214 lines
6.4 KiB
YAML
214 lines
6.4 KiB
YAML
---
|
|
clusterName: valinor
|
|
|
|
talosVersion: v1.5.5
|
|
kubernetesVersion: 1.28.4
|
|
endpoint: "https://10.2.0.3:6443"
|
|
|
|
cniConfig:
|
|
name: none
|
|
|
|
additionalApiServerCertSans:
|
|
- 10.2.0.3
|
|
|
|
additionalMachineCertSans:
|
|
- 10.2.0.3
|
|
|
|
nodes:
|
|
# cloud CAX21 Arm64
|
|
- hostname: aule
|
|
disableSearchDomain: true
|
|
ipAddress: 10.2.0.4
|
|
controlPlane: true
|
|
installDiskSelector:
|
|
busPath: /dev/sda
|
|
networkInterfaces:
|
|
- interface: eth0
|
|
dhcp: true
|
|
- interface: eth1
|
|
dhcp: true
|
|
routes:
|
|
- network: 10.2.0.0/16
|
|
gateway: 10.2.0.1 # The route's gateway (if empty, creates link scope route).
|
|
metric: 2048
|
|
# cloud CAX21 Arm64
|
|
- hostname: arlen
|
|
disableSearchDomain: true
|
|
ipAddress: 10.2.0.5
|
|
controlPlane: true
|
|
installDiskSelector:
|
|
busPath: /dev/sda
|
|
networkInterfaces:
|
|
- interface: eth0
|
|
dhcp: true
|
|
- interface: eth1
|
|
dhcp: true
|
|
routes:
|
|
- network: 10.2.0.0/16
|
|
gateway: 10.2.0.1 # The route's gateway (if empty, creates link scope route).
|
|
metric: 2048
|
|
# cloud CAX21 Arm64
|
|
- hostname: eonwe
|
|
disableSearchDomain: true
|
|
ipAddress: 10.2.0.6
|
|
controlPlane: true
|
|
installDiskSelector:
|
|
busPath: /dev/sda
|
|
networkInterfaces:
|
|
- interface: eth0
|
|
dhcp: true
|
|
- interface: eth1
|
|
dhcp: true
|
|
routes:
|
|
- network: 10.2.0.0/16
|
|
gateway: 10.2.0.1 # The route's gateway (if empty, creates link scope route).
|
|
metric: 2048
|
|
# Bare-metal AX41-Nvme - AMD Ryzen 5 3600 6-Core Processor (Zen2) - 64GB ECC RAM
|
|
- hostname: nienna
|
|
disableSearchDomain: true
|
|
ipAddress: 10.2.1.2
|
|
controlPlane: false
|
|
# customization:
|
|
# extraKernelArgs:
|
|
# - net.ifnames=0
|
|
# systemExtensions:
|
|
# officialExtensions:
|
|
# - siderolabs/amd-ucode
|
|
# - siderolabs/qemu-guest-agent
|
|
talosImageURL: factory.talos.dev/installer/696bb48d9c48e567596f393a4ff9bfd26d4dda5d92c16beb580e96fa68d6324c
|
|
# https://factory.talos.dev/image/696bb48d9c48e567596f393a4ff9bfd26d4dda5d92c16beb580e96fa68d6324c/v1.5.5/metal-amd64.iso
|
|
# no guest agent in the raw.xz image
|
|
# https://factory.talos.dev/image/6c789e7a3eec37617fd9d239a7f696ba48e75bc4780f5cb30bf8882686d79a22/v1.5.5/metal-amd64.raw.xz
|
|
installDiskSelector:
|
|
busPath: /pci0000:00/0000:00:0a.0/virtio2/
|
|
# Ceph Disk Fast: /pci0000:00/0000:00:11.0/nvme/nvme0/nvme0n1
|
|
# Ceph Disk Large: /pci0000:00/0000:00:10.0/ata1/host0/target0:0:0/0:0:0:0/
|
|
networkInterfaces:
|
|
- interface: eth0
|
|
dhcp: true
|
|
- interface: eth1
|
|
dhcp: false
|
|
vlans:
|
|
- vlanId: 4010
|
|
mtu: 1400
|
|
addresses:
|
|
- 10.2.1.2/24
|
|
dhcp: false
|
|
routes:
|
|
- network: 10.2.0.0/16
|
|
gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route).
