Commit Graph

212 Commits

Author SHA1 Message Date
TrueCharts Bot
dcb05973ad chore(flux): update image traefik 30.0.1 → 30.0.2 (clustertool) (#29257)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`30.0.1` -> `30.0.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-13 01:19:54 +01:00
TrueCharts-Bot
a3b0afa65d Commit daily changes
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2024-11-13 00:07:58 +00:00
TrueCharts Bot
e19b0fd5a3 chore(flux): update image traefik 30.0.0 → 30.0.1 (clustertool) (#29245)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`30.0.0` -> `30.0.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-12 21:13:16 +01:00
Kjeld Schouten
3a0e296670 fix(clustertool): remove envrc, untill we are certain how to deal with it. 2024-11-12 16:04:50 +01:00
Kjeld Schouten
4012981462 fix(clustertool): update traefik helm chart 2024-11-12 15:56:09 +01:00
Kjeld Schouten
0610afa19b feat(clustertool): retry helm-install after etcs timeout 2024-11-12 14:59:38 +01:00
TrueCharts Bot
858c0160b7 chore(flux): update image volsync 2.5.0 → 2.5.1 (clustertool) (#29215)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/truecharts/charts/tree/HEAD/charts/system/volsync))
| patch | `2.5.0` -> `2.5.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-12 13:22:01 +01:00
TrueCharts Bot
0fed4760fe chore(flux): update image traefik-crds 3.2.3 → 3.2.4 (clustertool) (#29213) 2024-11-12 13:21:43 +01:00
TrueCharts Bot
f554bc0519 chore(flux): update image spegel 2.0.7 → 2.0.8 (clustertool) (#29211) 2024-11-12 13:21:40 +01:00
TrueCharts Bot
6a17571f3f chore(flux): update image prometheus-operator 8.11.0 → 8.11.1 (clustertool) (#29209) 2024-11-12 13:21:37 +01:00
TrueCharts Bot
1900cd2319 chore(flux): update image kubernetes-reflector 6.2.1 → 6.2.2 (clustertool) (#29206) 2024-11-12 13:21:04 +01:00
TrueCharts Bot
e33f67c4e6 chore(flux): update image kubelet-csr-approver 1.1.2 → 1.1.3 (clustertool) (#29204) 2024-11-12 13:18:58 +01:00
TrueCharts Bot
21770baad3 chore(flux): update image traefik 29.5.0 → 29.5.1 (clustertool) (#29212)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`29.5.0` -> `29.5.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-12 13:18:41 +01:00
TrueCharts Bot
f1ed36b5ce chore(flux): update image snapshot-controller 3.3.1 → 3.3.2 (clustertool) (#29210) 2024-11-12 13:18:13 +01:00
TrueCharts Bot
ba5ff22d82 chore(flux): update image metallb-config 8.2.2 → 8.2.3 (clustertool) (#29207)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [metallb-config](https://truecharts.org/charts/premium/metallb-config)
([source](https://redirect.github.com/metallb/metallb)) | patch |
`8.2.2` -> `8.2.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-12 13:18:06 +01:00
TrueCharts Bot
0526918605 chore(flux): update image cert-manager 6.2.2 → 6.2.3 (clustertool) (#29201) 2024-11-12 13:17:51 +01:00
TrueCharts Bot
c49e6370ee chore(flux): update image kubernetes-dashboard 1.10.0 → 1.10.1 (clustertool) (#29205) 2024-11-12 13:17:47 +01:00
TrueCharts Bot
31ce2e2b11 chore(flux): update image clusterissuer 9.2.3 → 9.2.4 (clustertool) (#29202) 2024-11-12 13:17:43 +01:00
TrueCharts Bot
30c69ca692 chore(flux): update image blocky 16.6.2 → 16.6.3 (clustertool) (#29200) 2024-11-12 13:17:36 +01:00
TrueCharts Bot
7690243c5f fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.8 → v3.0.9 (clustertool) (#29191) 2024-11-12 09:33:03 +01:00
TrueCharts Bot
3131e0d85b chore(flux): update image traefik 29.4.0 → 29.5.0 (clustertool) (#29135)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | minor |
`29.4.0` -> `29.5.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2024-11-11 17:31:18 +01:00
Kjeld Schouten
5f54ea6a0f fix(clustertool): Prevent empty extraargs to be added to cmd 2024-11-11 14:18:14 +01:00
Kjeld Schouten
be53e747a8 fix(clustertool): correct issuer for default wildcard certificate 2024-11-10 11:20:20 +01:00
Kjeld Schouten
3ad4105734 fix(clustertool): (re-)enable extra args on plain cmd generator 2024-11-09 21:41:50 +01:00
Kjeld Schouten
d1bb074680 fix(clustertool): ensure kubeconfig is created with force true by default 2024-11-09 21:11:45 +01:00
Kjeld Schouten
55284f8567 fix(clustertool): When flux-bootstrap fails, ensure rename change is undone first 2024-11-09 21:04:48 +01:00
Kjeld Schouten
a62135cdd9 fix(clustertool): retry kubectl apply after error with 15s wait 2024-11-09 21:04:48 +01:00
Kjeld Schouten
0c3e94c799 fix(clustertool): correct build typo 2024-11-09 13:21:24 +01:00
Kjeld Schouten
737b8bc5c3 fix(clustertool): use reachable schema for helmrelease files 2024-11-09 13:17:43 +01:00
Kjeld Schouten
3e0d2b7c85 fix(clustertool): bump clusterissuer version to fix ACME naming issues 2024-11-09 13:17:43 +01:00
Kjeld Schouten
cf4a61f015 fix(clustertool): ensure talsecret generation log output matches actions being taken 2024-11-09 13:17:43 +01:00
Kjeld Schouten
db9e8d4e1d fix(clustertool): ensure extraction of node IP for healthcheck is more solid 2024-11-09 13:17:43 +01:00
TrueCharts-Bot
94663b5970 Commit daily changes
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2024-11-09 00:07:27 +00:00
Kjeld Schouten
86fb83c9ac fix(clustertool): Try to harden the repo url generator a tad 2024-11-08 21:57:37 +01:00
Kjeld Schouten
d41c3a8c05 fix(clustertool): ensure github known hosts are always pointing towards github 2024-11-08 21:57:37 +01:00
TrueCharts Bot
1cfe5bf5a1 fix(deps): update module github.com/siderolabs/talos/pkg/machinery v1.9.0-alpha.1 → v1.9.0-alpha.2 (clustertool) (#29020)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/siderolabs/talos/pkg/machinery](https://redirect.github.com/siderolabs/talos)
| require | patch | `v1.9.0-alpha.1` -> `v1.9.0-alpha.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos
(github.com/siderolabs/talos/pkg/machinery)</summary>

###
[`v1.9.0-alpha.2`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.0-alpha.2)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.0-alpha.1...v1.9.0-alpha.2)

#### [Talos
1.9.0-alpha.2](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.0-alpha.2)
(2024-11-08)

Welcome to the v1.9.0-alpha.2 release of Talos!\
*This is a pre-release of Talos*

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### AppArmor

Talos Linux starting with v1.9 will ship with SELinux LSM enabled by
default.
If you need to use AppArmor LSM add the following to the machine
configuration:

```yaml
machine:
  install:
     extraKernelArgs:
      - -selinux
      - lsm=lockdown,capability,yama,apparmor,bpf
      - apparmor=1
```

##### Auditd

Talos Linux now starts a auditd service by default.
Logs can be read with `talosctl logs auditd`.

