You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
talosctl apply/patch/edit cli commands got revamped.
Separate flags --on-reboot, --immediate, --interactive were replaced
with a single --mode flag that can take the following values:
auto new mode that automatically applies the configuration in immediate/reboot mode.
no-reboot force apply immediately, if not possible, then fail.
reboot force reboot with apply config.
staged write new machine configuration to STATE, but don't apply it (it will be applied after a reboot).
interactive starts interactive installer, only for apply.
API Server Audit Logs
kube-apiserver is now configured to store its audit logs separately from the kube-apiserver standard logs and directly to file.
The kube-apiserver will maintain the rotation and retirement of these logs, which are stored in /var/log/audit/.
Previously, the audit logs were sent to kube-apiserver's stdout, along with the rest of its logs, to be collected in the usual manner by Kubernetes.
Equinix Metal Platform
talos.platform for Equinix Metal is renamed from packet to equinixMetal, the older name is still supported for backwards compatibility.
Extension Services
Talos now provides a way to extend set of system services Talos runs with extension services.
Extension services should be included in the Talos root filesystem (e.g. via system extensions).
Pinned Kubernetes Version
Command talosctl gen config now defaults to Kubernetes version pinning in the generate machine configuration.
Previously default was to omit explicit Kubernetes version, so Talos picked up the default version it was built against.
Old behavior can be achieved by specifiying empty flag value: --kubernetes-version=.
Kubelet configuration can now be overridden with the .machine.kubelet.extraConfig machine configuration field.
As most of the kubelet command line arguments are being depreacted, it is recommended to migrate to extraConfig
instead of using extraArgs.
A number of conformance tweaks have been made to the kubelet to allow it to run without protectKernelDefaults.
This includes both kubelet configuration options and sysctls.
Of particular note is that Talos now sets the kernel.panic reboot interval to 10s instead of 1s.
If your kubelet fails to start after the upgrade, please check the kubelet logs to determine the problem.
Machine Configuration
Talos now preserves machine configuration as it was submitted to the node.
Machine Configuration Patching
talosctl commands which accept JSON patches (gen config, cluster create, patch machineconfig) now support multiple patches, loading patches
from files with @file.json syntax, and support loading from YAML format.
Platform Support
Talos now supports Oracle Cloud.
Platform network configuration was rewritten to avoid modifying Talos machine configuration.
Network configuration is performed independent of the machine configuration presence, so it works
even if Talos is booted in maintenance mode (without machine configuration is platform userdata).
Pod Security Policy
Pod Security Policy Kubernetes feature is deprecated and is going to be removed in Kubernetes 1.25.
Talos by default skips setting up PSP now (see machine configuration .cluster.apiServer.disablePodSecurityPolicy).
SBC Support
Talos now supports Jetson Nano SBC.
Static Pods in the Machine Configuration
Talos now accepts static pod definitions in the .machine.pods key of the machine configuration.
Please note that static pod definitions are not validated by Talos.
Static pod definitions can be updated without a node reboot.
Sysfs Kernel Parameters
Talos now supports setting sysfs kernel parameters (/sys/...).
Use machine configuration field .machine.sysfs to set sysfs kernel parameters.
System Extensions
System extensions allow extending Talos root filesystem, which enables a set of different features, including custom
container runtimes, additional firmware, etc.
System extensions are only activated during Talos installation (or upgrade), and with system extensions installed, Talos
root filesystem is still immutable and read-only.
Added new kernel parameter talos.experimental.wipe=system which can help resetting system disk for the machine
and start over with a fresh installation.
See Resetting a Machine on how to use it.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
Talos 1.0.0-beta.0 (2022-03-04)
Welcome to the v1.0.0-beta.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/talos-systems/talos/issues.
Admission Plugin Configuration
Talos now supports Kubernetes API server admission plugin configuration via the
.cluster.apiServer.admissonControlmachine configuration field.This configuration can be used to enable Pod Security Admission plugin and
define cluster-wide default Pod Security Standards.
