3130caf954
See https://github.com/siderolabs/extensions/pull/343 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
158 lines
4.4 KiB
TOML
158 lines
4.4 KiB
TOML
# commit to be tagged for new release
|
|
commit = "HEAD"
|
|
|
|
project_name = "Talos"
|
|
github_repo = "siderolabs/talos"
|
|
match_deps = "^github.com/((talos-systems|siderolabs)/[a-zA-Z0-9-]+)$"
|
|
|
|
# previous release
|
|
previous = "v1.6.0"
|
|
|
|
pre_release = true
|
|
|
|
preface = """\
|
|
"""
|
|
|
|
[notes]
|
|
[notes.updates]
|
|
title = "Component Updates"
|
|
description = """\
|
|
Linux: 6.6.21
|
|
etcd: 3.5.11
|
|
Kubernetes: 1.30.0-beta.0
|
|
containerd: 1.7.14
|
|
runc: 1.1.12
|
|
Flannel: 0.24.1
|
|
|
|
Talos is built with Go 1.22.1.
|
|
"""
|
|
|
|
[notes.device_selectors]
|
|
title = "Device Selectors"
|
|
description = """\
|
|
Talos Linux now supports `physical: true` qualifier for device selectors, it selects non-virtual network interfaces (i.e. `en0` is selected, while `bond0` is not).
|
|
"""
|
|
|
|
[notes.dns-resolve-cache]
|
|
title = "DNS Caching"
|
|
description = """\
|
|
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
|
|
|
|
```yaml
|
|
machine:
|
|
features:
|
|
localDNS: false
|
|
```
|
|
"""
|
|
|
|
[notes.secureboot-image]
|
|
title = "Secure Boot Image"
|
|
description = """\
|
|
Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:
|
|
|
|
```yaml
|
|
output:
|
|
kind: iso
|
|
isoOptions:
|
|
sdBootEnrollKeys: force # default is still if-safe
|
|
outFormat: raw
|
|
```
|
|
"""
|
|
|
|
[notes.rsa-service-account]
|
|
title = "Kubernetes API Server Service Account Key"
|
|
description = """\
|
|
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
|
|
"""
|
|
|
|
[notes.opennebula]
|
|
title = "OpenNebula"
|
|
description = """\
|
|
Talos Linux now supports OpenNebula platform.
|
|
"""
|
|
|
|
[notes.extensions]
|
|
title = "Extension Services Config"
|
|
description = """\
|
|
Talos now supports supplying configuration files and environment variables for extension services.
|
|
The extension service configuration is a separate config document. An example is shown below:
|
|
|
|
```yaml
|
|
---
|
|
apiVersion: v1alpha1
|
|
kind: ExtensionServiceConfig
|
|
name: nut-client
|
|
configFiles:
|
|
- content: MONITOR ${upsmonHost} 1 remote pass password
|
|
mountPath: /usr/local/etc/nut/upsmon.conf
|
|
environment:
|
|
- UPS_NAME=ups
|
|
```
|
|
|
|
For documentation, see [Extension Services Config Files](https://www.talos.dev/v1.7/reference/configuration/extensions/extensionserviceconfig/).
|
|
|
|
**Note**: The use of `environmentFile` in extension service spec is now deprecated and will be removed in a future release of Talos.
|
|
Use `ExtensionServiceConfig` instead.
|
|
"""
|
|
|
|
[notes.k8supgrade]
|
|
title = "Kubernetes Upgrade"
|
|
description = """\
|
|
The command `talosctl upgrade-k8s` now supports specifying custom image references for Kubernetes components via `--*-image` flags.
|
|
The default behavior is unchanged, and the flags are optional.
|
|
"""
|
|
|
|
[notes.kubespan]
|
|
title = "KubeSpan"
|
|
description = """\
|
|
Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members.
|
|
This feature turned out to be less helpful than expected and caused unnecessary performance issues.
|
|
|
|
Previous behavior can be restored with:
|
|
|
|
```yaml
|
|
machine:
|
|
network:
|
|
kubespan:
|
|
harvestExtraEndpoints: true
|
|
```
|
|
"""
|
|
|
|
[notes.sbc]
|
|
title = "SBC"
|
|
description = """\
|
|
Talos core will drop support for SBC's and will not include the SBC binaries in the release.
|
|
*Overlays* are being developed to support SBC's.
|
|
"""
|
|
|
|
[notes.syslog]
|
|
title = "Syslog"
|
|
description = """\
|
|
Talos Linux now starts a basic syslog receiver listening on `/dev/log`.
|
|
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
|
|
The logs can be viewed via `talosctl logs syslogd`.
|
|
|
|
This is mostly implemented for extension services that log to syslog.
|
|
"""
|
|
|
|
[notes.ntp]
|
|
title = "NTP"
|
|
description = """\
|
|
Default NTP server was updated to be `time.cloudflare.com` instead of `pool.ntp.org`.
|
|
Default server is only used if the user does not specify any NTP servers in the configuration.
|
|
"""
|
|
|
|
[make_deps]
|
|
|
|
[make_deps.tools]
|
|
variable = "TOOLS"
|
|
repository = "github.com/siderolabs/tools"
|
|
|
|
[make_deps.pkgs]
|
|
variable = "PKGS"
|
|
repository = "github.com/siderolabs/pkgs"
|
|
|
|
[make_deps.extras]
|
|
variable = "EXTRAS"
|
|
repository = "github.com/siderolabs/extras"
|