wip

2026-09-03 00:35:34 -04:00
parent af8dcaec06
commit fafc013896
16 changed files with 187 additions and 139 deletions
@@ -1,27 +0,0 @@
-cluster:
-  id: <CLUSTER_ID>
-  secret: <CLUSTER_SECRET>
-  token: <BOOTSTRAP_TOKEN>
-  endpoint: https://<LOAD_BALANCER_IP>:6443
-
-machine:
-  type: controlplane
-  token: <JOIN_TOKEN>
-  kubelet:
-    image: ghcr.io/siderolabs/kubelet:v1.29.0
-  install:
-    disk: /dev/sda
-    image: ghcr.io/siderolabs/installer:v1.6.0
-    bootLOADER: grub
-  network:
-    interfaces:
-      - interface: eth0
-        dhcp: true
-    nameservers:
-      - 8.8.8.8
-  sysctls:
-    fs.inotify.max_user_watches: "1048576"
-  features:
-    rbac: true
-    stableHostname: true
-    appArmor: true
@@ -0,0 +1,42 @@
+# Ref: https://docs.siderolabs.com/talos/latest/reference/configuration/v1alpha1/config#cluster
+
+cluster:
+  controlPlane:
+    endpoint: ${cluster_endpoint}
+    localAPIServerPort: ${cluster_api_port}
+  clusterName: ${cluster_name}  
+  network:
+    cni:
+      name: custom
+      urls: [] # FIX
+    dnsDomain: ${cluster_fqdn}
+    podSubnets:
+      - "${ipv4_pod_cidr}"
+      - "${ipv6_pod_cidr}"
+    serviceSubnets:
+      - "${ipv4_service_cidr}"
+      - "${ipv6_service_cidr}"
+  apiServer:
+    certSANs:
+      - "${cluster_fqdn}"
+      - "${cluster_api_ipv4_address}"
+      - "${cluster_api_ipv6_address}"
+  proxy:
+    disabled: true
+  discovery:
+    enabled: true
+    registries:
+      kubernetes:
+        disabled: true
+      service:
+        disabled: false
+        endpoint: ${discovery_service_endpoint}
+  coreDNS:
+    disabled: false
+  extraManifests: []
+  inlineManifests:
+    - name:
+      contents:
+  adminKubeconfig:
+    certLifetime: 10y
+  allowSchedulingOnControlPlanes: false
@@ -2,5 +2,5 @@

 apiVersion: v1alpha1
 kind: HostnameConfig
-hostname: ${hostname}
+hostname: ${hostname}.$(local_domain)
 auto: off
@@ -6,7 +6,10 @@ name: enp0s1 # Default link position assigned by proxmox
 up: true
 mtu: 1500
 addresses:
-    - address: ${ipv4_address}/${ipv4_subnet_mask}
+  - address: "${ipv4_address}/${ipv4_subnet_mask}"
+  - address: "${ipv6_address}/64"
 routes:
-    - destination: 0.0.0.0/0
-      gateway: ${ipv4_gateway}
+  - destination: "0.0.0.0/0"
+    gateway: "${ipv4_gateway}"
+  - destination: "::/0"
+    gateway: "${ipv6_gateway}"
@@ -0,0 +1,26 @@
+# Ref: https://docs.siderolabs.com/talos/latest/reference/configuration/v1alpha1/config#machine
+
+machine:
+  certSANs:
+    - "${hostname}.${local_domain}"
+    - "${cluster_fqdn}"
+    - "${cluster_api_ipv4_address}"
+    - "${cluster_api_ipv6_address}"
+    - "${ipv4_address}"
+    - "${ipv6_address}"
+  kubelet:
+    defaultRuntimeSeccompProfileEnabled: true
+    disableManifestsDirectory: true
+  install:
+    disk: /dev/sda
+    wipe: true
+    grubUseUKICmdline: true
+    legacyBIOSSupport: false
+  features:
+    kubernetesTalosAPIAccess: false
+    diskQuotaSupport: false
+    kubePrism:
+      enabled: false
+    hostDNS:
+      enabled: true
+      forwardKubeDNSToHost: false