Single node talos.

2024-05-06 08:53:47 -05:00 · 2024-05-06 08:53:47 -05:00 · cee6df3964
commit cee6df3964
parent fa6372de52
2 changed files with 194 additions and 0 deletions
--- a/kubernetes/bootstrap/talos/talconfig.yaml
+++ b/kubernetes/bootstrap/talos/talconfig.yaml
@ -0,0 +1,151 @@
+---
+# yaml-language-server: $schema=https://ks.hsn.dev/talconfig.json
+clusterName: valinor
+
+talosVersion: v1.7.1
+kubernetesVersion: 1.28.4
+endpoint: "https://10.1.1.57:6443"
+
+cniConfig:
+  name: none
+
+additionalApiServerCertSans:
+  - 10.1.1.57
+
+additionalMachineCertSans:
+  - 10.1.1.57
+
+nodes:
+  - hostname: shadowfax
+    disableSearchDomain: true
+    ipAddress: 10.1.1.61
+    controlPlane: true
+    installDiskSelector:
+      busPath: /dev/nvme0n1
+    networkInterfaces:
+      - interface: eth0
+        dhcp: true
+    kernelModules:
+      - name: nvidia
+      - name: nvidia_uvm
+      - name: nvidia_drm
+      - name: nvidia_modeset
+    schematic:
+      customization:
+        systemExtensions:
+          officialExtensions:
+            - "siderolabs/amd-ucode"
+            - "siderolabs/nonfree-kmod-nvidia"
+            - "siderolabs/nvidia-container-toolkit"
+    patches:
+      - |-
+        machine:
+          sysctls:
+            net.core.bpf_jit_harden: 1
+controlPlane:
+  patches:
+     # Disable search domain everywhere
+    - |-
+      machine:
+        network:
+          disableSearchDomain: true
+
+    # Force nameserver
+    - |-
+      machine:
+        network:
+          nameservers:
+            - 10.1.1.11
+
+    # Configure NTP
+    - |-
+      machine:
+        time:
+          disabled: false
+          servers:
+            - 10.1.1.1
+
+    # Enable KubePrism
+    - |-
+      machine:
+        features:
+          kubePrism:
+            enabled: true
+            port: 7445
+
+    # Cluster configuration
+    - |-
+      cluster:
+        allowSchedulingOnMasters: true
+        proxy:
+          disabled: true
+
+    # ETCD configuration
+    - |-
+      cluster:
+        etcd:
+          advertisedSubnets:
+            - 10.1.1.0/24
+
+    # Configure containerd
+    - |-
+      machine:
+        files:
+          - op: create
+            path: /etc/cri/conf.d/20-customization.part
+            content: |
+              [plugins]
+                [plugins."io.containerd.grpc.v1.cri"]
+                  enable_unprivileged_ports = true
+                  enable_unprivileged_icmp = true
+              [plugins."io.containerd.grpc.v1.cri".containerd]
+                discard_unpacked_layers = false
+              [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
+                discard_unpacked_layers = false
+
+    # Disable default API server admission plugins.
+    - |-
+      - op: remove
