⬆️ talos v1.6.1

2025-09-17 18:24:14 +02:00 · 2024-01-06 15:11:24 +01:00
parent 9be6cf7a7b
commit ccf2cd8078
6 changed files with 30 additions and 28 deletions
--- a/kubernetes/talos/.gitignore
+++ b/kubernetes/talos/.gitignore
@@ -0,0 +1,2 @@
+charts
+clusterconfig
--- a/kubernetes/talos/README.md
+++ b/kubernetes/talos/README.md
@@ -0,0 +1,38 @@
+<!-- markdownlint-disable MD033 MD041 -->
+<div align="center">
+
+<!-- markdownlint-disable MD033 -->
+<img src="https://raw.githubusercontent.com/siderolabs/talos/main/website/assets/icons/logo.svg" align="center" width="144px"/>
+
+### Talos Linux cluster
+
+... managed with Talhelper :robot:
+
+</div>
+
+## :book:&nbsp; Overview
+
+This directory contains my [Talos](https://www.talos.dev/) Kubernetes cluster in declarative state.
+I use my own tool [Talhelper](https://github.com/budimanjojo/talhelper) to create the `machineconfig` files of all my nodes.
+The secrets are encrypted with [SOPS](https://toolkit.fluxcd.io/guides/mozilla-sops/).
+
+Feel free to open a [Github issue](https://github.com/budimanjojo/home-cluster/issues/new/choose) if you have any questions.
+
+---
+
+## :scroll:&nbsp; How to apply
+
+1. Prepare your nodes with `Talos Linux`
+2. Install `talhelper`.
+3. Create your own [talconfig.yaml](https://github.com/budimanjojo/home-cluster/blob/main/talos/talconfig.yaml).
+4. Run `talhelper gensecret > talsecret.sops.yaml` if you don't have `machineconfig` before or `talhelper gensecret -f <your-machineconfig.yaml> > talsecret.sops.yaml` if you already have one.
+5. Run `sops -e -i talsecret.sops.yaml` to encrypt your secrets (make sure you already have your own `.sops.yaml`) file.
+6. Run `talhelper genconfig` and the files will be generated in `./clusterconfig` directory by default.
+7. Copy the generated `./clusterconfig/talosconfig` to your `~/.talos/config`.
+8. Run `talosctl -n <node-ip> apply-config --insecure --file ./clusterconfig/<clustername>-<hostname>.yaml` on each of your node. Don't forget to run `talosctl -n <node-ip> bootstrap` on one of your controlplane node.
+9. Push your current directory to your git repository of choice. :wink:
+
+## Upgrading talos
+
+1. Get image hash from [Talos Factory](https://factory.talos.dev)
+2. Execute `talosctl upgrade -n <IP> --image=factory.talos.dev/installer/<image_hash>:<semver>`
--- a/kubernetes/talos/cluster-0/talconfig.yaml
+++ b/kubernetes/talos/cluster-0/talconfig.yaml
@@ -0,0 +1,131 @@
+---
+# Image URL rendered on https://factory.talos.dev
+# talhelper genurl installer
+
+clusterName: cluster-0
+
+talosVersion: v1.6.1
+kubernetesVersion: v1.29.0
+endpoint: https://cluster-0.${domainName}:6443
+
+cniConfig:
+  name: none
+
+additionalApiServerCertSans: &san
+  - ${clusterEndpointIP}
+  - https://cluster-0.${domainName}:6443
+  - "127.0.0.1" # KubePrism
+
+additionalMachineCertSans: *san
+
+nodes:
+  # - hostname: talos-node-1
+  #   ipAddress: 192.168.9.101
+  #   controlPlane: true
+  #   installDisk: /dev/sda
+  - hostname: talos-node-2
+    ipAddress: 192.168.9.102
+    controlPlane: true
+    installDisk: /dev/sda
+  - hostname: talos-node-3
+    ipAddress: 192.168.9.103
+    controlPlane: true
+    installDisk: /dev/sda
+  - hostname: talos-node-4
+    ipAddress: 192.168.9.104
+    controlPlane: true
+    installDisk: /dev/sda
+
+controlPlane:
+  schematic:
+    customization:
+      extraKernelArgs:
+        - net.ifnames=0
+      systemExtensions:
+        officialExtensions:
+          - siderolabs/intel-ucode
+          - siderolabs/i915-ucode
+
+  patches:
+    # Disable search domain everywhere
+    - |-
+      machine:
+        network:
+          disableSearchDomain: true
+
+    # Configure NTP
+    - |-
+      machine:
+        time:
+          disabled: false
+          servers:
+            - 192.168.8.1
+
+    # Enable KubePrism
+    - |-
+      machine:
+        features:
+          kubePrism:
+            enabled: true
+            port: 7445
+
+    # Configure cluster loopback
+    - |-
+      machine:
+        network:
+          extraHostEntries:
+            - ip: ${clusterEndpointIP}
+              aliases:
+                - cluster-0.${domainName}
+
+    # Cluster configuration
+    - |-
+      cluster:
+        allowSchedulingOnMasters: true
+        proxy:
+          disabled: true
+
+    # Configure containerd
+    - |-
+      machine:
+        files:
+          - op: create
+            path: /etc/cri/conf.d/20-customization.part
+            content: |
+              [plugins]
+                [plugins."io.containerd.grpc.v1.cri"]
+                  enable_unprivileged_ports = true
+                  enable_unprivileged_icmp = true
+
+    # Disable default API server admission plugins.
