Skip to main content
Version: v1.3

metal-stack v1.3.0

See original release note at https://github.com/metal-stack/releases/releases/tag/v1.3.0

General​

Required Actions​

  • Please ensure that all your active firewall images are newer than 2025-01-01, because now the minimum tailscale client version is v1.80.0 (metal-stack/metal-apiserver#354)

Breaking Changes​

  • Project and tenant memberships now have own API methods are not wrapped into their parent entities anymore. This allows declarative definition of memberships through CI. (metal-stack/api#196)
  • The variables lo and asn in the metal-core role were renamed to metal_core_loopback_ip and metal_core_asn. (metal-stack/metal-roles#737)
  • The isolated-clusters role now depends on the new Gateway API v1.6 CRD. Please migrate your Gateway controller to support this version if necessary. (metal-stack/metal-roles#766)

Component Releases​

metal-apiserver v0.15.1​

  • Remove unreachable code, test isAdminRoleAllowed (metal-stack/metal-apiserver#352) @majst01
  • Update headscale to 0.29.7 (metal-stack/metal-apiserver#354) @majst01
  • Implement new membership endpoints. (metal-stack/metal-apiserver#343) @Gerrit91
  • Additional scopes for OIDC configuration (metal-stack/metal-apiserver#353) @simcod
  • Report headscale version in health status (metal-stack/metal-apiserver#356) @majst01

api v0.10.0​

  • Members improvements (metal-stack/api#196) @Gerrit91
  • Houskeeping commands (metal-stack/api#210) @majst01

metal-api v0.46.0​

  • update headscale to v0.29.7 (metal-stack/metal-api#660) @majst01
  • Update dependencies (metal-stack/metal-api#659) @majst01
  • Use actions-common. (metal-stack/metal-api#658) @Gerrit91

metal-ansible-modules v0.4.0​

  • Adapt v0.9.0 API breaking changes. (metal-stack/metal-ansible-modules#33) @Gerrit91

metal-roles v0.39.2​

  • fix(metal-bmc): mount /etc/metal-bmc/ read-writable, to allow self-refresh of metal-apiserver-token (metal-stack/metal-roles#764) @mwennrich
  • (isolated clusters) fix image-name for cilium operator in oci-mirror configuration (metal-stack/metal-roles#763) @mwennrich
  • Allow applying V2 static data. (metal-stack/metal-roles#751) @Gerrit91
  • Document default roles through arg specs. (metal-stack/metal-roles#771) @Gerrit91
  • Postgres argspecs (metal-stack/metal-roles#769) @Gerrit91
  • Provide arg specs for roles in common. (metal-stack/metal-roles#768) @Gerrit91
  • Use Gateway API v1 for TCPRoute and UDPRoute (metal-stack/metal-roles#766) @GeertJohan
  • lint: fix no-changed-when and schema violations and enforce them (metal-stack/metal-roles#708) @GeertJohan
  • Do not use unprefixed vars in metal-core role. (metal-stack/metal-roles#737) @Gerrit91
  • OIDC additional scopes (metal-stack/metal-roles#765) @simcod
  • valkey: add argument_specs, move the provider check out of the task (metal-stack/metal-roles#719) @GeertJohan
  • Dynamically check Gateway API CRD for NSQ. (metal-stack/metal-roles#772) @Gerrit91
  • Remove no_log property from arg specs. (metal-stack/metal-roles#773) @Gerrit91
  • Add back metal-v2-client dependency on default vars. (metal-stack/metal-roles#774) @Gerrit91

tenant-apiserver v0.4.0​

  • feat: project and tenant configs (metal-stack/tenant-apiserver#14) @vknabel

helm-charts v0.7.13​

  • Allow applying V2 static data through post-provisioning hook (metal-stack/helm-charts#181) @Gerrit91
  • OIDC additional scopes (metal-stack/helm-charts#186) @simcod

ansible-common v0.9.4​

  • Include V2 image entities in cloud profile. (metal-stack/ansible-common#53) @Gerrit91

cli v0.2.1​

  • Machine housekeeping (metal-stack/cli#76) @majst01
  • Add aliases for admin subcommand. (metal-stack/cli#75) @Gerrit91
  • Refactor e2e tests to enable request validation (metal-stack/cli#74) @simcod
  • One more test. (metal-stack/cli#73) @Gerrit91

Merged Pull Requests

This is a list of pull requests that were merged since the last release. The list does not contain pull requests from release-vector-repositories.

The fact that these pull requests were merged does not necessarily imply that they have already become part of this metal-stack release.

  • Bump releases to version v1.2.0 (metal-stack/website#374) @metal-robot[bot]
  • Update firewall kernel to 6.18.60 (metal-stack/metal-images#462) @majst01
  • Migrate to apiv2 and os installer (metal-stack/firewall-controller#216) @majst01
  • Update headscale to v0.29.7, database to 17.11 (metal-stack/releases#332) @majst01
  • Add nft rule to prevent cve_2026_98432 (metal-stack/os-installer#15) @majst01
  • Bump metal-api to version v0.46.0 (metal-stack/metal-go#230) @metal-robot[bot]
  • Bump metal-api to version v0.46.0 (metal-stack/metal-python#168) @metal-robot[bot]
  • Add nftables rules to prevent CVE (metal-stack/firewall-controller#232) @majst01
  • Update debian kernel to 6.12.115 (metal-stack/metal-images#463) @majst01
  • One more test. (metal-stack/cli#73) @Gerrit91
  • Update ipam and masterdata db to 17.11 (metal-stack/releases#334) @majst01
  • Bump brace-expansion from 1.1.18 to 1.1.21 (metal-stack/planner#33) @dependabot[bot]
  • Bump the dev-dependencies group with 3 updates (metal-stack/planner#36) @dependabot[bot]
  • Bump the production-dependencies group across 1 directory with 5 updates (metal-stack/planner#37) @dependabot[bot]
  • feat: tenant and project configs (metal-stack/tenant-api#8) @vknabel
  • Refactor e2e tests to enable request validation (metal-stack/cli#74) @simcod
  • Add aliases for admin subcommand. (metal-stack/cli#75) @Gerrit91
  • Machine housekeeping (metal-stack/cli#76) @majst01
  • Next release (metal-stack/releases#333) @metal-robot[bot]