|
|
metric: 2048
|
|
# VM on EX44 - Intel Gen 13 (Raptor Lake) - 64GB RAM
|
|
- hostname: orome
|
|
disableSearchDomain: true
|
|
ipAddress: 10.2.1.3
|
|
controlPlane: false
|
|
# customization:
|
|
# extraKernelArgs:
|
|
# - net.ifnames=0
|
|
# systemExtensions:
|
|
# officialExtensions:
|
|
# - siderolabs/i915-ucode
|
|
# - siderolabs/intel-ucode
|
|
# - siderolabs/qemu-guest-agent
|
|
talosImageURL: factory.talos.dev/installer/f2f665587318c2d79e7b315cc333fff276ed59c8de831f16e28b4db107496ac2
|
|
# https://factory.talos.dev/image/f2f665587318c2d79e7b315cc333fff276ed59c8de831f16e28b4db107496ac2/metal-amd64.iso
|
|
installDiskSelector:
|
|
busPath: /pci0000:00/0000:00:0a.0/virtio2/
|
|
# Ceph Disk: /dev/disk/by-id/nvme-SAMSUNG_MZVL2512HCJQ-00B00_S675NU0TB36132
|
|
networkInterfaces:
|
|
- interface: eth0
|
|
dhcp: true
|
|
- interface: eth1
|
|
dhcp: false
|
|
vlans:
|
|
- vlanId: 4010
|
|
mtu: 1400
|
|
addresses:
|
|
- 10.2.1.3/24
|
|
dhcp: false
|
|
routes:
|
|
- network: 10.2.0.0/16
|
|
gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route).
|
|
metric: 2048
|
|
worker:
|
|
patches:
|
|
- |-
|
|
cluster:
|
|
externalCloudProvider:
|
|
enabled: true
|
|
manifests:
|
|
- https://github.com/hetznercloud/hcloud-cloud-controller-manager/releases/latest/download/ccm.yaml
|
|
machine:
|
|
sysctls:
|
|
fs.inotify.max_user_watches: "1048576"
|
|
fs.inotify.max_user_instances: "8192"
|
|
time:
|
|
disabled: false
|
|
servers:
|
|
- ntp.hetzner.com
|
|
kubelet:
|
|
extraArgs:
|
|
feature-gates: CronJobTimeZone=true,GracefulNodeShutdown=true,NewVolumeManagerReconstruction=false
|
|
rotate-server-certificates: "true"
|
|
extraConfig:
|
|
maxPods: 150
|
|
nodeIP:
|
|
validSubnets:
|
|
- 10.2.0.0/16
|
|
controlPlane:
|
|
patches:
|
|
- |-
|
|
cluster:
|
|
allowSchedulingOnMasters: true
|
|
externalCloudProvider:
|
|
enabled: true
|
|
manifests:
|
|
- https://github.com/hetznercloud/hcloud-cloud-controller-manager/releases/latest/download/ccm.yaml
|
|
network:
|
|
cni:
|
|
name: none
|
|
proxy:
|
|
disabled: true
|
|
etcd:
|
|
advertisedSubnets:
|
|
- 10.2.0.0/24
|
|
|
|
- |-
|
|
- op: remove
|
|
path: /cluster/apiServer/admissionControl
|
|
|
|
- |-
|
|
machine:
|
|
features:
|
|
kubePrism:
|
|
enabled: true
|
|
port: 7445
|
|
|
|
files:
|
|
- op: create
|
|
path: /etc/cri/conf.d/20-customization.part
|
|
content: |
|
|
[plugins]
|
|
[plugins."io.containerd.grpc.v1.cri"]
|
|
enable_unprivileged_ports = true
|
|
enable_unprivileged_icmp = true
|
|
kubelet:
|
|
extraArgs:
|
|
feature-gates: CronJobTimeZone=true,GracefulNodeShutdown=true,NewVolumeManagerReconstruction=false
|
|
rotate-server-certificates: "true"
|
|
extraConfig:
|
|
maxPods: 150
|
|
nodeIP:
|
|
validSubnets:
|
|
- 10.2.0.0/16
|
|
network:
|
|
extraHostEntries:
|
|
- ip: 10.2.0.3
|
|
sysctls:
|
|
fs.inotify.max_user_watches: "1048576"
|
|
fs.inotify.max_user_instances: "8192"
|
|
time:
|
|
disabled: false
|
|
servers:
|
|
- ntp.hetzner.com
|