auricom-home-cluster/kubernetes/talos

Talos Linux cluster

... managed with Talhelper 🤖

:book:  Overview

This directory contains my Talos Kubernetes cluster in declarative state. I use my own tool Talhelper to create the machineconfig files of all my nodes. The secrets are encrypted with SOPS.

Feel free to open a Github issue if you have any questions.

---

:scroll:  How to apply

1. Prepare your nodes with Talos Linux
2. Install talhelper.
3. Create your own talconfig.yaml.
4. Run talhelper gensecret > talsecret.sops.yaml if you don't have machineconfig before or talhelper gensecret -f <your-machineconfig.yaml> > talsecret.sops.yaml if you already have one.
5. Run sops -e -i talsecret.sops.yaml to encrypt your secrets (make sure you already have your own .sops.yaml) file.
6. Run talhelper genconfig and the files will be generated in ./clusterconfig directory by default.
7. Copy the generated ./clusterconfig/talosconfig to your ~/.talos/config.
8. Run talosctl -n <node-ip> apply-config --insecure --file ./clusterconfig/<clustername>-<hostname>.yaml on each of your node. Don't forget to run talosctl -n <node-ip> bootstrap on one of your controlplane node.
9. Push your current directory to your git repository of choice. 😉

Upgrading talos

1. Get image hash from Talos Factory
2. Execute talosctl upgrade -n <IP> --image=factory.talos.dev/installer/<image_hash>:<semver>