This repository has been archived on 2024-02-11. You can view files and clone it, but cannot push or open issues or pull requests.
valinor/talos/talconfig.yaml

264 lines
7.3 KiB
YAML
Raw Normal View History

2023-09-25 19:21:40 -05:00
---
2023-11-20 16:23:36 -06:00
clusterName: valinor
2023-09-25 19:21:40 -05:00
talosVersion: v1.6.1
kubernetesVersion: 1.28.4
2023-12-10 16:36:38 -06:00
endpoint: "https://${clusterEndpointIP}:6443"
2023-09-25 19:21:40 -05:00
cniConfig:
name: none
additionalApiServerCertSans:
2023-12-10 16:36:38 -06:00
- ${clusterEndpointIP}
2023-09-25 19:21:40 -05:00
additionalMachineCertSans:
2023-12-10 16:36:38 -06:00
- ${clusterEndpointIP}
2023-09-25 19:21:40 -05:00
2023-12-19 22:00:14 -06:00
imageFactory:
2023-12-19 23:02:45 -06:00
registryURL: factory.talos.dev
2023-12-19 22:00:14 -06:00
schematicEndpoint: /schematics
protocol: https
installerURLTmpl: "{{.RegistryURL}}/installer/{{.ID}}:{{.Version}}"
ISOURLTmpl: "{{.Protocol}}://{{.RegistryURL}}/image/{{.ID}}/{{.Version}}/{{.Mode}}-{{.Arch}}.iso"
2023-09-25 19:21:40 -05:00
nodes:
2023-11-20 16:23:36 -06:00
# cloud CAX21 Arm64
2023-12-12 13:11:52 -06:00
- hostname: arlen
2023-09-25 19:21:40 -05:00
disableSearchDomain: true
2023-12-12 13:11:52 -06:00
ipAddress: ${arlenIP}
2023-09-25 19:21:40 -05:00
controlPlane: true
installDiskSelector:
2023-09-26 10:15:35 -05:00
busPath: /dev/sda
2023-09-25 19:21:40 -05:00
networkInterfaces:
- interface: eth0
dhcp: true
2023-12-12 13:11:52 -06:00
- interface: eth1
dhcp: true
routes:
- network: 10.2.0.0/16
gateway: 10.2.0.1 # The route's gateway (if empty, creates link scope route).
metric: 2048
2023-11-20 16:23:36 -06:00
# cloud CAX21 Arm64
2023-12-12 13:11:52 -06:00
- hostname: eonwe
2023-09-25 19:21:40 -05:00
disableSearchDomain: true
2023-12-12 13:11:52 -06:00
ipAddress: ${eonweIP}
2023-09-25 19:21:40 -05:00
controlPlane: true
installDiskSelector:
2023-09-26 10:15:35 -05:00
busPath: /dev/sda
2023-09-25 19:21:40 -05:00
networkInterfaces:
- interface: eth0
dhcp: true
2023-12-12 13:11:52 -06:00
- interface: eth1
dhcp: true
routes:
- network: 10.2.0.0/16
gateway: 10.2.0.1 # The route's gateway (if empty, creates link scope route).
metric: 2048
2023-11-20 16:23:36 -06:00
# cloud CAX21 Arm64
2023-12-12 13:11:52 -06:00
- hostname: aule
2023-09-25 19:21:40 -05:00
disableSearchDomain: true
2023-12-12 13:11:52 -06:00
ipAddress: ${auleIP}
2023-09-25 19:21:40 -05:00
controlPlane: true
installDiskSelector:
2023-09-26 10:15:35 -05:00
busPath: /dev/sda
2023-09-25 19:21:40 -05:00
networkInterfaces:
- interface: eth0
dhcp: true
2023-12-12 13:11:52 -06:00
- interface: eth1
dhcp: true
routes:
- network: 10.2.0.0/16
gateway: 10.2.0.1 # The route's gateway (if empty, creates link scope route).
metric: 2048
2023-12-19 22:00:14 -06:00
# VM AX41-Nvme - AMD Ryzen 5 3600 6-Core Processor (Zen2) - 64GB ECC RAM
- hostname: nienna
2023-10-02 12:27:07 -05:00
disableSearchDomain: true
2023-12-10 16:36:38 -06:00
ipAddress: ${niennaIP}
2023-10-02 12:27:07 -05:00
controlPlane: false
2023-12-19 22:00:14 -06:00
schematic:
customization:
extraKernelArgs:
- net.ifnames=0
systemExtensions:
officialExtensions:
- siderolabs/amd-ucode
2023-10-02 12:27:07 -05:00
installDiskSelector:
2023-12-30 13:52:46 -06:00
busPath: /pci0000:00/0000:00:03.1/0000:27:00.0/nvme/nvme0/nvme0n1
2023-10-02 12:27:07 -05:00
networkInterfaces:
- interface: eth0
2023-12-12 13:11:52 -06:00
dhcp: false
2023-12-30 13:52:46 -06:00
- interface: eth1
dhcp: true
2023-12-12 13:11:52 -06:00
vlans:
- vlanId: 4010
mtu: 1450
2023-12-12 13:11:52 -06:00
addresses:
- 10.2.1.2/24
dhcp: false
routes:
- network: 10.2.0.0/16
gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route).
