Renovate Bot
89027af036
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/siderolabs/talosctl](https://github.com/siderolabs/talos) | minor | `v1.11.6` → `v1.12.0` | --- ### Release Notes <details> <summary>siderolabs/talos (ghcr.io/siderolabs/talosctl)</summary> ### [`v1.12.0`](https://github.com/siderolabs/talos/blob/HEAD/CHANGELOG.md#Changes-since-v1120-alpha1) [Compare Source](https://github.com/siderolabs/talos/compare/v1.11.6...v1.12.0) <details><summary>66 commits</summary> <p> - [`3d811a4c8`](3d811a4c81) release(v1.12.0-alpha.2): prepare release - [`fb4bfe851`](fb4bfe851c) chore: fix LVM test - [`f4ee0d112`](f4ee0d1128) chore: disable VIP operator test - [`288f63872`](288f638726) feat: bump deps - [`b66482c52`](b66482c529) feat: allow disabling injection of extra cmdline in cluster create - [`704b5f99e`](704b5f99e6) feat: update Kubernetes to 1.35.0-alpha.2 - [`1dffa5d99`](1dffa5d996) feat: implement virtual IP operator config - [`43b1d7537`](43b1d75375) fix: validate provisioner when destroying local clusters - [`b494c54c8`](b494c54c81) fix: talos import on non-linux - [`61e95cb4b`](61e95cb4b7) feat: support bootloader option for ISO - [`d11072726`](d110727263) fix: provide offset for partitions in discovered volumes - [`39eeae963`](39eeae9631) feat: update dependencies - [`9890a9a31`](9890a9a31d) test: fix OOM test - [`c0772b8ed`](c0772b8eda) feat: add airgapped mode to QEMU backed talos - [`ac60a9e27`](ac60a9e27d) fix: update test for PCI driver rebind/IOMMU - [`6c98f4cdb`](6c98f4cdb0) feat: implement new DHCP network configuration - [`da92a756d`](da92a756d9) fix: drop 'ro' falg from defaults - [`28fd2390c`](28fd2390cb) fix: imager build on arm64 - [`4e12df8c5`](4e12df8c5c) test: integration test for OOM controller - [`7e498faba`](7e498faba9) feat: use image signer - [`eccb21dd3`](eccb21dd3b) feat: add presets to the 'cluster create qemu' command - [`ec0a813fa`](ec0a813fac) feat: unify cmdline handling GRUB/systemd-boot - [`37e4c40c6`](37e4c40c6a) fix: skip module signature tests on docker provisioner only - [`8124efb42`](8124efb42f) fix: cache e2e - [`4adcda0f5`](4adcda0f54) fix: reserve the apid and trustd ports from the ephemeral port range - [`ced57b047`](ced57b047a) feat: support optionally disabling module sig verification - [`1e5c4ed64`](1e5c4ed644) fix: build talosctl image cache-serve non-linux - [`dbdd2b237`](dbdd2b237e) feat: add static registry to talosctl - [`77d8cc7c5`](77d8cc7c58) chore: push `latest` tag only on main - [`59d9b1c75`](59d9b1c75d) feat: update dependencies - [`bf6ad5171`](bf6ad51710) feat: add back install script - [`da451c5ba`](da451c5ba4) chore: drop documentation except for fresh reference - [`2f23fedeb`](2f23fedeb7) fix: file leak in reading cgroups - [`b412ffdbc`](b412ffdbc2) docs: update README.md for docs link - [`8dc51bae7`](8dc51bae79) feat: add drm\_gpuvm and drm\_gpusvm\_helper modules - [`4ca58aeb8`](4ca58aeb81) fix: make Akamai platform usable - [`061f8e76f`](061f8e76fd) feat: bump pkgs - [`a9fa852da`](a9fa852dad) feat: update uefi image to talos linux logo - [`04753ba69`](04753ba698) feat: update go to 1.25.2 - [`9a42b05bd`](9a42b05bda) feat: implement link aliasing - [`d732bd0be`](d732bd0be7) chore(ci): run only nvidia tests for NVIDIA workflows - [`8d1468209`](8d1468209a) fix: stop populating apiserver cert SANs - [`02473244c`](02473244c1) fix: wait for mount status to be proper mode - [`825622d90`](825622d90a) fix: resource proto definitions - [`2c6003e79`](2c6003e790) docs: add Project Calico installation in two mode - [`4fb4c8678`](4fb4c86780) feat: add disk.EnableUUID to generated ova - [`33fb48f8f`](33fb48f8f9) fix: add dashboard spinner - [`053fd0bd4`](053fd0bd4d) feat: update Linux to 6.17 - [`34e107e1b`](34e107e1bd) docs: fix broken link - [`dfbece56b`](dfbece56bd) docs: update the kubespan docs - [`8b041a72c`](8b041a72ca) docs: update scaleway.md - [`435dcbf82`](435dcbf820) fix: provide nocloud metadata with missing network config - [`ec3bd878f`](ec3bd878f9) refactor: remove the go-blockdevice v1 completely - [`33544bde9`](33544bde9c) fix: minor improvements to fs - [`fd2eebf7f`](fd2eebf7fa) feat: create merge patch from diff of two machine configs - [`eadbdda94`](eadbdda947) fix: uefi boot order setting - [`cd9fb2743`](cd9fb27434) fix: support secure HTTP proxy with gRPC dial - [`adf87b4b9`](adf87b4b93) feat: update Flannel to v0.27.4 - [`5dfb7e1fe`](5dfb7e1fe7) feat: serve etcd image from registry.k8s.io - [`5ca841804`](5ca8418049) fix: nftables flaky test - [`a940e45a7`](a940e45a7f) feat: generate list of images required to build talos - [`3472d6e79`](3472d6e79c) fix: revert "chore: use new mount/v3 package in efivarfs" - [`42c0bdbf3`](42c0bdbf32) feat: add provisioner flag to images default command - [`6bc0b1bcf`](6bc0b1bcf7) feat: drop and lock deprecated features - [`362a8e63b`](362a8e63b7) fix: change the compression format - [`6e58f58aa`](6e58f58aae) fix: mkdir artifacts path </p> </details> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuNjYuMTMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19--> Reviewed-on: #2825 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
518 lines
15 KiB
YAML
518 lines
15 KiB
YAML
etcd-backup:
|
|
controllers:
|
|
local:
|
|
type: cronjob
|
|
pod:
|
|
nodeSelector:
|
|
node-role.kubernetes.io/control-plane: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "0 2 * * *"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
backup:
|
|
image:
|
|
repository: ghcr.io/siderolabs/talos-backup
|
|
tag: v0.1.0-beta.3@sha256:05c86663b251a407551dc948097e32e163a345818117eb52c573b0447bd0c7a7
|
|
pullPolicy: IfNotPresent
|
|
command:
|
|
- /talos-backup
|
|
workingDir: /tmp
|
|
securityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
allowPrivilegeEscalation: false
|
|
runAsNonRoot: true
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
env:
|
|
- name: AWS_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: talos-etcd-backup-local-secret
|
|
key: AWS_ACCESS_KEY_ID
|
|
- name: AWS_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: talos-etcd-backup-local-secret
|
|
key: AWS_SECRET_ACCESS_KEY
|
|
- name: AWS_REGION
|
|
value: us-east-1
