Commit Graph

190 Commits

Author SHA1 Message Date
Kjeld Schouten be53e747a8 fix(clustertool): correct issuer for default wildcard certificate 2024-11-10 11:20:20 +01:00
Kjeld Schouten 3ad4105734 fix(clustertool): (re-)enable extra args on plain cmd generator 2024-11-09 21:41:50 +01:00
Kjeld Schouten d1bb074680 fix(clustertool): ensure kubeconfig is created with force true by default 2024-11-09 21:11:45 +01:00
Kjeld Schouten 55284f8567 fix(clustertool): When flux-bootstrap fails, ensure rename change is undone first 2024-11-09 21:04:48 +01:00
Kjeld Schouten a62135cdd9 fix(clustertool): retry kubectl apply after error with 15s wait 2024-11-09 21:04:48 +01:00
Kjeld Schouten 0c3e94c799 fix(clustertool): correct build typo 2024-11-09 13:21:24 +01:00
Kjeld Schouten 737b8bc5c3 fix(clustertool): use reachable schema for helmrelease files 2024-11-09 13:17:43 +01:00
Kjeld Schouten 3e0d2b7c85 fix(clustertool): bump clusterissuer version to fix ACME naming issues 2024-11-09 13:17:43 +01:00
Kjeld Schouten cf4a61f015 fix(clustertool): ensure talsecret generation log output matches actions being taken 2024-11-09 13:17:43 +01:00
Kjeld Schouten db9e8d4e1d fix(clustertool): ensure extraction of node IP for healthcheck is more solid 2024-11-09 13:17:43 +01:00
TrueCharts-Bot 94663b5970 Commit daily changes
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2024-11-09 00:07:27 +00:00
Kjeld Schouten 86fb83c9ac fix(clustertool): Try to harden the repo url generator a tad 2024-11-08 21:57:37 +01:00
Kjeld Schouten d41c3a8c05 fix(clustertool): ensure github known hosts are always pointing towards github 2024-11-08 21:57:37 +01:00
TrueCharts Bot 1cfe5bf5a1 fix(deps): update module github.com/siderolabs/talos/pkg/machinery v1.9.0-alpha.1 → v1.9.0-alpha.2 (clustertool) (#29020)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/siderolabs/talos/pkg/machinery](https://redirect.github.com/siderolabs/talos)
| require | patch | `v1.9.0-alpha.1` -> `v1.9.0-alpha.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos
(github.com/siderolabs/talos/pkg/machinery)</summary>

###
[`v1.9.0-alpha.2`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.0-alpha.2)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.0-alpha.1...v1.9.0-alpha.2)

#### [Talos
1.9.0-alpha.2](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.0-alpha.2)
(2024-11-08)

Welcome to the v1.9.0-alpha.2 release of Talos!\
*This is a pre-release of Talos*

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### AppArmor

Talos Linux starting with v1.9 will ship with SELinux LSM enabled by
default.
If you need to use AppArmor LSM add the following to the machine
configuration:

```yaml
machine:
  install:
     extraKernelArgs:
      - -selinux
      - lsm=lockdown,capability,yama,apparmor,bpf
      - apparmor=1
```

##### Auditd

Talos Linux now starts a auditd service by default.
Logs can be read with `talosctl logs auditd`.

##### `talosctl cgroups`

The `talosctl cgroups` command has been added to the `talosctl` tool.
This command allows you to view the cgroup resource consumption and
limits for a machine, e.g.
`talosctl cgroups --preset memory`.

##### udevd

Talos previously used `udevd` to provide `udevd`, now it uses
`systemd-udevd` instead.

##### Component Updates

Linux: 6.6.59
containerd: 2.0.0
Flannel: 0.26.0
Kubernetes: 1.32.0-beta.0
runc: 1.2.1

Talos is built with Go 1.23.2.

##### User Namespaces

Talos Linux now supports running Kubernetes pods with user namespaces
enabled.
Refer to the
[documentation](https://www.talos.dev/v1.9/kubernetes-guides/configuration/usernamespace/)
for more information.

##### Contributors

-   Andrey Smirnov
-   Noel Georgi
-   Dmitriy Matrenichev
-   Dmitry Sharshakov
-   Joakim Nohlgård
-   Jean-Francois Roy
-   Utku Ozdemir
-   blablu
-   Adolfo Ochagavía
-   Dan Rue
-   David Backeus
-   Eddie Wang
-   Florian Ströger
-   Hexoplon
-   Jakob Maležič
-   KBAegis
-   Mike Beaumont
-   Nebula
-   Nico Berlee
-   Philip Schmid
-   Philipp Kleber
-   Remko Molier
-   Robby Ciliberto
-   Ryan Borstelmann
-   Serge Logvinov
-   Spencer Smith
-   Steven Cassamajor
-   Tim Jones
-   adilTepe
-   ekarlso
-   naed3r
-   nevermarine
-   solidDoWant

