⬆️ Update kubernetes to 1.31

kubernetes/talos/cluster-0/talconfig.yaml

@@ -6,18 +6,17 @@
 
 clusterName: cluster-0
 
-# renovate: depName=ghcr.io/buroa/installer datasource=docker
-talosVersion: v1.7.6
-# renovate: depName=ghcr.io/siderolabs/kubelet datasource=docker
-kubernetesVersion: v1.30.2
-endpoint: https://cluster-0.${domainName}:6443
+# renovate: datasource=docker depName=ghcr.io/siderolabs/installer
+talosVersion: v1.8.1
+# renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
+kubernetesVersion: v1.31.1
+endpoint: https://cluster-0.${internalDomain}:6443
 allowSchedulingOnMasters: true
 cniConfig:
   name: none
 
 additionalApiServerCertSans: &san
   - ${clusterEndpointIP}
-  - https://cluster-0.${domainName}:6443
   - https://cluster-0.${internalDomain}:6443
   - 127.0.0.1 # KubePrism
 
@@ -37,6 +36,10 @@ patches:
               - rw
 
 nodes:
+  - hostname: talos-node-1
+    ipAddress: 192.168.9.101
+    controlPlane: false
+    installDisk: /dev/nvme0n1
   - hostname: talos-node-2
     ipAddress: 192.168.9.102
     controlPlane: true
@@ -57,8 +60,9 @@ controlPlane:
         - net.ifnames=0
       systemExtensions:
         officialExtensions:
-          - siderolabs/intel-ucode
           - siderolabs/i915-ucode
+          - siderolabs/intel-ucode
+          - siderolabs/mei
 
   patches:
     # Disable search domain everywhere
@@ -67,6 +71,15 @@ controlPlane:
         network:
           disableSearchDomain: true
 
+    # Disable Host DNS
+    - |-
+      machine:
+        features:
+          hostDNS:
+            enabled: true
+            resolveMemberNames: true
+            forwardKubeDNSToHost: false
+
     # Configure NTP
     - |-
       machine:
@@ -90,7 +103,7 @@ controlPlane:
           extraHostEntries:
             - ip: ${clusterEndpointIP}
               aliases:
-                - cluster-0.${domainName}
+                - cluster-0.${internalDomain}
 
     # Cluster configuration
     - |-
@@ -129,8 +142,11 @@ controlPlane:
     - |-
       machine:
         sysctls:
-          fs.inotify.max_user_watches: "1048576"
+          fs.inotify.max_queued_events: "65536"
           fs.inotify.max_user_instances: "8192"
+          fs.inotify.max_user_watches: "524288"
+          net.core.rmem_max: "7500000"
+          net.core.wmem_max: "7500000"
 
     # Redirect logs
     # - |-

kubernetes/talos/cluster-0/talenv.sops.yaml

@@ -1,4 +1,3 @@
-domainName: ENC[AES256_GCM,data:hiV44QNvh2cTS4w=,iv:ipIrMnmZoEzJqTquHjbqOKmCzIXUK8YfvdthiRenqhY=,tag:iUgHayWCMho+/TuItXjX0g==,type:str]
 clusterEndpointIP: ENC[AES256_GCM,data:6Ual1ymP6c+F7FUCdw==,iv:h2n4l/oAN9tmUmJ7ZJVvalMyAwSVbIH+T9QehbRBmvk=,tag:zCjee63afjbyBGz3+qn22Q==,type:str]
 internalDomain: ENC[AES256_GCM,data:NIGuitKoGqshzg==,iv:TDHdUAv6BUlyE1KBQumQN9wZpGfWwBDtSWdBpO6GlmI=,tag:WkAAD7cLLf/gxIFLJvRatg==,type:str]
 sops:
@@ -16,8 +15,8 @@ sops:
             QXZCejNUNG5IbnJUb2dzU1lvbFNiYUkKm2TnIcxEM14wKgvfa/rDb/mB4oJt++g6
             AortgmCcD6DvdNEvbNXeXUaYhnxF5Vpzi5+B1bEwB1WnBMSKSYhKkw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-14T00:17:22Z"
-    mac: ENC[AES256_GCM,data:FOBWLylQ/0N5OPIymlHwoeJXFr0BMmagodbTRSrXQ5EekZ1XpggCX7d2ZFh9O6GFcOUWXQ93OIzaF7dO8iaUmOInzNMqKTrDx8HQ60G8zawUHNsKIXWSjQniBeFxhE79Nid3oaYap1tGqXR5kl/0JA03TGJnYEOLUHDNYjAwouU=,iv:MjniDy7ZCG5/R8n/+OAoIL4f7eGHswVNNy7+HbhNqlk=,tag:R322jRHjFdBtCfK+K9QvWQ==,type:str]
+    lastmodified: "2024-10-19T11:27:41Z"
+    mac: ENC[AES256_GCM,data:vgAB1TcIx2LjZyARcfG0RzqhcgpqWhSkHeoBpLxCSSt9I8vsh8tMYiUY2s4wTCeliyTnRCtvsE63NVdCdQJrurk/Dnq9ODeeHJy2hLKUL/qTLKkD8He6x1AhtYqXSt7oRrInG4CdPJN5G2ebt8jcYrRtzideYNqu2Asq+JI1Lb0=,iv:e9oJqlBFdrZkgvO+H6Lg7mp0c3mWYxjNBVzH0AScYUI=,tag:9w9hqTcJxdvImKMEppBoJw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.1