feat: added talos image + extensions

This commit is contained in:
sujiba 2025-05-08 22:56:50 +02:00
parent 5c9b55e8f9
commit 114e64c309
2 changed files with 45 additions and 24 deletions

View file

@ -90,6 +90,8 @@ Vist the website https://factory.talos.dev
4. System Extensions:
1. siderolabs/i915 (intel gpu drivers)
2. siderolabs/intel-ucode (intel microcode)
3. siderolabs/iscsi-tools (necessary for longhorn)
4. siderolabs/util-linux-tools (necessary for longhorn)
5. Customization: skip
6. Schematic Ready: Download the iso
@ -98,7 +100,7 @@ Vist the website https://factory.talos.dev
# Cluster bootstrap
```bash
talosctl apply-config --insecure -n 10.10.10.3 --file clusterconfig/home-cluster-talos-01.yaml
talosctl bootstrap -n 10.10.10.4 -e 10.10.10.4 --talosconfig talosconfig
talosctl bootstrap -n 10.10.10.3 -e 10.10.10.3 --talosconfig talosconfig
```
# Cilium CNI
@ -111,16 +113,23 @@ helm repo add cilium https://helm.cilium.io/
helm repo update
helm install \
cilium \
cilium/cilium \
--version 1.17.3 \
--namespace kube-system \
--set ipam.mode=kubernetes \
--set kubeProxyReplacement=true \
--set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
--set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
--set cgroup.autoMount.enabled=false \
--set cgroup.hostRoot=/sys/fs/cgroup \
--set k8sServiceHost=localhost \
--set k8sServicePort=7445
cilium \
cilium/cilium \
--version 1.17.3 \
--namespace kube-system \
--set ipam.mode=kubernetes \
--set kubeProxyReplacement=true \
--set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
--set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
--set cgroup.autoMount.enabled=false \
--set cgroup.hostRoot=/sys/fs/cgroup \
--set k8sServiceHost=localhost \
--set k8sServicePort=7445 \
--set operator.replicas=1
```
```bash
# Enable and disable hubble
cilium hubble enable --ui
cilium hubble disable
```