##### Changes

<details><summary>145 commits</summary>
<p>

-
[@&#8203;`0290a38`](https://redirect.github.com/siderolabs/talos/commit/0290a3881)
release(v1.9.0-alpha.2): prepare release
-
[@&#8203;`a309f6a`](https://redirect.github.com/siderolabs/talos/commit/a309f6aa5)
chore: fix nil pointer dereference in AWS uploader
-
[@&#8203;`333737f`](https://redirect.github.com/siderolabs/talos/commit/333737f17)
test: fix unpriviliged process runner test
-
[@&#8203;`2001167`](https://redirect.github.com/siderolabs/talos/commit/200116705)
chore(ci): save support zip always after tests
-
[@&#8203;`6a42c3b`](https://redirect.github.com/siderolabs/talos/commit/6a42c3b8e)
release(v1.9.0-alpha.1): prepare release
-
[@&#8203;`fb72e4b`](https://redirect.github.com/siderolabs/talos/commit/fb72e4b7b)
fix(ci): skip test if `UserNamespacesSupport` feature gate is not set
-
[@&#8203;`11380f9`](https://redirect.github.com/siderolabs/talos/commit/11380f933)
feat: display current CPU frequency on dashboard
-
[@&#8203;`fbce267`](https://redirect.github.com/siderolabs/talos/commit/fbce267ae)
feat: check bridged interfaces should not have addresses
-
[@&#8203;`942962b`](https://redirect.github.com/siderolabs/talos/commit/942962bf0)
docs: add docs on usernamespace support in k8s
-
[@&#8203;`0406a05`](https://redirect.github.com/siderolabs/talos/commit/0406a05a9)
chore: update pkgs to ones built with gcc 14.2
-
[@&#8203;`2e12762`](https://redirect.github.com/siderolabs/talos/commit/2e127627d)
docs: add apparmor enablement release notes
-
[@&#8203;`aa9311f`](https://redirect.github.com/siderolabs/talos/commit/aa9311f3d)
fix: install disk matcher error
-
[@&#8203;`1800f81`](https://redirect.github.com/siderolabs/talos/commit/1800f8104)
fix: selinux handling and apparmor tests
-
[@&#8203;`313bffa`](https://redirect.github.com/siderolabs/talos/commit/313bffadf)
feat: update Kubernetes to v1.32.0-beta.0
-
[@&#8203;`bbfa144`](https://redirect.github.com/siderolabs/talos/commit/bbfa14451)
feat: update containerd to v2.0.0
-
[@&#8203;`8e02b9f`](https://redirect.github.com/siderolabs/talos/commit/8e02b9fcb)
docs: update manual k8s upgrade docs
-
[@&#8203;`474949d`](https://redirect.github.com/siderolabs/talos/commit/474949dc7)
feat: add dm-cache dm-cache-smq kernel modules
-
[@&#8203;`5112547`](https://redirect.github.com/siderolabs/talos/commit/5112547d6)
chore: generate support zip for crashdump
-
[@&#8203;`a867f85`](https://redirect.github.com/siderolabs/talos/commit/a867f85e4)
feat: label system socket and runtime files
-
[@&#8203;`398f714`](https://redirect.github.com/siderolabs/talos/commit/398f714cf)
feat: update Linux 6.6.59, runc 1.2.1
-
[@&#8203;`05c6209`](https://redirect.github.com/siderolabs/talos/commit/05c620957)
feat: allow extra mounts for docker-based `talosctl cluster create`
-
[@&#8203;`cedabed`](https://redirect.github.com/siderolabs/talos/commit/cedabeddf)
chore: cleanup code
-
[@&#8203;`61d363e`](https://redirect.github.com/siderolabs/talos/commit/61d363e1d)
chore: update go-auditlib
-
[@&#8203;`960a040`](https://redirect.github.com/siderolabs/talos/commit/960a04049)
feat: start enabling SELinux
-
[@&#8203;`7f3aaa2`](https://redirect.github.com/siderolabs/talos/commit/7f3aaa21c)
fix: update permissions for logging directories in /var
-
[@&#8203;`0e6c983`](https://redirect.github.com/siderolabs/talos/commit/0e6c983b8)
fix: mount /sys/kernel/security conditionally
-
[@&#8203;`74b0e8c`](https://redirect.github.com/siderolabs/talos/commit/74b0e8c37)
fix: make route normalization keep family
-
[@&#8203;`0a3761c`](https://redirect.github.com/siderolabs/talos/commit/0a3761c22)
fix: talosctl windows arm64
-
[@&#8203;`4b10c53`](https://redirect.github.com/siderolabs/talos/commit/4b10c5328)
chore: add Windows ARM64 build for talosctl
-
[@&#8203;`9abf161`](https://redirect.github.com/siderolabs/talos/commit/9abf16108)
feat: add auditd service
-
[@&#8203;`d464ca8`](https://redirect.github.com/siderolabs/talos/commit/d464ca869)
chore: drop runc memfd bind added in
[#&#8203;9069](https://redirect.github.com/siderolabs/talos/issues/9069)
-
[@&#8203;`b54d26c`](https://redirect.github.com/siderolabs/talos/commit/b54d26c2c)
fix: mount pseudo sub-mountpoints in init
-
[@&#8203;`7aeb15f`](https://redirect.github.com/siderolabs/talos/commit/7aeb15f73)
chore: disable coredns cache for cluster domain
-
[@&#8203;`d8b6521`](https://redirect.github.com/siderolabs/talos/commit/d8b652150)
docs: add warning about NVMe bus path bug
-
[@&#8203;`3e16ab1`](https://redirect.github.com/siderolabs/talos/commit/3e16ab135)
feat: update Kubernetes to v1.32.0-alpha.3
-
[@&#8203;`0b8b356`](https://redirect.github.com/siderolabs/talos/commit/0b8b35677)
feat: add BridgePort property to network machine configuration
-
[@&#8203;`b379506`](https://redirect.github.com/siderolabs/talos/commit/b37950625)
fix: use more correct condition to skip generating hosts files
-
[@&#8203;`62ec7ec`](https://redirect.github.com/siderolabs/talos/commit/62ec7ec33)
refactor: replace the old v1 mount package with new one
-
[@&#8203;`0ece13c`](https://redirect.github.com/siderolabs/talos/commit/0ece13c62)
docs: update network-config.md (cont)
-
[@&#8203;`93827f0`](https://redirect.github.com/siderolabs/talos/commit/93827f048)
docs: update network-config.md
-
[@&#8203;`423b1e5`](https://redirect.github.com/siderolabs/talos/commit/423b1e5fb)
fix: do not trim 0 from process SELinux label
-
[@&#8203;`2136358`](https://redirect.github.com/siderolabs/talos/commit/2136358d6)
feat: introduce metal agent mode
-
[@&#8203;`0e15955`](https://redirect.github.com/siderolabs/talos/commit/0e15955fc)
chore: small refactoring
-
[@&#8203;`66012a7`](https://redirect.github.com/siderolabs/talos/commit/66012a7f2)
feat: remove wrapperd and launch processes directly
-
[@&#8203;`3a0a17a`](https://redirect.github.com/siderolabs/talos/commit/3a0a17ae6)
fix: prevent panic in nocloud platform code
-
[@&#8203;`dc0c6ac`](https://redirect.github.com/siderolabs/talos/commit/dc0c6acbd)
refactor: remove unmaintained github.com/vishvananda/netlink
-
[@&#8203;`78353f7`](https://redirect.github.com/siderolabs/talos/commit/78353f791)
feat: add parsing of vlanNNNN:ethX style VLAN cmdline args
-
[@&#8203;`9db7a36`](https://redirect.github.com/siderolabs/talos/commit/9db7a36bf)
fix: generation of SecureBoot iso
-
[@&#8203;`c755b6d`](https://redirect.github.com/siderolabs/talos/commit/c755b6d7e)
fix: update the CRI sandbox image reference
-
[@&#8203;`cec290b`](https://redirect.github.com/siderolabs/talos/commit/cec290b35)
feat: allow extensions to log to console
-
[@&#8203;`b7801df`](https://redirect.github.com/siderolabs/talos/commit/b7801df82)
fix: wait for udevd to be running before activating LVM
-
[@&#8203;`d4cb478`](https://redirect.github.com/siderolabs/talos/commit/d4cb478a5)
docs: improve field description for BridgeSTP, BridgeVLAN
-
[@&#8203;`7329824`](https://redirect.github.com/siderolabs/talos/commit/7329824b2)
docs: add Mynewsdesk to ADOPTERS.md
-
[@&#8203;`a13cf76`](https://redirect.github.com/siderolabs/talos/commit/a13cf76a3)
chore: simplify `DNSUpstreamController` and `DNSUpstream` resource
-
[@&#8203;`62d1854`](https://redirect.github.com/siderolabs/talos/commit/62d185473)
fix: talosctl process null character
-
[@&#8203;`77d7368`](https://redirect.github.com/siderolabs/talos/commit/77d7368ea)
feat: update containerd to v2.0.0-rc.6
-
[@&#8203;`d393938`](https://redirect.github.com/siderolabs/talos/commit/d39393879)
fix: rework the 'metal-iso' config acquisition
-
[@&#8203;`1993afc`](https://redirect.github.com/siderolabs/talos/commit/1993afca9)
chore: create /usr/etc in a different step
-
[@&#8203;`8680351`](https://redirect.github.com/siderolabs/talos/commit/8680351c1)
chore: move system extensions' udev rules
-
[@&#8203;`3067f64`](https://redirect.github.com/siderolabs/talos/commit/3067f64c8)
feat: update Flannel to v0.26.0
-
[@&#8203;`8658d68`](https://redirect.github.com/siderolabs/talos/commit/8658d6865)
docs: typo in deploying cilium
-
[@&#8203;`49bbadc`](https://redirect.github.com/siderolabs/talos/commit/49bbadc4b)
docs: add documentation on performance tuning
-
[@&#8203;`534b0ce`](https://redirect.github.com/siderolabs/talos/commit/534b0ce18)
feat: update runc to 1.2.0 final
-
[@&#8203;`2172535`](https://redirect.github.com/siderolabs/talos/commit/217253523)
docs: fix image factory links
-
[@&#8203;`375e3da`](https://redirect.github.com/siderolabs/talos/commit/375e3da73)
feat: update Kubernetes to 1.32.0-alpha.2
-
[@&#8203;`9e6f64d`](https://redirect.github.com/siderolabs/talos/commit/9e6f64df0)
fix: improve error messages for invalid bridge/bond configuration
-
[@&#8203;`7c8c72c`](https://redirect.github.com/siderolabs/talos/commit/7c8c72c2b)
fix: correct error message for invalid ip=
-
[@&#8203;`ead4699`](https://redirect.github.com/siderolabs/talos/commit/ead46997c)
chore: rename tpm2.PCRExtent -> tpm2.PCRExtend
-
[@&#8203;`867c4b8`](https://redirect.github.com/siderolabs/talos/commit/867c4b812)
docs: fix typo in prodnotes.md
-
[@&#8203;`1b22df4`](https://redirect.github.com/siderolabs/talos/commit/1b22df48a)
chore: support debug shell for advanced development
-
[@&#8203;`c14b446`](https://redirect.github.com/siderolabs/talos/commit/c14b44622)
feat: update Kubernetes to v1.32.0-alpha.1
-
