 12:52:01 -08:00
Andrey Smirnov
f4ca6e9a6e feat: update containerd to version 1.4.4
See https://github.com/containerd/containerd/releases/tag/v1.4.4

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-03-05 11:00:21 -08:00
Andrey Smirnov
3084a3f35b chore: update tools/pkgs/extras tags
No actual changes, just referencing tagged releases for 0.9.0.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-03-05 07:29:36 -08:00
Andrey Smirnov
7e8f13652c chore: fix upgrade tests by bumping 0.9 to alpha.5
Resources/types were renamed after alpha.4, so we need Talos API to
match expectations of the upgrade test built against master.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-03-03 13:53:06 -08:00
Spencer Smith
a241e9ee47 feat: update linux kernel to 5.10.19
This PR pulls in a new version of pkgs which includes a linux kernel
bump.

Signed-off-by: Spencer Smith <robertspencersmith@gmail.com>
2021-03-02 11:08:40 -08:00
Andrey Smirnov
1d8ed9b5cd chore: update provision/upgrade tests to 0.9.0-alpha.3
This drops support for 0.7.x in upgrade tests, and bumps tests to use
version 0.9.0-alpha.3 as the next stable (it will eventually graduate to
0.9.0).

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-03-02 07:11:16 -08:00
Andrey Smirnov
84ad6cbb1a chore: switch CI to stop embedding local registry into the builds
This adds new `IMAGE_REGISTRY` variable (similar to `IMAGE_TAG`) which
affects only the registry image gets pushed to, but it's not built into
the binaries and images as a default registry.

This fixes a problem when release builds reference our CI local
registry.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-02-24 18:05:37 +03:00
Andrey Smirnov
3b672d342d feat: u-boot 2021.01, ca-certificates update, Linux file ACLs
This brings in following PRs from pkgs:

* talos-systems/pkgs#243
* talos-systems/pkgs#244
* talos-systems/pkgs#245

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-02-20 12:44:26 -08:00
Andrey Smirnov
e9fc54f6e3 feat: update Kubernetes to 1.20.3
https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#changelog-since-v1202

Also updater pkgs for:

* talos-systems/pkgs#238 (raspberrypi-firmware update)
* talos-systems/pkgs#242 (Linux 5.10.17 + init_on_free=0)

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-02-19 05:22:34 -08:00
Andrey Smirnov
7751920dba feat: add a tool and package to convert self-hosted CP to static pods
This is required to upgrade from Talos 0.8.x to 0.9.x. After the cluster
is fully upgraded, control plane is still self-hosted (as it was
bootstrapped with bootkube).

Tool `talosctl convert-k8s` (and library behind it) performs the upgrade
to self-hosted version.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-02-17 23:26:57 -08:00
Spencer Smith
f1d1f72b58 chore(ci): update gcp templates
This PR moves to using the official CAPG provider release, as well as
making use of our snazzy new capi templates.

Signed-off-by: Spencer Smith <robertspencersmith@gmail.com>
2021-02-17 10:33:41 -05:00
Andrey Smirnov
b315a7e1f8 chore: rework Drone pipelines
Collapse builds steps, split integration tests into multiple pipelines,
save and load build artifacts.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-02-17 17:16:02 +03:00
Andrey Smirnov
aa9bef2785 feat: bump Go to 1.15.8
See talos-systems/tools#126, talos-systems/pkgs#241,
talos-systems/extras#10

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-02-16 11:24:44 -08:00
Andrey Smirnov
f9896777fc feat: update Linux to 5.10.14
See talos-systems/pkgs#240

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-02-10 09:41:59 -08:00
Andrey Smirnov
7f3dca8e4c test: add support for IPv6 in talosctl cluster create
Modify provision library to support multiple IPs, CIDRs, gateways, which
can be IPv4/IPv6. Based on IP types, enable services in the cluster to
run DHCPv4/DHCPv6 in the test environment.

There's outstanding bug left with routes not being properly set up in
the cluster so, IPs are not properly routable, but DHCPv6 works and IPs
are allocated (validates DHCPv6 client).

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-02-09 13:28:53 -08:00
Andrew Rynhard
6eafca037d feat: update kernel
Brings in:

- hyperv_utils
- NVMe over TCP

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
2021-02-01 15:56:58 -08:00
Andrey Smirnov
e9aa494775 feat: update Linux to 5.10.7, musl-libc to 1.2.2
Musl update fixes CVE-2020-28928.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2021-01-18 04:58:14 -08:00
Artem Chernyshev
9883d0af19 feat: support Wireguard networking
This the first iteration of Wireguard network support.
What was done:
- kernel was updated to enable Wireguard kernel module.
- changed networkd to support creating Wireguard device type.
- used wgctrl to configure wireguard.
- updated `talosctl cluster create` to support generating Wireguard
network configuration automatically by just specifying the network cidr.
- added docs about Wireguard support/how to use it.

Signed-off-by: Artem Chernyshev <artem.0xD2@gmail.com>
2021-01-14 15:51:14 +03:00
Alexey Palazhchenko
275ca76c5b chore: update protobuf, grpc-go, prototool
To stay current.

Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@gmail.com>
2021-01-11 08:52:58 -08:00
Artem Chernyshev
f9ff4848e0 feat: bump pkgs for kernel with CONFIG_IPV6_MULTIPLE_TABLES
This pulls in:

https://github.com/talos-systems/pkgs/pull/227

Signed-off-by: Artem Chernyshev <artem.0xD2@gmail.com>
2020-12-28 08:18:28 -08:00
Andrey Smirnov
f2c029a07d chore: update upgrade test version used
Now with official 0.8.0 release.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-24 18:49:29 +03:00
Andrey Smirnov
b1d4814308 feat: update Kubernetes to 1.20.1
See https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-21 23:52:29 +03:00
Andrey Smirnov
e115de60e6 feat: bump pkgs for kernel with HZ=250 on amd64
This pulls in:

* https://github.com/talos-systems/pkgs/pull/222
* https://github.com/talos-systems/pkgs/pull/226

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-18 09:42:11 -08:00
Andrey Smirnov
803d566b85 chore: add drone pipeline to upload cloud images
At the moment only AMIs for AWS, and upload results should be pushed
back to the docs as separate PR.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-16 20:50:35 +03:00
Andrey Smirnov
4e99fa83cb feat: bump Linux kernel to 5.10.1, add CONFIG_USB_ACM
This pulls in following PRs:

* https://github.com/talos-systems/pkgs/pull/219
* https://github.com/talos-systems/pkgs/pull/220

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-16 08:59:29 -08:00
Andrey Smirnov
4bc2440834 feat: bump pkgs for kernel with CONFIG_USB_XHCI_PLATFORM
See talos-systems/pkgs#218

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-11 15:09:00 -08:00
Andrey Smirnov
3dae6df27b test: stabilize upgrade test by running health check several times
For single node clusters, control plane is unstable after reboot, run
health check several times to let it settle down to avoid failures in
subsequent checks.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-11 08:31:01 -08:00
Andrey Smirnov
80184393bc feat: update kernel to 5.9.13, new KSPP requirements
Pulls in following changes:

* https://github.com/talos-systems/toolchain/pull/20
* https://github.com/talos-systems/tools/pull/116
* https://github.com/talos-systems/pkgs/pull/214
* https://github.com/talos-systems/pkgs/pull/215
* https://github.com/talos-systems/pkgs/pull/216
* https://github.com/talos-systems/pkgs/pull/217
* https://github.com/talos-systems/go-procfs/pull/4

New empty amd64 images for u-boot & rpi-firmware reduce the size of
amd64 installer image.

For backwards compatibility QEMU provisioner still injects "legacy" KSPP
kernel args into initial boot environment.

Installer correctly upgrades KSPP options when moving from one version
of Talos to another.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-10 12:41:58 -08:00
Andrey Smirnov
872e792dbc feat: update Kubernetes to 1.20.0
Official K8s release matching Talos 0.8.0.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-09 06:11:48 -08:00
Andrey Smirnov
1cf6b98fb8 test: bump Talos release version for upgrade test to 0.7.1
We should always use latest releases.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-08 18:41:28 +03:00
Andrey Smirnov
f948b0f1f8 chore: bump Go to 1.15.6
See: talos-systems/tools#115,
talos-systems/pkgs#213, talos-systems/extras#7.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-07 09:02:12 -08:00
Andrew Rynhard
6f845ae00e release(v0.8.0-alpha.2): prepare release
This is the official v0.8.0-alpha.2 release.

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
2020-12-04 15:34:00 -08:00
Andrew Rynhard
c30374f129 chore: publish Rock64 image
This publishes the Pine64 Rock64 image.

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
2020-12-04 12:53:33 -08:00
Andrew Rynhard
0c254e79d6 feat: add support for the Pine64 Rock64
This adds support for the Rock64.

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
2020-12-04 09:44:20 -08:00
Andrey Smirnov
621968977e feat: update kubernetes to 1.20.0-rc.0
Talos 0.8 is going to ship with K8s 1.20.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-12-02 10:50:58 -08:00
Andrew Rynhard
db905c6f74 chore: build SBC images
This will build SBC images and output them to the artifacts directory. These images
will be published on releases.

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
2020-12-01 12:33:53 -08:00
Andrew Rynhard
88f15b1254 fix: use the dtb from kernel pkg for libretech_all_h3_cc_h5
This adds sun50i-h5-libretech-all-h3-cc.dtb to the EFI partition.

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
2020-11-30 17:54:07 -08:00
Andrew Rynhard
98976602f7 fix(security): update Containerd to v1.4.3
This brings in the the latest Containerd to address a CVE.

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
2020-11-30 17:40:01 -08:00
Andrew Rynhard
99aa3cdba5 feat: add support for the Raspberry Pi 4 Model B
This adds support for the Raspberry Pi 4 Model B.

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
2020-11-30 09:29:48 -08:00
Andrey Smirnov
f67795748b chore: drop support for docker load
This was preferred way to push images before multi-arch was introduced.
This way doesn't work with multi-platform images, so we had two paths.

Changes:

* `PUSH=true` works now always for `make installer`, `make talos`
* for `image-aws` and friends make sure to push the installer image
before doing that (either local registry or different username)
* `talosctl cluster create` for docker - make sure image is pushed and
`talosctl` knows about the image reference.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-11-30 08:19:40 -08:00
Andrey Smirnov
1c0114b21d feat: bump package for kernel with CIFS support
See https://github.com/talos-systems/pkgs/pull/199

Also serializes push/push-latest.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-11-26 13:30:32 -08:00
Andrey Smirnov
9ccb5f34fc chore: use IMAGE_TAG instead of TAG for :latest pushes
The variable $(TAG) was used both during linking phase to set the
version of Talos built into binaries and as an image reference for
pushing. This leads to to `:latest` image being built with version
`latest`.

Separate image push reference and Talos version by introducing
`$(IMAGE_TAG)` which defaults to `$(TAG)`, but can be overridden.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
2020-11-26 11:52:22 -08:00
Andrew Rynhard
8a8c93fac8 feat: update Containerd and Linux
This brings in Containerd v1.4.2 and Linux v5.9.11

Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
2020-11-26 07:44:36 -08:00