##### `talosctl cgroups`

The `talosctl cgroups` command has been added to the `talosctl` tool.
This command allows you to view the cgroup resource consumption and
limits for a machine, e.g.
`talosctl cgroups --preset memory`.

##### udevd

Talos previously used `udevd` to provide `udevd`, now it uses
`systemd-udevd` instead.

##### Component Updates

Linux: 6.6.59
containerd: 2.0.0
Flannel: 0.26.0
Kubernetes: 1.32.0-beta.0
runc: 1.2.1

Talos is built with Go 1.23.2.

##### User Namespaces

Talos Linux now supports running Kubernetes pods with user namespaces
enabled.
Refer to the
[documentation](https://www.talos.dev/v1.9/kubernetes-guides/configuration/usernamespace/)
for more information.

##### Contributors

-   Andrey Smirnov
-   Noel Georgi
-   Dmitriy Matrenichev
-   Dmitry Sharshakov
-   Joakim Nohlgård
-   Jean-Francois Roy
-   Utku Ozdemir
-   blablu
-   Adolfo Ochagavía
-   Dan Rue
-   David Backeus
-   Eddie Wang
-   Florian Ströger
-   Hexoplon
-   Jakob Maležič
-   KBAegis
-   Mike Beaumont
-   Nebula
-   Nico Berlee
-   Philip Schmid
-   Philipp Kleber
-   Remko Molier
-   Robby Ciliberto
-   Ryan Borstelmann
-   Serge Logvinov
-   Spencer Smith
-   Steven Cassamajor
-   Tim Jones
-   adilTepe
-   ekarlso
-   naed3r
-   nevermarine
-   solidDoWant