[@&#8203;`29780d3`](https://redirect.github.com/siderolabs/talos/commit/29780d35a)
test: add an integration test for verifying process parameters
-
[@&#8203;`3d342af`](https://redirect.github.com/siderolabs/talos/commit/3d342af44)
fix: update incorrect alias for PCIDevice resource
-
[@&#8203;`f7d35a5`](https://redirect.github.com/siderolabs/talos/commit/f7d35a5e0)
release(v1.9.0-alpha.0): prepare release
-
[@&#8203;`e0434d7`](https://redirect.github.com/siderolabs/talos/commit/e0434d77d)
feat: update dependencies
-
[@&#8203;`5c5a248`](https://redirect.github.com/siderolabs/talos/commit/5c5a24886)
feat: add Talos 1.9 compatibility guarantees
-
[@&#8203;`bc4c21f`](https://redirect.github.com/siderolabs/talos/commit/bc4c21f41)
test: add json logs test environment
-
[@&#8203;`71faa32`](https://redirect.github.com/siderolabs/talos/commit/71faa3294)
docs: nvidia proprietary/oss hardware requirement
-
[@&#8203;`59a78da`](https://redirect.github.com/siderolabs/talos/commit/59a78da42)
chore: add proto-codec/codec
-
[@&#8203;`7ff1ced`](https://redirect.github.com/siderolabs/talos/commit/7ff1cedfe)
chore: update siderolabs/crypto module and return proper ALPN
-
[@&#8203;`ccbd5ae`](https://redirect.github.com/siderolabs/talos/commit/ccbd5aed3)
feat: optionally decode hcloud userdata as base64
-
[@&#8203;`34f652c`](https://redirect.github.com/siderolabs/talos/commit/34f652ce8)
feat: add well-known app.kubernetes.io labels to control-plane pods
-
[@&#8203;`fc89dc2`](https://redirect.github.com/siderolabs/talos/commit/fc89dc216)
fix: support `extra-disks` when using iso
-
[@&#8203;`f2bff81`](https://redirect.github.com/siderolabs/talos/commit/f2bff814d)
chore: add arm64 target for integration-test
-
[@&#8203;`5853bb0`](https://redirect.github.com/siderolabs/talos/commit/5853bb0ea)
fix: json logging panic
-
[@&#8203;`a859cff`](https://redirect.github.com/siderolabs/talos/commit/a859cff36)
chore: use virtio driver for disks in arm64
-
[@&#8203;`db248de`](https://redirect.github.com/siderolabs/talos/commit/db248de88)
chore(ci): add config for lldpd extension
-
[@&#8203;`9f0de9f`](https://redirect.github.com/siderolabs/talos/commit/9f0de9f43)
test: update provision upgrade tests for Talos 1.9
-
[@&#8203;`39fe285`](https://redirect.github.com/siderolabs/talos/commit/39fe285e6)
fix: skip ram disks
-
[@&#8203;`a9bff3a`](https://redirect.github.com/siderolabs/talos/commit/a9bff3a1d)
test: skip no error test in Cilium
-
[@&#8203;`4d90202`](https://redirect.github.com/siderolabs/talos/commit/4d902021b)
fix: do not use pflag csv comma reader for config-patch
-
[@&#8203;`5371788`](https://redirect.github.com/siderolabs/talos/commit/5371788ce)
fix: typo in documentation
-
[@&#8203;`8a228ba`](https://redirect.github.com/siderolabs/talos/commit/8a228ba6b)
docs: add egress documentation
-
[@&#8203;`182325c`](https://redirect.github.com/siderolabs/talos/commit/182325cb0)
test: skip lvm test if not enough user disks available
-
[@&#8203;`519a483`](https://redirect.github.com/siderolabs/talos/commit/519a48302)
fix: wipe system partitions correctly via kernel args
-
[@&#8203;`0a2b455`](https://redirect.github.com/siderolabs/talos/commit/0a2b4556c)
fix: volume encryption with failing keyslots
-
[@&#8203;`6affbd3`](https://redirect.github.com/siderolabs/talos/commit/6affbd318)
fix: update grpc-go the latest patch release
-
[@&#8203;`77a4a4a`](https://redirect.github.com/siderolabs/talos/commit/77a4a4adc)
fix: scaleway metadata
-
[@&#8203;`7acadc0`](https://redirect.github.com/siderolabs/talos/commit/7acadc0c8)
fix: do not stop udevd before unmounting volumes
-
[@&#8203;`6a08105`](https://redirect.github.com/siderolabs/talos/commit/6a081055b)
feat: update Flannel to v0.25.7
-
[@&#8203;`2362f6d`](https://redirect.github.com/siderolabs/talos/commit/2362f6d3e)
fix: improve container detection
-
[@&#8203;`b67bc73`](https://redirect.github.com/siderolabs/talos/commit/b67bc73fd)
fix: fix mdadm system extension
-
[@&#8203;`f08669c`](https://redirect.github.com/siderolabs/talos/commit/f08669c7a)
feat: bring in lpfc kernel module driver
-
[@&#8203;`6a01437`](https://redirect.github.com/siderolabs/talos/commit/6a014374b)
feat: enable QEDF driver
-
[@&#8203;`f711907`](https://redirect.github.com/siderolabs/talos/commit/f711907e0)
fix: make /var/run empty on reboots
-
[@&#8203;`7d02eb6`](https://redirect.github.com/siderolabs/talos/commit/7d02eb60f)
docs: fix typo in CloudStack docs
-
[@&#8203;`7486157`](https://redirect.github.com/siderolabs/talos/commit/74861573a)
fix: multiple fixes for LVM activation
-
[@&#8203;`74c12c2`](https://redirect.github.com/siderolabs/talos/commit/74c12c20e)
feat: replace eudev with systemd-udevd
-
[@&#8203;`0a4df4e`](https://redirect.github.com/siderolabs/talos/commit/0a4df4ef8)
docs: fix nvidia CRI config example
-
[@&#8203;`afc1e1a`](https://redirect.github.com/siderolabs/talos/commit/afc1e1a46)
docs: fix typo in extraMounts directory
-
[@&#8203;`a341bdb`](https://redirect.github.com/siderolabs/talos/commit/a341bdb06)
fix: prevent file descriptors leaks to child processes
-
[@&#8203;`dec653b`](https://redirect.github.com/siderolabs/talos/commit/dec653bfe)
chore: better lvm2 tests
-
[@&#8203;`908fd87`](https://redirect.github.com/siderolabs/talos/commit/908fd8789)
feat: support cgroup deep analysis in `talosctl`
-
[@&#8203;`aa846cc`](https://redirect.github.com/siderolabs/talos/commit/aa846cc18)
feat: add support for CI Network config in nocloud
-
[@&#8203;`10f2539`](https://redirect.github.com/siderolabs/talos/commit/10f2539f2)
chore: disable cloud-images cron workflow
-
[@&#8203;`b07a8b3`](https://redirect.github.com/siderolabs/talos/commit/b07a8b36b)
chore: ignore more plugins for system containerd
-
[@&#8203;`392c479`](https://redirect.github.com/siderolabs/talos/commit/392c4798f)
feat: prepare for Talos 1.9
-
[@&#8203;`ea7bf9f`](https://redirect.github.com/siderolabs/talos/commit/ea7bf9fb4)
docs: update storage.md
-
[@&#8203;`4ab8dee`](https://redirect.github.com/siderolabs/talos/commit/4ab8dee69)
fix: build talosctl without `tcell_minimal`
-
[@&#8203;`2fa019b`](https://redirect.github.com/siderolabs/talos/commit/2fa019bd9)
docs: enable 'edit on GitHub' link
-
[@&#8203;`d2ccbc2`](https://redirect.github.com/siderolabs/talos/commit/d2ccbc2b1)
docs: update hetzner documentation for CCM
-
[@&#8203;`d498f64`](https://redirect.github.com/siderolabs/talos/commit/d498f647c)
docs: fix Kernel Self Protection Project (KSPP) references
-
[@&#8203;`0ec7546`](https://redirect.github.com/siderolabs/talos/commit/0ec75463e)
docs: make Talos 1.8 current release
-
[@&#8203;`9b77698`](https://redirect.github.com/siderolabs/talos/commit/9b77698cf)
fix: update blockdevice library to v2.0.2
-
[@&#8203;`e46227a`](https://redirect.github.com/siderolabs/talos/commit/e46227ab9)
docs: fix kubespan name inconsistency
-
[@&#8203;`6b15ca1`](https://redirect.github.com/siderolabs/talos/commit/6b15ca19c)
fix: audit and fix cgroup reservations
-
[@&#8203;`32b5d01`](https://redirect.github.com/siderolabs/talos/commit/32b5d01ed)
chore: bump lvm2
-
[@&#8203;`6484581`](https://redirect.github.com/siderolabs/talos/commit/6484581eb)
feat: allow /sbin/ldconfig in extensions
-
[@&#8203;`9fa08e8`](https://redirect.github.com/siderolabs/talos/commit/9fa08e843)
chore: refactor tests
-
[@&#8203;`d8ab498`](https://redirect.github.com/siderolabs/talos/commit/d8ab4981b)
feat: support lvm auto activation
-
[@&#8203;`8166a58`](https://redirect.github.com/siderolabs/talos/commit/8166a58b3)
fix: filter out non-printable characters in process line
-
[@&#8203;`806b6aa`](https://redirect.github.com/siderolabs/talos/commit/806b6aaf5)
docs: add SECURITY.md
-
[@&#8203;`7bd26df`](https://redirect.github.com/siderolabs/talos/commit/7bd26df30)
docs: document `/dev/net/tun` compatibility
-
[@&#8203;`18daedb`](https://redirect.github.com/siderolabs/talos/commit/18daedb51)
fix: strategic merge patch delete for map keys
-
[@&#8203;`f337052`](https://redirect.github.com/siderolabs/talos/commit/f3370529a)
docs: correct typo
-
[@&#8203;`8d6884a`](https://redirect.github.com/siderolabs/talos/commit/8d6884a8e)
test: add a test for inline machine config trusted roots
-
[@&#8203;`d4a6d01`](https://redirect.github.com/siderolabs/talos/commit/d4a6d017d)
fix: ignore invalid NTP responses
-
[@&#8203;`869f837`](https://redirect.github.com/siderolabs/talos/commit/869f8379f)
feat: update default Kubernetes version to 1.31.1
-
[@&#8203;`780a1f1`](https://redirect.github.com/siderolabs/talos/commit/780a1f198)
fix: update CoreDNS health check
-
[@&#8203;`79cd031`](https://redirect.github.com/siderolabs/talos/commit/79cd03158)
chore: account for resource sorting in dns upstream resource
-
[@&#8203;`e17fafa`](https://redirect.github.com/siderolabs/talos/commit/e17fafaca)
chore: drop `activateLogicalVolumes` sequencer step
-
[@&#8203;`a294b36`](https://redirect.github.com/siderolabs/talos/commit/a294b366f)
fix: parse SideroLink API endpoint correctly
-
[@&#8203;`a9269ac`](https://redirect.github.com/siderolabs/talos/commit/a9269ac7b)
fix: remove extra logging on ethtool ioctl failures
-
[@&#8203;`5c6277d`](https://redirect.github.com/siderolabs/talos/commit/5c6277d17)
feat: update etcd to 3.5.16
-
[@&#8203;`c1ed298`](https://redirect.github.com/siderolabs/talos/commit/c1ed2984b)
docs: add what's new for Talos 1.8

