Initial Kozel's homelab infrastructure commit.
This commit is contained in:
Vendored
BIN
Binary file not shown.
@@ -0,0 +1,37 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: cloudflared
|
||||||
|
namespace: cloudflare
|
||||||
|
spec:
|
||||||
|
replicas: 2
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: cloudflared
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: cloudflared
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: cloudflared
|
||||||
|
image: cloudflare/cloudflared:latest
|
||||||
|
args:
|
||||||
|
- tunnel
|
||||||
|
- --no-autoupdate
|
||||||
|
- run
|
||||||
|
- --token
|
||||||
|
- $(TUNNEL_TOKEN)
|
||||||
|
env:
|
||||||
|
- name: TUNNEL_TOKEN
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: cloudflared-token
|
||||||
|
key: token
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: 50m
|
||||||
|
memory: 64Mi
|
||||||
|
limits:
|
||||||
|
cpu: 250m
|
||||||
|
memory: 256Mi
|
||||||
@@ -0,0 +1,79 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: dashboard
|
||||||
|
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: homepage-data
|
||||||
|
namespace: dashboard
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteOnce
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 2Gi
|
||||||
|
storageClassName: local-path
|
||||||
|
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: homepage
|
||||||
|
namespace: dashboard
|
||||||
|
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: homepage
|
||||||
|
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: homepage
|
||||||
|
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: homepage
|
||||||
|
|
||||||
|
image: ghcr.io/gethomepage/homepage:latest
|
||||||
|
|
||||||
|
env:
|
||||||
|
- name: HOMEPAGE_ALLOWED_HOSTS
|
||||||
|
value: homepage.kozelgaming.cz
|
||||||
|
|
||||||
|
- name: LOG_TARGETS
|
||||||
|
value: stdout
|
||||||
|
|
||||||
|
ports:
|
||||||
|
- containerPort: 3000
|
||||||
|
|
||||||
|
volumeMounts:
|
||||||
|
- name: homepage-data
|
||||||
|
mountPath: /app/config
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
- name: homepage-data
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: homepage-data
|
||||||
|
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: homepage
|
||||||
|
namespace: dashboard
|
||||||
|
|
||||||
|
spec:
|
||||||
|
type: ClusterIP
|
||||||
|
|
||||||
|
selector:
|
||||||
|
app: homepage
|
||||||
|
|
||||||
|
ports:
|
||||||
|
- port: 3000
|
||||||
|
targetPort: 3000
|
||||||
@@ -0,0 +1,18 @@
|
|||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: grafana-ingress
|
||||||
|
namespace: monitoring
|
||||||
|
spec:
|
||||||
|
ingressClassName: nginx
|
||||||
|
rules:
|
||||||
|
- host: grafana.lan
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: kube-prometheus-stack-grafana
|
||||||
|
port:
|
||||||
|
number: 80
|
||||||
@@ -0,0 +1,18 @@
|
|||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: homelab-ingress
|
||||||
|
namespace: others
|
||||||
|
spec:
|
||||||
|
ingressClassName: nginx
|
||||||
|
rules:
|
||||||
|
- host: metube.lan
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: metube
|
||||||
|
port:
|
||||||
|
number: 8081
|
||||||
@@ -0,0 +1,18 @@
|
|||||||
|
apiVersion: networking.k8s.io/v1
|
||||||
|
kind: Ingress
|
||||||
|
metadata:
|
||||||
|
name: myspeed-ingress
|
||||||
|
namespace: monitoring
|
||||||
|
spec:
|
||||||
|
ingressClassName: nginx
|
||||||
|
rules:
|
||||||
|
- host: myspeed.lan
|
||||||
|
http:
|
||||||
|
paths:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: myspeed
|
||||||
|
port:
|
||||||
|
number: 5216
|
||||||
@@ -0,0 +1,61 @@
|
|||||||
|
{
|
||||||
|
"apiVersion": "v1",
|
||||||
|
"kind": "Namespace",
|
||||||
|
"metadata": {
|
||||||
|
"annotations": {
|
||||||
|
"kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Namespace\",\"metadata\":{\"annotations\":{},\"name\":\"longhorn-system\"}}\n"
|
||||||
|
},
|
||||||
|
"creationTimestamp": "2026-05-08T21:01:26Z",
|
||||||
|
"deletionTimestamp": "2026-05-09T10:52:14Z",
|
||||||
|
"labels": {
|
||||||
|
"kubernetes.io/metadata.name": "longhorn-system",
|
||||||
|
"pod-security.kubernetes.io/audit": "privileged",
|
||||||
|
"pod-security.kubernetes.io/enforce": "privileged",
|
||||||
|
"pod-security.kubernetes.io/warn": "privileged"
|
||||||
|
},
|
||||||
|
"name": "longhorn-system",