##### Changes

<details><summary>145 commits</summary>
<p>

-
[@&#8203;`0290a38`](https://redirect.github.com/siderolabs/talos/commit/0290a3881)
release(v1.9.0-alpha.2): prepare release
-
[@&#8203;`a309f6a`](https://redirect.github.com/siderolabs/talos/commit/a309f6aa5)
chore: fix nil pointer dereference in AWS uploader
-
[@&#8203;`333737f`](https://redirect.github.com/siderolabs/talos/commit/333737f17)
test: fix unpriviliged process runner test
-
[@&#8203;`2001167`](https://redirect.github.com/siderolabs/talos/commit/200116705)
chore(ci): save support zip always after tests
-
[@&#8203;`6a42c3b`](https://redirect.github.com/siderolabs/talos/commit/6a42c3b8e)
release(v1.9.0-alpha.1): prepare release
-
[@&#8203;`fb72e4b`](https://redirect.github.com/siderolabs/talos/commit/fb72e4b7b)
fix(ci): skip test if `UserNamespacesSupport` feature gate is not set
-
[@&#8203;`11380f9`](https://redirect.github.com/siderolabs/talos/commit/11380f933)
feat: display current CPU frequency on dashboard
-
[@&#8203;`fbce267`](https://redirect.github.com/siderolabs/talos/commit/fbce267ae)
feat: check bridged interfaces should not have addresses
-
[@&#8203;`942962b`](https://redirect.github.com/siderolabs/talos/commit/942962bf0)
docs: add docs on usernamespace support in k8s
-
[@&#8203;`0406a05`](https://redirect.github.com/siderolabs/talos/commit/0406a05a9)
chore: update pkgs to ones built with gcc 14.2
-
[@&#8203;`2e12762`](https://redirect.github.com/siderolabs/talos/commit/2e127627d)
docs: add apparmor enablement release notes
-
[@&#8203;`aa9311f`](https://redirect.github.com/siderolabs/talos/commit/aa9311f3d)
fix: install disk matcher error
-
[@&#8203;`1800f81`](https://redirect.github.com/siderolabs/talos/commit/1800f8104)
fix: selinux handling and apparmor tests
-
[@&#8203;`313bffa`](https://redirect.github.com/siderolabs/talos/commit/313bffadf)
feat: update Kubernetes to v1.32.0-beta.0
-
[@&#8203;`bbfa144`](https://redirect.github.com/siderolabs/talos/commit/bbfa14451)
feat: update containerd to v2.0.0
-
[@&#8203;`8e02b9f`](https://redirect.github.com/siderolabs/talos/commit/8e02b9fcb)
docs: update manual k8s upgrade docs
-
[@&#8203;`474949d`](https://redirect.github.com/siderolabs/talos/commit/474949dc7)
feat: add dm-cache dm-cache-smq kernel modules
-
[@&#8203;`5112547`](https://redirect.github.com/siderolabs/talos/commit/5112547d6)
chore: generate support zip for crashdump
-
[@&#8203;`a867f85`](https://redirect.github.com/siderolabs/talos/commit/a867f85e4)
feat: label system socket and runtime files
-
[@&#8203;`398f714`](https://redirect.github.com/siderolabs/talos/commit/398f714cf)
feat: update Linux 6.6.59, runc 1.2.1
-
[@&#8203;`05c6209`](https://redirect.github.com/siderolabs/talos/commit/05c620957)
feat: allow extra mounts for docker-based `talosctl cluster create`
-
[@&#8203;`cedabed`](https://redirect.github.com/siderolabs/talos/commit/cedabeddf)
chore: cleanup code
-
[@&#8203;`61d363e`](https://redirect.github.com/siderolabs/talos/commit/61d363e1d)
chore: update go-auditlib
-
[@&#8203;`960a040`](https://redirect.github.com/siderolabs/talos/commit/960a04049)
feat: start enabling SELinux
-
[@&#8203;`7f3aaa2`](https://redirect.github.com/siderolabs/talos/commit/7f3aaa21c)
fix: update permissions for logging directories in /var
-
[@&#8203;`0e6c983`](https://redirect.github.com/siderolabs/talos/commit/0e6c983b8)
fix: mount /sys/kernel/security conditionally
-
[@&#8203;`74b0e8c`](https://redirect.github.com/siderolabs/talos/commit/74b0e8c37)
fix: make route normalization keep family
-
[@&#8203;`0a3761c`](https://redirect.github.com/siderolabs/talos/commit/0a3761c22)
fix: talosctl windows arm64
-
[@&#8203;`4b10c53`](https://redirect.github.com/siderolabs/talos/commit/4b10c5328)
chore: add Windows ARM64 build for talosctl
-
[@&#8203;`9abf161`](https://redirect.github.com/siderolabs/talos/commit/9abf16108)
feat: add auditd service
-
[@&#8203;`d464ca8`](https://redirect.github.com/siderolabs/talos/commit/d464ca869)
chore: drop runc memfd bind added in
[#&#8203;9069](https://redirect.github.com/siderolabs/talos/issues/9069)
-
[@&#8203;`b54d26c`](https://redirect.github.com/siderolabs/talos/commit/b54d26c2c)
fix: mount pseudo sub-mountpoints in init
-
[@&#8203;`7aeb15f`](https://redirect.github.com/siderolabs/talos/commit/7aeb15f73)
chore: disable coredns cache for cluster domain
-
[@&#8203;`d8b6521`](https://redirect.github.com/siderolabs/talos/commit/d8b652150)
docs: add warning about NVMe bus path bug
-
[@&#8203;`3e16ab1`](https://redirect.github.com/siderolabs/talos/commit/3e16ab135)
feat: update Kubernetes to v1.32.0-alpha.3
-
[@&#8203;`0b8b356`](https://redirect.github.com/siderolabs/talos/commit/0b8b35677)
feat: add BridgePort property to network machine configuration
-
[@&#8203;`b379506`](https://redirect.github.com/siderolabs/talos/commit/b37950625)
fix: use more correct condition to skip generating hosts files
-
[@&#8203;`62ec7ec`](https://redirect.github.com/siderolabs/talos/commit/62ec7ec33)
refactor: replace the old v1 mount package with new one
-
[@&#8203;`0ece13c`](https://redirect.github.com/siderolabs/talos/commit/0ece13c62)
docs: update network-config.md (cont)
-
[@&#8203;`93827f0`](https://redirect.github.com/siderolabs/talos/commit/93827f048)
docs: update network-config.md
-
[@&#8203;`423b1e5`](https://redirect.github.com/siderolabs/talos/commit/423b1e5fb)
fix: do not trim 0 from process SELinux label
-
[@&#8203;`2136358`](https://redirect.github.com/siderolabs/talos/commit/2136358d6)
feat: introduce metal agent mode
-
[@&#8203;`0e15955`](https://redirect.github.com/siderolabs/talos/commit/0e15955fc)
chore: small refactoring
-
[@&#8203;`66012a7`](https://redirect.github.com/siderolabs/talos/commit/66012a7f2)
feat: remove wrapperd and launch processes directly
-
[@&#8203;`3a0a17a`](https://redirect.github.com/siderolabs/talos/commit/3a0a17ae6)
fix: prevent panic in nocloud platform code
-
[@&#8203;`dc0c6ac`](https://redirect.github.com/siderolabs/talos/commit/dc0c6acbd)
refactor: remove unmaintained github.com/vishvananda/netlink
-
[@&#8203;`78353f7`](https://redirect.github.com/siderolabs/talos/commit/78353f791)
feat: add parsing of vlanNNNN:ethX style VLAN cmdline args
-
[@&#8203;`9db7a36`](https://redirect.github.com/siderolabs/talos/commit/9db7a36bf)
fix: generation of SecureBoot iso
-
[@&#8203;`c755b6d`](https://redirect.github.com/siderolabs/talos/commit/c755b6d7e)
fix: update the CRI sandbox image reference
-
[@&#8203;`cec290b`](https://redirect.github.com/siderolabs/talos/commit/cec290b35)
feat: allow extensions to log to console
-
[@&#8203;`b7801df`](https://redirect.github.com/siderolabs/talos/commit/b7801df82)
fix: wait for udevd to be running before activating LVM
-
[@&#8203;`d4cb478`](https://redirect.github.com/siderolabs/talos/commit/d4cb478a5)
docs: improve field description for BridgeSTP, BridgeVLAN
-
[@&#8203;`7329824`](https://redirect.github.com/siderolabs/talos/commit/7329824b2)
docs: add Mynewsdesk to ADOPTERS.md
-
[@&#8203;`a13cf76`](https://redirect.github.com/siderolabs/talos/commit/a13cf76a3)
chore: simplify `DNSUpstreamController` and `DNSUpstream` resource
-
[@&#8203;`62d1854`](https://redirect.github.com/siderolabs/talos/commit/62d185473)
fix: talosctl process null character
-
[@&#8203;`77d7368`](https://redirect.github.com/siderolabs/talos/commit/77d7368ea)
feat: update containerd to v2.0.0-rc.6
-
[@&#8203;`d393938`](https://redirect.github.com/siderolabs/talos/commit/d39393879)
fix: rework the 'metal-iso' config acquisition
-
[@&#8203;`1993afc`](https://redirect.github.com/siderolabs/talos/commit/1993afca9)
chore: create /usr/etc in a different step
-
[@&#8203;`8680351`](https://redirect.github.com/siderolabs/talos/commit/8680351c1)
chore: move system extensions' udev rules
-
[@&#8203;`3067f64`](https://redirect.github.com/siderolabs/talos/commit/3067f64c8)
feat: update Flannel to v0.26.0
-
[@&#8203;`8658d68`](https://redirect.github.com/siderolabs/talos/commit/8658d6865)
docs: typo in deploying cilium
-
[@&#8203;`49bbadc`](https://redirect.github.com/siderolabs/talos/commit/49bbadc4b)
docs: add documentation on performance tuning
-
[@&#8203;`534b0ce`](https://redirect.github.com/siderolabs/talos/commit/534b0ce18)
feat: update runc to 1.2.0 final
-
[@&#8203;`2172535`](https://redirect.github.com/siderolabs/talos/commit/217253523)
docs: fix image factory links
-
[@&#8203;`375e3da`](https://redirect.github.com/siderolabs/talos/commit/375e3da73)
feat: update Kubernetes to 1.32.0-alpha.2
-
[@&#8203;`9e6f64d`](https://redirect.github.com/siderolabs/talos/commit/9e6f64df0)
fix: improve error messages for invalid bridge/bond configuration
-
[@&#8203;`7c8c72c`](https://redirect.github.com/siderolabs/talos/commit/7c8c72c2b)
fix: correct error message for invalid ip=
-
[@&#8203;`ead4699`](https://redirect.github.com/siderolabs/talos/commit/ead46997c)
chore: rename tpm2.PCRExtent -> tpm2.PCRExtend
-
[@&#8203;`867c4b8`](https://redirect.github.com/siderolabs/talos/commit/867c4b812)
docs: fix typo in prodnotes.md
-
[@&#8203;`1b22df4`](https://redirect.github.com/siderolabs/talos/commit/1b22df48a)
chore: support debug shell for advanced development
-
[@&#8203;`c14b446`](https://redirect.github.com/siderolabs/talos/commit/c14b44622)
feat: update Kubernetes to v1.32.0-alpha.1
-
