commit 1a4c5ece17a785b265e09b2b3ba299a02183ad47 Author: Kozel Date: Wed May 13 13:30:33 2026 +0200 Initial Kozel's homelab infrastructure commit. diff --git a/.DS_Store b/.DS_Store new file mode 100644 index 0000000..c2b222b Binary files /dev/null and b/.DS_Store differ diff --git a/k8s/.DS_Store b/k8s/.DS_Store new file mode 100644 index 0000000..f067b6e Binary files /dev/null and b/k8s/.DS_Store differ diff --git a/k8s/cloudflare/cloudflared.yaml b/k8s/cloudflare/cloudflared.yaml new file mode 100644 index 0000000..e255f61 --- /dev/null +++ b/k8s/cloudflare/cloudflared.yaml @@ -0,0 +1,37 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cloudflared + namespace: cloudflare +spec: + replicas: 2 + selector: + matchLabels: + app: cloudflared + template: + metadata: + labels: + app: cloudflared + spec: + containers: + - name: cloudflared + image: cloudflare/cloudflared:latest + args: + - tunnel + - --no-autoupdate + - run + - --token + - $(TUNNEL_TOKEN) + env: + - name: TUNNEL_TOKEN + valueFrom: + secretKeyRef: + name: cloudflared-token + key: token + resources: + requests: + cpu: 50m + memory: 64Mi + limits: + cpu: 250m + memory: 256Mi diff --git a/k8s/homepage/homepage.yaml b/k8s/homepage/homepage.yaml new file mode 100644 index 0000000..43a8c8d --- /dev/null +++ b/k8s/homepage/homepage.yaml @@ -0,0 +1,79 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: dashboard + +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: homepage-data + namespace: dashboard +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 2Gi + storageClassName: local-path + +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: homepage + namespace: dashboard + +spec: + replicas: 1 + + selector: + matchLabels: + app: homepage + + template: + metadata: + labels: + app: homepage + + spec: + containers: + - name: homepage + + image: ghcr.io/gethomepage/homepage:latest + + env: + - name: HOMEPAGE_ALLOWED_HOSTS + value: homepage.kozelgaming.cz + + - name: LOG_TARGETS + value: stdout + + ports: + - containerPort: 3000 + + volumeMounts: + - name: homepage-data + mountPath: /app/config + + volumes: + - name: homepage-data + persistentVolumeClaim: + claimName: homepage-data + +--- +apiVersion: v1 +kind: Service +metadata: + name: homepage + namespace: dashboard + +spec: + type: ClusterIP + + selector: + app: homepage + + ports: + - port: 3000 + targetPort: 3000 \ No newline at end of file diff --git a/k8s/ingress-nginx/grafana-ingress.yaml b/k8s/ingress-nginx/grafana-ingress.yaml new file mode 100644 index 0000000..607bf63 --- /dev/null +++ b/k8s/ingress-nginx/grafana-ingress.yaml @@ -0,0 +1,18 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: grafana-ingress + namespace: monitoring +spec: + ingressClassName: nginx + rules: + - host: grafana.lan + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: kube-prometheus-stack-grafana + port: + number: 80 diff --git a/k8s/ingress-nginx/metube-ingress.yaml b/k8s/ingress-nginx/metube-ingress.yaml new file mode 100644 index 0000000..12ac26b --- /dev/null +++ b/k8s/ingress-nginx/metube-ingress.yaml @@ -0,0 +1,18 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: homelab-ingress + namespace: others +spec: + ingressClassName: nginx + rules: + - host: metube.lan + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: metube + port: + number: 8081 diff --git a/k8s/ingress-nginx/myspeed-ingress.yaml b/k8s/ingress-nginx/myspeed-ingress.yaml new file mode 100644 index 0000000..d1c9023 --- /dev/null +++ b/k8s/ingress-nginx/myspeed-ingress.yaml @@ -0,0 +1,18 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: myspeed-ingress + namespace: monitoring +spec: + ingressClassName: nginx + rules: + - host: myspeed.lan + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: myspeed + port: + number: 5216 diff --git a/k8s/longhorn-system.json b/k8s/longhorn-system.json new file mode 100644 index 0000000..cf6e8d5 --- /dev/null +++ b/k8s/longhorn-system.json @@ -0,0 +1,61 @@ +{ + "apiVersion": "v1", + "kind": "Namespace", + "metadata": { + "annotations": { + "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Namespace\",\"metadata\":{\"annotations\":{},\"name\":\"longhorn-system\"}}\n" + }, + "creationTimestamp": "2026-05-08T21:01:26Z", + "deletionTimestamp": "2026-05-09T10:52:14Z", + "labels": { + "kubernetes.io/metadata.name": "longhorn-system", + "pod-security.kubernetes.io/audit": "privileged", + "pod-security.kubernetes.io/enforce": "privileged", + "pod-security.kubernetes.io/warn": "privileged" + }, + "name": "longhorn-system", + "resourceVersion": "290430", + "uid": "98b2816d-d69f-4fd7-a24c-a9c6addc6a26" + }, + "spec": {}, + "status": { + "conditions": [ + { + "lastTransitionTime": "2026-05-09T10:52:19Z", + "message": "All resources successfully discovered", + "reason": "ResourcesDiscovered", + "status": "False", + "type": "NamespaceDeletionDiscoveryFailure" + }, + { + "lastTransitionTime": "2026-05-09T10:52:19Z", + "message": "All legacy kube types successfully parsed", + "reason": "ParsedGroupVersions", + "status": "False", + "type": "NamespaceDeletionGroupVersionParsingFailure" + }, + { + "lastTransitionTime": "2026-05-09T10:52:59Z", + "message": "Failed to delete all resource types, 5 remaining: Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found, Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found, Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found, Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found, Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found", + "reason": "ContentDeletionFailed", + "status": "True", + "type": "NamespaceDeletionContentFailure" + }, + { + "lastTransitionTime": "2026-05-09T10:52:59Z", + "message": "Some