+    - |-
+      - op: remove
+        path: /cluster/apiServer/admissionControl
+
+    # Kubelet configuration
+    - |-
+      machine:
+        kubelet:
+          extraArgs:
+            feature-gates: GracefulNodeShutdown=true,NewVolumeManagerReconstruction=false
+            rotate-server-certificates: "true"
+          extraConfig:
+            maxPods: 150
+
+    # Custom sysctls
+    - |-
+      machine:
+        sysctls:
+          fs.inotify.max_user_watches: "1048576"
+          fs.inotify.max_user_instances: "8192"
+
+    # Redirect logs
+    - |-
+      machine:
+        install:
+          extraKernelArgs:
+            - "talos.logging.kernel=udp://192.168.169.108:6050/"
+        logging:
+          destinations:
+            - endpoint: "udp://192.168.169.108:6051/"
+              format: json_lines
--- a/kubernetes/talos/cluster-0/talenv.sops.yaml
+++ b/kubernetes/talos/cluster-0/talenv.sops.yaml
@@ -0,0 +1,23 @@
+domainName: ENC[AES256_GCM,data:HjLGZvUsYQ99Bpg=,iv:JorYiGtHq4+CVz9eoP+/1lDTM+751/nENKkRavkQvS8=,tag:Bg9oP5phcGOv9h7/7BhFug==,type:str]
+clusterEndpointIP: ENC[AES256_GCM,data:6Ual1ymP6c+F7FUCdw==,iv:h2n4l/oAN9tmUmJ7ZJVvalMyAwSVbIH+T9QehbRBmvk=,tag:zCjee63afjbyBGz3+qn22Q==,type:str]
+ingressDomain: ENC[AES256_GCM,data:1I1QIVGjj+x0TgPb1h4CFw==,iv:LevzHecdR3eu7mxiccLNiPxH7XZibBS+JKl/wXf+7Yg=,tag:BRDboH6Rtmkh9bzwpzH2nQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTem5nM3JpRjVoVXhIakh4
+            bE5sTHJtck9aUkpZUHpVVitHdmF3ckFuRlg0Ckttbm5rT3BSMzcwdkE0bkZPYlRT
+            MmFRNEptcGpyQ09YVkhKeUVsc2ZFeWcKLS0tIFZpcmJneUdYZlBSZ09GSHhiR2FW
+            QXZCejNUNG5IbnJUb2dzU1lvbFNiYUkKm2TnIcxEM14wKgvfa/rDb/mB4oJt++g6
+            AortgmCcD6DvdNEvbNXeXUaYhnxF5Vpzi5+B1bEwB1WnBMSKSYhKkw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-11-30T20:45:07Z"
+    mac: ENC[AES256_GCM,data:pC/O6p5kkuy9mv8ZgPuDKwVXzA1yKhs9lkbuzkWLQsMf05+YlJsTtuCuDiMvKqw9IB085qT4fAJbFQWcxuv7IQF37K8Rx633+vd1EgHMbYR3WMY37tS0OEiIg8rHDFObVAlMpJs1CvlqdL2pkysi3kws8L2OLFSG/wlrrf8l6KM=,iv:62Gjmilv2QTzICSfoAraPQ1/U2sqLGTQ+YOsoMQQe84=,tag:iJb63kAncHW/3YAic9bRZA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/kubernetes/talos/cluster-0/talsecret.sops.yaml
+++ b/kubernetes/talos/cluster-0/talsecret.sops.yaml
@@ -0,0 +1,43 @@
+cluster:
+    id: ENC[AES256_GCM,data:Uq/4zd6ZgohxVKeu+/MW+rOM/BaNuLYdGTIascu1ShtOHA6Bq2k/Tbn4Eqg=,iv:lg39LK/W0/iCFioktz8R29dXBAPYP9D+Kzm/qaJmd7k=,tag:G5cFpzfMRmNTVEfB32ksCA==,type:str]