</p>
</details>

##### Changes since v1.9.0-alpha.1
<details><summary>4 commits</summary>
<p>

-
[@&#8203;`0290a38`](https://redirect.github.com/siderolabs/talos/commit/0290a3881)
release(v1.9.0-alpha.2): prepare release
-
[@&#8203;`a309f6a`](https://redirect.github.com/siderolabs/talos/commit/a309f6aa5)
chore: fix nil pointer dereference in AWS uploader
-
[@&#8203;`333737f`](https://redirect.github.com/siderolabs/talos/commit/333737f17)
test: fix unpriviliged process runner test
-
[@&#8203;`2001167`](https://redirect.github.com/siderolabs/talos/commit/200116705)
chore(ci): save support zip always after tests

</p>
</details>

##### Changes from siderolabs/crypto
<details><summary>1 commit</summary>
<p>

-
[siderolabs/crypto@`58b2f92`](https://redirect.github.com/siderolabs/crypto/commit/58b2f92)
chore: use HTTP/2 ALPN by default

</p>
</details>

##### Changes from siderolabs/discovery-api
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-api@`005e92c`](https://redirect.github.com/siderolabs/discovery-api/commit/005e92c)
chore: rekres and regen

</p>
</details>

##### Changes from siderolabs/discovery-client
<details><summary>1 commit</summary>
<p>

-
[siderolabs/discovery-client@`b74fb90`](https://redirect.github.com/siderolabs/discovery-client/commit/b74fb90)
fix: allow custom TLS config for the client

</p>
</details>

##### Changes from siderolabs/extras
<details><summary>2 commits</summary>
<p>

-
[siderolabs/extras@`eab6e58`](https://redirect.github.com/siderolabs/extras/commit/eab6e58)
feat: update dependencies
-
[siderolabs/extras@`1459d78`](https://redirect.github.com/siderolabs/extras/commit/1459d78)
feat: update pkgs for 1.9