[@&#8203;`29780d3`](https://redirect.github.com/siderolabs/talos/commit/29780d35a)
test: add an integration test for verifying process parameters
-
[@&#8203;`3d342af`](https://redirect.github.com/siderolabs/talos/commit/3d342af44)
fix: update incorrect alias for PCIDevice resource
-
[@&#8203;`f7d35a5`](https://redirect.github.com/siderolabs/talos/commit/f7d35a5e0)
release(v1.9.0-alpha.0): prepare release
-
[@&#8203;`e0434d7`](https://redirect.github.com/siderolabs/talos/commit/e0434d77d)
feat: update dependencies
-
[@&#8203;`5c5a248`](https://redirect.github.com/siderolabs/talos/commit/5c5a24886)
feat: add Talos 1.9 compatibility guarantees
-
[@&#8203;`bc4c21f`](https://redirect.github.com/siderolabs/talos/commit/bc4c21f41)
test: add json logs test environment
-
[@&#8203;`71faa32`](https://redirect.github.com/siderolabs/talos/commit/71faa3294)
docs: nvidia proprietary/oss hardware requirement
-
[@&#8203;`59a78da`](https://redirect.github.com/siderolabs/talos/commit/59a78da42)
chore: add proto-codec/codec
-
[@&#8203;`7ff1ced`](https://redirect.github.com/siderolabs/talos/commit/7ff1cedfe)
chore: update siderolabs/crypto module and return proper ALPN
-
[@&#8203;`ccbd5ae`](https://redirect.github.com/siderolabs/talos/commit/ccbd5aed3)
feat: optionally decode hcloud userdata as base64
-
[@&#8203;`34f652c`](https://redirect.github.com/siderolabs/talos/commit/34f652ce8)
feat: add well-known app.kubernetes.io labels to control-plane pods
-
[@&#8203;`fc89dc2`](https://redirect.github.com/siderolabs/talos/commit/fc89dc216)
fix: support `extra-disks` when using iso
-
[@&#8203;`f2bff81`](https://redirect.github.com/siderolabs/talos/commit/f2bff814d)
chore: add arm64 target for integration-test
-
[@&#8203;`5853bb0`](https://redirect.github.com/siderolabs/talos/commit/5853bb0ea)
fix: json logging panic
-
[@&#8203;`a859cff`](https://redirect.github.com/siderolabs/talos/commit/a859cff36)
chore: use virtio driver for disks in arm64
-
[@&#8203;`db248de`](https://redirect.github.com/siderolabs/talos/commit/db248de88)
chore(ci): add config for lldpd extension
-
[@&#8203;`9f0de9f`](https://redirect.github.com/siderolabs/talos/commit/9f0de9f43)
test: update provision upgrade tests for Talos 1.9
-
[@&#8203;`39fe285`](https://redirect.github.com/siderolabs/talos/commit/39fe285e6)
fix: skip ram disks
-
[@&#8203;`a9bff3a`](https://redirect.github.com/siderolabs/talos/commit/a9bff3a1d)
test: skip no error test in Cilium
-
[@&#8203;`4d90202`](https://redirect.github.com/siderolabs/talos/commit/4d902021b)
fix: do not use pflag csv comma reader for config-patch
-
[@&#8203;`5371788`](https://redirect.github.com/siderolabs/talos/commit/5371788ce)
fix: typo in documentation
-
[@&#8203;`8a228ba`](https://redirect.github.com/siderolabs/talos/commit/8a228ba6b)
docs: add egress documentation
-
[@&#8203;`182325c`](https://redirect.github.com/siderolabs/talos/commit/182325cb0)
test: skip lvm test if not enough user disks available
-
[@&#8203;`519a483`](https://redirect.github.com/siderolabs/talos/commit/519a48302)
fix: wipe system partitions correctly via kernel args
-
[@&#8203;`0a2b455`](https://redirect.github.com/siderolabs/talos/commit/0a2b4556c)
fix: volume encryption with failing keyslots
-
[@&#8203;`6affbd3`](https://redirect.github.com/siderolabs/talos/commit/6affbd318)
fix: update grpc-go the latest patch release
-
[@&#8203;`77a4a4a`](https://redirect.github.com/siderolabs/talos/commit/77a4a4adc)
fix: scaleway metadata
-
[@&#8203;`7acadc0`](https://redirect.github.com/siderolabs/talos/commit/7acadc0c8)
fix: do not stop udevd before unmounting volumes
-
[@&#8203;`6a08105`](https://redirect.github.com/siderolabs/talos/commit/6a081055b)
feat: update Flannel to v0.25.7
-
[@&#8203;`2362f6d`](https://redirect.github.com/siderolabs/talos/commit/2362f6d3e)
fix: improve container detection
-
[@&#8203;`b67bc73`](https://redirect.github.com/siderolabs/talos/commit/b67bc73fd)
fix: fix mdadm system extension
-
[@&#8203;`f08669c`](https://redirect.github.com/siderolabs/talos/commit/f08669c7a)
feat: bring in lpfc kernel module driver
-
[@&#8203;`6a01437`](https://redirect.github.com/siderolabs/talos/commit/6a014374b)
feat: enable QEDF driver
-
[@&#8203;`f711907`](https://redirect.github.com/siderolabs/talos/commit/f711907e0)
fix: make /var/run empty on reboots
-
[@&#8203;`7d02eb6`](https://redirect.github.com/siderolabs/talos/commit/7d02eb60f)
docs: fix typo in CloudStack docs
-
[@&#8203;`7486157`](https://redirect.github.com/siderolabs/talos/commit/74861573a)
fix: multiple fixes for LVM activation
-
[@&#8203;`74c12c2`](https://redirect.github.com/siderolabs/talos/commit/74c12c20e)
feat: replace eudev with systemd-udevd
-
[@&#8203;`0a4df4e`](https://redirect.github.com/siderolabs/talos/commit/0a4df4ef8)
docs: fix nvidia CRI config example
-
[@&#8203;`afc1e1a`](https://redirect.github.com/siderolabs/talos/commit/afc1e1a46)
docs: fix typo in extraMounts directory
-
[@&#8203;`a341bdb`](https://redirect.github.com/siderolabs/talos/commit/a341bdb06)
fix: prevent file descriptors leaks to child processes
-
[@&#8203;`dec653b`](https://redirect.github.com/siderolabs/talos/commit/dec653bfe)
chore: better lvm2 tests
-
[@&#8203;`908fd87`](https://redirect.github.com/siderolabs/talos/commit/908fd8789)
feat: support cgroup deep analysis in `talosctl`
-
[@&#8203;`aa846cc`](https://redirect.github.com/siderolabs/talos/commit/aa846cc18)
feat: add support for CI Network config in nocloud
-
[@&#8203;`10f2539`](https://redirect.github.com/siderolabs/talos/commit/10f2539f2)
chore: disable cloud-images cron workflow
-
[@&#8203;`b07a8b3`](https://redirect.github.com/siderolabs/talos/commit/b07a8b36b)
chore: ignore more plugins for system containerd
-
[@&#8203;`392c479`](https://redirect.github.com/siderolabs/talos/commit/392c4798f)
feat: prepare for Talos 1.9
-
[@&#8203;`ea7bf9f`](https://redirect.github.com/siderolabs/talos/commit/ea7bf9fb4)
docs: update storage.md
-
[@&#8203;`4ab8dee`](https://redirect.github.com/siderolabs/talos/commit/4ab8dee69)
fix: build talosctl without `tcell_minimal`
-
[@&#8203;`2fa019b`](https://redirect.github.com/siderolabs/talos/commit/2fa019bd9)
docs: enable 'edit on GitHub' link
-
[@&#8203;`d2ccbc2`](https://redirect.github.com/siderolabs/talos/commit/d2ccbc2b1)
docs: update hetzner documentation for CCM
-
[@&#8203;`d498f64`](https://redirect.github.com/siderolabs/talos/commit/d498f647c)
docs: fix Kernel Self Protection Project (KSPP) references
-
[@&#8203;`0ec7546`](https://redirect.github.com/siderolabs/talos/commit/0ec75463e)
docs: make Talos 1.8 current release
-
[@&#8203;`9b77698`](https://redirect.github.com/siderolabs/talos/commit/9b77698cf)
fix: update blockdevice library to v2.0.2
-
[@&#8203;`e46227a`](https://redirect.github.com/siderolabs/talos/commit/e46227ab9)
docs: fix kubespan name inconsistency
-
[@&#8203;`6b15ca1`](https://redirect.github.com/siderolabs/talos/commit/6b15ca19c)
fix: audit and fix cgroup reservations
-
[@&#8203;`32b5d01`](https://redirect.github.com/siderolabs/talos/commit/32b5d01ed)
chore: bump lvm2
-
[@&#8203;`6484581`](https://redirect.github.com/siderolabs/talos/commit/6484581eb)
feat: allow /sbin/ldconfig in extensions
-
[@&#8203;`9fa08e8`](https://redirect.github.com/siderolabs/talos/commit/9fa08e843)
chore: refactor tests
-
[@&#8203;`d8ab498`](https://redirect.github.com/siderolabs/talos/commit/d8ab4981b)
feat: support lvm auto activation
-
[@&#8203;`8166a58`](https://redirect.github.com/siderolabs/talos/commit/8166a58b3)
fix: filter out non-printable characters in process line
-
[@&#8203;`806b6aa`](https://redirect.github.com/siderolabs/talos/commit/806b6aaf5)
docs: add SECURITY.md
-
[@&#8203;`7bd26df`](https://redirect.github.com/siderolabs/talos/commit/7bd26df30)
docs: document `/dev/net/tun` compatibility
-
[@&#8203;`18daedb`](https://redirect.github.com/siderolabs/talos/commit/18daedb51)
fix: strategic merge patch delete for map keys
-
[@&#8203;`f337052`](https://redirect.github.com/siderolabs/talos/commit/f3370529a)
docs: correct typo
-
[@&#8203;`8d6884a`](https://redirect.github.com/siderolabs/talos/commit/8d6884a8e)
test: add a test for inline machine config trusted roots
-
[@&#8203;`d4a6d01`](https://redirect.github.com/siderolabs/talos/commit/d4a6d017d)
fix: ignore invalid NTP responses
-
[@&#8203;`869f837`](https://redirect.github.com/siderolabs/talos/commit/869f8379f)
feat: update default Kubernetes version to 1.31.1
-
[@&#8203;`780a1f1`](https://redirect.github.com/siderolabs/talos/commit/780a1f198)
fix: update CoreDNS health check
-
[@&#8203;`79cd031`](https://redirect.github.com/siderolabs/talos/commit/79cd03158)
chore: account for resource sorting in dns upstream resource
-
[@&#8203;`e17fafa`](https://redirect.github.com/siderolabs/talos/commit/e17fafaca)
chore: drop `activateLogicalVolumes` sequencer step
-
[@&#8203;`a294b36`](https://redirect.github.com/siderolabs/talos/commit/a294b366f)
fix: parse SideroLink API endpoint correctly
-
[@&#8203;`a9269ac`](https://redirect.github.com/siderolabs/talos/commit/a9269ac7b)
fix: remove extra logging on ethtool ioctl failures
-
[@&#8203;`5c6277d`](https://redirect.github.com/siderolabs/talos/commit/5c6277d17)
feat: update etcd to 3.5.16
-
[@&#8203;`c1ed298`](https://redirect.github.com/siderolabs/talos/commit/c1ed2984b)
docs: add what's new for Talos 1.8

