Talos Linux is a modern Linux distribution built for Kubernetes.
Welcome to the v1.7.1 release of Talos!
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Linux: 6.6.29 containerd: 1.7.16
Talos is built with Go 1.22.2.
host-dns service
Previous release can be found at v1.7.0
ghcr.io/siderolabs/flannel:v0.25.1
ghcr.io/siderolabs/install-cni:v1.7.0-1-gbb76755
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.0
registry.k8s.io/kube-controller-manager:v1.30.0
registry.k8s.io/kube-scheduler:v1.30.0
registry.k8s.io/kube-proxy:v1.30.0
ghcr.io/siderolabs/kubelet:v1.30.0
ghcr.io/siderolabs/installer:v1.7.1
registry.k8s.io/pause:3.8
Welcome to the v1.7.0 release of Talos!
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Documentation on What's New in Talos 1.7.0
Talos Linux now supports rotating the root CA certificate and key for Talos API and Kubernetes API.
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
hostDNS:
enabled: false
You can also enable dns caching for k8s pods with:
machine:
features:
hostDNS:
enabled: true
forwardKubeDNSToHost: true
Please note that on running cluster you will have to kill CoreDNS pods for this change to apply.
If you want to can also enable the resolving of member addresses through their host and node names:
machine:
features:
hostDNS:
enabled: true
resolveMemberNames: true
Talos now supports supplying configuration files and environment variables for extension services. The extension service configuration is a separate config document. An example is shown below:
---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: nut-client
configFiles:
- content: MONITOR ${upsmonHost} 1 remote pass password
mountPath: /usr/local/etc/nut/upsmon.conf
environment:
- UPS_NAME=ups
For documentation, see Extension Services Config Files.
Note: The use of environmentFile in extension service spec is now deprecated and will be removed in a future release of Talos.
Use ExtensionServiceConfig instead.
Talos Linux now forces kubelet and kube-proxy to use iptables-nft instead of iptables-legacy (xtables) which was the default
before Talos 1.7.0.
Container images based on iptables-wrapper should work without changes, but if there was a direct call to legacy mode of iptables, make sure
to update to use iptables-nft.
The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.
Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members. This feature turned out to be less helpful than expected and caused unnecessary performance issues.
Previous behavior can be restored with:
machine:
network:
kubespan:
harvestExtraEndpoints: true
Talos Linux now supports setting extra tags when sending logs in JSON format:
machine:
logging:
destinations:
- endpoint: "udp://127.0.0.1:12345/"
format: "json_lines"
extraTags:
server: s03-rack07
Default NTP server was updated to be time.cloudflare.com instead of pool.ntp.org.
Default server is only used if the user does not specify any NTP servers in the configuration.
Talos Linux can now sync to PTP devices (e.g. provided by the hypervisor) skipping the network time servers.
In order to activate PTP sync, set machine.time.servers to the PTP device name (e.g. /dev/ptp0):
machine:
time:
servers:
- /dev/ptp0
Talos Linux now supports OpenNebula platform.
Talos Linux now supports Akamai Connected Cloud provider (platform akamai).
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
Talos has split the SBC's (Single Board Computers) into separate repositories. There will not be any more SBC specific release assets as part of Talos release.
The default Talos Installer image will stop working for SBC's and will fail the upgrade, if used, starting from Talos v1.7.0.
The SBC's images and installers can be generated on the fly using Image Factory or using Imager for custom images. The list of official SBC's images supported by Image Factory can be found in the Overlays repository.
Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:
output:
kind: iso
isoOptions:
sdBootEnrollKeys: force # default is still if-safe
outFormat: raw
Talos Linux now starts a basic syslog receiver listening on /dev/log.
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
The logs can be viewed via talosctl logs syslogd.
This is mostly implemented for extension services that log to syslog.
Linux: 6.6.28 etcd: 3.5.11 Kubernetes: 1.30.0 containerd: 1.7.15 runc: 1.1.12 Flannel: 0.25.1
Talos is built with Go 1.22.2.
Talos Linux now supports hardware watchdog timers configuration. If enabled, and the machine becomes unresponsive, the hardware watchdog will reset the machine.
