talos wip

talos/calico/BGPConfiguration.yml

@@ -0,0 +1,11 @@
+# For pfsense check 'Disable eBGP Require Policy' under BGP advanved
+# https://geek-cookbook.funkypenguin.co.nz/kubernetes/loadbalancer/metallb/pfsense/#configure-frr-bgp-advanced
+
+apiVersion: crd.projectcalico.org/v1
+kind: BGPConfiguration
+metadata:
+  name: default
+spec:
+  asNumber: 64624
+  serviceClusterIPs:
+  - cidr: 10.80.0.0/12

talos/calico/BGPPeers.yml

@@ -0,0 +1,7 @@
+apiVersion: crd.projectcalico.org/v1
+kind: BGPPeer
+metadata:
+  name: router-balsillie-house
+spec:
+  asNumber: 64625
+  peerIP: 192.168.1.11:179

talos/calico/apiserver.yml

@@ -0,0 +1,7 @@
+# This section configures the Calico API server.
+# For more information, see: https://docs.tigera.io/calico/latest/reference/installation/api#operator.tigera.io/v1.APIServer
+apiVersion: operator.tigera.io/v1
+kind: APIServer
+metadata:
+  name: default
+spec: {}

talos/calico/calicoNodeStatus.yml

@@ -0,0 +1,11 @@
+apiVersion: projectcalico.org/v3
+kind: CalicoNodeStatus
+metadata:
+  name: node00
+spec:
+  classes:
+    - Agent
+    - BGP
+    - Routes
+  node: node00
+  updatePeriodSeconds: 10

talos/calico/configMap.yml

@@ -0,0 +1,8 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: kubernetes-services-endpoint
+  namespace: tigera-operator
+data:
+  KUBERNETES_SERVICE_HOST: "192.168.1.15"
+  KUBERNETES_SERVICE_PORT: '6443'

talos/calico/felixConfiguration.yml

@@ -0,0 +1,6 @@
+apiVersion: crd.projectcalico.org/v1
+kind: FelixConfiguration
+metadata:
+  name: default
+spec:
+  CgroupV2Path: /sys/fs/cgroup

talos/calico/installation.yml

@@ -0,0 +1,25 @@
+# This section includes base Calico installation configuration.
+# For more information, see: https://docs.tigera.io/calico/latest/reference/installation/api#operator.tigera.io/v1.Installation
+apiVersion: operator.tigera.io/v1
+kind: Installation
+metadata:
+  name: default
+spec:
+  variant: Calico
+  cni:
+    type: Calico
+    ipam:
+      type: Calico
+  serviceCIDRs:
+    - 10.80.0.0/12
+  calicoNetwork:
+    bgp: Enabled
+    linuxDataplane: Nftables
+    hostPorts: Enabled
+    ipPools:
+    - name: default-ipv4-ippool
+      blockSize: 24
+      cidr: 10.64.0.0/12
+      encapsulation: None
+      natOutgoing: Disabled
+      nodeSelector: all()