Split project

2026-09-08 00:15:03 -04:00
parent 33dc172296
commit 02516f403a
33 changed files with 223 additions and 44 deletions
@@ -0,0 +1,42 @@
+# Ref: https://docs.siderolabs.com/talos/latest/reference/configuration/v1alpha1/config#cluster
+
+cluster:
+  controlPlane:
+    endpoint: ${cluster_endpoint}
+    localAPIServerPort: ${cluster_api_port}
+  clusterName: ${cluster_name}  
+  network:
+    cni:
+      name: custom
+      urls: [] # FIX
+    dnsDomain: ${cluster_fqdn}
+    podSubnets:
+      - "${ipv4_pod_cidr}"
+      - "${ipv6_pod_cidr}"
+    serviceSubnets:
+      - "${ipv4_service_cidr}"
+      - "${ipv6_service_cidr}"
+  apiServer:
+    certSANs:
+      - "${cluster_fqdn}"
+      - "${cluster_api_ipv4_address}"
+      - "${cluster_api_ipv6_address}"
+  proxy:
+    disabled: true
+  discovery:
+    enabled: true
+    registries:
+      kubernetes:
+        disabled: true
+      service:
+        disabled: false
+        endpoint: ${discovery_service_endpoint}
+  coreDNS:
+    disabled: false
+  extraManifests: []
+  inlineManifests:
+    - name:
+      contents:
+  adminKubeconfig:
+    certLifetime: "87600h" # 10 years (24 hours * 365 * 10)
+  allowSchedulingOnControlPlanes: false
@@ -0,0 +1,6 @@
+# Ref: https://docs.siderolabs.com/talos/latest/reference/configuration/network/hostnameconfig
+
+apiVersion: v1alpha1
+kind: HostnameConfig
+hostname: ${hostname}.${local_domain}
+auto: off
@@ -0,0 +1,15 @@
+# Ref: https://docs.siderolabs.com/talos/latest/reference/configuration/network/linkconfig
+
+apiVersion: v1alpha1
+kind: LinkConfig
+name: enp0s1 # Default link position assigned by proxmox
+up: true
+mtu: 1500
+addresses:
+  - address: "${ipv4_address}/${ipv4_subnet_mask}"
+  - address: "${ipv6_address}/64"
+routes:
+  - destination: "0.0.0.0/0"
+    gateway: "${ipv4_gateway}"
+  - destination: "::/0"
+    gateway: "${ipv6_gateway}"
@@ -0,0 +1,27 @@
+# Ref: https://docs.siderolabs.com/talos/latest/reference/configuration/v1alpha1/config#machine
+
+machine:
+  certSANs:
+    - "${hostname}.${local_domain}"
+    - "${cluster_fqdn}"
+    - "${cluster_api_ipv4_address}"
+    - "${cluster_api_ipv6_address}"
+    - "${ipv4_address}"
+    - "${ipv6_address}"
+  kubelet:
+    defaultRuntimeSeccompProfileEnabled: true
+    disableManifestsDirectory: true
+  install:
+    disk: /dev/sda
+    wipe: true
+    grubUseUKICmdline: true
+    legacyBIOSSupport: false
+  features:
+    kubernetesTalosAPIAccess:
+      enabled: false
+    diskQuotaSupport: false
+    kubePrism:
+      enabled: false
+    hostDNS:
+      enabled: true
+      forwardKubeDNSToHost: false
@@ -0,0 +1,8 @@
+# Ref: https://docs.siderolabs.com/talos/latest/reference/configuration/network/resolverconfig
+
+apiVersion: v1alpha1
+kind: ResolverConfig
+nameservers: ${jsonencode(concat(ipv4_nameservers, ipv6_nameservers))}
+searchDomains:
+  disableDefault: true
+  domains: ${jsonencode(search_domains)}
@@ -0,0 +1,8 @@
+# Ref: https://docs.siderolabs.com/talos/latest/reference/configuration/network/timesyncconfig
+
+apiVersion: v1alpha1
+kind: TimeSyncConfig
+enabled: true
+# bootTimeout: "infinity"
+ntp:
+  servers: ${jsonencode(concat(ipv4_ntp_servers, ipv6_ntp_servers))}