The watchdog can be enabled with the following configuration document:
apiVersion: v1alpha1
kind: WatchdogTimerConfig
device: /dev/watchdog0
timeout: 3m0s
ExtraInfo field for extensionssiderolink-launch subcommandgo-talos-support librarytalosctl upgrade-k8s
Install for imager overlayslogs command completionstalos_version_contract for TF teststalosctl cluster create
DNSUpstreamController
environmentFile for extensionsExtensionServicesConfig
DNSResolveCacheController
mptspi drivertalosctl config new
talosctl gen secureboot
--nodes
talosctl disks
talosctl cluster create
actor id to the SideroLink events sinkmerge.Merge if map value is nil
SyncMap and bump stuff
PREEMPT_NONE as recommended for servers
agent package
Previous release can be found at v1.6.0
ghcr.io/siderolabs/flannel:v0.25.1
ghcr.io/siderolabs/install-cni:v1.7.0-1-gbb76755
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.0
registry.k8s.io/kube-controller-manager:v1.30.0
registry.k8s.io/kube-scheduler:v1.30.0
registry.k8s.io/kube-proxy:v1.30.0
ghcr.io/siderolabs/kubelet:v1.30.0
ghcr.io/siderolabs/installer:v1.7.0
registry.k8s.io/pause:3.8
Welcome to the v1.7.0-beta.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Talos Linux now supports rotating the root CA certificate and key for Talos API and Kubernetes API.
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
hostDNS:
enabled: false
You can also enable dns caching for k8s pods with:
machine:
features:
hostDNS:
enabled: true
forwardKubeDNSToHost: true
Please note that on running cluster you will have to kill CoreDNS pods for this change to apply.
Talos now supports supplying configuration files and environment variables for extension services. The extension service configuration is a separate config document. An example is shown below:
---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: nut-client
configFiles:
- content: MONITOR ${upsmonHost} 1 remote pass password
mountPath: /usr/local/etc/nut/upsmon.conf
environment:
- UPS_NAME=ups
For documentation, see Extension Services Config Files.
Note: The use of environmentFile in extension service spec is now deprecated and will be removed in a future release of Talos.
Use ExtensionServiceConfig instead.
Talos Linux now forces kubelet and kube-proxy to use iptables-nft instead of iptables-legacy (xtables) which was the default
before Talos 1.7.0.
Container images based on iptables-wrapper should work without changes, but if there was a direct call to legacy mode of iptables, make sure
to update to use iptables-nft.
The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.
Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members. This feature turned out to be less helpful than expected and caused unnecessary performance issues.
Previous behavior can be restored with:
machine:
network:
kubespan:
harvestExtraEndpoints: true
Talos Linux now supports setting extra tags when sending logs in JSON format:
machine:
logging:
destinations:
- endpoint: "udp://127.0.0.1:12345/"
format: "json_lines"
extraTags:
server: s03-rack07
Default NTP server was updated to be time.cloudflare.com instead of pool.ntp.org.
Default server is only used if the user does not specify any NTP servers in the configuration.
Talos Linux can now sync to PTP devices (e.g. provided by the hypervisor) skipping the network time servers.
In order to activate PTP sync, set machine.time.servers to the PTP device name (e.g. /dev/ptp0):
machine:
time:
servers:
- /dev/ptp0
Talos Linux now supports OpenNebula platform.
Talos Linux now supports Akamai Connected Cloud provider (platform akamai).
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
Talos has split the SBC's (Single Board Computers) into separate repositories. There will not be any more SBC specific release assets as part of Talos release.
The default Talos Installer image will stop working for SBC's and will fail the upgrade, if used, starting from Talos v1.7.0.
The SBC's images and installers can be generated on the fly using Image Factory or using Imager for custom images. The list of official SBC's images supported by Image Factory can be found in the Overlays repository.
Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:
output:
kind: iso
isoOptions:
sdBootEnrollKeys: force # default is still if-safe
outFormat: raw
Talos Linux now starts a basic syslog receiver listening on /dev/log.
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
The logs can be viewed via talosctl logs syslogd.
This is mostly implemented for extension services that log to syslog.
Linux: 6.6.26 etcd: 3.5.11 Kubernetes: 1.30.0-rc.2 containerd: 1.7.15 runc: 1.1.12 Flannel: 0.24.4
Talos is built with Go 1.22.2.
Talos Linux now supports hardware watchdog timers configuration. If enabled, and the machine becomes unresponsive, the hardware watchdog will reset the machine.