|
|
- name: CUSTOM_S3_ENDPOINT
|
|
value: http://garage-main.garage:3900
|
|
- name: BUCKET
|
|
value: talos-backups
|
|
- name: S3_PREFIX
|
|
value: "cl01tl/etcd"
|
|
- name: CLUSTER_NAME
|
|
value: "cl01tl"
|
|
- name: AGE_X25519_PUBLIC_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: talos-etcd-backup-local-secret
|
|
key: AGE_X25519_PUBLIC_KEY
|
|
- name: USE_PATH_STYLE
|
|
value: "false"
|
|
s3-prune:
|
|
image:
|
|
repository: d3fk/s3cmd
|
|
tag: latest@sha256:8aeb104edaba11f086506024b22d543a0771e0b01cd50243043002e2d61c2f71
|
|
pullPolicy: IfNotPresent
|
|
command:
|
|
- /bin/sh
|
|
args:
|
|
- -ec
|
|
- /scripts/prune.sh
|
|
envFrom:
|
|
- secretRef:
|
|
name: talos-etcd-backup-local-secret
|
|
- secretRef:
|
|
name: talos-backup-ntfy-secret
|
|
env:
|
|
- name: TARGET
|
|
value: Local
|
|
- name: DATE_RANGE_SECONDS
|
|
value: "2419200"
|
|
remote:
|
|
type: cronjob
|
|
pod:
|
|
nodeSelector:
|
|
node-role.kubernetes.io/control-plane: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
cronjob:
|
|
suspend: true
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "0 3 * * *"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
backup:
|
|
image:
|
|
repository: ghcr.io/siderolabs/talos-backup
|
|
tag: v0.1.0-beta.3@sha256:05c86663b251a407551dc948097e32e163a345818117eb52c573b0447bd0c7a7
|
|
pullPolicy: IfNotPresent
|
|
command:
|
|
- /talos-backup
|
|
workingDir: /tmp
|
|
securityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
allowPrivilegeEscalation: false
|
|
runAsNonRoot: true
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
env:
|
|
- name: AWS_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: talos-etcd-backup-remote-secret
|
|
key: AWS_ACCESS_KEY_ID
|
|
- name: AWS_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: talos-etcd-backup-remote-secret
|
|
key: AWS_SECRET_ACCESS_KEY
|
|
- name: AWS_REGION
|
|
value: us-east-1
|
|
- name: CUSTOM_S3_ENDPOINT
|
|
value: https://garage-ps10rp.boreal-beaufort.ts.net:3900
|
|
- name: BUCKET
|
|
value: talos-backups
|
|
- name: S3_PREFIX
|
|
value: "cl01tl/etcd"
|
|
- name: CLUSTER_NAME
|
|
value: "cl01tl"
|
|
- name: AGE_X25519_PUBLIC_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: talos-etcd-backup-remote-secret
|
|
key: AGE_X25519_PUBLIC_KEY
|
|
- name: USE_PATH_STYLE
|
|
value: "false"
|
|
s3-prune:
|
|
image:
|
|
repository: d3fk/s3cmd
|
|
tag: latest@sha256:8aeb104edaba11f086506024b22d543a0771e0b01cd50243043002e2d61c2f71
|
|
pullPolicy: IfNotPresent
|
|
command:
|
|
- /bin/sh
|
|
args:
|
|
- -ec
|
|
- /scripts/prune.sh
|
|
envFrom:
|
|
- secretRef:
|
|
name: talos-etcd-backup-remote-secret
|
|
- secretRef:
|
|
name: talos-backup-ntfy-secret
|
|
env:
|
|
- name: TARGET
|
|
value: Remote
|
|
- name: DATE_RANGE_SECONDS
|
|
value: "2419200"
|
|
external:
|
|
type: cronjob
|
|
pod:
|
|
nodeSelector:
|
|
node-role.kubernetes.io/control-plane: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "0 4 * * *"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
backup:
|
|
image:
|
|
repository: ghcr.io/siderolabs/talos-backup
|
|