resources are remaining: engines.longhorn.io has 1 resource instances, snapshots.longhorn.io has 1 resource instances, volumeattachments.longhorn.io has 1 resource instances, volumes.longhorn.io has 1 resource instances", + "reason": "SomeResourcesRemain", + "status": "True", + "type": "NamespaceContentRemaining" + }, + { + "lastTransitionTime": "2026-05-09T10:52:59Z", + "message": "Some content in the namespace has finalizers remaining: longhorn.io in 4 resource instances", + "reason": "SomeFinalizersRemain", + "status": "True", + "type": "NamespaceFinalizersRemaining" + } + ], + "phase": "Terminating" + } +} diff --git a/k8s/longhorn-test.yaml b/k8s/longhorn-test.yaml new file mode 100644 index 0000000..6528a1d --- /dev/null +++ b/k8s/longhorn-test.yaml @@ -0,0 +1,35 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: storage-test +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: test-volume + namespace: storage-test +spec: + accessModes: + - ReadWriteOnce + storageClassName: longhorn + resources: + requests: + storage: 1Gi +--- +apiVersion: v1 +kind: Pod +metadata: + name: test-pod + namespace: storage-test +spec: + containers: + - name: test + image: busybox:1.36 + command: ["sh", "-c", "echo Longhorn funguje > /data/test.txt && sleep 3600"] + volumeMounts: + - name: data + mountPath: /data + volumes: + - name: data + persistentVolumeClaim: + claimName: test-volume diff --git a/k8s/metallb-system/metallb-pool.yaml b/k8s/metallb-system/metallb-pool.yaml new file mode 100644 index 0000000..c9a684c --- /dev/null +++ b/k8s/metallb-system/metallb-pool.yaml @@ -0,0 +1,17 @@ +apiVersion: metallb.io/v1beta1 +kind: IPAddressPool +metadata: + name: k8s-lan-pool + namespace: metallb-system +spec: + addresses: + - 10.0.4.80-10.0.4.90 +--- +apiVersion: metallb.io/v1beta1 +kind: L2Advertisement +metadata: + name: k8s-lan-l2 + namespace: metallb-system +spec: + ipAddressPools: + - k8s-lan-pool diff --git a/k8s/monitoring/.DS_Store b/k8s/monitoring/.DS_Store new file mode 100644 index 0000000..e5ac9bb Binary files /dev/null and b/k8s/monitoring/.DS_Store differ diff --git a/k8s/monitoring/myspeed.yaml b/k8s/monitoring/myspeed.yaml new file mode 100644 index 0000000..e371d82 --- /dev/null +++ b/k8s/monitoring/myspeed.yaml @@ -0,0 +1,32 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: myspeed + namespace: monitoring +spec: + replicas: 1 + selector: + matchLabels: + app: myspeed + template: + metadata: + labels: + app: myspeed + spec: + containers: + - name: myspeed + image: germannewsmaker/myspeed:latest + ports: + - containerPort: 5216 +--- +apiVersion: v1 +kind: Service +metadata: + name: myspeed + namespace: monitoring +spec: + selector: + app: myspeed + ports: + - port: 5216 + targetPort: 5216 diff --git a/k8s/monitoring/uptime-kuma.yaml b/k8s/monitoring/uptime-kuma.yaml new file mode 100644 index 0000000..d89a71d --- /dev/null +++ b/k8s/monitoring/uptime-kuma.yaml @@ -0,0 +1,60 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: monitoring +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: uptime-kuma-data + namespace: monitoring +spec: + storageClassName: longhorn + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 8Gi +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: uptime-kuma + namespace: monitoring +spec: + replicas: 1 + strategy: + type: Recreate + selector: + matchLabels: + app: uptime-kuma + template: + metadata: + labels: + app: uptime-kuma + spec: + containers: + - name: uptime-kuma + image: louislam/uptime-kuma:2.3.2 + ports: + - containerPort: 3001 + volumeMounts: + - name: uptime-kuma-data + mountPath: /app/data + volumes: + - name: uptime-kuma-data + persistentVolumeClaim: + claimName: uptime-kuma-data +--- +apiVersion: v1 +kind: Service +metadata: + name: uptime-kuma + namespace: monitoring +spec: + type: ClusterIP + selector: + app: uptime-kuma + ports: + - port: 3001 + targetPort: 3001 diff --git a/k8s/others/metube.yaml b/k8s/others/metube.yaml new file mode 100644 index 0000000..3ff0b10 --- /dev/null +++ b/k8s/others/metube.yaml @@ -0,0 +1,38 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: metube + namespace: others +spec: + replicas: 1 + selector: + matchLabels: + app: metube + template: + metadata: + labels: + app: metube + spec: + containers: + - name: metube + image: ghcr.io/alexta69/metube:latest + ports: + - containerPort: 8081 + env: + - name: UID + value: "1000" + - name: GID + value: "1000" + +--- +apiVersion: v1 +kind: Service +metadata: + name: metube + namespace: others +spec: + selector: + app: metube + ports: + - port: 8081 + targetPort: 8081 diff --git a/k8s/security/.DS_Store b/k8s/security/.DS_Store new file mode 100644 index 0000000..ef7c2bf Binary files /dev/null and b/k8s/security/.DS_Store differ diff --git a/k8s/security/authentik-values.yaml b/k8s/security/authentik-values.yaml new file mode 100644 index 0000000..6d8fbe7 --- /dev/null +++ b/k8s/security/authentik-values.yaml @@ -0,0 +1,22 @@ +authentik: + secret_key: "mpREYM2Ad+5+WIgtAKYvLwDnC1hbp/r/en+SROa/xwKpmqwhYWH4LirhMk6XaAeu +N8lga6oOBqMMmhzeWKn7/Q==" + postgresql: + host: "authentik-postgresql" + user: "authentik" + password: "9u3cbsYwH+YdI5Cib4K5iFGetg5QS1WtSBeVUlApWx0=" + name: "authentik" + +postgresql: + enabled: true + auth: + username: "authentik" + password: "9u3cbsYwH+YdI5Cib4K5iFGetg5QS1WtSBeVUlApWx0=" + database: "authentik" + +redis: + enabled: true + +server: + ingress: + enabled: false diff --git a/talos/.DS_Store b/talos/.DS_Store new file mode 100644 index 0000000..c8a9487 