The watchdog can be enabled with the following configuration document:
apiVersion: v1alpha1
kind: WatchdogTimerConfig
device: /dev/watchdog0
timeout: 3m0s
ExtraInfo field for extensionssiderolink-launch subcommandgo-talos-support librarytalosctl upgrade-k8s
Install for imager overlayslogs command completionstalos_version_contract for TF teststalosctl cluster create
DNSUpstreamController
environmentFile for extensionsExtensionServicesConfig
DNSResolveCacheController
mptspi drivertalosctl config new
talosctl gen secureboot
--nodes
talosctl disks
talosctl cluster create
actor id to the SideroLink events sinkmerge.Merge if map value is nil
SyncMap and bump stuff
PREEMPT_NONE as recommended for servers
agent package
Previous release can be found at v1.6.0
ghcr.io/siderolabs/flannel:v0.24.4
ghcr.io/siderolabs/install-cni:v1.7.0-1-gbb76755
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.0-rc.2
registry.k8s.io/kube-controller-manager:v1.30.0-rc.2
registry.k8s.io/kube-scheduler:v1.30.0-rc.2
registry.k8s.io/kube-proxy:v1.30.0-rc.2
ghcr.io/siderolabs/kubelet:v1.30.0-rc.2
ghcr.io/siderolabs/installer:v1.7.0-beta.1
registry.k8s.io/pause:3.8
Welcome to the v1.7.0-beta.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Talos Linux now supports rotating the root CA certificate and key for Talos API and Kubernetes API.
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
hostDNS:
enabled: false
Talos now supports supplying configuration files and environment variables for extension services. The extension service configuration is a separate config document. An example is shown below:
---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: nut-client
configFiles:
- content: MONITOR ${upsmonHost} 1 remote pass password
mountPath: /usr/local/etc/nut/upsmon.conf
environment:
- UPS_NAME=ups
For documentation, see Extension Services Config Files.
Note: The use of environmentFile in extension service spec is now deprecated and will be removed in a future release of Talos.
Use ExtensionServiceConfig instead.
The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.
Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members. This feature turned out to be less helpful than expected and caused unnecessary performance issues.
Previous behavior can be restored with:
machine:
network:
kubespan:
harvestExtraEndpoints: true
Talos Linux now supports setting extra tags when sending logs in JSON format:
machine:
logging:
destinations:
- endpoint: "udp://127.0.0.1:12345/"
format: "json_lines"
extraTags:
server: s03-rack07
Default NTP server was updated to be time.cloudflare.com instead of pool.ntp.org.
Default server is only used if the user does not specify any NTP servers in the configuration.
Talos Linux can now sync to PTP devices (e.g. provided by the hypervisor) skipping the network time servers.
In order to activate PTP sync, set machine.time.servers to the PTP device name (e.g. /dev/ptp0):
machine:
time:
servers:
- /dev/ptp0
Talos Linux now supports OpenNebula platform.
Talos Linux now supports Akamai Connected Cloud provider (platform akamai).
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
Talos has split the SBC's (Single Board Computers) into separate repositories. There will not be any more SBC specific release assets as part of Talos release.
The default Talos Installer image will stop working for SBC's and will fail the upgrade, if used, starting from Talos v1.7.0.
The SBC's images and installers can be generated on the fly using Image Factory or using Imager for custom images. The list of official SBC's images supported by Image Factory can be found in the Overlays repository.
Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:
output:
kind: iso
isoOptions:
sdBootEnrollKeys: force # default is still if-safe
outFormat: raw
Talos Linux now starts a basic syslog receiver listening on /dev/log.
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
The logs can be viewed via talosctl logs syslogd.
This is mostly implemented for extension services that log to syslog.
Linux: 6.6.24 etcd: 3.5.11 Kubernetes: 1.30.0-rc.1 containerd: 1.7.14 runc: 1.1.12 Flannel: 0.24.4
Talos is built with Go 1.22.2.
Talos Linux now supports hardware watchdog timers configuration. If enabled, and the machine becomes unresponsive, the hardware watchdog will reset the machine.