+    secret: ENC[AES256_GCM,data:Cnpz7hd3qHv+qIXxjkqTJPvz5JDR3fNryq0li4VYNn4+cELQl4c05gzC1kE=,iv:NLxR+WWvzudE61MzGyNZsw/WIId1AtSSnvIBD0HpynU=,tag:NiuM5bEVQIAhhFa7/Fdb7g==,type:str]
+secrets:
+    bootstraptoken: ENC[AES256_GCM,data:xwZ6A1yVdnYTdRzYhKhH/xGG12V535U=,iv:505Oqjd3BzACrdxHbYqr8i+pMfWe/euEkC4B2mzVxqo=,tag:d8QTmhtgMD53slTWOFn0fQ==,type:str]
+    aescbcencryptionsecret: ENC[AES256_GCM,data:R/5x7Q/oDrFqoToJj8TdfLa0c6jyQGsiwkbpxO0/iRSb1U/8IThH8VdCm/0=,iv:HSFB4sfcFcRLA4F8+zi4GXXibbF8jaLGWvFI8c335CQ=,tag:L8kvdfxBl7PLyzEA2bK3kQ==,type:str]
+trustdinfo:
+    token: ENC[AES256_GCM,data:hKb7/Ir+WyrSO2dYvwNh4a+t7P+iavA=,iv:CvT9faK+wgifltM3ywwtEGr+G/2O5b1DGm/Fg5ShJFU=,tag:liOpi/Iq8NkWmPaJhrvPmA==,type:str]
+certs:
+    etcd:
+        crt: ENC[AES256_GCM,data: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,iv:6AshvepkYAnqSkRKBcf3+HElMbeoEjm8gfrvmmH0KW4=,tag:/UKmIP7EOHGYaladg6Oicg==,type:str]
+        key: ENC[AES256_GCM,data:BUVz4RNz+G2tX6HHiHr0+rYIv7J4VcIR94Xfl5659SFR2pe3WXw0srWmFPorT6gjBbIKVyUHJl5TZ9Oc2Mlw3Q3Fr/ixxvmG56/xecbUIlHyUgekDvRoODK8f5jiN9mEAtfnwIqqZmvvCkIDLETMFan0M3nIlpjwAEGRvPmI+eR+3LQyaYuEJ6fxF1Vm5lHSu87lxWSIFqo4aCWYqYJpZltv2E1YgCZmwZM4KSMVU7AHr7JYiZIh5WfHfjEDQ/C/I/accQVm4Tchie115yQ2d2lvx3IngmYfr38j6UZdPh5VS7ztP8tHub6d1IbsAWiCgFLVaNX3fH1xDMvNl5w4AmsarPzuGovsgEqfsdWbsT3oNf3bqvk5isjz+ObxbnyEePcTb0DnYg0VBv/7NQCj8w==,iv:G93AM9v8y+v8Nqi59MPJ8i2+b3pOKGtcTo/z8vHHegc=,tag:B3qvhNgBd17HbiDAJtElHg==,type:str]
+    k8s:
+        crt: ENC[AES256_GCM,data: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,iv:PUhiCUBDV2kjN3br7+XmegfVs/vvb1o5ksCCFdAr2SA=,tag:h0yfZKXYGu87Lp77668a7Q==,type:str]
+        key: ENC[AES256_GCM,data:TEHwAYX3q7JvQ8xKnj1kGJ4jf8CfYwUT5TT+/MZsWPBtyqq3B9Rwi3MLZJjgG0S9mp4BQ58llutTpyyZDTBdKD9WTc4vnjVKKY9byGl2f3QIMrLo1O30OtvBTDFLFMD5t28qH2F6GzMe9IQlvibgx07bsbC3uYA5iS5JbR+hyx82aY0PcNsz3G5j+HK1+Vv8QiUCz1qdbns5E7rnwoVFKA1tcccxVP8QHjrloYYEGhJwgBrwqTyLBilM7moymT8QNSRrfFu0iyb0YoVxSy19kEnut67vYlkoR+3syp0hU3NZ67tLK5yJ5Mu3twULqeBQe3AKqzHmlPmDPmvOQhx3YIQxcMno+aWH7XH8DaWZrgII/U3JAvZ9HOSsjMrNi8+5XvER3P7ExYQC5Un3UszImw==,iv:T+IbfPD5BsGiTMskHpIhlK0KH7HzbyGHDHnGQsMHtGA=,tag:dfU6hTxEypLad6eOpGw+ug==,type:str]
+    k8saggregator:
+        crt: ENC[AES256_GCM,data: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,iv:KVUzCPzWNpbtTGtn75yfqgx6TjtUS/HMKudtZnlmPDE=,tag:1yVFLdgEKvarhm9VmHmJ/g==,type:str]