Binary files /dev/null and b/talos/.DS_Store differ diff --git a/talos/10.0.4.12-machineconfig.yaml b/talos/10.0.4.12-machineconfig.yaml new file mode 100644 index 0000000..b68ad50 --- /dev/null +++ b/talos/10.0.4.12-machineconfig.yaml @@ -0,0 +1,81 @@ +node: 10.0.4.12 +metadata: + namespace: config + type: MachineConfigs.config.talos.dev + id: v1alpha1 + version: 1 + owner: + phase: running + created: 2026-05-09T10:30:48Z + updated: 2026-05-09T10:30:48Z + annotations: + talos.dev/yaml-spec: 1 +spec: | + version: v1alpha1 + debug: false + persist: true + machine: + type: worker + token: ic1fbn.1hftihpg6t1iz8ac + ca: + crt: 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 + key: "" + certSANs: [] + kubelet: + image: ghcr.io/siderolabs/kubelet:v1.36.0 + defaultRuntimeSeccompProfileEnabled: true + disableManifestsDirectory: true + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.12/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + nameservers: + - 10.0.4.1 + install: + disk: /dev/sda + image: ghcr.io/siderolabs/installer:v1.13.0 + wipe: false + grubUseUKICmdline: true + time: + servers: + - cz.pool.ntp.org + features: + diskQuotaSupport: true + kubePrism: + enabled: true + port: 7445 + hostDNS: + enabled: true + forwardKubeDNSToHost: true + cluster: + id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc= + secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI= + controlPlane: + endpoint: https://10.0.4.22:6443 + clusterName: kozel-k8s + network: + cni: + name: none + dnsDomain: cluster.local + podSubnets: + - 10.244.0.0/16 + serviceSubnets: + - 10.96.0.0/12 + token: jqb3h8.8r6msfb5i17onky4 + ca: + crt: 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 + key: "" + discovery: + enabled: true + registries: + kubernetes: + disabled: true + service: {} + --- + apiVersion: v1alpha1 + kind: HostnameConfig + auto: stable diff --git a/talos/10.0.4.13-machineconfig.yaml b/talos/10.0.4.13-machineconfig.yaml new file mode 100644 index 0000000..4b69cb9 --- /dev/null +++ b/talos/10.0.4.13-machineconfig.yaml @@ -0,0 +1,81 @@ +node: 10.0.4.13 +metadata: + namespace: config + type: MachineConfigs.config.talos.dev + id: v1alpha1 + version: 1 + owner: + phase: running + created: 2026-05-09T10:33:27Z + updated: 2026-05-09T10:33:27Z + annotations: + talos.dev/yaml-spec: 1 +spec: | + version: v1alpha1 + debug: false + persist: true + machine: + type: worker + token: ic1fbn.1hftihpg6t1iz8ac + ca: + crt: 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 + key: "" + certSANs: [] + kubelet: + image: ghcr.io/siderolabs/kubelet:v1.36.0 + defaultRuntimeSeccompProfileEnabled: true + disableManifestsDirectory: true + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.13/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + nameservers: + - 10.0.4.1 + install: + disk: /dev/sda + image: ghcr.io/siderolabs/installer:v1.13.0 + wipe: false + grubUseUKICmdline: true + time: + servers: + - cz.pool.ntp.org + features: + diskQuotaSupport: true + kubePrism: + enabled: true + port: 7445 + hostDNS: + enabled: true + forwardKubeDNSToHost: true + cluster: + id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc= + secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI= + controlPlane: + endpoint: https://10.0.4.22:6443 + clusterName: kozel-k8s + network: + cni: + name: none + dnsDomain: cluster.local + podSubnets: + - 10.244.0.0/16 + serviceSubnets: + - 10.96.0.0/12 + token: jqb3h8.8r6msfb5i17onky4 + ca: + crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJpRENDQVMrZ0F3SUJBZ0lRSVRHVitIZTR4WEFuQXpSblprRnlmekFLQmdncWhrak9QUVFEQWpBVk1STXcKRVFZRFZRUUtFd3ByZFdKbGNtNWxkR1Z6TUI0WERUSTJNRFV3T0RBNU1UQXpPVm9YRFRNMk1EVXdOVEE1TVRBegpPVm93RlRFVE1CRUdBMVVFQ2hNS2EzVmlaWEp1WlhSbGN6QlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VICkEwSUFCSFU2dDJKYmpPcE4wT3dtR0tFSU5Mbi9JUkZySVJ1U3h1YjNqTlM3b0VBMFRRUDlRKzFXUVhXNUc0ZngKc0pscGVQeGxQTVVhaFF0N0hHdFU2bU4wV0p1allUQmZNQTRHQTFVZER3RUIvd1FFQXdJQ2hEQWRCZ05WSFNVRQpGakFVQmdnckJnRUZCUWNEQVFZSUt3WUJCUVVIQXdJd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBZEJnTlZIUTRFCkZnUVVkS2lXS1BHNWovOTB6ZTV4SkQ2SEFrSzE3Mmd3Q2dZSUtvWkl6ajBFQXdJRFJ3QXdSQUlnZXB6MHFNaGMKQnQxRUtqQVFrS3FFM2w0UmN6bWZ2WWp3WlJOMU9IRWlGUjBDSUdiVkU5aVF3VFlmVW5ndk5FTis5MnVZNUEyYgorVXFjLzFzWnhqck9PU21RCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K + key: "" + discovery: + enabled: true + registries: + kubernetes: + disabled: true + service: {} + --- + apiVersion: v1alpha1 + kind: HostnameConfig + auto: stable diff --git a/talos/10.0.4.14-machineconfig.yaml b/talos/10.0.4.14-machineconfig.yaml new file mode 100644 index 0000000..dda4a3f --- /dev/null +++ b/talos/10.0.4.14-machineconfig.yaml @@ -0,0 +1,81 @@ +node: 10.0.4.14 +metadata: + namespace: config + type: MachineConfigs.config.talos.dev + id: v1alpha1 + version: 1 + owner: + phase: running + created: 2026-05-09T10:25:07Z + updated: 2026-05-09T10:25:07Z + annotations: + talos.dev/yaml-spec: 1 +spec: | + version: v1alpha1 + debug: false + persist: true + machine: + type: worker + token: ic1fbn.1hftihpg6t1iz8ac + ca: + crt: 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 + key: "" + certSANs: [] + kubelet: + image: ghcr.io/siderolabs/kubelet:v1.36.0 + defaultRuntimeSeccompProfileEnabled: true + disableManifestsDirectory: true + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.14/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + nameservers: + - 10.0.4.1 + install: + disk: /dev/sda + image: ghcr.io/siderolabs/installer:v1.13.0 + wipe: false + grubUseUKICmdline: true + time: + servers: + - cz.pool.ntp.org + features: + diskQuotaSupport: true + kubePrism: + enabled: true + port: 7445 + hostDNS: + enabled: true + forwardKubeDNSToHost: true + cluster: + id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc= + secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI= + controlPlane: + endpoint: https://10.0.4.22:6443 + clusterName: kozel-k8s + network: + cni: + name: none + dnsDomain: cluster.local + podSubnets: + - 10.244.0.0/16 + serviceSubnets: + - 10.96.0.0/12 + token: jqb3h8.8r6msfb5i17onky4 + ca: + crt: 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 + key: "" + discovery: + enabled: true + registries: + kubernetes: + disabled: true + service: {} + --- + apiVersion: v1alpha1 + kind: HostnameConfig + auto: stable diff --git a/talos/10.0.4.2-machineconfig.yaml b/talos/10.0.4.2-machineconfig.yaml new file mode 100644 index 0000000..d6dcdaf --- /dev/null +++ b/talos/10.0.4.2-machineconfig.yaml @@ -0,0 +1,125 @@ +node: 10.0.4.2 +metadata: + namespace: config + type: MachineConfigs.config.talos.dev + id: v1alpha1 + version: 1 + owner: + phase: running + created: 2026-05-09T10:36:46Z + updated: 2026-05-09T10:36:46Z + annotations: + talos.dev/yaml-spec: 1 +spec: | + version: v1alpha1 + debug: false + persist: true + machine: + type: controlplane + token: ic1fbn.1hftihpg6t1iz8ac + ca: + crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJQekNCOHFBREFnRUNBaEVBKzFzMUtxamJBa0FVZFJKWnAxem1JakFGQmdNclpYQXdFREVPTUF3R0ExVUUKQ2hNRmRHRnNiM013SGhjTk1qWXdOVEE0TURreE1ETTVXaGNOTXpZd05UQTFNRGt4TURNNVdqQVFNUTR3REFZRApWUVFLRXdWMFlXeHZjekFxTUFVR0F5dGxjQU1oQUFBSlFPaGFaZnVtc2wzaDhGUUlTL2h4Tk5Wa2E1YkI0WHNLCm5pcGJENitZbzJFd1h6QU9CZ05WSFE4QkFmOEVCQU1DQW9Rd0hRWURWUjBsQkJZd0ZBWUlLd1lCQlFVSEF3RUcKQ0NzR0FRVUZCd01DTUE4R0ExVWRFd0VCL3dRRk1BTUJBZjh3SFFZRFZSME9CQllFRk4xQzB4dlc1S0F0cmdGZwpoNzg5ZkI5Q2FFYXFNQVVHQXl0bGNBTkJBQ0JObnlvUVlqT29tYVpFUDFpTVQ2bWlkSlkvYUZUNHd4RXNJRzVHCjlYdDlNS0gvcStzNXpiV0s5cWZWYmdIdXFaeVNQUkdNa0lDTldvZ204blQ4alE4PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== + key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFFzekVqWk1ZZnZqbVBvbDl3TDcrSTFWSEhvWjluMDdwWUViUlJnVWtXeQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K + certSANs: [] + kubelet: + image: ghcr.io/siderolabs/kubelet:v1.36.0 + defaultRuntimeSeccompProfileEnabled: true + disableManifestsDirectory: true + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.2/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 + nameservers: + - 10.0.4.1 + install: + disk: /dev/sda + image: ghcr.io/siderolabs/installer:v1.13.0 + wipe: false + grubUseUKICmdline: true + time: + servers: + - cz.pool.ntp.org + features: + diskQuotaSupport: true + kubePrism: + enabled: true + port: 7445 + hostDNS: + enabled: true + forwardKubeDNSToHost: true + nodeLabels: + node.kubernetes.io/exclude-from-external-load-balancers: "" + cluster: + id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc= + secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI= + controlPlane: + endpoint: https://10.0.4.22:6443 + clusterName: kozel-k8s + network: + cni: + name: none + dnsDomain: cluster.local + podSubnets: + - 10.244.0.0/16 + serviceSubnets: + - 10.96.0.0/12 + token: jqb3h8.8r6msfb5i17onky4 + secretboxEncryptionSecret: X33FAohETFs7CNi8C0yf0m/g+g3qd4+EQCP8xnZp0Lw= + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlhdHgvZmV3S05MSXFRdFQzenRQTjhMYkFEUSsxU1A4c3VOWVdNWFhiSkRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZFRxM1lsdU02azNRN0NZWW9RZzB1ZjhoRVdzaEc1TEc1dmVNMUx1Z1FEUk5BLzFEN1ZaQgpkYmtiaC9Hd21XbDQvR1U4eFJxRkMzc2NhMVRxWTNSWW13PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + aggregatorCA: + crt: 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 + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVA0c0IvRVk3d3pveWc2Mm8zaU5GVzZ6QXkzWmxiN3IwL0FjVnlLL1RORU1vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFd0lSZ2UvTldHdTQ1TDhPOFgwMmxHSFdUR2pEUnhKM1JpVkNibnN4dTFMaXFzbGxHNTNHWQpweVFxVWFpVjRCV0oyZWd2ZUtXbisrOWpDVEdyclRIV29BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + serviceAccount: + key: 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 + apiServer: + image: registry.k8s.io/kube-apiserver:v1.36.0 + admissionControl: + - name: PodSecurity + configuration: + apiVersion: pod-security.admission.config.k8s.io/v1alpha1 + defaults: + audit: restricted + audit-version: latest + enforce: baseline + enforce-version: latest + warn: restricted + warn-version: latest + exemptions: + namespaces: + - kube-system + runtimeClasses: [] + usernames: [] + kind: PodSecurityConfiguration + auditPolicy: + apiVersion: audit.k8s.io/v1 + kind: Policy + rules: + - level: Metadata + controllerManager: + image: registry.k8s.io/kube-controller-manager:v1.36.0 + proxy: + image: registry.k8s.io/kube-proxy:v1.36.0 + scheduler: + image: registry.k8s.io/kube-scheduler:v1.36.0 + discovery: + enabled: true + registries: + kubernetes: + disabled: true + service: {} + etcd: + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU4vZXFHVjdTRGdCOE50dW1nVlVTS3hxTmJKUVNrWVdtV3JabzNFNVVTNjZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSzZmUXBOK2xhWmNYWHRSVWQyR1pGUkNPeUNaSXNXSDM0N0NzU2ZZMkpoaE9WN1QyZ3lGOQo0cTJhV0srd0tjZCtpTVBtdE5ncy9UUnlSbGhwQlhRQnBBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + --- + apiVersion: v1alpha1 + kind: HostnameConfig + auto: stable diff --git a/talos/10.0.4.3-machineconfig.yaml b/talos/10.0.4.3-machineconfig.yaml new file mode 100644 index 0000000..4ee3f22 --- /dev/null +++ b/talos/10.0.4.3-machineconfig.yaml @@ -0,0 +1,125 @@ +node: 10.0.4.3 +metadata: + namespace: config + type: MachineConfigs.config.talos.dev + id: v1alpha1 + version: 1 + owner: + phase: running + created: 2026-05-09T10:47:48Z + updated: 2026-05-09T10:47:48Z + annotations: + talos.dev/yaml-spec: 1 +spec: | + version: v1alpha1 + debug: false + persist: true + machine: + type: controlplane + token: ic1fbn.1hftihpg6t1iz8ac + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFFzekVqWk1ZZnZqbVBvbDl3TDcrSTFWSEhvWjluMDdwWUViUlJnVWtXeQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K + certSANs: [] + kubelet: + image: ghcr.io/siderolabs/kubelet:v1.36.0 + defaultRuntimeSeccompProfileEnabled: true + disableManifestsDirectory: true + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.3/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 + nameservers: + - 10.0.4.1 + install: + disk: /dev/sda + image: ghcr.io/siderolabs/installer:v1.13.0 + wipe: false + grubUseUKICmdline: true + time: + servers: + - cz.pool.ntp.org + features: + diskQuotaSupport: true + kubePrism: + enabled: true + port: 7445 + hostDNS: + enabled: true + forwardKubeDNSToHost: true + nodeLabels: + node.kubernetes.io/exclude-from-external-load-balancers: "" + cluster: + id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc= + secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI= + controlPlane: + endpoint: https://10.0.4.22:6443 + clusterName: kozel-k8s + network: + cni: + name: none + dnsDomain: cluster.local + podSubnets: + - 10.244.0.0/16 + serviceSubnets: + - 10.96.0.0/12 + token: jqb3h8.8r6msfb5i17onky4 + secretboxEncryptionSecret: X33FAohETFs7CNi8C0yf0m/g+g3qd4+EQCP8xnZp0Lw= + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlhdHgvZmV3S05MSXFRdFQzenRQTjhMYkFEUSsxU1A4c3VOWVdNWFhiSkRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZFRxM1lsdU02azNRN0NZWW9RZzB1ZjhoRVdzaEc1TEc1dmVNMUx1Z1FEUk5BLzFEN1ZaQgpkYmtiaC9Hd21XbDQvR1U4eFJxRkMzc2NhMVRxWTNSWW13PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + aggregatorCA: + crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJYekNDQVFhZ0F3SUJBZ0lSQUtuNjZiazBMN0RrR0tYMk12MThHRFl3Q2dZSUtvWkl6ajBFQXdJd0FEQWUKRncweU5qQTFNRGd3T1RFd016bGFGdzB6TmpBMU1EVXdPVEV3TXpsYU1BQXdXVEFUQmdjcWhrak9QUUlCQmdncQpoa2pPUFFNQkJ3TkNBQVRBaEdCNzgxWWE3amt2dzd4ZlRhVVlkWk1hTU5IRW5kR0pVSnVlekc3VXVLcXlXVWJuCmNaaW5KQ3BScUpYZ0ZZblo2Qzk0cGFmNzcyTUpNYXV0TWRhZ28yRXdYekFPQmdOVkhROEJBZjhFQkFNQ0FvUXcKSFFZRFZSMGxCQll3RkFZSUt3WUJCUVVIQXdFR0NDc0dBUVVGQndNQ01BOEdBMVVkRXdFQi93UUZNQU1CQWY4dwpIUVlEVlIwT0JCWUVGTEoyQ1NtVWFrTjBFMy8wenZ6VldmK1lSY1ozTUFvR0NDcUdTTTQ5QkFNQ0EwY0FNRVFDCklENCtpVFVlakNuWnRsOWI5NVlIMy9KU3ZVbWFBOGswTlArbmJtMmQyR203QWlCTC8vQzhDU3Y2NHlYZVA5dHcKeEw1QlM1a1JRcUxrVWhlMkt2cjlDL1RlN1E9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVA0c0IvRVk3d3pveWc2Mm8zaU5GVzZ6QXkzWmxiN3IwL0FjVnlLL1RORU1vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFd0lSZ2UvTldHdTQ1TDhPOFgwMmxHSFdUR2pEUnhKM1JpVkNibnN4dTFMaXFzbGxHNTNHWQpweVFxVWFpVjRCV0oyZWd2ZUtXbisrOWpDVEdyclRIV29BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + serviceAccount: + key: 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 + apiServer: + image: registry.k8s.io/kube-apiserver:v1.36.0 + admissionControl: + - name: PodSecurity + configuration: + apiVersion: pod-security.admission.config.k8s.io/v1alpha1 + defaults: + audit: restricted + audit-version: latest + enforce: baseline + enforce-version: latest + warn: restricted + warn-version: latest + exemptions: + namespaces: + - kube-system + runtimeClasses: [] + usernames: [] + kind: PodSecurityConfiguration + auditPolicy: + apiVersion: audit.k8s.io/v1 + kind: Policy + rules: + - level: Metadata + controllerManager: + image: registry.k8s.io/kube-controller-manager:v1.36.0 + proxy: + image: registry.k8s.io/kube-proxy:v1.36.0 + scheduler: + image: registry.k8s.io/kube-scheduler:v1.36.0 + discovery: + enabled: true + registries: + kubernetes: + disabled: true + service: {} + etcd: + ca: + crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJmVENDQVNPZ0F3SUJBZ0lRVU5QbWpvWjNkWXA1dFBVMTA1SHhXVEFLQmdncWhrak9QUVFEQWpBUE1RMHcKQ3dZRFZRUUtFd1JsZEdOa01CNFhEVEkyTURVd09EQTVNVEF6T1ZvWERUTTJNRFV3TlRBNU1UQXpPVm93RHpFTgpNQXNHQTFVRUNoTUVaWFJqWkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkN1bjBLVGZwV21YCkYxN1VWSGRobVJVUWpzZ21TTEZoOStPd3JFbjJOaVlZVGxlMDlvTWhmZUt0bWxpdnNDbkhmb2pENXJUWUxQMDAKY2taWWFRVjBBYVNqWVRCZk1BNEdBMVVkRHdFQi93UUVBd0lDaERBZEJnTlZIU1VFRmpBVUJnZ3JCZ0VGQlFjRApBUVlJS3dZQkJRVUhBd0l3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFkQmdOVkhRNEVGZ1FVWUU2VUNKTWl6VUJJCnhVUVYxaXQrK2ZoL1ErSXdDZ1lJS29aSXpqMEVBd0lEU0FBd1JRSWhBTUZVSDE5K2xjYkIvdEwrRENFaHIwTWcKWHVieCtHakRJV1lQRU9URDlacTVBaUJLcVBYYklaZ2RQZmF1a2JPQk16TUMva2VpY29zNlNxZzRUaGJ4Z0RQKwo4UT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU4vZXFHVjdTRGdCOE50dW1nVlVTS3hxTmJKUVNrWVdtV3JabzNFNVVTNjZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSzZmUXBOK2xhWmNYWHRSVWQyR1pGUkNPeUNaSXNXSDM0N0NzU2ZZMkpoaE9WN1QyZ3lGOQo0cTJhV0srd0tjZCtpTVBtdE5ncy9UUnlSbGhwQlhRQnBBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + --- + apiVersion: v1alpha1 + kind: HostnameConfig + auto: stable diff --git a/talos/10.0.4.4-machineconfig.yaml b/talos/10.0.4.4-machineconfig.yaml new file mode 100644 index 0000000..f55ae95 --- /dev/null +++ b/talos/10.0.4.4-machineconfig.yaml @@ -0,0 +1,125 @@ +node: 10.0.4.4 +metadata: + namespace: config + type: MachineConfigs.config.talos.dev + id: v1alpha1 + version: 1 + owner: + phase: running + created: 2026-05-09T10:51:11Z + updated: 2026-05-09T10:51:11Z + annotations: + talos.dev/yaml-spec: 1 +spec: | + version: v1alpha1 + debug: false + persist: true + machine: + type: controlplane + token: ic1fbn.1hftihpg6t1iz8ac + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFFzekVqWk1ZZnZqbVBvbDl3TDcrSTFWSEhvWjluMDdwWUViUlJnVWtXeQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K + certSANs: [] + kubelet: + image: ghcr.io/siderolabs/kubelet:v1.36.0 + defaultRuntimeSeccompProfileEnabled: true + disableManifestsDirectory: true + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.4/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 + nameservers: + - 10.0.4.1 + install: + disk: /dev/sda + image: ghcr.io/siderolabs/installer:v1.13.0 + wipe: false + grubUseUKICmdline: true + time: + servers: + - cz.pool.ntp.org + features: + diskQuotaSupport: true + kubePrism: + enabled: true + port: 7445 + hostDNS: + enabled: true + forwardKubeDNSToHost: true + nodeLabels: + node.kubernetes.io/exclude-from-external-load-balancers: "" + cluster: + id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc= + secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI= + controlPlane: + endpoint: https://10.0.4.22:6443 + clusterName: kozel-k8s + network: + cni: + name: none + dnsDomain: cluster.local + podSubnets: + - 10.244.0.0/16 + serviceSubnets: + - 10.96.0.0/12 + token: jqb3h8.8r6msfb5i17onky4 + secretboxEncryptionSecret: X33FAohETFs7CNi8C0yf0m/g+g3qd4+EQCP8xnZp0Lw= + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlhdHgvZmV3S05MSXFRdFQzenRQTjhMYkFEUSsxU1A4c3VOWVdNWFhiSkRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZFRxM1lsdU02azNRN0NZWW9RZzB1ZjhoRVdzaEc1TEc1dmVNMUx1Z1FEUk5BLzFEN1ZaQgpkYmtiaC9Hd21XbDQvR1U4eFJxRkMzc2NhMVRxWTNSWW13PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + aggregatorCA: + crt: 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 + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVA0c0IvRVk3d3pveWc2Mm8zaU5GVzZ6QXkzWmxiN3IwL0FjVnlLL1RORU1vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFd0lSZ2UvTldHdTQ1TDhPOFgwMmxHSFdUR2pEUnhKM1JpVkNibnN4dTFMaXFzbGxHNTNHWQpweVFxVWFpVjRCV0oyZWd2ZUtXbisrOWpDVEdyclRIV29BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + serviceAccount: + key: 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 + apiServer: + image: registry.k8s.io/kube-apiserver:v1.36.0 + admissionControl: + - name: PodSecurity + configuration: + apiVersion: pod-security.admission.config.k8s.io/v1alpha1 + defaults: + audit: restricted + audit-version: latest + enforce: baseline + enforce-version: latest + warn: restricted + warn-version: latest + exemptions: + namespaces: + - kube-system + runtimeClasses: [] + usernames: [] + kind: PodSecurityConfiguration + auditPolicy: + apiVersion: audit.k8s.io/v1 + kind: Policy + rules: + - level: Metadata + controllerManager: + image: registry.k8s.io/kube-controller-manager:v1.36.0 + proxy: + image: registry.k8s.io/kube-proxy:v1.36.0 + scheduler: + image: registry.k8s.io/kube-scheduler:v1.36.0 + discovery: + enabled: true + registries: + kubernetes: + disabled: true + service: {} + etcd: + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU4vZXFHVjdTRGdCOE50dW1nVlVTS3hxTmJKUVNrWVdtV3JabzNFNVVTNjZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSzZmUXBOK2xhWmNYWHRSVWQyR1pGUkNPeUNaSXNXSDM0N0NzU2ZZMkpoaE9WN1QyZ3lGOQo0cTJhV0srd0tjZCtpTVBtdE5ncy9UUnlSbGhwQlhRQnBBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + --- + apiVersion: v1alpha1 + kind: HostnameConfig + auto: stable diff --git a/talos/controlplane.yaml b/talos/controlplane.yaml new file mode 100644 index 0000000..d6dcdaf --- /dev/null +++ b/talos/controlplane.yaml @@ -0,0 +1,125 @@ +node: 10.0.4.2 +metadata: + namespace: config + type: MachineConfigs.config.talos.dev + id: v1alpha1 + version: 1 + owner: + phase: running + created: 2026-05-09T10:36:46Z + updated: 2026-05-09T10:36:46Z + annotations: + talos.dev/yaml-spec: 1 +spec: | + version: v1alpha1 + debug: false + persist: true + machine: + type: controlplane + token: ic1fbn.1hftihpg6t1iz8ac + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFFzekVqWk1ZZnZqbVBvbDl3TDcrSTFWSEhvWjluMDdwWUViUlJnVWtXeQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K + certSANs: [] + kubelet: + image: ghcr.io/siderolabs/kubelet:v1.36.0 + defaultRuntimeSeccompProfileEnabled: true + disableManifestsDirectory: true + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.2/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 + nameservers: + - 10.0.4.1 + install: + disk: /dev/sda + image: ghcr.io/siderolabs/installer:v1.13.0 + wipe: false + grubUseUKICmdline: true + time: + servers: + - cz.pool.ntp.org + features: + diskQuotaSupport: true + kubePrism: + enabled: true + port: 7445 + hostDNS: + enabled: true + forwardKubeDNSToHost: true + nodeLabels: + node.kubernetes.io/exclude-from-external-load-balancers: "" + cluster: + id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc= + secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI= + controlPlane: + endpoint: https://10.0.4.22:6443 + clusterName: kozel-k8s + network: + cni: + name: none + dnsDomain: cluster.local + podSubnets: + - 10.244.0.0/16 + serviceSubnets: + - 10.96.0.0/12 + token: jqb3h8.8r6msfb5i17onky4 + secretboxEncryptionSecret: X33FAohETFs7CNi8C0yf0m/g+g3qd4+EQCP8xnZp0Lw= + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlhdHgvZmV3S05MSXFRdFQzenRQTjhMYkFEUSsxU1A4c3VOWVdNWFhiSkRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZFRxM1lsdU02azNRN0NZWW9RZzB1ZjhoRVdzaEc1TEc1dmVNMUx1Z1FEUk5BLzFEN1ZaQgpkYmtiaC9Hd21XbDQvR1U4eFJxRkMzc2NhMVRxWTNSWW13PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + aggregatorCA: + crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJYekNDQVFhZ0F3SUJBZ0lSQUtuNjZiazBMN0RrR0tYMk12MThHRFl3Q2dZSUtvWkl6ajBFQXdJd0FEQWUKRncweU5qQTFNRGd3T1RFd016bGFGdzB6TmpBMU1EVXdPVEV3TXpsYU1BQXdXVEFUQmdjcWhrak9QUUlCQmdncQpoa2pPUFFNQkJ3TkNBQVRBaEdCNzgxWWE3amt2dzd4ZlRhVVlkWk1hTU5IRW5kR0pVSnVlekc3VXVLcXlXVWJuCmNaaW5KQ3BScUpYZ0ZZblo2Qzk0cGFmNzcyTUpNYXV0TWRhZ28yRXdYekFPQmdOVkhROEJBZjhFQkFNQ0FvUXcKSFFZRFZSMGxCQll3RkFZSUt3WUJCUVVIQXdFR0NDc0dBUVVGQndNQ01BOEdBMVVkRXdFQi93UUZNQU1CQWY4dwpIUVlEVlIwT0JCWUVGTEoyQ1NtVWFrTjBFMy8wenZ6VldmK1lSY1ozTUFvR0NDcUdTTTQ5QkFNQ0EwY0FNRVFDCklENCtpVFVlakNuWnRsOWI5NVlIMy9KU3ZVbWFBOGswTlArbmJtMmQyR203QWlCTC8vQzhDU3Y2NHlYZVA5dHcKeEw1QlM1a1JRcUxrVWhlMkt2cjlDL1RlN1E9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVA0c0IvRVk3d3pveWc2Mm8zaU5GVzZ6QXkzWmxiN3IwL0FjVnlLL1RORU1vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFd0lSZ2UvTldHdTQ1TDhPOFgwMmxHSFdUR2pEUnhKM1JpVkNibnN4dTFMaXFzbGxHNTNHWQpweVFxVWFpVjRCV0oyZWd2ZUtXbisrOWpDVEdyclRIV29BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + serviceAccount: + key: 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 + apiServer: + image: registry.k8s.io/kube-apiserver:v1.36.0 + admissionControl: + - name: PodSecurity + configuration: + apiVersion: pod-security.admission.config.k8s.io/v1alpha1 + defaults: + audit: restricted + audit-version: latest + enforce: baseline + enforce-version: latest + warn: restricted + warn-version: latest + exemptions: + namespaces: + - kube-system + runtimeClasses: [] + usernames: [] + kind: PodSecurityConfiguration + auditPolicy: + apiVersion: audit.k8s.io/v1 + kind: Policy + rules: + - level: Metadata + controllerManager: + image: registry.k8s.io/kube-controller-manager:v1.36.0 + proxy: + image: registry.k8s.io/kube-proxy:v1.36.0 + scheduler: + image: registry.k8s.io/kube-scheduler:v1.36.0 + discovery: + enabled: true + registries: + kubernetes: + disabled: true + service: {} + etcd: + ca: + crt: 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 + key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU4vZXFHVjdTRGdCOE50dW1nVlVTS3hxTmJKUVNrWVdtV3JabzNFNVVTNjZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSzZmUXBOK2xhWmNYWHRSVWQyR1pGUkNPeUNaSXNXSDM0N0NzU2ZZMkpoaE9WN1QyZ3lGOQo0cTJhV0srd0tjZCtpTVBtdE5ncy9UUnlSbGhwQlhRQnBBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= + --- + apiVersion: v1alpha1 + kind: HostnameConfig + auto: stable diff --git a/talos/kubeconfig b/talos/kubeconfig new file mode 100644 index 0000000..4f4059a --- /dev/null +++ b/talos/kubeconfig @@ -0,0 +1,19 @@ +apiVersion: v1 +clusters: +- cluster: + certificate-authority-data: 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 + server: https://10.0.4.22:6443 + name: kozel-k8s +contexts: +- context: + cluster: kozel-k8s + namespace: default + user: admin@kozel-k8s + name: admin@kozel-k8s +current-context: admin@kozel-k8s +kind: Config +users: +- name: admin@kozel-k8s + user: + client-certificate-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJoVENDQVN1Z0F3SUJBZ0lSQU8zeDhYemY4dFQ4SDJtTEFjcHN0TWd3Q2dZSUtvWkl6ajBFQXdJd0ZURVQKTUJFR0ExVUVDaE1LYTNWaVpYSnVaWFJsY3pBZUZ3MHlOakExTURneE1EQXlNamRhRncweU56QTFNRGd4TURBeQpNemRhTUNreEZ6QVZCZ05WQkFvVERuTjVjM1JsYlRwdFlYTjBaWEp6TVE0d0RBWURWUVFERXdWaFpHMXBiakJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkd6cmplc1JjTUd2bHp1alRmNHhWektJTlVMcDBlSHUKR1JhMnRiZ3MreG4yYmxzalNHYWo2M1BpOVpVOW5TL1hZcnFvRjVaS25zK0gzb1JqT1hoZmdZeWpTREJHTUE0RwpBMVVkRHdFQi93UUVBd0lGb0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFqQWZCZ05WSFNNRUdEQVdnQlIwCnFKWW84Ym1QLzNUTjduRWtQb2NDUXJYdmFEQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQmRydnFDM3RidytpME8KN3NuTXhYVTh2c3orcU9Eelh2UVplb1BoMG5qblZnSWhBTzJLemYwZUNjQTlSQndqOFVoTzRkaGMxUGFhdDRyVApwbVlpRERObGovQ3EKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= + client-key-data: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUgzaEo3SzdYU2xNSWNBbkNRQlhrSzlNRUdHU2gzejRaaGJKRFlxdGZKVThvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFYk91TjZ4Rnd3YStYTzZOTi9qRlhNb2cxUXVuUjRlNFpGcmExdUN6N0dmWnVXeU5JWnFQcgpjK0wxbFQyZEw5ZGl1cWdYbGtxZXo0ZmVoR001ZUYrQmpBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= diff --git a/talos/patches-backup/common.yaml b/talos/patches-backup/common.yaml new file mode 100644 index 0000000..6d5fe3e --- /dev/null +++ b/talos/patches-backup/common.yaml @@ -0,0 +1,14 @@ +machine: + install: + disk: /dev/sda + time: + servers: + - cz.pool.ntp.org + network: + nameservers: + - 10.0.4.1 + +cluster: + network: + cni: + name: none diff --git a/talos/patches-backup/k8s-cp-00.yaml b/talos/patches-backup/k8s-cp-00.yaml new file mode 100644 index 0000000..52b323c --- /dev/null +++ b/talos/patches-backup/k8s-cp-00.yaml @@ -0,0 +1,12 @@ +machine: + network: + hostname: k8s-cp-00 + interfaces: + - interface: ens18 + addresses: + - 10.0.4.2/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 diff --git a/talos/patches-backup/k8s-cp-01.yaml b/talos/patches-backup/k8s-cp-01.yaml new file mode 100644 index 0000000..3ae754a --- /dev/null +++ b/talos/patches-backup/k8s-cp-01.yaml @@ -0,0 +1,12 @@ +machine: + network: + hostname: k8s-cp-01 + interfaces: + - interface: ens18 + addresses: + - 10.0.4.3/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 diff --git a/talos/patches-backup/k8s-cp-02.yaml b/talos/patches-backup/k8s-cp-02.yaml new file mode 100644 index 0000000..93a15d7 --- /dev/null +++ b/talos/patches-backup/k8s-cp-02.yaml @@ -0,0 +1,12 @@ +machine: + network: + hostname: k8s-cp-02 + interfaces: + - interface: ens18 + addresses: + - 10.0.4.4/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 diff --git a/talos/patches-backup/k8s-wrk-00.yaml b/talos/patches-backup/k8s-wrk-00.yaml new file mode 100644 index 0000000..d138c3d --- /dev/null +++ b/talos/patches-backup/k8s-wrk-00.yaml @@ -0,0 +1,10 @@ +machine: + network: + hostname: k8s-wrk-00 + interfaces: + - interface: ens18 + addresses: + - 10.0.4.12/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 diff --git a/talos/patches-backup/k8s-wrk-01.yaml b/talos/patches-backup/k8s-wrk-01.yaml new file mode 100644 index 0000000..45ee8ec --- /dev/null +++ b/talos/patches-backup/k8s-wrk-01.yaml @@ -0,0 +1,10 @@ +machine: + network: + hostname: k8s-wrk-01 + interfaces: + - interface: ens18 + addresses: + - 10.0.4.13/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 diff --git a/talos/patches-backup/k8s-wrk-02.yaml b/talos/patches-backup/k8s-wrk-02.yaml new file mode 100644 index 0000000..e382fb9 --- /dev/null +++ b/talos/patches-backup/k8s-wrk-02.yaml @@ -0,0 +1,10 @@ +machine: + network: + hostname: k8s-wrk-02 + interfaces: + - interface: ens18 + addresses: + - 10.0.4.14/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 diff --git a/talos/patches/common.yaml b/talos/patches/common.yaml new file mode 100644 index 0000000..6d5fe3e --- /dev/null +++ b/talos/patches/common.yaml @@ -0,0 +1,14 @@ +machine: + install: + disk: /dev/sda + time: + servers: + - cz.pool.ntp.org + network: + nameservers: + - 10.0.4.1 + +cluster: + network: + cni: + name: none diff --git a/talos/patches/k8s-cp-00.yaml b/talos/patches/k8s-cp-00.yaml new file mode 100644 index 0000000..43b8161 --- /dev/null +++ b/talos/patches/k8s-cp-00.yaml @@ -0,0 +1,11 @@ +machine: + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.2/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 diff --git a/talos/patches/k8s-cp-01.yaml b/talos/patches/k8s-cp-01.yaml new file mode 100644 index 0000000..4be3c08 --- /dev/null +++ b/talos/patches/k8s-cp-01.yaml @@ -0,0 +1,11 @@ +machine: + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.3/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 diff --git a/talos/patches/k8s-cp-02.yaml b/talos/patches/k8s-cp-02.yaml new file mode 100644 index 0000000..4425b0b --- /dev/null +++ b/talos/patches/k8s-cp-02.yaml @@ -0,0 +1,11 @@ +machine: + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.4/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + vip: + ip: 10.0.4.22 diff --git a/talos/patches/k8s-wrk-00.yaml b/talos/patches/k8s-wrk-00.yaml new file mode 100644 index 0000000..32bc16f --- /dev/null +++ b/talos/patches/k8s-wrk-00.yaml @@ -0,0 +1,9 @@ +machine: + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.12/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 diff --git a/talos/patches/k8s-wrk-01.yaml b/talos/patches/k8s-wrk-01.yaml new file mode 100644 index 0000000..64563f4 --- /dev/null +++ b/talos/patches/k8s-wrk-01.yaml @@ -0,0 +1,9 @@ +machine: + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.13/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 diff --git a/talos/patches/k8s-wrk-02.yaml b/talos/patches/k8s-wrk-02.yaml new file mode 100644 index 0000000..19ad411 --- /dev/null +++ b/talos/patches/k8s-wrk-02.yaml @@ -0,0 +1,9 @@ +machine: + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.14/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 diff --git a/talos/talos-image.txt b/talos/talos-image.txt new file mode 100644 index 0000000..a3f73cb --- /dev/null +++ b/talos/talos-image.txt @@ -0,0 +1 @@ +factory.talos.dev/installer/cc493cae44e0bdbbefb5b5d1fb22ff724134cd7c6bb65172fa84e181568be45d:v1.13.0 diff --git a/talos/talosconfig b/talos/talosconfig new file mode 100644 index 0000000..f0806f5 --- /dev/null +++ b/talos/talosconfig @@ -0,0 +1,10 @@ +context: kozel-k8s +contexts: + kozel-k8s: + endpoints: + - 10.0.4.22 + nodes: + - 10.0.4.2 + ca: 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 + crt: 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 + key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFZxTy9zSDlyTnlJbThUZmlPa3BZdWZnMnNZejJYQWhnUUtuZllidDV4UQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K diff --git a/talos/worker.yaml b/talos/worker.yaml new file mode 100644 index 0000000..b68ad50 --- /dev/null +++ b/talos/worker.yaml @@ -0,0 +1,81 @@ +node: 10.0.4.12 +metadata: + namespace: config + type: MachineConfigs.config.talos.dev + id: v1alpha1 + version: 1 + owner: + phase: running + created: 2026-05-09T10:30:48Z + updated: 2026-05-09T10:30:48Z + annotations: + talos.dev/yaml-spec: 1 +spec: | + version: v1alpha1 + debug: false + persist: true + machine: + type: worker + token: ic1fbn.1hftihpg6t1iz8ac + ca: + crt: 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 + key: "" + certSANs: [] + kubelet: + image: ghcr.io/siderolabs/kubelet:v1.36.0 + defaultRuntimeSeccompProfileEnabled: true + disableManifestsDirectory: true + network: + interfaces: + - interface: ens18 + addresses: + - 10.0.4.12/24 + routes: + - network: 0.0.0.0/0 + gateway: 10.0.4.1 + nameservers: + - 10.0.4.1 + install: + disk: /dev/sda + image: ghcr.io/siderolabs/installer:v1.13.0 + wipe: false + grubUseUKICmdline: true + time: + servers: + - cz.pool.ntp.org + features: + diskQuotaSupport: true + kubePrism: + enabled: true + port: 7445 + hostDNS: + enabled: true + forwardKubeDNSToHost: true + cluster: + id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc= + secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI= + controlPlane: + endpoint: https://10.0.4.22:6443 + clusterName: kozel-k8s + network: + cni: + name: none + dnsDomain: cluster.local + podSubnets: + - 10.244.0.0/16 + serviceSubnets: + - 10.96.0.0/12 + token: jqb3h8.8r6msfb5i17onky4 + ca: + crt: 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 + key: "" + discovery: + enabled: true + registries: + kubernetes: + disabled: true + service: {} + --- + apiVersion: v1alpha1 + kind: HostnameConfig + auto: stable