metric: 2048
2023-12-30 13:52:46 -06:00
- interface: eth2
dhcp: false
2023-12-19 22:00:14 -06:00
# VM AX41-Nvme - AMD Ryzen 5 3600 6-Core Processor (Zen2) - 64GB ECC RAM
- hostname: nessa
disableSearchDomain: true
ipAddress: ${nessaIP}
controlPlane: false
schematic:
customization:
extraKernelArgs:
- net.ifnames=0
systemExtensions:
officialExtensions:
- siderolabs/amd-ucode
installDiskSelector:
2023-12-31 15:32:43 -06:00
busPath: /pci0000:00/0000:00:01.3/0000:03:00.1/ata2/host1/target1:0:0/1:0:0:0/
2023-12-19 22:00:14 -06:00
networkInterfaces:
- interface: eth0
dhcp: false
2023-12-31 15:32:43 -06:00
- interface: eth1
dhcp: true
2023-12-19 22:00:14 -06:00
vlans:
- vlanId: 4010
mtu: 1450
2023-12-19 22:00:14 -06:00
addresses:
- 10.2.1.4/24
dhcp: false
routes:
- network: 10.2.0.0/16
gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route).
metric: 2048
2023-12-31 15:32:43 -06:00
- interface: eth2
dhcp: false
2023-12-02 00:07:50 -06:00
# VM on EX44 - Intel Gen 13 (Raptor Lake) - 64GB RAM
- hostname: orome
disableSearchDomain: true
2023-12-10 16:36:38 -06:00
ipAddress: ${oromeIP}
2023-12-02 00:07:50 -06:00
controlPlane: false
2023-12-19 22:00:14 -06:00
schematic:
customization:
extraKernelArgs:
- net.ifnames=0
systemExtensions:
officialExtensions:
- siderolabs/i915-ucode
- siderolabs/intel-ucode
- siderolabs/qemu-guest-agent
2023-12-02 00:07:50 -06:00
installDiskSelector:
2023-12-03 15:49:26 -06:00
busPath: /pci0000:00/0000:00:0a.0/virtio2/
2023-12-02 00:07:50 -06:00
networkInterfaces:
- interface: eth0
dhcp: true
2023-12-12 13:11:52 -06:00
- interface: eth1
dhcp: false
vlans:
- vlanId: 4010
mtu: 1450
2023-12-12 13:11:52 -06:00
addresses:
- 10.2.1.3/24
dhcp: false
routes:
- network: 10.2.0.0/16
gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route).
metric: 2048
2023-11-20 16:23:36 -06:00
worker:
patches:
- |-
cluster:
externalCloudProvider:
enabled: true
manifests:
- https://github.com/hetznercloud/hcloud-cloud-controller-manager/releases/latest/download/ccm.yaml
2023-11-20 16:23:36 -06:00
machine:
sysctls:
fs.inotify.max_user_watches: "1048576"
fs.inotify.max_user_instances: "8192"
time:
disabled: false
servers:
- ntp.hetzner.com
kubelet:
extraArgs:
feature-gates: CronJobTimeZone=true,GracefulNodeShutdown=true,NewVolumeManagerReconstruction=false
rotate-server-certificates: "true"
extraConfig:
maxPods: 150
2023-12-12 13:11:52 -06:00
nodeIP:
validSubnets:
- 10.2.0.0/16
registries:
mirrors:
docker.io:
endpoints:
- http://harbor.hsn.dev/v2/docker.io
overridePath: true
ghcr.io:
endpoints:
- http://harbor.hsn.dev/v2/ghcr.io
overridePath: true
2023-09-25 19:21:40 -05:00
controlPlane:
patches:
- |-
cluster:
allowSchedulingOnMasters: true
externalCloudProvider:
enabled: true
manifests:
- https://github.com/hetznercloud/hcloud-cloud-controller-manager/releases/latest/download/ccm.yaml
2023-09-26 16:33:24 -05:00
network:
cni:
name: none
2023-09-25 19:21:40 -05:00
proxy:
disabled: true
2023-12-12 13:11:52 -06:00
etcd:
advertisedSubnets:
- 10.2.0.0/24
2023-09-25 19:21:40 -05:00
- |-
- op: remove
path: /cluster/apiServer/admissionControl
- |-
machine:
2023-09-26 16:33:24 -05:00
features:
kubePrism:
enabled: true
port: 7445
2023-12-12 13:11:52 -06:00
registries:
mirrors:
docker.io:
endpoints:
- http://harbor.hsn.dev/v2/docker.io
overridePath: true
ghcr.io:
endpoints:
- http://harbor.hsn.dev/v2/ghcr.io
overridePath: true
2023-09-26 16:33:24 -05:00
2023-09-25 19:21:40 -05:00
files:
- op: create
path: /etc/cri/conf.d/20-customization.part
content: |
[plugins]
[plugins."io.containerd.grpc.v1.cri"]
enable_unprivileged_ports = true
enable_unprivileged_icmp = true
kubelet:
extraArgs:
feature-gates: CronJobTimeZone=true,GracefulNodeShutdown=true,NewVolumeManagerReconstruction=false
rotate-server-certificates: "true"
extraConfig:
maxPods: 150
2023-12-12 13:11:52 -06:00
nodeIP:
validSubnets:
- 10.2.0.0/16
2023-09-25 19:21:40 -05:00
sysctls:
fs.inotify.max_user_watches: "1048576"
fs.inotify.max_user_instances: "8192"
time:
disabled: false
servers:
- ntp.hetzner.com