+        key: ENC[AES256_GCM,data:K1C5f9gJupGbKQU+RqlD/ENoJaMROR4zt+fwkgBI4PC5IVPxD1Akw0Mb35r0/bE2t0dLl6c980N0Pc5xioCh8BUH6SzAndI66OgFziOMHlh2VfPi4LldSxOChtSEKxuHndyDC96RcfKEcmkwURPhDUuTh4+/OxvZtc1ABqMeZWP33Cm1KQJTlx9HRPZVg72CirxSbEyK1ZvPMVlftwfVSminISus+xOIcii1BKsDjemuqdd0FAo/5WgP3SWGOs3W6pc164F5RZtMZOckI/Bx/aEUCtRRbmHd5BWn/7oQPQYFSZDUZ8fSRIUWR0GgcMWr3JJdUKRONcdKI/TeVwLZT2HEeWcEyIgYxSdQLWKiTm/ixFL9RwPVaYpXmMhql2+QTiIliBO//oq4/sYOobOA/Q==,iv:PK5kt/2kR7bwiIwSEOt0Ab4eOHN0mwzNFz8V8UloLDo=,tag:myy8IBNN93wQtIhjSHxabA==,type:str]
+    k8sserviceaccount:
+        key: ENC[AES256_GCM,data:Wt7/K5qeUP67Rlon/aSiJmZjqUhlQE6sGn+nzHkdOY/Efema5LS7ZIRODHidXN1PZAVcWRJ1x4UOOiuIPSOWAHonb/2jnWzeVQsuaTH1p7yAFcaf23rB/gKqhaw7DiTbzIFq+PUmygPxM7t0/Smr/lP1mSZu0SKwN/6XCAWXRPXwUKXE8ngwJSGK1N93bk55h+bjUuez/YzNb8/Df0fJw7JwWLM888Up1qIA0DnVuBXVLxc65iaCeAuoPfGodIbh8F1hZfp3xT5MPFUXOy/p1vaMtHLztikdr7JaQFaNleMwL8HulACuncGa9hC3CEbMYYMWXznvKn7j5jOMsNuyz7OnHkqtntr9ly1ZhZ57SuIZwJx4cDHncMCSz8lNhLfPYjhkrjJczSQYNPZm0I7ZbQ==,iv:f9QhL0zoEW5BakI1friltxddvo2j73LiQpcxuAd8+/I=,tag:A7clDRbG8cFfUPJ+rtyXpQ==,type:str]
+    os:
+        crt: ENC[AES256_GCM,data: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,iv:80H0I73Cc45q7hCdoZGRB7gOQqt3MurolRpiKG+7bkU=,tag:+8EfvsonFqiwZu4A+ra86A==,type:str]
+        key: ENC[AES256_GCM,data:1x6MnJy/zK0UsrmjRTgQm4/cW0T705fZpd/E0jwYdqR3Bj5xcufrb4z9KL/QSCNECFnlXsuLbvjURqKB9Q+ulFJZ460L8AWtR7ajj/PxPq9MwdvuDPbWxfgYVl9uEmvQw+VWuxdTD7eOvDTjtPBm721SXQlMpi/7MEy/97kT3bNLoxpwOF0YGINqFbcEIJYeuwP8LVt+KRLL0cv0yw8Bks9T5QAFb/EZ/K72MAW/n3nhdqMf,iv:vOxsVa6NTwLnq7pWfCrO47y2Di+Skb5S8JzW9LKJSnQ=,tag:3OShY2ukuo6eyrB+yjkWMg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0NTNTeTZiN0VFbDkzTG16
+            TEpab09RdlcreC9IY3J1dWduVi9Ca2JLY0NZCkdoVFFFRkJmRXBCZ2kyZ3ArMHdQ
+            Mzk0YnZHSVZkWVhwQ2daUVB6RGU5RmMKLS0tIGlZV3ovK2hFSysrMWh0OXd3RzJM
+            Y0dOWFo0dFVvMDhrT0h4bkZwakFhTXMKYZJh6hHHeCkUbxezOU4PntdMSzQraeFU
+            IFFGhAky3FRhKIPOUG+RylluBHBVYikp4ypbIG11AV/dx4DVdzf8TQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-11-19T00:07:02Z"
+    mac: ENC[AES256_GCM,data:2xqs5+poVcYcO21/8gYHdzkufRcci41NStg3QNHU1wfXDizGbt5DSzqXZwdjqtTvVOEP10STct6d7qzfFIi1Zati1j4EJrPy8x0xym+Huc/gFX5m3Hk5GF5FXgnvnak4nUdI4ub6FkzRCuJfPas8lojGtlCO+/4iXiwfXJwWkYg=,iv:HOsRrOzNH3i11nNfcIlgSoIeXYRaX1EFPNpYTD+Sj9o=,tag:A2WA6IoW0t23spUpgbFzTA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3