</p>
</details>

##### Changes since v1.9.0-alpha.1
<details><summary>4 commits</summary>
<p>

-
[@&#8203;`0290a38`](https://redirect.github.com/siderolabs/talos/commit/0290a3881)
release(v1.9.0-alpha.2): prepare release
-
[@&#8203;`a309f6a`](https://redirect.github.com/siderolabs/talos/commit/a309f6aa5)
chore: fix nil pointer dereference in AWS uploader
-
[@&#8203;`333737f`](https://redirect.github.com/siderolabs/talos/commit/333737f17)
test: fix unpriviliged process runner test
-
[@&#8203;`2001167`](https://redirect.github.com/siderolabs/talos/commit/200116705)
chore(ci): save support zip always after tests

</p>
</details>

##### Changes from siderolabs/crypto
<details><summary>1 commit</summary>
<p>

-
[siderolabs/crypto@`58b2f92`](https://redirect.github.com/siderolabs/crypto/commit/58b2f92)
chore: use HTTP/2 ALPN by default

</p>
</details>

##### Changes from siderolabs/discovery-api
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-api@`005e92c`](https://redirect.github.com/siderolabs/discovery-api/commit/005e92c)
chore: rekres and regen

</p>
</details>

##### Changes from siderolabs/discovery-client
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-client@`b74fb90`](https://redirect.github.com/siderolabs/discovery-client/commit/b74fb90)
fix: allow custom TLS config for the client

</p>
</details>

##### Changes from siderolabs/extras
<details><summary>2 commits</summary>
<p>

-
[siderolabs/extras@`eab6e58`](https://redirect.github.com/siderolabs/extras/commit/eab6e58)
feat: update dependencies
-
[siderolabs/extras@`1459d78`](https://redirect.github.com/siderolabs/extras/commit/1459d78)
feat: update pkgs for 1.9

</p>
</details>

##### Changes from siderolabs/gen
<details><summary>3 commits</summary>
<p>

-
[siderolabs/gen@`e847d2a`](https://redirect.github.com/siderolabs/gen/commit/e847d2a)
chore: add more utilities to xiter
-
[siderolabs/gen@`f3c5a2b`](https://redirect.github.com/siderolabs/gen/commit/f3c5a2b)
chore: add `Empty` and `Empty2` iterators
-
[siderolabs/gen@`c53b90b`](https://redirect.github.com/siderolabs/gen/commit/c53b90b)
chore: add packages xiter/xstrings/xbytes

