diff --git a/talos/README.md b/talos/README.md index 1e7dc16..8556cf5 100644 --- a/talos/README.md +++ b/talos/README.md @@ -90,6 +90,8 @@ Vist the website https://factory.talos.dev 4. System Extensions: 1. siderolabs/i915 (intel gpu drivers) 2. siderolabs/intel-ucode (intel microcode) + 3. siderolabs/iscsi-tools (necessary for longhorn) + 4. siderolabs/util-linux-tools (necessary for longhorn) 5. Customization: skip 6. Schematic Ready: Download the iso @@ -98,7 +100,7 @@ Vist the website https://factory.talos.dev # Cluster bootstrap ```bash talosctl apply-config --insecure -n 10.10.10.3 --file clusterconfig/home-cluster-talos-01.yaml -talosctl bootstrap -n 10.10.10.4 -e 10.10.10.4 --talosconfig talosconfig +talosctl bootstrap -n 10.10.10.3 -e 10.10.10.3 --talosconfig talosconfig ``` # Cilium CNI @@ -111,16 +113,23 @@ helm repo add cilium https://helm.cilium.io/ helm repo update helm install \ - cilium \ - cilium/cilium \ - --version 1.17.3 \ - --namespace kube-system \ - --set ipam.mode=kubernetes \ - --set kubeProxyReplacement=true \ - --set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \ - --set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \ - --set cgroup.autoMount.enabled=false \ - --set cgroup.hostRoot=/sys/fs/cgroup \ - --set k8sServiceHost=localhost \ - --set k8sServicePort=7445 + cilium \ + cilium/cilium \ + --version 1.17.3 \ + --namespace kube-system \ + --set ipam.mode=kubernetes \ + --set kubeProxyReplacement=true \ + --set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \ + --set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \ + --set cgroup.autoMount.enabled=false \ + --set cgroup.hostRoot=/sys/fs/cgroup \ + --set k8sServiceHost=localhost \ + --set k8sServicePort=7445 \ + --set operator.replicas=1 +``` + +```bash +# Enable and disable hubble +cilium hubble enable --ui +cilium hubble disable ``` \ No newline at end of file diff --git a/talos/talconfig.yaml b/talos/talconfig.yaml index 481a8db..d7bdd3d 100644 --- a/talos/talconfig.yaml +++ b/talos/talconfig.yaml @@ -1,10 +1,10 @@ clusterName: home-cluster -talosVersion: 1.10.0 +talosVersion: 1.10.1 kubernetesVersion: 1.33.0 -endpoint: https://10.10.10.4:6443 -domain: ${myDomainName} +endpoint: https://10.10.10.3:6443 +#domain: ${myDomainName} additionalMachineCertSans: - 10.10.10.3 @@ -27,14 +27,15 @@ nodes: nameservers: - 10.10.10.2 installDisk: /dev/nvme0n1 - userVolumes: - - name: local-storage - provisioning: - diskSelector: - match: disk.transport == "nvme" - maxSize: 500GiB - filesystem: - type: xfs + talosImageURL: factory.talos.dev/metal-installer/249d9135de54962744e917cfe654117000cba369f9152fbab9d055a00aa3664f + #userVolumes: + # - name: longhorn-block + # provisioning: + # diskSelector: + # match: disk.transport == "nvme" + # maxSize: 500GiB + # filesystem: + # type: xfs machineSpec: mode: metal arch: amd64 @@ -48,10 +49,21 @@ controlPlane: officialExtensions: - siderolabs/intel-ucode - siderolabs/i915 + - siderolabs/iscsi-tools + - siderolabs/util-linux-tools patches: - |- machine: + kubelet: + extraMounts: + - destination: /var/mnt/longhorn + type: bind + source: /var/mnt/longhorn + options: + - bind + - rshared + - rw time: servers: - 10.10.10.1