+        path: /cluster/apiServer/admissionControl
+
+    # Enable K8s Talos API Access
+    - |-
+      machine:
+        features:
+          kubernetesTalosAPIAccess:
+            enabled: true
+            allowedRoles:
+              - os:admin
+            allowedKubernetesNamespaces:
+              - system-upgrade
+
+    # Kubelet configuration
+    - |-
+      machine:
+        kubelet:
+          defaultRuntimeSeccompProfileEnabled: true
+          extraArgs:
+            rotate-server-certificates: "true"
+          extraConfig:
+            maxPods: 150
+          nodeIP:
+            validSubnets:
+                - 10.1.1.0/24
+          extraMounts:
+            - destination: /var/openebs/local
+              options:
+                - bind
+                - rshared
+                - rw
+              source: /var/openebs/local
+              type: bind
+
+    # Custom sysctls
+    - |-
+      machine:
+        sysctls:
+          fs.inotify.max_queued_events: "65536"
+          fs.inotify.max_user_instances: "8192"
+          fs.inotify.max_user_watches: "524288"
+          net.core.rmem_max: "2500000"
+          net.core.wmem_max: "2500000"
--- a/kubernetes/bootstrap/talos/talsecret.sops.yaml
+++ b/kubernetes/bootstrap/talos/talsecret.sops.yaml
@ -0,0 +1,43 @@
+cluster:
+    id: xQzBnpch2gAv2do-wiy2LZiMjdW69Jh_NYDbd7F-dMY=
+    secret: /H8Aw1l3uN8RFImDU9ZG+FGIcyJTWZUUCbuQ2WHhLMk=
+secrets:
+    bootstraptoken: r5ymis.8es6fxw0obsiaacf
+    secretboxencryptionsecret: kzUeSrpBf2DBZUFNA6NBWbkibR8FzS09wbgxJxFkArY=
+trustdinfo:
+    token: j93kxh.p411ri5lum5ekqm5
+certs:
+    etcd:
+        crt: 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
+        key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU5rMUNTM1BjZWZ5dWh3UERRRDBvQ3RLbFBZODE1SVQzVkNSRXdtNTVRU3NvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFU3pWSUxDeExqK0thSlM2dTd1UXhNUzdIeSsxWXRaK0Y1UEYvN2hteVd5UHdTSkVVeXBSWgozUkFpQyt2YUQ0T2Zpa0pOQitWczNaditTOFFmUUlsSDNnPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
+    k8s:
+        crt: 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
+        key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVB5S2lJUzNMdnZnYmtSc1dCVmdnQ1d4V3puOHhoOVljMXFKS25pc09MVGNvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFRkdRaFozM2EraCtVYzRrMWZ6OHRFM1J6OVhob0NNcUZwaGZKK3FzZHdlM283dDNxSGJTZQpKYXZNM0dZeGxCVllXTEw1OXVnd3JzcFg1UHpSYWZmZGx3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
+    k8saggregator:
+        crt: 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
+        key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU4zeGorcUhBbmZ6Wm91RnhpK0RCUDJZUEQyZTBVYjBGR0lNL201L01hem1vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFVTJCaGNOZy9IYWliSmtFdWFDdFNPZnJpSlIrOXd2RHk3V1VHWmhLRkhiWkJsWkFFSTVjMwpnWU40RWtaMHNDMzNDbVNYN1hSRHdhamk1MWVoRURsUXRBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