</p>
</details>

##### Changes from siderolabs/go-blockdevice
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-blockdevice@`134c41b`](https://redirect.github.com/siderolabs/go-blockdevice/commit/134c41b)
fix: fast wipe also last 1MB of the device

</p>
</details>

##### Changes from siderolabs/go-circular
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-circular@`9a0f7b0`](https://redirect.github.com/siderolabs/go-circular/commit/9a0f7b0)
fix: multiple data race issues

</p>
</details>

##### Changes from siderolabs/go-cmd
<details><summary>3 commits</summary>
<p>

-
[siderolabs/go-cmd@`d735250`](https://redirect.github.com/siderolabs/go-cmd/commit/d735250)
fix: return an error on process nonzero exit code
-
[siderolabs/go-cmd@`5662c7f`](https://redirect.github.com/siderolabs/go-cmd/commit/5662c7f)
feat: add an equivalent of WaitWrapper for os.Process
-
[siderolabs/go-cmd@`71fced6`](https://redirect.github.com/siderolabs/go-cmd/commit/71fced6)
chore: rekres and move to GHA

</p>
</details>

##### Changes from siderolabs/go-kubernetes
<details><summary>3 commits</summary>
<p>

-
[siderolabs/go-kubernetes@`87d2e8e`](https://redirect.github.com/siderolabs/go-kubernetes/commit/87d2e8e)
feat: add one more deprecation for 1.32.0-beta.0
-
[siderolabs/go-kubernetes@`e56a7f6`](https://redirect.github.com/siderolabs/go-kubernetes/commit/e56a7f6)
fix: update deprecations based on Kubernetes 1.32.0-alpha.3
-
[siderolabs/go-kubernetes@`381f251`](https://redirect.github.com/siderolabs/go-kubernetes/commit/381f251)
feat: update for Kubernetes 1.32

</p>
</details>

##### Changes from siderolabs/grpc-proxy
<details><summary>2 commits</summary>
<p>

-
[siderolabs/grpc-proxy@`de1c628`](https://redirect.github.com/siderolabs/grpc-proxy/commit/de1c628)
fix: copy data from big frame msg
-
[siderolabs/grpc-proxy@`ef47ec7`](https://redirect.github.com/siderolabs/grpc-proxy/commit/ef47ec7)
chore: upgrade Codec implementations and usages to Codec2

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>38 commits</summary>
<p>

-
[siderolabs/pkgs@`4699763`](https://redirect.github.com/siderolabs/pkgs/commit/4699763)
feat: update gcc to 14.2
-
[siderolabs/pkgs@`9a98f73`](https://redirect.github.com/siderolabs/pkgs/commit/9a98f73)
feat: update containerd to v2.0.0
-
[siderolabs/pkgs@`20e1e08`](https://redirect.github.com/siderolabs/pkgs/commit/20e1e08)
feat: enable CONFIG_DM_CACHE
-
[siderolabs/pkgs@`df45e16`](https://redirect.github.com/siderolabs/pkgs/commit/df45e16)
feat: update Linux to 6.6.59
-
[siderolabs/pkgs@`2e733cc`](https://redirect.github.com/siderolabs/pkgs/commit/2e733cc)
feat: bump dependencies
-
[siderolabs/pkgs@`c92e123`](https://redirect.github.com/siderolabs/pkgs/commit/c92e123)
fix: enable nvme and 2.5gbit ethernet on nanopi-r5s
-
[siderolabs/pkgs@`b160184`](https://redirect.github.com/siderolabs/pkgs/commit/b160184)
feat: update runc to v1.2.1
-
[siderolabs/pkgs@`e9950d9`](https://redirect.github.com/siderolabs/pkgs/commit/e9950d9)
chore: drop syslinux
-
[siderolabs/pkgs@`fc2e8dc`](https://redirect.github.com/siderolabs/pkgs/commit/fc2e8dc)
feat: update containerd to v2.0.0-rc.6
-
[siderolabs/pkgs@`38304a6`](https://redirect.github.com/siderolabs/pkgs/commit/38304a6)
feat: update Linux to 6.6.58
-
[siderolabs/pkgs@`84b8df8`](https://redirect.github.com/siderolabs/pkgs/commit/84b8df8)
chore: do not use /usr/etc/udev
-
[siderolabs/pkgs@`c9282c8`](https://redirect.github.com/siderolabs/pkgs/commit/c9282c8)
feat: update runc to 1.2.0
-
[siderolabs/pkgs@`38ad08e`](https://redirect.github.com/siderolabs/pkgs/commit/38ad08e)
fix: default IOMMU mode to 'lazy'
-
[siderolabs/pkgs@`be92da0`](https://redirect.github.com/siderolabs/pkgs/commit/be92da0)
feat: update Linux to 6.6.57, update Linux firmware
-
[siderolabs/pkgs@`0b67a13`](https://redirect.github.com/siderolabs/pkgs/commit/0b67a13)
feat: bump dependencies
-
[siderolabs/pkgs@`dd5f928`](https://redirect.github.com/siderolabs/pkgs/commit/dd5f928)
feat: update Linux 6.6.56 and protect /proc/mem
-
[siderolabs/pkgs@`b1bf972`](https://redirect.github.com/siderolabs/pkgs/commit/b1bf972)
feat: enable CONFIG_XFRM_STATISTICS
-
[siderolabs/pkgs@`c63beae`](https://redirect.github.com/siderolabs/pkgs/commit/c63beae)
feat: update Linux to 6.6.54
-
[siderolabs/pkgs@`f474a55`](https://redirect.github.com/siderolabs/pkgs/commit/f474a55)
fix: libselinux: support running without /etc/selinux
-
[siderolabs/pkgs@`ba0341e`](https://redirect.github.com/siderolabs/pkgs/commit/ba0341e)
fix: systemd-udevd: search for config in /usr/etc
-
[siderolabs/pkgs@`2b193f1`](https://redirect.github.com/siderolabs/pkgs/commit/2b193f1)
feat: add lpfc kernel module
-
[siderolabs/pkgs@`1adb946`](https://redirect.github.com/siderolabs/pkgs/commit/1adb946)
feat: enable QEDF driver
-
[siderolabs/pkgs@`dbbe3d0`](https://redirect.github.com/siderolabs/pkgs/commit/dbbe3d0)
feat: update containerd to v2.0.0-rc.5
-
[siderolabs/pkgs@`f19590e`](https://redirect.github.com/siderolabs/pkgs/commit/f19590e)
feat: update Go to 1.23.2
-
[siderolabs/pkgs@`e2a561f`](https://redirect.github.com/siderolabs/pkgs/commit/e2a561f)
fix: drop the LVM2 udev lvm rule
-
[siderolabs/pkgs@`ae205aa`](https://redirect.github.com/siderolabs/pkgs/commit/ae205aa)
fix: force LVM to use `/run` as state directory
-
[siderolabs/pkgs@`232a153`](https://redirect.github.com/siderolabs/pkgs/commit/232a153)
feat: replace eudev with systemd-udevd
-
[siderolabs/pkgs@`40fb82a`](https://redirect.github.com/siderolabs/pkgs/commit/40fb82a)
feat: add libselinux, libsepol, pcre2 and libcap
-
[siderolabs/pkgs@`6f40fbb`](https://redirect.github.com/siderolabs/pkgs/commit/6f40fbb)
feat: update xfsprogs 6.10.1
-
[siderolabs/pkgs@`a1709c7`](https://redirect.github.com/siderolabs/pkgs/commit/a1709c7)
feat: enable module unloading and memory hotplug (for NVIDIA UVM)
-
[siderolabs/pkgs@`2c5785b`](https://redirect.github.com/siderolabs/pkgs/commit/2c5785b)
feat: enable transparent huge pages in madvise mode
-
[siderolabs/pkgs@`ca2e8c8`](https://redirect.github.com/siderolabs/pkgs/commit/ca2e8c8)
fix: lvm2 modprobe path
-
[siderolabs/pkgs@`6b334a6`](https://redirect.github.com/siderolabs/pkgs/commit/6b334a6)
feat: update Linux to 6.6.52
-
[siderolabs/pkgs@`e90ae7e`](https://redirect.github.com/siderolabs/pkgs/commit/e90ae7e)
feat: update Linux firmware to
[`2024090`](https://redirect.github.com/siderolabs/talos/commit/20240909)
-
[siderolabs/pkgs@`79a4f92`](https://redirect.github.com/siderolabs/pkgs/commit/79a4f92)
feat: enable INET_DIAG
-
[siderolabs/pkgs@`c9f7eb9`](https://redirect.github.com/siderolabs/pkgs/commit/c9f7eb9)
feat: update Linux to 6.6.51
-
[siderolabs/pkgs@`126b6a4`](https://redirect.github.com/siderolabs/pkgs/commit/126b6a4)
fix: add mpt3sas UBSAN patches
-
[siderolabs/pkgs@`a09bf93`](https://redirect.github.com/siderolabs/pkgs/commit/a09bf93)
chore: drop UBSAN patch

