Talos 1.9 Release Checklist ✅

[smira]

Previous: #8484

This is a tentative list of features, no commitment on the list.

Major Tasks

Beta Give feedback

1. Volume Management #8367
   6 of 11
   EPIC +1
   
2. pre-cached images #9610
   4 of 8
   EPIC +1
   

   
3. Structured /var #8016
   1 of 1
   +0
   
4. SELinux Protection
5. KubeSpan segmentation #8364
   0 of 2
   +0
6. feat: implement distributed image store #7120
   +0
7. Switch to systemd-boot on UEFI systems #8062
   +0
8. Multiple Machine Configurations (history of Machine Configs, automatic rollback)

Smaller Tasks

Beta Give feedback

1. Epic: Multi-document machine configuration and fully reactive Talos core #7223
   3 of 5
   +0
2. resources for network and disk usage (for Omni dashboard)
3. Add documentation about CIS hardening and compliance verification #4174
   +0
4. Audit Talos k8s as per Kubernetes Security Checklist #6199
   +0
5. Set kernel.kptr_restrict = 2 #8746
   +0
6. Talos: snapshot kernel cmdline network config as META conrents #8286
   +0
7. Talos upgrade to optionally store log to Ephemeral partition #7364
   +0
8. Use NTS for NTP time sync #8779
   +0
9. allow ethtool configuration, e.g. TCP checksum offloading #9173
   +0
10. Security Guarantees of LUKS Encryption using TPM for User Data on EPHEMERAL #8972
    +0
11. Github Actions Workflow Talos in Docker & QEMU #8242
    +0
12. .cluster.etcd changes to restart etcd in a safe way
13. Add digest to all container images references in manifests and documentation #6987
    +0
14. SBOM generation #7088
    +0
15. xfs_scrub controller #9545
    +0
16. Unable to change cluster.endpoint without downtime #9609
    +0
17. Support for routing rules and tables #7184
    +0
18. GCP ILB support / support scope local routes to be configured #4109
    +0
19. Trusted (Secure Boot) PoC #7141
    21 of 21
    +0
    
20. deprecate talos.unified_cgroup_hierarchy #9729
    +0
21. TPM event log #7752
    +0
22. IMA signed kernel modules #7688
    +0
23. Talos performance monitoring #7806
    +0
24. rtc modules are loaded after controller-runtime tries to use them #8074
    +0
25. Ability to rotate secret encryption keys used in apiserver #8702
    +0
26. Allow to set a webhook backend for the audit logs #8597
    +0
27. KernelParamSpecController fails to handle sysctl params that can't be read before being written #9347
    +0
28. Specify additional DNS search domains #9342
    +0
    
29. IPv6-only support / improvements #9372
    0 of 3
    +0
30. Can't configure hugepages kernel args, image factory changes order in kernel command line. image-factory#154
    +0
31. nocloud network support vlans and bonds #9753
    +0
32. Audit the cgroups in Talos and resource reservation #7081
    +0
    
33. Ability to debug nodes with running debug container #8720
    +0
34. ndot DNS config #9336
    +0
    
35. PoC runc overlayfs instead of memfd #9543
    +0
36. Talos fails to parse vlan cmdline parameter if the interface uses a VLAN_PLUS_VID form #9552
    +0
37. Talos Secureboot ISO doesn't adhere to spec #9565
    +0
38. Support custom (Docker) bind mounts for Talos-in-Docker clusters #9607
    +0
    
39. move out of base i915/amdgpu drivers to the extensions #9728
    +0
    
40. Control Plane Scheduling Glitch during Bootstrap #9691
    +0
    

Continuous Integration

Beta Give feedback

1. e2e aws with k8s conformance (CSI,External IP
2. update ci longhorn for v2 tests #9669
   +0

Document Updates

Beta Give feedback

No tasks being tracked yet.