Talos 1.10 Release Checklist

[smira]

Previous: #9249

This is a tentative list of features, no commitment on the list.

Major Tasks

Preview Give feedback

1. Volume Management #8367
   6 of 11
   EPIC +1
   
2. Distributed Image Cache
3. Structured /var #8016
   1 of 1
   +0
   
4. K8s DNS resolver on the host
5. SELinux Protection
6. Reproducible Toolchain
7. Make installer/imager image hermetic
8. KubeSpan segmentation #8364
   0 of 2
   +0
9. feat: implement distributed image store #7120
   Stale +1
10. Switch to systemd-boot on UEFI systems #8062
    +0
11. Multiple Machine Configurations (history of Machine Configs, automatic rollback)

Smaller Tasks

Preview Give feedback

1. Epic: Multi-document machine configuration and fully reactive Talos core #7223
   3 of 5
   +0
2. resources for network and disk usage (for Omni dashboard)
3. Add documentation about CIS hardening and compliance verification #4174
   +0
4. Audit Talos k8s as per Kubernetes Security Checklist #6199
   +0
5. Set kernel.kptr_restrict = 2 #8746
   +0
6. Talos: snapshot kernel cmdline network config as META conrents #8286
   +0
7. Talos upgrade to optionally store log to Ephemeral partition #7364
   +0
8. Use NTS for NTP time sync #8779
   +0
9. allow ethtool configuration, e.g. TCP checksum offloading #9173
   +0
10. Security Guarantees of LUKS Encryption using TPM for User Data on EPHEMERAL #8972
    +0
11. Github Actions Workflow Talos in Docker & QEMU #8242
    +0
12. .cluster.etcd changes to restart etcd in a safe way
13. Add digest to all container images references in manifests and documentation #6987
    +0
14. SBOM generation #7088
    +0
15. xfs_scrub controller #9545
    +0
    
16. Unable to change cluster.endpoint without downtime #9609
    +0
17. Support for routing rules and tables #7184
    +0
18. GCP ILB support / support scope local routes to be configured #4109
    +0
19. Trusted (Secure Boot) PoC #7141
    21 of 21
    +0
    
20. TPM event log #7752
    +0
21. IMA signed kernel modules #7688
    +0
22. Talos performance monitoring #7806
    +0
23. Ability to rotate secret encryption keys used in apiserver #8702
    +0
24. Allow to set a webhook backend for the audit logs #8597
    +0
25. KernelParamSpecController fails to handle sysctl params that can't be read before being written #9347
    +0
26. IPv6-only support / improvements #9372
    0 of 3
    +0
27. Can't configure hugepages kernel args, image factory changes order in kernel command line. image-factory#154
    +0
28. bug: kube-router and KubeSpan don't play nice together #9814
    +0
    
29. drop cgroupsv1 support in !container mode
30. drop support for legacy iptables in the kernel
31. lock xfs filesystem creation options to match Talos version #9955
    +0
32. lookup interfaces by alias names
33. utlitlize fine-grained Kubelet API RBAC #9995
    +0
34. nvme-cli extensions#562
    +0
35. Support generating iqn and nqn during install #10009
    +0

Continuous Integration

Preview Give feedback

1. e2e aws with k8s conformance (CSI,External IP
2. update ci longhorn for v2 tests #9669
   +0

Document Updates

Preview Give feedback

No tasks being tracked yet.