+    k8sserviceaccount:
+        key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlKS2dJQkFBS0NBZ0VBdDlXUzV4UWpsUENGWGxoWUhmNWpwQTZYRnd2cEx2RWk0UnBsbmk2Rm9ZcXYySUJWClVPUi8vNDNIbUx6L0xtZWdJK2dnZ05oUkJZNnZUNjh6cDlRdkoxT1pJeHRzdTI1Z3pSTUpXcUI4K0pZMUNiUmwKYnJrMktCRW9JSlFMaGZhMEhEbGpTU0xIQ0h4NXdlaTYvUWZSSy91Vm00bEFBY2lmc29qc2RKbXNtaXp2Lzh2cwpjZUYzZEt2dWFUWll5SkZYdE5jdUIxM0h0azNMY3JrRTZ2QkRUMDE5aVJ1RUZKMGxTTEVIQnEzdURPei9WZitYCmdYak5wMVBRa21KZS9NTVJtbXVpelpjMU9MRXc2cHdxQzA5bEtzY005alpzRExtWW1EcDdzV0tRaHNjNkVhbTkKdHQ3UmpMbDhpVzhQOW9wcUI3aGh1aGJxR0M4ektheGRCTGhWV05wb1NTakJaT1ZMdlpZcmhvVjVuelpOZlR4aAp0RGNrVWFBcXZpanJOcDRuaEJjNURCaVdwc2dBc2s0cm9xVDBURFk0czYyUHB1VThwa2pxamNVb3pMZVVIWG5qCmo4NGQyVkQxRHRMNzVlUnlIeGlXMCtJVkJVaGt3M0tiSUhSeHVNb3Axak1zR29yeE05dVpnWmdSQ3czanJEcGQKUDRZNWY3Ymk5VFQwWi9aMXdIbWF1ZTYwbXk4NHdmWG51NlNDdFVvUVQ1UDZ6d0NoMitlaUd2Unk4Qk4yOVBrOQpiM0RiN2xxWjh0a3ZVMDltU29EV1E3ck5QTnB0Y0IvUnA0c0s3bCsrNW1YRDdaOGhRNkxYdXhQcUJPVXd0RjZ2CmlINngxcHZWNGdIRWtFNGM5M0VvN0s1UFB2b1l1bUg1cGhxMXVuMzVHQ3FXUFR6YjR3NWk5U2FYbUswQ0F3RUEKQVFLQ0FnRUFnNHVnZ3hvMkcrM0FnYkpWMjZDZFRGZmtaZWx3QXRjcVRrbkZUVnVjNCt1SnlUS0wya2FvRVFZegpQV2lBY1lSVlkxeEhaZXRranNWN1RWbmhiTWE0dHp0cTZXUkdlaGlSekMxREZFYWpKbjdWbFF3eFNQbmZkdXhQCituLzFmdmI2Q3ZoRnc1L1BMSk5selF2c1FnUEYrZU1kT3g4TFhqdGhpeS9QZytBelVsKzFuU1VmSEo1cURHSzcKUnk1TWVia0hPYkNBajJUYjgrZlhIVkNuNURYbzlHWk8zajJDVmYzZElCY05JQXAxdldvWmpFQkkrYXluL0lSTgpTM0o0NWdYd0lyL0N6N3JUcXEyZ2cwRWNGTnZMV01EMjFYZzcrUjhWd2xpWENtZXRZOFJNR1RlTk9iNVgxSXNtClFuSG15bFJoYXdUVmFZUGNIMUluR2pyc2xPUVNyVHVpTVVsUEkvRnp6NUtiWnNBZC8xd0Yxa2VjalU3bDlmQ28KZXUzeDJGc2t2VjN0aXhxRE9XYi9TOXhrb3d2VDNqOGdldzZabC9aWEFKTVhCRTQyRUYydTFzYXk1MmlZRnZCdgpXUSt1RVNLbEprMVUrUVg2TFpCTStsR2tpeHg4bnR3Z1E5dkkxMlcra0l3Umc4UVlmMW9ud3BqR01xTWdNYVRHCkZTelR6WFUvaStKdWhpR1dPNWJJdkhWVXNsRVBHcjJndHRUeHpndWVxNTRoWEJ5empVR01lTmd1ZjIyTXpSMm0KS0tNVjB0cVE5SGcxN2pnOS9aYkFzN1QvOHkxVUdJZ3VBbzByNFBUZml3cUdSNGlRRndrckJ1cWloQkx0QUlaMQpoY0ZmNTY1SUNaNkNJa1dkR1JtWXNOb1JUT2tnWmRDb0JEVFNhUHVSREx5Q2RyNWZIMEVDZ2dFQkFOZDFyM2xECjBock5nMjJQb2RWQm5mQXBxbDNuQUdic1dKWGdMU0cvdTRuU05jbXpoM1AyNUFBK0ZscmI3emhJb1hCUVp5Tk0KZC9UeWNoajhZNG4yTktjL2FtVm1oeEJSSEN5cXVZSWl4M0twLzNjT1d5L0t4OWc4cUN1ekU3MTV3MmpqMk9ONgpUOElTTFpRaTRHWmRDaERibXZTZWw2L3dpYjNsbmVkd0Y4K0I1THQ2MzUyNG9iNElsVTlhek1rVG9ibmc4a2ZnCjY2dTllTDNXd3JENFB6TE4xTjdyK01nYXByUkxOSlpVQUZwa2o0ZnN1T0c4TDk2ZXRSYzZhazVRbFZWN0ZqVlcKMHlKcGRUcEJvWUhEVDYzUC9qa2x5U0lYNWUvM1lmc2ltcUtoeFcwa0hOY3c4eDVPZ2NRRE5HeWpLUlRtOXlvdQprd2tYY05iS3RTYUZ4SHNDZ2dFQkFOcHNpLzlScDcvNFBSZmQzM2pudllkeGk3TDNxWWdrdXlweEc4ZWFNa0NoCnJ4QThNRkJaRkdPMHRNZDJlOTlRS2pCaWIyVUhmaWlMUEczOVBCdWNTU3hmUGx4UmRmR1lyM2hIZkltclFvTk4KbnZaZVFDQlMzaGN2VEVpU2VOYTRES2NRaVVGTkViYlluVHhjRkJzYUZvd2xoUDk1UGwwMmw4cGszK1BmQVdoTgpCMUROY1Q0NXZhRUhNWGNIc2NZRy9NamxHV2JIMjN3Z2NIVHMxQW0vZGxTWkZjVmhxdWxTVEF3TEd5U09zVWpWCm9MZzQ1cjNzZ29VMHhzc3JVN0x6RnBmUGx1dENmWjNSWmVSdUxGc1ZnTzlsZzg1K1ptcnJhVndCWHN4WU1ZSlkKTnlJV2MyUFVmOHBtS0VUY285aEdCTEpHZ2ZmNzVZVEVJNGtBaE5KRk12Y0NnZ0VCQU5HU1ZRWDg0K2JTTTU1ago4U08vV1dKN0JJMmwzWXcvSThOVWRGRzVieThWV3VCQVVlYUlKU25mT2x0U1JoTlhBa0IrMUhOUE0vYjd3K050Cnkxd3NNUGJsQmhadmJieC9TSXBoM1dNcGRScWhKQzJudHlaN2RYdHROSjZjNXZ5TDdYaWU5eDM4b0l2Q3ByYksKWGI3empKRHRLb0g1cU0ybmlETS9ueUc0dEZCUXBpMTl6UGhhMkdoQmJRbnM1ZmhIc2kxZEVneThTRCthWWxFMQpEZGFaQU0vbnljQ3pnaDhSWFVsTlJXOWJjYVI2MytsMFpqaWJsV3hTcnc1UzhZZ1BkZEhaa2JaOEo0MzNTZUZLCmFWQVFxL1lDcytMZVVBOXJjMnJBRTN2MUlyaEI1Z2pNOFlpV3drT2VWVFpWYjY2ajNaZkpPR3k5TktQSk95YVIKc1RZeE12VUNnZ0VBTUFRaXRvcjF6STYrcDJ0Ly8rMDV6ZmVaRlV1NmVoSlJEdUIwa2VtRTJJNXlsS2dXbXVNcQpSMHpuWE4zZ0YxUmhJZWZSd3l6bGYvWXozNTRHdzY4VXF1dDVJd1JKWUVZSGRQS0tIeDJGN3FWMnA0UktwcEJ4CkFEbkdsRUdXek9VQzZ3c0lrVkZtN29JcDlxWHJTWlh2bFBsK2hrYlovZFhOZ3BHd1lrQ1k1NXZmV3RUKzZ3WDQKZU5qQzkvNjZCdVZzVnFGK2R3akNhRVFkVktibmFna3I4eWNBRVRjS1FtWjBEMFcxdnRDYmluNWo2WHVneGVtagpPN05CYkZKbkFQVE5aNndiNmpYZ3RYdmQ0VnlTNWFjUmhBOFY3YVA5MGMxVWlRUklHYlhkbEdEZUplRTNscCtWClJDSTNBZ1JiQkdWSURRVFE5M25wbDhraVlyQzVnaHZ5T3dLQ0FRRUF5SmRmbmhwcitQeklnWndpNkQzY0lKODgKdGd5eUxJNDlSalg0MzZKSDBjbWJNQzY1a1Q1UlVKdGw4OTF4OWs5ZDJ3dGViV1FueEpWZGx6L2tUMjFXcVRFLwpWU2NLeDgxWmZCTno5dHk1ZzJDRHBaRXFSYm0wOWQ1d0lkZzh3VGVsdFlaNzRaeU10L0VXTXQ5TlFsRDJSM25NCnozcDVSQ1RjcWJHeHdZNzN3VU0zRlZQcENHeExtblZJcU9LVTc0SHlQNGxWMFdESFo5Unk5WkdKVlNJSXZJZmkKMktTT3BGSVFNMG1nUWdrdCtqa0I2Tm9qNlNsV1FEU0lTL0ZtUkNoTEQyTVY5SDQxYldCVGVPL0Qvd3V4ZFV6egpPTjJvZnROY3pNTGcvbU1FbUcza0MrUGtKcXV1NXJQSmpXWFN0OU9rL05aUy84ZkV2RXI2NlZGeE9BOGpHQT09Ci0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==
+    os:
+        crt: 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
+        key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJUEJiRE1BTnR2ZXJ5b3g5Vy8vTEVPT3ZRMU50RXdiUjBEQ2hjL3Q4cE0xUAotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1eqlaq205y5jre9hu5hvulywa7w3d4qyxwmafneamxcn7nejesedsf4q9g6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEaFY4NWwyL2VKdjdYNmtU
+            RWZmQU9SWktwdkhpWTZIVFVjUkx2eGVnR2wwCnJkbVhBYlZ6WGJwS2J4T2JsTkth
+            Qk1uWUVOZDZZc082ajE5NzArTDA4amsKLS0tIDFKRFZ4VlBmR1Yvbmd4TmZJMTl2
+            VHRBQytXQkhKSDhXaVFMTVEwR1NoUE0KzHx4ouu6El8KQDkpLEalLA2Wuci9vWJb
+            n0by9z/HTCdvaQcv+39kbxvdUnXgorwyIOl/jsBgzkSBHnM9yh+vMA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-05-06T12:43:10Z"
+    mac: ENC[AES256_GCM,data:hh0xEGfMCtq0HUA1rX1Dt0QBDyOnRfbBwPHSkKVoUwQHL79+uEVcam460KUK2TxH+hK+VtkKY2PGDmUaEox+ubXcufZl4gQD51F0/3zvse4lVHTSfiR/bodpf1Hf7EEaETk6Bt+G39JWDA2Q4TG6TVWMCUYEo2mNeMo0MarfYrY=,iv:Q10pXuuOeJ//uAxIAgGReRhQvrMxAnaK6CbmVOjGa5M=,tag:++L3r9mSNERHw7MqzJ7baw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1