</p>
</details>

##### Changes from siderolabs/gen
<details><summary>3 commits</summary>
<p>

-
[siderolabs/gen@`e847d2a`](https://redirect.github.com/siderolabs/gen/commit/e847d2a)
chore: add more utilities to xiter
-
[siderolabs/gen@`f3c5a2b`](https://redirect.github.com/siderolabs/gen/commit/f3c5a2b)
chore: add `Empty` and `Empty2` iterators
-
[siderolabs/gen@`c53b90b`](https://redirect.github.com/siderolabs/gen/commit/c53b90b)
chore: add packages xiter/xstrings/xbytes

</p>
</details>

##### Changes from siderolabs/go-blockdevice
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-blockdevice@`134c41b`](https://redirect.github.com/siderolabs/go-blockdevice/commit/134c41b)
fix: fast wipe also last 1MB of the device

</p>
</details>

##### Changes from siderolabs/go-circular
<details><summary>1 commit</summary>
<p>

-
[siderolabs/go-circular@`9a0f7b0`](https://redirect.github.com/siderolabs/go-circular/commit/9a0f7b0)
fix: multiple data race issues

</p>
</details>

##### Changes from siderolabs/go-cmd
<details><summary>3 commits</summary>
<p>

-
[siderolabs/go-cmd@`d735250`](https://redirect.github.com/siderolabs/go-cmd/commit/d735250)
fix: return an error on process nonzero exit code
-
[siderolabs/go-cmd@`5662c7f`](https://redirect.github.com/siderolabs/go-cmd/commit/5662c7f)
feat: add an equivalent of WaitWrapper for os.Process
-
[siderolabs/go-cmd@`71fced6`](https://redirect.github.com/siderolabs/go-cmd/commit/71fced6)
chore: rekres and move to GHA

</p>
</details>

##### Changes from siderolabs/go-kubernetes
<details><summary>3 commits</summary>
<p>

-
[siderolabs/go-kubernetes@`87d2e8e`](https://redirect.github.com/siderolabs/go-kubernetes/commit/87d2e8e)
feat: add one more deprecation for 1.32.0-beta.0
-
[siderolabs/go-kubernetes@`e56a7f6`](https://redirect.github.com/siderolabs/go-kubernetes/commit/e56a7f6)
fix: update deprecations based on Kubernetes 1.32.0-alpha.3
-
[siderolabs/go-kubernetes@`381f251`](https://redirect.github.com/siderolabs/go-kubernetes/commit/381f251)
feat: update for Kubernetes 1.32

</p>
</details>

##### Changes from siderolabs/grpc-proxy
<details><summary>2 commits</summary>
<p>

-
[siderolabs/grpc-proxy@`de1c628`](https://redirect.github.com/siderolabs/grpc-proxy/commit/de1c628)
fix: copy data from big frame msg
-
[siderolabs/grpc-proxy@`ef47ec7`](https://redirect.github.com/siderolabs/grpc-proxy/commit/ef47ec7)
chore: upgrade Codec implementations and usages to Codec2

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>38 commits</summary>
<p>

-
[siderolabs/pkgs@`4699763`](https://redirect.github.com/siderolabs/pkgs/commit/4699763)
feat: update gcc to 14.2
-
[siderolabs/pkgs@`9a98f73`](https://redirect.github.com/siderolabs/pkgs/commit/9a98f73)
feat: update containerd to v2.0.0
-
[siderolabs/pkgs@`20e1e08`](https://redirect.github.com/siderolabs/pkgs/commit/20e1e08)
feat: enable CONFIG_DM_CACHE
-
[siderolabs/pkgs@`df45e16`](https://redirect.github.com/siderolabs/pkgs/commit/df45e16)
feat: update Linux to 6.6.59
-
[siderolabs/pkgs@`2e733cc`](https://redirect.github.com/siderolabs/pkgs/commit/2e733cc)
feat: bump dependencies
-
[siderolabs/pkgs@`c92e123`](https://redirect.github.com/siderolabs/pkgs/commit/c92e123)
fix: enable nvme and 2.5gbit ethernet on nanopi-r5s
-
[siderolabs/pkgs@`b160184`](https://redirect.github.com/siderolabs/pkgs/commit/b160184)
feat: update runc to v1.2.1
-
[siderolabs/pkgs@`e9950d9`](https://redirect.github.com/siderolabs/pkgs/commit/e9950d9)
chore: drop syslinux
-
[siderolabs/pkgs@`fc2e8dc`](https://redirect.github.com/siderolabs/pkgs/commit/fc2e8dc)
feat: update containerd to v2.0.0-rc.6
-
[siderolabs/pkgs@`38304a6`](https://redirect.github.com/siderolabs/pkgs/commit/38304a6)
feat: update Linux to 6.6.58
-
[siderolabs/pkgs@`84b8df8`](https://redirect.github.com/siderolabs/pkgs/commit/84b8df8)
chore: do not use /usr/etc/udev
-
[siderolabs/pkgs@`c9282c8`](https://redirect.github.com/siderolabs/pkgs/commit/c9282c8)
feat: update runc to 1.2.0
-
[siderolabs/pkgs@`38ad08e`](https://redirect.github.com/siderolabs/pkgs/commit/38ad08e)
fix: default IOMMU mode to 'lazy'
-
[siderolabs/pkgs@`be92da0`](https://redirect.github.com/siderolabs/pkgs/commit/be92da0)
feat: update Linux to 6.6.57, update Linux firmware
-
[siderolabs/pkgs@`0b67a13`](https://redirect.github.com/siderolabs/pkgs/commit/0b67a13)
feat: bump dependencies
-
[siderolabs/pkgs@`dd5f928`](https://redirect.github.com/siderolabs/pkgs/commit/dd5f928)
feat: update Linux 6.6.56 and protect /proc/mem
-
[siderolabs/pkgs@`b1bf972`](https://redirect.github.com/siderolabs/pkgs/commit/b1bf972)
feat: enable CONFIG_XFRM_STATISTICS
-
[siderolabs/pkgs@`c63beae`](https://redirect.github.com/siderolabs/pkgs/commit/c63beae)
feat: update Linux to 6.6.54
-
[siderolabs/pkgs@`f474a55`](https://redirect.github.com/siderolabs/pkgs/commit/f474a55)
fix: libselinux: support running without /etc/selinux
-
[siderolabs/pkgs@`ba0341e`](https://redirect.github.com/siderolabs/pkgs/commit/ba0341e)
fix: systemd-udevd: search for config in /usr/etc
-
[siderolabs/pkgs@`2b193f1`](https://redirect.github.com/siderolabs/pkgs/commit/2b193f1)
feat: add lpfc kernel module
-
[siderolabs/pkgs@`1adb946`](https://redirect.github.com/siderolabs/pkgs/commit/1adb946)
feat: enable QEDF driver
-
[siderolabs/pkgs@`dbbe3d0`](https://redirect.github.com/siderolabs/pkgs/commit/dbbe3d0)
feat: update containerd to v2.0.0-rc.5
-
[siderolabs/pkgs@`f19590e`](https://redirect.github.com/siderolabs/pkgs/commit/f19590e)
feat: update Go to 1.23.2
-
[siderolabs/pkgs@`e2a561f`](https://redirect.github.com/siderolabs/pkgs/commit/e2a561f)
fix: drop the LVM2 udev lvm rule
-
[siderolabs/pkgs@`ae205aa`](https://redirect.github.com/siderolabs/pkgs/commit/ae205aa)
fix: force LVM to use `/run` as state directory
-
[siderolabs/pkgs@`232a153`](https://redirect.github.com/siderolabs/pkgs/commit/232a153)
feat: replace eudev with systemd-udevd
-
[siderolabs/pkgs@`40fb82a`](https://redirect.github.com/siderolabs/pkgs/commit/40fb82a)
feat: add libselinux, libsepol, pcre2 and libcap
-
[siderolabs/pkgs@`6f40fbb`](https://redirect.github.com/siderolabs/pkgs/commit/6f40fbb)
feat: update xfsprogs 6.10.1
-
[siderolabs/pkgs@`a1709c7`](https://redirect.github.com/siderolabs/pkgs/commit/a1709c7)
feat: enable module unloading and memory hotplug (for NVIDIA UVM)
-
[siderolabs/pkgs@`2c5785b`](https://redirect.github.com/siderolabs/pkgs/commit/2c5785b)
feat: enable transparent huge pages in madvise mode
-
[siderolabs/pkgs@`ca2e8c8`](https://redirect.github.com/siderolabs/pkgs/commit/ca2e8c8)
fix: lvm2 modprobe path
-
[siderolabs/pkgs@`6b334a6`](https://redirect.github.com/siderolabs/pkgs/commit/6b334a6)
feat: update Linux to 6.6.52
-
[siderolabs/pkgs@`e90ae7e`](https://redirect.github.com/siderolabs/pkgs/commit/e90ae7e)
feat: update Linux firmware to
[`2024090`](https://redirect.github.com/siderolabs/talos/commit/20240909)
-
[siderolabs/pkgs@`79a4f92`](https://redirect.github.com/siderolabs/pkgs/commit/79a4f92)
feat: enable INET_DIAG
-
[siderolabs/pkgs@`c9f7eb9`](https://redirect.github.com/siderolabs/pkgs/commit/c9f7eb9)
feat: update Linux to 6.6.51
-
[siderolabs/pkgs@`126b6a4`](https://redirect.github.com/siderolabs/pkgs/commit/126b6a4)
fix: add mpt3sas UBSAN patches
-
[siderolabs/pkgs@`a09bf93`](https://redirect.github.com/siderolabs/pkgs/commit/a09bf93)
chore: drop UBSAN patch