Apply Config Enhancements
talosctl apply/patch/editcli commands got revamped.Separate flags
--on-reboot,--immediate,--interactivewere replacedwith a single
--modeflag that can take the following values:autonew mode that automatically applies the configuration in immediate/reboot mode.no-rebootforce apply immediately, if not possible, then fail.rebootforce reboot with apply config.stagedwrite new machine configuration to STATE, but don't apply it (it will be applied after a reboot).interactivestarts interactive installer, only forapply.API Server Audit Logs
kube-apiserveris now configured to store its audit logs separately from thekube-apiserverstandard logs and directly to file.The
kube-apiserverwill maintain the rotation and retirement of these logs, which are stored in/var/log/audit/.Previously, the audit logs were sent to
kube-apiserver'sstdout, along with the rest of its logs, to be collected in the usual manner by Kubernetes.Equinix Metal Platform
talos.platformfor Equinix Metal is renamed frompackettoequinixMetal, the older name is still supported for backwards compatibility.Extension Services
Talos now provides a way to extend set of system services Talos runs with extension services.
Extension services should be included in the Talos root filesystem (e.g. via system extensions).
Pinned Kubernetes Version
Command
talosctl gen confignow defaults to Kubernetes version pinning in the generate machine configuration.Previously default was to omit explicit Kubernetes version, so Talos picked up the default version it was built against.
Old behavior can be achieved by specifiying empty flag value:
--kubernetes-version=.Kernel Parameters
Talos now supports setting bond interface from Kernel cmdline using the
bond=option.Reference: https://man7.org/linux/man-pages/man7/dracut.cmdline.7.html
Kubelet
Kubelet configuration can now be overridden with the
.machine.kubelet.extraConfigmachine configuration field.As most of the kubelet command line arguments are being depreacted, it is recommended to migrate to
extraConfiginstead of using
extraArgs.A number of conformance tweaks have been made to the
kubeletto allow it to run withoutprotectKernelDefaults.This includes both kubelet configuration options and sysctls.
Of particular note is that Talos now sets the
kernel.panicreboot interval to 10s instead of 1s.If your kubelet fails to start after the upgrade, please check the
kubeletlogs to determine the problem.Machine Configuration
Talos now preserves machine configuration as it was submitted to the node.
Machine Configuration Patching
talosctlcommands which accept JSON patches (gen config,cluster create,patch machineconfig) now support multiple patches, loading patchesfrom files with
@file.jsonsyntax, and support loading from YAML format.Platform Support
Talos now supports Oracle Cloud.
Platform network configuration was rewritten to avoid modifying Talos machine configuration.
Network configuration is performed independent of the machine configuration presence, so it works
even if Talos is booted in maintenance mode (without machine configuration is platform userdata).
Pod Security Policy
Pod Security Policy Kubernetes feature is deprecated and is going to be removed in Kubernetes 1.25.
Talos by default skips setting up PSP now (see machine configuration
.cluster.apiServer.disablePodSecurityPolicy).SBC Support
Talos now supports Jetson Nano SBC.
Static Pods in the Machine Configuration
Talos now accepts static pod definitions in the
.machine.podskey of the machine configuration.Please note that static pod definitions are not validated by Talos.
Static pod definitions can be updated without a node reboot.
Sysfs Kernel Parameters
Talos now supports setting
sysfskernel parameters (/sys/...).Use machine configuration field
.machine.sysfsto setsysfskernel parameters.System Extensions
System extensions allow extending Talos root filesystem, which enables a set of different features, including custom
container runtimes, additional firmware, etc.
System extensions are only activated during Talos installation (or upgrade), and with system extensions installed, Talos
root filesystem is still immutable and read-only.
Please see extensions repository and documentation for more information.
Component Updates
Talos is built with Go 1.17.8
Wipe System Kernel Parameter
Added new kernel parameter
talos.experimental.wipe=systemwhich can help resetting system disk for the machineand start over with a fresh installation.
See Resetting a Machine on how to use it.
Contributors
Changes
187 commits
initrd=to the kernel command linetalosctl gen configip=arg/lib/firmwareacross initramfs and rootfskernel_param_specModify call handlingapply,editandpatchcommandstalos.exp.wipekernel param to wipe system diskApplyDynamicConfiglist,readtalosctl timecall in the teststalosctl get rdtalosctl upgrade-k8sip=kernel argumentChanges from talos-systems/crypto
2 commits
nilChanges from talos-systems/extras
6 commits
Changes from talos-systems/go-blockdevice
3 commits
Changes from talos-systems/net
1 commit
Changes from talos-systems/pkgs
37 commits
=mkernel build optionsChanges from talos-systems/tools
8 commits
Dependency Changes
Previous release can be found at v0.14.0
Images
This discussion was created from the release v1.0.0-beta.0.
Beta Was this translation helpful? Give feedback.
All reactions