</p>
</details>

##### Changes from siderolabs/proto-codec
<details><summary>3 commits</summary>
<p>

-
[siderolabs/proto-codec@`0d84c65`](https://redirect.github.com/siderolabs/proto-codec/commit/0d84c65)
chore: add support for gogo protobuf generator
-
[siderolabs/proto-codec@`19f8d2e`](https://redirect.github.com/siderolabs/proto-codec/commit/19f8d2e)
chore: add kres
-
[siderolabs/proto-codec@`e038bb4`](https://redirect.github.com/siderolabs/proto-codec/commit/e038bb4)
Initial commit

</p>
</details>

##### Changes from siderolabs/siderolink
<details><summary>1 commit</summary>
<p>

-
[siderolabs/siderolink@`1893385`](https://redirect.github.com/siderolabs/siderolink/commit/1893385)
fix: initialize tls listener properly

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>8 commits</summary>
<p>

-
[siderolabs/tools@`3750064`](https://redirect.github.com/siderolabs/tools/commit/3750064)
fix: update for musl with close_range
-
[siderolabs/tools@`0a443c6`](https://redirect.github.com/siderolabs/tools/commit/0a443c6)
feat: update toolchain for gcc 14.2
-
[siderolabs/tools@`63ecd80`](https://redirect.github.com/siderolabs/tools/commit/63ecd80)
feat: bump depedendencies
-
[siderolabs/tools@`2058296`](https://redirect.github.com/siderolabs/tools/commit/2058296)
feat: bump dependencies
-
[siderolabs/tools@`1151610`](https://redirect.github.com/siderolabs/tools/commit/1151610)
feat: update Go to 1.23.2
-
[siderolabs/tools@`9f2189b`](https://redirect.github.com/siderolabs/tools/commit/9f2189b)
fix: bump gettext-tiny to the latest dev version
-
[siderolabs/tools@`95069d6`](https://redirect.github.com/siderolabs/tools/commit/95069d6)
feat: update Go to 1.23.1
-
[siderolabs/tools@`eec0656`](https://redirect.github.com/siderolabs/tools/commit/eec0656)
feat: replace gettext with gettext-tiny