tag: v0.1.0-beta.3-5-g07d09ec@sha256:96054af026b6255ec14d198f2f10ad6c813b335a2e21a76804365c053dd4ba7b
|
|
pullPolicy: IfNotPresent
|
|
command:
|
|
- /talos-backup
|
|
workingDir: /tmp
|
|
securityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
allowPrivilegeEscalation: false
|
|
runAsNonRoot: true
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
env:
|
|
- name: AWS_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: talos-etcd-backup-external-secret
|
|
key: AWS_ACCESS_KEY_ID
|
|
- name: AWS_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: talos-etcd-backup-external-secret
|
|
key: AWS_SECRET_ACCESS_KEY
|
|
- name: AWS_REGION
|
|
value: nyc3
|
|
- name: CUSTOM_S3_ENDPOINT
|
|
value: https://nyc3.digitaloceanspaces.com
|
|
- name: BUCKET
|
|
value: talos-backups-bee8585f7b8a4d0239c9b823
|
|
- name: S3_PREFIX
|
|
value: "cl01tl/etcd"
|
|
- name: CLUSTER_NAME
|
|
value: "cl01tl"
|
|
- name: AGE_X25519_PUBLIC_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: talos-etcd-backup-external-secret
|
|
key: AGE_X25519_PUBLIC_KEY
|
|
- name: USE_PATH_STYLE
|
|
value: "false"
|
|
s3-prune:
|
|
image:
|
|
repository: d3fk/s3cmd
|
|
tag: latest@sha256:8aeb104edaba11f086506024b22d543a0771e0b01cd50243043002e2d61c2f71
|
|
pullPolicy: IfNotPresent
|
|
command:
|
|
- /bin/sh
|
|
args:
|
|
- -ec
|
|
- /scripts/prune.sh
|
|
envFrom:
|
|
- secretRef:
|
|
name: talos-etcd-backup-external-secret
|
|
- secretRef:
|
|
name: talos-backup-ntfy-secret
|
|
env:
|
|
- name: TARGET
|
|
value: External
|
|
- name: DATE_RANGE_SECONDS
|
|
value: "1209600"
|
|
persistence:
|
|
secret:
|
|
enabled: true
|
|
type: secret
|
|
name: talos-backup-secrets
|
|
advancedMounts:
|
|
local:
|
|
backup:
|
|
- path: /var/run/secrets/talos.dev
|
|
readOnly: true
|
|
mountPropagation: None
|
|
remote:
|
|
backup:
|
|
- path: /var/run/secrets/talos.dev
|
|
readOnly: true
|
|
mountPropagation: None
|
|
external:
|
|
backup:
|
|
- path: /var/run/secrets/talos.dev
|
|
readOnly: true
|
|
mountPropagation: None
|
|
prune-script:
|
|
enabled: true
|
|
type: configMap
|
|
name: talos-prune-script
|
|
defaultMode: 0755
|
|
advancedMounts:
|
|
local:
|
|
s3-prune:
|
|
- path: /scripts/prune.sh
|
|
subPath: prune.sh
|
|
remote:
|
|
s3-prune:
|
|
- path: /scripts/prune.sh
|
|
subPath: prune.sh
|
|
external:
|
|
s3-prune:
|
|
- path: /scripts/prune.sh
|
|
subPath: prune.sh
|
|
s3cmd-config-local:
|
|
enabled: true
|
|
type: secret
|
|
name: talos-etcd-backup-local-secret
|
|
advancedMounts:
|
|
local:
|
|
s3-prune:
|
|
- path: /root/.s3cfg
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: .s3cfg
|
|
s3cmd-config-remote:
|
|
enabled: true
|
|
type: secret
|
|
name: talos-etcd-backup-remote-secret
|
|
advancedMounts:
|
|
remote:
|
|
s3-prune:
|
|
- path: /root/.s3cfg
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: .s3cfg
|
|
s3cmd-config-external:
|
|
enabled: true
|
|
type: secret
|
|
name: talos-etcd-backup-external-secret
|
|
advancedMounts:
|
|
external:
|
|
s3-prune:
|
|
- path: /root/.s3cfg
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: .s3cfg
|
|
tmp-local:
|
|
