Welcome to the v1.12.0 release of Talos. What's new? The Kubernetes API server in Talos has been updated to use a more secure set of TLS cipher suites by default. This is in line with a set of best practices documented in CIS 1.12 benchmark. New field in UserVolumeConfig - volumeType that defaults to partition, but can be set to directory. When set to directory, provisioning and filesystem operations are skipped and a directory is created under /var/mnt/'name'. The directory type enables lightweight storage volumes backed by a host directory, instead of requiring a full block device partition. Talos versions prior to v1.12 used the state of PCR 7 and signed policies locked to PCR 11 for TPM based disk encryption. Talos now supports configuring which PCRs states are to be used for TPM based disk encryption via the options.pcrs field in the tpm section of the disk encryption configuration. Component updates Linux kernel 6.18.1, Kubernetes 1.35.0, CNI Plugins 1.9.0, cryptsetup 2.8.1, LVM2 2_03_37, systemd-udevd: 257.8....
Official announcement
Download Talos Linux