</p>
</details>

##### Changes from siderolabs/proto-codec
<details><summary>3 commits</summary>
<p>

-
[siderolabs/proto-codec@`0d84c65`](https://redirect.github.com/siderolabs/proto-codec/commit/0d84c65)
chore: add support for gogo protobuf generator
-
[siderolabs/proto-codec@`19f8d2e`](https://redirect.github.com/siderolabs/proto-codec/commit/19f8d2e)
chore: add kres
-
[siderolabs/proto-codec@`e038bb4`](https://redirect.github.com/siderolabs/proto-codec/commit/e038bb4)
Initial commit

</p>
</details>

##### Changes from siderolabs/siderolink
<details><summary>1 commit</summary>
<p>

-
[siderolabs/siderolink@`1893385`](https://redirect.github.com/siderolabs/siderolink/commit/1893385)
fix: initialize tls listener properly

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>8 commits</summary>
<p>

-
[siderolabs/tools@`3750064`](https://redirect.github.com/siderolabs/tools/commit/3750064)
fix: update for musl with close_range
-
[siderolabs/tools@`0a443c6`](https://redirect.github.com/siderolabs/tools/commit/0a443c6)
feat: update toolchain for gcc 14.2
-
[siderolabs/tools@`63ecd80`](https://redirect.github.com/siderolabs/tools/commit/63ecd80)
feat: bump depedendencies
-
[siderolabs/tools@`2058296`](https://redirect.github.com/siderolabs/tools/commit/2058296)
feat: bump dependencies
-
[siderolabs/tools@`1151610`](https://redirect.github.com/siderolabs/tools/commit/1151610)
feat: update Go to 1.23.2
-
[siderolabs/tools@`9f2189b`](https://redirect.github.com/siderolabs/tools/commit/9f2189b)
fix: bump gettext-tiny to the latest dev version
-
[siderolabs/tools@`95069d6`](https://redirect.github.com/siderolabs/tools/commit/95069d6)
feat: update Go to 1.23.1
-
[siderolabs/tools@`eec0656`](https://redirect.github.com/siderolabs/tools/commit/eec0656)
feat: replace gettext with gettext-tiny

</p>
</details>

##### Dependency Changes

- **cloud.google.com/go/compute/metadata** v0.5.0 -> v0.5.2
- **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.13.0 -> v1.16.0
- **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.7.0 -> v1.8.0
-
**github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates**
v1.1.0 -> v1.2.0
- **github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys**
v1.1.0 -> v1.2.0
- **github.com/aws/aws-sdk-go-v2/config** v1.27.33 -> v1.28.1
- **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.16.13 -> v1.16.18
- **github.com/aws/aws-sdk-go-v2/service/kms** v1.35.7 -> v1.37.3
- **github.com/aws/smithy-go** v1.20.4 -> v1.22.0
- **github.com/containerd/containerd/api** v1.8.0-rc.3 -> v1.8.0
- **github.com/containerd/containerd/v2** v2.0.0-rc.4 -> v2.0.0
- **github.com/containerd/errdefs** v0.1.0 -> v1.0.0
- **github.com/containerd/platforms** v0.2.1 -> v1.0.0-rc.0
- **github.com/containerd/typeurl/v2** v2.2.0 -> v2.2.2
- **github.com/containernetworking/plugins** v1.5.1 -> v1.6.0
- **github.com/cosi-project/runtime** v0.5.5 -> v0.7.1
- **github.com/docker/cli** v27.3.1 ***new***
- **github.com/docker/docker** v27.2.0 -> v27.3.1
- **github.com/elastic/go-libaudit/v2**
[`1df86e7`](https://redirect.github.com/siderolabs/talos/commit/1df86e79cca7)
***new***
- **github.com/fatih/color** v1.17.0 -> v1.18.0
- **github.com/florianl/go-tc** v0.4.4 ***new***
- **github.com/foxboron/go-uefi**
[`e2076f0`](https://redirect.github.com/siderolabs/talos/commit/e2076f0e58ca)
->
[`fab4fdf`](https://redirect.github.com/siderolabs/talos/commit/fab4fdf2f2f3)
- **github.com/fsnotify/fsnotify** v1.7.0 -> v1.8.0
- **github.com/google/cadvisor** v0.50.0 -> v0.51.0
- **github.com/gopacket/gopacket** v1.2.0 -> v1.3.0
- **github.com/hetznercloud/hcloud-go/v2** v2.13.1 -> v2.15.0
- **github.com/klauspost/compress** v1.17.9 -> v1.17.11
- **github.com/linode/go-metadata** v0.2.0 -> v0.2.1
- **github.com/mdlayher/ethtool** v0.1.0 -> v0.2.0
- **github.com/opencontainers/runc** v1.2.0-rc.3 -> v1.2.1
- **github.com/rivo/tview**
[`fd649db`](https://redirect.github.com/siderolabs/talos/commit/fd649dbf1223)
->
[`c76f787`](https://redirect.github.com/siderolabs/talos/commit/c76f7879f592)
- **github.com/siderolabs/crypto** v0.4.4 -> v0.5.0
- **github.com/siderolabs/discovery-api** v0.1.4 -> v0.1.5
- **github.com/siderolabs/discovery-client** v0.1.9 -> v0.1.10
- **github.com/siderolabs/extras** v1.8.0 -> v1.9.0-alpha.0-1-geab6e58
- **github.com/siderolabs/gen** v0.5.0 -> v0.7.0
- **github.com/siderolabs/go-blockdevice** v0.4.7 -> v0.4.8
- **github.com/siderolabs/go-blockdevice/v2** v2.0.2 -> v2.0.3
- **github.com/siderolabs/go-circular** v0.2.0 -> v0.2.1
- **github.com/siderolabs/go-cmd** v0.1.1 -> v0.1.3
- **github.com/siderolabs/go-kubernetes** v0.2.12 -> v0.2.15
- **github.com/siderolabs/grpc-proxy** v0.4.1 -> v0.5.1
- **github.com/siderolabs/pkgs** v1.8.0-8-gdf1a1a5 ->
v1.9.0-alpha.0-37-g4699763
- **github.com/siderolabs/proto-codec** v0.1.1 ***new***
- **github.com/siderolabs/siderolink** v0.3.10 -> v0.3.11
- **github.com/siderolabs/talos/pkg/machinery** v1.8.0 -> v1.9.0-alpha.2
- **github.com/siderolabs/tools** v1.8.0-1-ga0c06c6 ->
v1.9.0-alpha.0-7-g3750064
- **golang.org/x/net** v0.29.0 -> v0.30.0
- **golang.org/x/sys** v0.25.0 -> v0.26.0
- **golang.org/x/term** v0.24.0 -> v0.25.0
- **golang.org/x/text** v0.18.0 -> v0.19.0
- **golang.org/x/time** v0.6.0 -> v0.7.0
- **google.golang.org/grpc** v1.66.0 -> v1.67.1
- **google.golang.org/protobuf** v1.34.2 -> v1.35.1
- **k8s.io/api** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/apimachinery** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/apiserver** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/client-go** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/component-base** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/cri-api** v0.32.0-alpha.0 -> v0.32.0-beta.0
- **k8s.io/kube-scheduler** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/kubectl** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/kubelet** v0.31.1 -> v0.32.0-beta.0
- **k8s.io/pod-security-admission** v0.31.1 -> v0.32.0-beta.0
- **kernel.org/pub/linux/libs/security/libcap/cap** v1.2.70 -> v1.2.71