</p>
</details>

##### Dependency Changes

- **cloud.google.com/go/compute/metadata** v0.5.0 -> v0.5.2
- **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.13.0 -> v1.16.0
- **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.7.0 -> v1.8.0
-
**github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates**
v1.1.0 -> v1.2.0
- **github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys**
v1.1.0 -> v1.2.0
- **github.com/aws/aws-sdk-go-v2/config** v1.27.33 -> v1.28.1
- **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.16.13 -> v1.16.18
- **github.com/aws/aws-sdk-go-v2/service/kms** v1.35.7 -> v1.37.3
- **github.com/aws/smithy-go** v1.20.4 -> v1.22.0
- **github.com/containerd/containerd/api** v1.8.0-rc.3 -> v1.8.0
- **github.com/containerd/containerd/v2** v2.0.0-rc.4 -> v2.0.0
- **github.com/containerd/errdefs** v0.1.0 -> v1.0.0
- **github.com/containerd/platforms** v0.2.1 -> v1.0.0-rc.0
- **github.com/containerd/typeurl/v2** v2.2.0 -> v2.2.2
- **github.com/containernetworking/plugins** v1.5.1 -> v1.6.0
- **github.com/cosi-project/runtime** v0.5.5 -> v0.7.1
- **github.com/docker/cli** v27.3.1 ***new***
- **github.com/docker/docker** v27.2.0 -> v27.3.1
- **github.com/elastic/go-libaudit/v2**
[`1df86e7`](https://redirect.github.com/siderolabs/talos/commit/1df86e79cca7)
***new***
- **github.com/fatih/color** v1.17.0 -> v1.18.0
- **github.com/florianl/go-tc** v0.4.4 ***new***
- **github.com/foxboron/go-uefi**
[`e2076f0`](https://redirect.github.com/siderolabs/talos/commit/e2076f0e58ca)
->
[`fab4fdf`](https://redirect.github.com/siderolabs/talos/commit/fab4fdf2f2f3)
- **github.com/fsnotify/fsnotify** v1.7.0 -> v1.8.0
- **github.com/google/cadvisor** v0.50.0 -> v0.51.0
- **github.com/gopacket/gopacket** v1.2.0 -> v1.3.0
- **github.com/hetznercloud/hcloud-go/v2** v2.13.1 -> v2.15.0
- **github.com/klauspost/compress** v1.17.9 -> v1.17.11
- **github.com/linode/go-metadata** v0.2.0 -> v0.2.1
- **github.com/mdlayher/ethtool** v0.1.0 -> v0.2.0
- **github.com/opencontainers/runc** v1.2.0-rc.3 -> v1.2.1
- **github.com/rivo/tview**
[`fd649db`](https://redirect.github.com/siderolabs/talos/commit/fd649dbf1223)
->
[`c76f787`](https://redirect.github.com/siderolabs/talos/commit/c76f7879f592)
- **github.com/siderolabs/crypto** v0.4.4 -> v0.5.0
- **github.com/siderolabs/discovery-api** v0.1.4 -> v0.1.5
- **github.com/siderolabs/discovery-client** v0.1.9 -> v0.1.10
- **github.com/siderolabs/extras** v1.8.0 -> v1.9.0-alpha.0-1-geab6e58
- **github.com/siderolabs/gen** v0.5.0 -> v0.7.0
- **github.com/siderolabs/go-blockdevice** v0.4.7 -> v0.4.8
- **github.com/siderolabs/go-blockdevice/v2** v2.0.2 -> v2.0.3
- **github.com/siderolabs/go-circular** v0.2.0 -> v0.2.1
- **github.com/siderolabs/go-cmd** v0.1.1 -> v0.1.3
- **github.com/siderolabs/go-kubernetes** v0.2.12 -> v0.2.15
- **github.com/siderolabs/grpc-proxy** v0.4.1 -> v0.5.1
- **github.com/siderolabs/pkgs** v1.8.0-8-gdf1a1a5 ->
v1.9.0-alpha.0-37-g4699763
- **github.com/siderolabs/proto-codec** v0.1.1 ***new***
- **github.com/siderolabs/siderolink** v0.3.10 -> v0.3.11
- **github.com/siderolabs/talos/pkg/machinery** v1.8.0 -> v1.9.0-alpha.2
- **github.com/siderolabs/tools** v1.8.0-1-ga0c06c6 ->
v1.9.0-alpha.0-7-g3750064
- **golang.org/x/net** v0.29.0 -> v0.30.0
- **golang.org/x/sys** v0.25.0 -> v0.26.0
- **golang.org/x/term** v0.24.0 -> v0.25.0
- **golang.org/x/text** v0.18.0 -> v0.19.0
- **golang.org/x/time** v0.6.0 -> v0.7.0
- **google.golang.org/grpc** v1.66.0 -> v1.67.1
- **google.golang.org/protobuf** v1.34.2 -> v1.35.1
- **k8s.io/api** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/apimachinery** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/apiserver** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/client-go** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/component-base** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/cri-api** v0.32.0-alpha.0 -> v0.32.0-beta.0
- **k8s.io/kube-scheduler** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/kubectl** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/kubelet** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/pod-security-admission** v0.31.1 -> v0.32.0-beta.0
- **kernel.org/pub/linux/libs/security/libcap/cap** v1.2.70 -> v1.2.71

Previous release can be found at
[v1.8.0](https://redirect.github.com/siderolabs/talos/releases/tag/v1.8.0)

#### Images

    ghcr.io/siderolabs/flannel:v0.26.0
    registry.k8s.io/coredns/coredns:v1.11.3
    gcr.io/etcd-development/etcd:v3.5.16
    registry.k8s.io/kube-apiserver:v1.32.0-beta.0
    registry.k8s.io/kube-controller-manager:v1.32.0-beta.0
    registry.k8s.io/kube-scheduler:v1.32.0-beta.0
    registry.k8s.io/kube-proxy:v1.32.0-beta.0
    ghcr.io/siderolabs/kubelet:v1.32.0-beta.0
    ghcr.io/siderolabs/installer:v1.9.0-alpha.2
    registry.k8s.io/pause:3.10

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-08 21:37:47 +01:00
TrueCharts Bot
1aa11cf3f9 chore(flux): update image volsync 2.4.1 → 2.5.0 (clustertool) (#29021)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/truecharts/charts/tree/HEAD/charts/system/volsync))
| minor | `2.4.1` -> `2.5.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2024-11-08 21:37:24 +01:00
TrueCharts Bot
21058ae9d0 fix(deps): update module github.com/siderolabs/talos/pkg/machinery v1.9.0-alpha.0 → v1.9.0-alpha.1 (clustertool) (#29009)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/siderolabs/talos/pkg/machinery](https://redirect.github.com/siderolabs/talos)
| require | patch | `v1.9.0-alpha.0` -> `v1.9.0-alpha.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos
(github.com/siderolabs/talos/pkg/machinery)</summary>

###
[`v1.9.0-alpha.1`](https://redirect.github.com/siderolabs/talos/compare/v1.9.0-alpha.0...v1.9.0-alpha.1)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.0-alpha.0...v1.9.0-alpha.1)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-08 17:19:32 +01:00
TrueCharts Bot
3b7dcbf7f1 fix(deps): update module golang.org/x/crypto v0.28.0 → v0.29.0 (clustertool) (#28973) 2024-11-08 01:20:11 +01:00
Kjeld Schouten
df2003023a fix(clustertool): fix kubectl logging error, add kubeconfig command and fix some command docs 2024-11-08 00:39:24 +01:00
Kjeld Schouten
8abe0ab511 fix(clustertool): ensure kubectl uses k8s.io/yaml 2024-11-08 00:23:36 +01:00
Kjeld Schouten
5e89c6213e fix(clustertool): fix kubeconfig not boing loaded correctly and put some more silence into healthchecks 2024-11-07 23:51:25 +01:00
Kjeld Schouten
de699a5992 feat(clustertool): add some aliasses to commonly mistaken commands 2024-11-07 12:14:57 +01:00
Kjeld Schouten
81f6808581 fix(clustertool): dont try to load sops.yaml if it doesn't exist, load empty instead 2024-11-07 12:14:28 +01:00
Kjeld Schouten
93fad462e2 feat(clustertool): ensure that we low-code fail encryptioncheck if encryption-check fails 2024-11-07 12:13:48 +01:00
Kjeld Schouten
c70e1b4698 fix(clustertool): correct machineconfig apply command 2024-11-07 11:27:57 +01:00
Kjeld Schouten
7c3ecc54a4 feat(clustertool): introduce tracing of command-slice and dont process extraArgs for now 2024-11-07 11:27:57 +01:00
TrueCharts Bot
3fae5e9c5d chore(flux): update image prometheus-operator 8.10.0 → 8.11.0 (clustertool) (#28938)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`8.10.0` -> `8.11.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2024-11-07 01:19:17 +01:00
Kjeld Schouten
cc831343d8 fix(clustertool): correct issue with single-node apply not being correct 2024-11-07 00:00:26 +01:00
Kjeld Schouten
a11f019d6e fix(clustertool): add commands debug and allow for extra args 2024-11-06 22:25:50 +01:00