feat: added talos image + extensions
This commit is contained in:
parent
5c9b55e8f9
commit
114e64c309
2 changed files with 45 additions and 24 deletions
|
@ -90,6 +90,8 @@ Vist the website https://factory.talos.dev
|
|||
4. System Extensions:
|
||||
1. siderolabs/i915 (intel gpu drivers)
|
||||
2. siderolabs/intel-ucode (intel microcode)
|
||||
3. siderolabs/iscsi-tools (necessary for longhorn)
|
||||
4. siderolabs/util-linux-tools (necessary for longhorn)
|
||||
5. Customization: skip
|
||||
6. Schematic Ready: Download the iso
|
||||
|
||||
|
@ -98,7 +100,7 @@ Vist the website https://factory.talos.dev
|
|||
# Cluster bootstrap
|
||||
```bash
|
||||
talosctl apply-config --insecure -n 10.10.10.3 --file clusterconfig/home-cluster-talos-01.yaml
|
||||
talosctl bootstrap -n 10.10.10.4 -e 10.10.10.4 --talosconfig talosconfig
|
||||
talosctl bootstrap -n 10.10.10.3 -e 10.10.10.3 --talosconfig talosconfig
|
||||
```
|
||||
|
||||
# Cilium CNI
|
||||
|
@ -111,16 +113,23 @@ helm repo add cilium https://helm.cilium.io/
|
|||
helm repo update
|
||||
|
||||
helm install \
|
||||
cilium \
|
||||
cilium/cilium \
|
||||
--version 1.17.3 \
|
||||
--namespace kube-system \
|
||||
--set ipam.mode=kubernetes \
|
||||
--set kubeProxyReplacement=true \
|
||||
--set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
|
||||
--set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
|
||||
--set cgroup.autoMount.enabled=false \
|
||||
--set cgroup.hostRoot=/sys/fs/cgroup \
|
||||
--set k8sServiceHost=localhost \
|
||||
--set k8sServicePort=7445
|
||||
cilium \
|
||||
cilium/cilium \
|
||||
--version 1.17.3 \
|
||||
--namespace kube-system \
|
||||
--set ipam.mode=kubernetes \
|
||||
--set kubeProxyReplacement=true \
|
||||
--set securityContext.capabilities.ciliumAgent="{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" \
|
||||
--set securityContext.capabilities.cleanCiliumState="{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" \
|
||||
--set cgroup.autoMount.enabled=false \
|
||||
--set cgroup.hostRoot=/sys/fs/cgroup \
|
||||
--set k8sServiceHost=localhost \
|
||||
--set k8sServicePort=7445 \
|
||||
--set operator.replicas=1
|
||||
```
|
||||
|
||||
```bash
|
||||
# Enable and disable hubble
|
||||
cilium hubble enable --ui
|
||||
cilium hubble disable
|
||||
```
|
Loading…
Add table
Add a link
Reference in a new issue