Previous release can be found at
[v1.8.0](https://redirect.github.com/siderolabs/talos/releases/tag/v1.8.0)

#### Images

    ghcr.io/siderolabs/flannel:v0.26.0
    registry.k8s.io/coredns/coredns:v1.11.3
    gcr.io/etcd-development/etcd:v3.5.16
    registry.k8s.io/kube-apiserver:v1.32.0-beta.0
    registry.k8s.io/kube-controller-manager:v1.32.0-beta.0
    registry.k8s.io/kube-scheduler:v1.32.0-beta.0
    registry.k8s.io/kube-proxy:v1.32.0-beta.0
    ghcr.io/siderolabs/kubelet:v1.32.0-beta.0
    ghcr.io/siderolabs/installer:v1.9.0-alpha.2
    registry.k8s.io/pause:3.10

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-08 21:37:47 +01:00
TrueCharts Bot 1aa11cf3f9 chore(flux): update image volsync 2.4.1 → 2.5.0 (clustertool) (#29021)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/truecharts/charts/tree/HEAD/charts/system/volsync))
| minor | `2.4.1` -> `2.5.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2024-11-08 21:37:24 +01:00
TrueCharts Bot 21058ae9d0 fix(deps): update module github.com/siderolabs/talos/pkg/machinery v1.9.0-alpha.0 → v1.9.0-alpha.1 (clustertool) (#29009)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/siderolabs/talos/pkg/machinery](https://redirect.github.com/siderolabs/talos)
| require | patch | `v1.9.0-alpha.0` -> `v1.9.0-alpha.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos
(github.com/siderolabs/talos/pkg/machinery)</summary>

###
[`v1.9.0-alpha.1`](https://redirect.github.com/siderolabs/talos/compare/v1.9.0-alpha.0...v1.9.0-alpha.1)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.0-alpha.0...v1.9.0-alpha.1)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-08 17:19:32 +01:00
TrueCharts Bot 3b7dcbf7f1 fix(deps): update module golang.org/x/crypto v0.28.0 → v0.29.0 (clustertool) (#28973) 2024-11-08 01:20:11 +01:00
Kjeld Schouten df2003023a fix(clustertool): fix kubectl logging error, add kubeconfig command and fix some command docs 2024-11-08 00:39:24 +01:00
Kjeld Schouten 8abe0ab511 fix(clustertool): ensure kubectl uses k8s.io/yaml 2024-11-08 00:23:36 +01:00
Kjeld Schouten 5e89c6213e fix(clustertool): fix kubeconfig not boing loaded correctly and put some more silence into healthchecks 2024-11-07 23:51:25 +01:00
Kjeld Schouten de699a5992 feat(clustertool): add some aliasses to commonly mistaken commands 2024-11-07 12:14:57 +01:00
Kjeld Schouten 81f6808581 fix(clustertool): dont try to load sops.yaml if it doesn't exist, load empty instead 2024-11-07 12:14:28 +01:00
Kjeld Schouten 93fad462e2 feat(clustertool): ensure that we low-code fail encryptioncheck if encryption-check fails 2024-11-07 12:13:48 +01:00
Kjeld Schouten c70e1b4698 fix(clustertool): correct machineconfig apply command 2024-11-07 11:27:57 +01:00
Kjeld Schouten 7c3ecc54a4 feat(clustertool): introduce tracing of command-slice and dont process extraArgs for now 2024-11-07 11:27:57 +01:00
TrueCharts Bot 3fae5e9c5d chore(flux): update image prometheus-operator 8.10.0 → 8.11.0 (clustertool) (#28938)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`8.10.0` -> `8.11.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2024-11-07 01:19:17 +01:00
Kjeld Schouten cc831343d8 fix(clustertool): correct issue with single-node apply not being correct 2024-11-07 00:00:26 +01:00
Kjeld Schouten a11f019d6e fix(clustertool): add commands debug and allow for extra args 2024-11-06 22:25:50 +01:00
alfi0812 619f4a99d6 Update devcontainer.json (#28901)
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

** App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
Signed-off-by: Kjeld Schouten <info@kjeldschouten.nl>
Co-authored-by: Kjeld Schouten <info@kjeldschouten.nl>
2024-11-06 18:14:06 +01:00
alfi0812 8f4354065c Create extensions.json (#28902)
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning
- [ ] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):` or `chore(chart-name):`

** App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: alfi0812 <43101280+alfi0812@users.noreply.github.com>
2024-11-06 14:52:58 +01:00
TrueCharts Bot 81e76cee62 fix(deps): update module github.com/knadh/koanf/v2 v2.1.1 → v2.1.2 (clustertool) (#28905)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/knadh/koanf/v2](https://redirect.github.com/knadh/koanf) |
require | patch | `v2.1.1` -> `v2.1.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>knadh/koanf (github.com/knadh/koanf/v2)</summary>

###
[`v2.1.2`](https://redirect.github.com/knadh/koanf/releases/tag/v2.1.2)

[Compare
Source](https://redirect.github.com/knadh/koanf/compare/v2.1.1...v2.1.2)