type: emptyDir
|
|
medium: Memory
|
|
advancedMounts:
|
|
local:
|
|
backup:
|
|
- path: /tmp
|
|
readOnly: false
|
|
tmp-remote:
|
|
type: emptyDir
|
|
medium: Memory
|
|
advancedMounts:
|
|
remote:
|
|
backup:
|
|
- path: /tmp
|
|
readOnly: false
|
|
tmp-external:
|
|
type: emptyDir
|
|
medium: Memory
|
|
advancedMounts:
|
|
external:
|
|
backup:
|
|
- path: /tmp
|
|
readOnly: false
|
|
talos-local:
|
|
type: emptyDir
|
|
medium: Memory
|
|
advancedMounts:
|
|
local:
|
|
backup:
|
|
- path: /.talos
|
|
readOnly: false
|
|
talos-remote:
|
|
type: emptyDir
|
|
medium: Memory
|
|
advancedMounts:
|
|
remote:
|
|
backup:
|
|
- path: /.talos
|
|
readOnly: false
|
|
talos-external:
|
|
type: emptyDir
|
|
medium: Memory
|
|
advancedMounts:
|
|
external:
|
|
backup:
|
|
- path: /.talos
|
|
readOnly: false
|
|
etcd-defrag:
|
|
global:
|
|
fullnameOverride: etcd-defrag
|
|
controllers:
|
|
defrag-1:
|
|
type: cronjob
|
|
pod:
|
|
nodeSelector:
|
|
node-role.kubernetes.io/control-plane: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "0 0 * * 0"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: ghcr.io/siderolabs/talosctl
|
|
tag: v1.12.0
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- etcd
|
|
- defrag
|
|
- -n
|
|
- "10.232.1.11"
|
|
env:
|
|
- name: TALOSCONFIG
|
|
value: /tmp/.talos/config
|
|
defrag-2:
|
|
type: cronjob
|
|
pod:
|
|
nodeSelector:
|
|
node-role.kubernetes.io/control-plane: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "10 0 * * 0"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: ghcr.io/siderolabs/talosctl
|
|
tag: v1.12.0
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- etcd
|
|
- defrag
|
|
- -n
|
|
- "10.232.1.12"
|
|
env:
|
|
- name: TALOSCONFIG
|
|
value: /tmp/.talos/config
|
|
defrag-3:
|
|
type: cronjob
|
|
pod:
|
|
nodeSelector:
|
|
node-role.kubernetes.io/control-plane: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
cronjob:
|
|
suspend: false
|
|
concurrencyPolicy: Forbid
|
|
timeZone: US/Central
|
|
schedule: "20 0 * * 0"
|
|
startingDeadlineSeconds: 90
|
|
successfulJobsHistory: 1
|
|
failedJobsHistory: 1
|
|
backoffLimit: 3
|
|
parallelism: 1
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: ghcr.io/siderolabs/talosctl
|
|
tag: v1.12.0
|
|
pullPolicy: IfNotPresent
|
|
args:
|
|
- etcd
|
|
- defrag
|
|
- -n
|
|
- "10.232.1.13"
|
|
env:
|
|
- name: TALOSCONFIG
|
|
value: /tmp/.talos/config
|
|
persistence:
|
|
talos-config-1:
|
|
enabled: true
|
|
type: secret
|
|
name: talos-etcd-defrag-secret
|
|
advancedMounts:
|
|
defrag-1:
|
|
main:
|
|
- path: /tmp/.talos/config
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config
|
|
talos-config-2:
|
|
enabled: true
|
|
type: secret
|
|
name: talos-etcd-defrag-secret
|
|
advancedMounts:
|
|
defrag-2:
|
|
main:
|
|
- path: /tmp/.talos/config
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config
|
|
talos-config-3:
|
|
enabled: true
|
|
type: secret
|
|
name: talos-etcd-defrag-secret
|
|
advancedMounts:
|
|
defrag-3:
|
|
main:
|
|
- path: /tmp/.talos/config
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config
|