5c95ff4072
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos) | patch | `v1.9.1` -> `v1.9.2` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary> ### [`v1.9.2`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.2) [Compare Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.1...v1.9.2) ##### [Talos 1.9.2](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.2) (2025-01-16) Welcome to the v1.9.2 release of Talos! Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues. ##### auditd Kernel parameter `talos.auditd.disabled=1` can be used to disable Talos built-in `auditd` service. ##### kube-apiserver Authorization Config When using `.cluster.apiServer.authorizationConfig` the user provided order for the authorizers is honoured and `Node` and `RBAC` authorizers are always added to the end if not explicitly specified. Eg: If user provides only `Webhook` authorizer, the final order will be `Webhook`, `Node`, `RBAC`. To provide a specific order for `Node` or `RBAC` explicitly, user can provide the authorizer in the order they want. Eg: ```yaml cluster: apiServer: authorizationConfig: - type: Node name: Node - type: Webhook name: Webhook webhook: connectionInfo: type: InClusterConfig ... - type: RBAC name: rbac ``` Usage of `authorization-mode` CLI argument will not support this form of customization. ##### Component Updates - Linux: 6.12.9 - runc: 1.2.4 - containerd: 2.0.2 Talos is built with Go 1.23.4. ##### Contributors - Andrey Smirnov - Dmitry Sharshakov - L.J. Hanson - Noel Georgi - Skyler Mäntysaari - TomyLobo ##### Changes <details><summary>18 commits</summary> <p> - [@​`09758b3`](https://redirect.github.com/siderolabs/talos/commit/09758b3f6) release(v1.9.2): prepare release - [@​`207f863`](https://redirect.github.com/siderolabs/talos/commit/207f86320) feat: update containerd to 2.0.2 - [@​`582064d`](https://redirect.github.com/siderolabs/talos/commit/582064d9c) fix: add informer resync period for node status watcher - [@​`244fd6e`](https://redirect.github.com/siderolabs/talos/commit/244fd6e43) feat: add a kernel parameter to disable built-in auditd - [@​`28327e0`](https://redirect.github.com/siderolabs/talos/commit/28327e001) fix: kube-apiserver authorizers order - [@​`ff9aa80`](https://redirect.github.com/siderolabs/talos/commit/ff9aa806a) fix: a couple of imager panics/crashes - [@​`44e2cc9`](https://redirect.github.com/siderolabs/talos/commit/44e2cc91a) feat: update Linux to 6.12.9 - [@​`9fd295b`](https://redirect.github.com/siderolabs/talos/commit/9fd295b5f) fix: detect GPT before ZFS - [@​`7b59573`](https://redirect.github.com/siderolabs/talos/commit/7b59573de) fix: extfs repair and resize - [@​`5f6bfe0`](https://redirect.github.com/siderolabs/talos/commit/5f6bfe02a) fix: merge of VolumeConfig documents with sizes - [@​`0c05e1c`](https://redirect.github.com/siderolabs/talos/commit/0c05e1cd3) feat: update Linux to 6.12.8 - [@​`b61ab0a`](https://redirect.github.com/siderolabs/talos/commit/b61ab0a3d) fix: partition alignment on disks with 4k sectors - [@​`c4a69d3`](https://redirect.github.com/siderolabs/talos/commit/c4a69d386) fix: yet another dashboard panic - [@​`dec3c6e`](https://redirect.github.com/siderolabs/talos/commit/dec3c6e5b) fix: disable NRI plugin in a different way - [@​`dfb54c8`](https://redirect.github.com/siderolabs/talos/commit/dfb54c872) fix: request previous IP address in discovery - [@​`6b1fe3d`](https://redirect.github.com/siderolabs/talos/commit/6b1fe3df3) fix: mount selinuxfs only when SELinux is enabled - [@​`5e893e1`](https://redirect.github.com/siderolabs/talos/commit/5e893e1f5) fix: update field name for bus path disk selector - [@​`9219fc0`](https://redirect.github.com/siderolabs/talos/commit/9219fc017) fix: exclude disks with empty transport for disk selector </p> </details> ##### Changes from siderolabs/pkgs <details><summary>6 commits</summary> <p> - [siderolabs/pkgs@`c1f06e5`](https://redirect.github.com/siderolabs/pkgs/commit/c1f06e5) feat: update containerd to v2.0.2 - [siderolabs/pkgs@`ef38c38`](https://redirect.github.com/siderolabs/pkgs/commit/ef38c38) feat: update Linux to 6.12.9 - [siderolabs/pkgs@`a7487d6`](https://redirect.github.com/siderolabs/pkgs/commit/a7487d6) fix: adjust kernel options around ACPI/PCI/EFI - [siderolabs/pkgs@`376259a`](https://redirect.github.com/siderolabs/pkgs/commit/376259a) feat: update Linux to 6.12.8 - [siderolabs/pkgs@`8e435cd`](https://redirect.github.com/siderolabs/pkgs/commit/8e435cd) fix: update config-arm64 to add Rasperry Pi watchdog support - [siderolabs/pkgs@`daabb47`](https://redirect.github.com/siderolabs/pkgs/commit/daabb47) fix: dvb was missing I2C_MUX support and si2168 driver </p> </details> ##### Dependency Changes - **github.com/siderolabs/go-blockdevice/v2** v2.0.9 -> v2.0.11 - **github.com/siderolabs/pkgs** v1.9.0-15-g45c4ba4 -> v1.9.0-21-gc1f06e5 - **github.com/siderolabs/talos/pkg/machinery** v1.9.1 -> v1.9.2 Previous release can be found at [v1.9.1](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.1) ##### Images ghcr.io/siderolabs/flannel:v0.26.1 registry.k8s.io/coredns/coredns:v1.12.0 gcr.io/etcd-development/etcd:v3.5.17 registry.k8s.io/kube-apiserver:v1.32.0 registry.k8s.io/kube-controller-manager:v1.32.0 registry.k8s.io/kube-scheduler:v1.32.0 registry.k8s.io/kube-proxy:v1.32.0 ghcr.io/siderolabs/kubelet:v1.32.0 ghcr.io/siderolabs/installer:v1.9.2 registry.k8s.io/pause:3.10 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJzeXN0ZW0tdXBncmFkZSIsInR5cGUvcGF0Y2giXX0=-->
About The Project
CLA: Before contributing
Our CLA applies to this repository as well.
Please ensure it's signed before submitting a PR: https://cla-assistant.io/truecharts/charts
We use the truecharts/charts link, as CLA assistant does not allow for creating a custom link to a private repository. However, they all sign the same CLA that applies project-wide
License
This tool is released as "All Rights reserved" and hence it's code should NOT be shared. This includes binaries that are modified to remove TrueCharts specific code, unless approved by Kjeld Schouten "The Owner". Those that are invited to have access to repository, are free to edit and use this code for testing purposes, as long as its sourcecode is not shared or saved in-the-cloud.