⬆️ Update kubernetes to 1.31

README.md

@@ -13,7 +13,7 @@
 <div align="center">
 
 [![Discord](https://img.shields.io/discord/673534664354430999?style=for-the-badge&label&logo=discord&logoColor=white&color=blue)](https://discord.gg/k8s-at-home)
-[![Kubernetes](https://img.shields.io/badge/v1.30-blue?style=for-the-badge&logo=kubernetes&logoColor=white)](https://talos.dev/)
+[![Kubernetes](https://img.shields.io/badge/v1.31-blue?style=for-the-badge&logo=kubernetes&logoColor=white)](https://talos.dev/)
 [![Renovate](https://img.shields.io/github/actions/workflow/status/auricom/home-ops/renovate.yaml?branch=main&label=&logo=renovatebot&style=for-the-badge&color=blue)](https://github.com/auricom/home-ops/actions/workflows/renovate.yaml)
 
 </div>

kubernetes/talos/cluster-0/talconfig.yaml

@@ -6,18 +6,17 @@
 
 clusterName: cluster-0
 
-# renovate: depName=ghcr.io/buroa/installer datasource=docker
+# renovate: datasource=docker depName=ghcr.io/siderolabs/installer
-talosVersion: v1.7.6
+talosVersion: v1.8.1
-# renovate: depName=ghcr.io/siderolabs/kubelet datasource=docker
+# renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-kubernetesVersion: v1.30.2
+kubernetesVersion: v1.31.1
-endpoint: https://cluster-0.${domainName}:6443
+endpoint: https://cluster-0.${internalDomain}:6443
 allowSchedulingOnMasters: true
 cniConfig:
   name: none
 
 additionalApiServerCertSans: &san
   - ${clusterEndpointIP}
-  - https://cluster-0.${domainName}:6443
   - https://cluster-0.${internalDomain}:6443
   - 127.0.0.1 # KubePrism
 
@@ -37,6 +36,10 @@ patches:
               - rw
 
 nodes:
+  - hostname: talos-node-1
+    ipAddress: 192.168.9.101
+    controlPlane: false
+    installDisk: /dev/nvme0n1
   - hostname: talos-node-2
     ipAddress: 192.168.9.102
     controlPlane: true
@@ -57,8 +60,9 @@ controlPlane:
         - net.ifnames=0
       systemExtensions:
         officialExtensions:
-          - siderolabs/intel-ucode
           - siderolabs/i915-ucode
+          - siderolabs/intel-ucode
+          - siderolabs/mei
 
   patches:
     # Disable search domain everywhere
@@ -67,6 +71,15 @@ controlPlane:
         network:
           disableSearchDomain: true
 
+    # Disable Host DNS
+    - |-
+      machine:
+        features:
+          hostDNS:
+            enabled: true
+            resolveMemberNames: true
+            forwardKubeDNSToHost: false
+
     # Configure NTP
     - |-
       machine:
@@ -90,7 +103,7 @@ controlPlane:
           extraHostEntries:
             - ip: ${clusterEndpointIP}
               aliases:
-                - cluster-0.${domainName}
+                - cluster-0.${internalDomain}
 
     # Cluster configuration
     - |-
@@ -129,8 +142,11 @@ controlPlane:
     - |-
       machine:
         sysctls:
-          fs.inotify.max_user_watches: "1048576"
+          fs.inotify.max_queued_events: "65536"
           fs.inotify.max_user_instances: "8192"
+          fs.inotify.max_user_watches: "524288"
+          net.core.rmem_max: "7500000"
+          net.core.wmem_max: "7500000"
 
     # Redirect logs
     # - |-

kubernetes/talos/cluster-0/talenv.sops.yaml

@@ -1,4 +1,3 @@
-domainName: ENC[AES256_GCM,data:hiV44QNvh2cTS4w=,iv:ipIrMnmZoEzJqTquHjbqOKmCzIXUK8YfvdthiRenqhY=,tag:iUgHayWCMho+/TuItXjX0g==,type:str]
 clusterEndpointIP: ENC[AES256_GCM,data:6Ual1ymP6c+F7FUCdw==,iv:h2n4l/oAN9tmUmJ7ZJVvalMyAwSVbIH+T9QehbRBmvk=,tag:zCjee63afjbyBGz3+qn22Q==,type:str]
 internalDomain: ENC[AES256_GCM,data:NIGuitKoGqshzg==,iv:TDHdUAv6BUlyE1KBQumQN9wZpGfWwBDtSWdBpO6GlmI=,tag:WkAAD7cLLf/gxIFLJvRatg==,type:str]
 sops:
@@ -16,8 +15,8 @@ sops:
             QXZCejNUNG5IbnJUb2dzU1lvbFNiYUkKm2TnIcxEM14wKgvfa/rDb/mB4oJt++g6
             AortgmCcD6DvdNEvbNXeXUaYhnxF5Vpzi5+B1bEwB1WnBMSKSYhKkw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-14T00:17:22Z"
+    lastmodified: "2024-10-19T11:27:41Z"
-    mac: ENC[AES256_GCM,data:FOBWLylQ/0N5OPIymlHwoeJXFr0BMmagodbTRSrXQ5EekZ1XpggCX7d2ZFh9O6GFcOUWXQ93OIzaF7dO8iaUmOInzNMqKTrDx8HQ60G8zawUHNsKIXWSjQniBeFxhE79Nid3oaYap1tGqXR5kl/0JA03TGJnYEOLUHDNYjAwouU=,iv:MjniDy7ZCG5/R8n/+OAoIL4f7eGHswVNNy7+HbhNqlk=,tag:R322jRHjFdBtCfK+K9QvWQ==,type:str]
+    mac: ENC[AES256_GCM,data:vgAB1TcIx2LjZyARcfG0RzqhcgpqWhSkHeoBpLxCSSt9I8vsh8tMYiUY2s4wTCeliyTnRCtvsE63NVdCdQJrurk/Dnq9ODeeHJy2hLKUL/qTLKkD8He6x1AhtYqXSt7oRrInG4CdPJN5G2ebt8jcYrRtzideYNqu2Asq+JI1Lb0=,iv:e9oJqlBFdrZkgvO+H6Lg7mp0c3mWYxjNBVzH0AScYUI=,tag:9w9hqTcJxdvImKMEppBoJw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.1