The watchdog can be enabled with the following configuration document:
apiVersion: v1alpha1
kind: WatchdogTimerConfig
device: /dev/watchdog0
timeout: 3m0s
ExtraInfo field for extensionssiderolink-launch subcommandgo-talos-support librarytalosctl upgrade-k8s
Install for imager overlayslogs command completionstalos_version_contract for TF teststalosctl cluster create
DNSUpstreamController
environmentFile for extensionsExtensionServicesConfig
DNSResolveCacheController
mptspi drivertalosctl config new
talosctl gen secureboot
--nodes
talosctl disks
talosctl cluster create
actor id to the SideroLink events sinkmerge.Merge if map value is nil
ExtraInfo field for extensionssiderolink-launch subcommandgo-talos-support librarytalosctl upgrade-k8s
SyncMap and bump stuff
PREEMPT_NONE as recommended for servers
agent package
Previous release can be found at v1.6.0
ghcr.io/siderolabs/flannel:v0.24.4
ghcr.io/siderolabs/install-cni:v1.7.0-1-gbb76755
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.0-rc.1
registry.k8s.io/kube-controller-manager:v1.30.0-rc.1
registry.k8s.io/kube-scheduler:v1.30.0-rc.1
registry.k8s.io/kube-proxy:v1.30.0-rc.1
ghcr.io/siderolabs/kubelet:v1.30.0-rc.1
ghcr.io/siderolabs/installer:v1.7.0-beta.0
registry.k8s.io/pause:3.8
Welcome to the v1.6.7 release of Talos!
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Talos is built with Go 1.21.8.
talosctl upgrade-k8s
Previous release can be found at v1.6.6
ghcr.io/siderolabs/flannel:v0.23.0
ghcr.io/siderolabs/install-cni:v1.6.0-2-g9234398
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.11
registry.k8s.io/kube-apiserver:v1.29.3
registry.k8s.io/kube-controller-manager:v1.29.3
registry.k8s.io/kube-scheduler:v1.29.3
registry.k8s.io/kube-proxy:v1.29.3
ghcr.io/siderolabs/kubelet:v1.29.3
ghcr.io/siderolabs/installer:v1.6.7
registry.k8s.io/pause:3.8
Welcome to the v1.7.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
localDNS: false
Talos now supports supplying configuration files and environment variables for extension services. The extension service configuration is a separate config document. An example is shown below:
---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: nut-client
configFiles:
- content: MONITOR ${upsmonHost} 1 remote pass password
mountPath: /usr/local/etc/nut/upsmon.conf
environment:
- UPS_NAME=ups
For documentation, see Extension Services Config Files.
Note: The use of environmentFile in extension service spec is now deprecated and will be removed in a future release of Talos.
Use ExtensionServiceConfig instead.
The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.
Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members. This feature turned out to be less helpful than expected and caused unnecessary performance issues.
Previous behavior can be restored with:
machine:
network:
kubespan:
harvestExtraEndpoints: true
Default NTP server was updated to be time.cloudflare.com instead of pool.ntp.org.
Default server is only used if the user does not specify any NTP servers in the configuration.
Talos Linux now supports OpenNebula platform.
DRBD extension is disabled in this release due to incompatibility with the latest Linux kernel.
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
Talos core will drop support for SBC's and will not include the SBC binaries in the release. Overlays are being developed to support SBC's.
Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:
output:
kind: iso
isoOptions:
sdBootEnrollKeys: force # default is still if-safe
outFormat: raw
Talos Linux now starts a basic syslog receiver listening on /dev/log.
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
The logs can be viewed via talosctl logs syslogd.
This is mostly implemented for extension services that log to syslog.
Linux: 6.6.21 etcd: 3.5.11 Kubernetes: 1.30.0-beta.0 containerd: 1.7.14 runc: 1.1.12 Flannel: 0.24.1
Talos is built with Go 1.22.1.