#### What's Changed

- chore: Update godoc URL in README by
[@&#8203;rhnvrm](https://redirect.github.com/rhnvrm) in
[https://github.com/knadh/koanf/pull/279](https://redirect.github.com/knadh/koanf/pull/279)
- Add support for parser TOML v2 spec by
[@&#8203;knadh](https://redirect.github.com/knadh) in
[https://github.com/knadh/koanf/pull/286](https://redirect.github.com/knadh/koanf/pull/286)
- Bump golang.org/x/net from 0.17.0 to 0.23.0 in /providers/consul by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/knadh/koanf/pull/289](https://redirect.github.com/knadh/koanf/pull/289)
- Bump golang.org/x/net from 0.17.0 to 0.23.0 in /providers/vault by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/knadh/koanf/pull/288](https://redirect.github.com/knadh/koanf/pull/288)
- Bump golang.org/x/net from 0.17.0 to 0.23.0 in /examples by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/knadh/koanf/pull/290](https://redirect.github.com/knadh/koanf/pull/290)
- Bump golang.org/x/net from 0.17.0 to 0.23.0 in /providers/etcd by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/knadh/koanf/pull/287](https://redirect.github.com/knadh/koanf/pull/287)
- upgrade toml v2 package to 2.2.2 by
[@&#8203;GreyXor](https://redirect.github.com/GreyXor) in
[https://github.com/knadh/koanf/pull/292](https://redirect.github.com/knadh/koanf/pull/292)
- Bump github.com/hashicorp/go-retryablehttp from 0.7.2 to 0.7.7 in
/providers/vault by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/knadh/koanf/pull/301](https://redirect.github.com/knadh/koanf/pull/301)
- Upgrade fsnotify lib in file provider. by
[@&#8203;knadh](https://redirect.github.com/knadh) in
[https://github.com/knadh/koanf/pull/302](https://redirect.github.com/knadh/koanf/pull/302)
- Bump github.com/hashicorp/go-retryablehttp from 0.7.2 to 0.7.7 in
/examples by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/knadh/koanf/pull/303](https://redirect.github.com/knadh/koanf/pull/303)
- Add `Unwatch()` to file provider. by
[@&#8203;knadh](https://redirect.github.com/knadh) in
[https://github.com/knadh/koanf/pull/306](https://redirect.github.com/knadh/koanf/pull/306)
- docs: Improve marshal section by
[@&#8203;bersace](https://redirect.github.com/bersace) in
[https://github.com/knadh/koanf/pull/311](https://redirect.github.com/knadh/koanf/pull/311)
- fix(basicflag): option not apply by
[@&#8203;qianlongzt](https://redirect.github.com/qianlongzt) in
[https://github.com/knadh/koanf/pull/322](https://redirect.github.com/knadh/koanf/pull/322)
- Fix incorrect unflatten in env provider. Closes
[#&#8203;319](https://redirect.github.com/knadh/koanf/issues/319). by
[@&#8203;knadh](https://redirect.github.com/knadh) in
[https://github.com/knadh/koanf/pull/324](https://redirect.github.com/knadh/koanf/pull/324)
- fix: update file watch to trigger callback after symbolic link changes
by [@&#8203;jondavidnd1](https://redirect.github.com/jondavidnd1) in
[https://github.com/knadh/koanf/pull/326](https://redirect.github.com/knadh/koanf/pull/326)
- Update mapstructure to a stable version by
[@&#8203;StefMa](https://redirect.github.com/StefMa) in
[https://github.com/knadh/koanf/pull/331](https://redirect.github.com/knadh/koanf/pull/331)

#### New Contributors

- [@&#8203;bersace](https://redirect.github.com/bersace) made their
first contribution in
[https://github.com/knadh/koanf/pull/311](https://redirect.github.com/knadh/koanf/pull/311)
- [@&#8203;qianlongzt](https://redirect.github.com/qianlongzt) made
their first contribution in
[https://github.com/knadh/koanf/pull/322](https://redirect.github.com/knadh/koanf/pull/322)
- [@&#8203;jondavidnd1](https://redirect.github.com/jondavidnd1) made
their first contribution in
[https://github.com/knadh/koanf/pull/326](https://redirect.github.com/knadh/koanf/pull/326)
- [@&#8203;StefMa](https://redirect.github.com/StefMa) made their first
contribution in
[https://github.com/knadh/koanf/pull/331](https://redirect.github.com/knadh/koanf/pull/331)

**Full Changelog**:
https://github.com/knadh/koanf/compare/v2.1.1...v2.1.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
2024-11-06 13:14:37 +01:00
Kjeld Schouten a1521c19fe chore(clustertool): clearify error message for rerun 2024-11-06 10:39:05 +01:00
Kjeld Schouten 269a895ab1 feat(clustertool): actually fully block genconfig unless first init is finished 2024-11-06 10:37:16 +01:00
Kjeld Schouten d707b498ab chore(clustertool): clearify init again message 2024-11-06 10:23:43 +01:00
Kjeld Schouten 795bf1c204 fix(clustertool): correct error message with checkencrypt 2024-11-06 10:19:52 +01:00
Kjeld Schouten caa1a5fdb8 fix(clustertool): use different yaml lib 2024-11-06 10:17:47 +01:00
Kjeld Schouten e3898aabc8 fix(clustertool): forgot to load TalConfig 2024-11-06 01:31:51 +01:00
Kjeld Schouten e0d6edc42c fix(clustertool): fix broken testcommand 2024-11-06 01:28:05 +01:00
Kjeld Schouten edc6f25840 fix(clustertool): apply -> applyconfig 2024-11-06 01:20:29 +01:00
Kjeld Schouten 16c0e0c387 feat(clustertool): move all talhelper references to talassist 2024-11-06 01:20:29 +01:00
Kjeld Schouten 45582c596b fix(clustertool): revert previous apply changes due to a mistake 2024-11-05 23:45:36 +01:00
Kjeld Schouten 61a01f3299 feat(clustertool): cut down on useless dependencies 2024-11-05 23:23:12 +01:00
Kjeld Schouten 1edb8f9630 fix(clustertool): fix some talhelper-connectivity mistakes 2024-11-05 22:59:12 +01:00
Kjeld Schouten f02856c4b7 feat(clustertool): load traefik, clusterissuer and blocky during bootstrap 2024-11-05 21:57:42 +01:00
Kjeld Schouten 76b5d3925e feat(clustertool): add traefik, clusterissuer and blocky bare-bones 2024-11-05 21:50:25 +01:00
TrueCharts Bot 9aba08f562 chore(flux): update image prometheus-operator 8.9.0 → 8.10.0 (clustertool) (#28865)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`8.9.0` -> `8.10.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2024-11-05 13:11:25 +01:00
TrueCharts Bot 2e2ef543c0 chore(flux): update image prometheus-operator 8.8.2 → 8.9.0 (clustertool) (#28829)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`8.8.2` -> `8.9.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
2024-11-05 01:20:10 +01:00
Kjeld Schouten 0b19284dcb chore(clustertool): move some talos and flux commands so subcommands 2024-11-04 15:47:14 +01:00
Kjeld Schouten 638b21f4a5 feat(clustertool): move some functions away from talhelper 2024-11-04 15:34:07 +01:00
Kjeld Schouten a4448f621f feat(clustertool): extract IPs without talhelper 2024-11-04 15:34:07 +01:00