Install for imager overlayslogs command completionstalos_version_contract for TF teststalosctl cluster create
DNSUpstreamController
environmentFile for extensionsExtensionServicesConfig
DNSResolveCacheController
mptspi drivertalosctl config new
talosctl gen secureboot
--nodes
talosctl disks
talosctl cluster create
actor id to the SideroLink events sinkmerge.Merge if map value is nil
Install for imager overlayslogs command completionstalos_version_contract for TF teststalosctl cluster create
DNSUpstreamController
environmentFile for extensionsExtensionServicesConfig
DNSResolveCacheController
SyncMap and bump stuff
PREEMPT_NONE as recommended for servers
Previous release can be found at v1.6.0
ghcr.io/siderolabs/flannel:v0.24.1
ghcr.io/siderolabs/install-cni:v1.7.0-alpha.0-3-g47bb718
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.12
registry.k8s.io/kube-apiserver:v1.30.0-beta.0
registry.k8s.io/kube-controller-manager:v1.30.0-beta.0
registry.k8s.io/kube-scheduler:v1.30.0-beta.0
registry.k8s.io/kube-proxy:v1.30.0-beta.0
ghcr.io/siderolabs/kubelet:v1.30.0-beta.0
ghcr.io/siderolabs/installer:v1.7.0-alpha.1
registry.k8s.io/pause:3.8
Welcome to the v1.6.6 release of Talos!
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Talos is built with Go 1.21.8.
Previous release can be found at v1.6.5
ghcr.io/siderolabs/flannel:v0.23.0
ghcr.io/siderolabs/install-cni:v1.6.0-2-g9234398
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.11
registry.k8s.io/kube-apiserver:v1.29.2
registry.k8s.io/kube-controller-manager:v1.29.2
registry.k8s.io/kube-scheduler:v1.29.2
registry.k8s.io/kube-proxy:v1.29.2
ghcr.io/siderolabs/kubelet:v1.29.2
ghcr.io/siderolabs/installer:v1.6.6
registry.k8s.io/pause:3.8
Welcome to the v1.6.5 release of Talos!
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.
Kubernetes: 1.29.2 Linux: 6.1.78
Talos is built with Go 1.21.6.
PREEMPT_NONE as recommended for serversPrevious release can be found at v1.6.4
ghcr.io/siderolabs/flannel:v0.23.0
ghcr.io/siderolabs/install-cni:v1.6.0-1-g113887a
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.11
registry.k8s.io/kube-apiserver:v1.29.2
registry.k8s.io/kube-controller-manager:v1.29.2
registry.k8s.io/kube-scheduler:v1.29.2
registry.k8s.io/kube-proxy:v1.29.2
ghcr.io/siderolabs/kubelet:v1.29.2
ghcr.io/siderolabs/installer:v1.6.5
registry.k8s.io/pause:3.8
Welcome to the v1.5.6 release of Talos!
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Linux: 6.1.74 containerd: 1.6.28 runc: 1.1.12
See CVE-2024-21626 for the runc update.
Talos is built with Go 1.20.13.
talosctl disks
FilterInPlace method to maps and update module
Previous release can be found at v1.5.5
ghcr.io/siderolabs/flannel:v0.22.1
ghcr.io/siderolabs/install-cni:v1.5.0-3-gb43c4e4
registry.k8s.io/coredns/coredns:v1.10.1
gcr.io/etcd-development/etcd:v3.5.10
registry.k8s.io/kube-apiserver:v1.28.3
registry.k8s.io/kube-controller-manager:v1.28.3
registry.k8s.io/kube-scheduler:v1.28.3
registry.k8s.io/kube-proxy:v1.28.3
ghcr.io/siderolabs/kubelet:v1.28.3
ghcr.io/siderolabs/installer:v1.5.6
registry.k8s.io/pause:3.6
Welcome to the v1.7.0-alpha.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
localDNS: false
ZFS and DRBD extensions are disabled in this release due to incompatibility with the latest Linux kernel.
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
Linux: 6.6.14 etcd: 3.5.11 Kubernetes: 1.29.1 containerd: 1.7.13 runc: 1.1.12 Flannel: 0.24.1
Talos is built with Go 1.21.6.
mptspi drivertalosctl config new
talosctl gen secureboot
--nodes
talosctl disks
talosctl cluster create
actor id to the SideroLink events sinkmerge.Merge if map value is nil
Previous release can be found at v1.6.0
ghcr.io/siderolabs/flannel:v0.24.1
ghcr.io/siderolabs/install-cni:v1.7.0-alpha.0
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.12
registry.k8s.io/kube-apiserver:v1.29.1
registry.k8s.io/kube-controller-manager:v1.29.1
registry.k8s.io/kube-scheduler:v1.29.1
registry.k8s.io/kube-proxy:v1.29.1
ghcr.io/siderolabs/kubelet:v1.29.1
ghcr.io/siderolabs/installer:v1.7.0-alpha.0
registry.k8s.io/pause:3.8