|
||||||
|
"resourceVersion": "290430",
|
||||||
|
"uid": "98b2816d-d69f-4fd7-a24c-a9c6addc6a26"
|
||||||
|
},
|
||||||
|
"spec": {},
|
||||||
|
"status": {
|
||||||
|
"conditions": [
|
||||||
|
{
|
||||||
|
"lastTransitionTime": "2026-05-09T10:52:19Z",
|
||||||
|
"message": "All resources successfully discovered",
|
||||||
|
"reason": "ResourcesDiscovered",
|
||||||
|
"status": "False",
|
||||||
|
"type": "NamespaceDeletionDiscoveryFailure"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"lastTransitionTime": "2026-05-09T10:52:19Z",
|
||||||
|
"message": "All legacy kube types successfully parsed",
|
||||||
|
"reason": "ParsedGroupVersions",
|
||||||
|
"status": "False",
|
||||||
|
"type": "NamespaceDeletionGroupVersionParsingFailure"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"lastTransitionTime": "2026-05-09T10:52:59Z",
|
||||||
|
"message": "Failed to delete all resource types, 5 remaining: Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found, Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found, Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found, Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found, Internal error occurred: failed calling webhook \"validator.longhorn.io\": failed to call webhook: Post \"https://longhorn-admission-webhook.longhorn-system.svc:9502/v1/webhook/validation?timeout=10s\": service \"longhorn-admission-webhook\" not found",
|
||||||
|
"reason": "ContentDeletionFailed",
|
||||||
|
"status": "True",
|
||||||
|
"type": "NamespaceDeletionContentFailure"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"lastTransitionTime": "2026-05-09T10:52:59Z",
|
||||||
|
"message": "Some resources are remaining: engines.longhorn.io has 1 resource instances, snapshots.longhorn.io has 1 resource instances, volumeattachments.longhorn.io has 1 resource instances, volumes.longhorn.io has 1 resource instances",
|
||||||
|
"reason": "SomeResourcesRemain",
|
||||||
|
"status": "True",
|
||||||
|
"type": "NamespaceContentRemaining"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"lastTransitionTime": "2026-05-09T10:52:59Z",
|
||||||
|
"message": "Some content in the namespace has finalizers remaining: longhorn.io in 4 resource instances",
|
||||||
|
"reason": "SomeFinalizersRemain",
|
||||||
|
"status": "True",
|
||||||
|
"type": "NamespaceFinalizersRemaining"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"phase": "Terminating"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,35 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: storage-test
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: test-volume
|
||||||
|
namespace: storage-test
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteOnce
|
||||||
|
storageClassName: longhorn
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 1Gi
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Pod
|
||||||
|
metadata:
|
||||||
|
name: test-pod
|
||||||
|
namespace: storage-test
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: test
|
||||||
|
image: busybox:1.36
|
||||||
|
command: ["sh", "-c", "echo Longhorn funguje > /data/test.txt && sleep 3600"]
|
||||||
|
volumeMounts:
|
||||||
|
- name: data
|
||||||
|
mountPath: /data
|
||||||
|
volumes:
|
||||||
|
- name: data
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: test-volume
|
||||||
@@ -0,0 +1,17 @@
|
|||||||
|
apiVersion: metallb.io/v1beta1
|
||||||
|
kind: IPAddressPool
|
||||||
|
metadata:
|
||||||
|
name: k8s-lan-pool
|
||||||
|
namespace: metallb-system
|
||||||
|
spec:
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.80-10.0.4.90
|
||||||
|
---
|
||||||
|
apiVersion: metallb.io/v1beta1
|
||||||
|
kind: L2Advertisement
|
||||||
|
metadata:
|
||||||
|
name: k8s-lan-l2
|
||||||
|
namespace: metallb-system
|
||||||
|
spec:
|
||||||
|
ipAddressPools:
|
||||||
|
- k8s-lan-pool
|
||||||
Vendored
BIN
Binary file not shown.
@@ -0,0 +1,32 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: myspeed
|
||||||
|
namespace: monitoring
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: myspeed
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: myspeed
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: myspeed
|
||||||
|
image: germannewsmaker/myspeed:latest
|
||||||
|
ports:
|
||||||
|
- containerPort: 5216
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: myspeed
|
||||||
|
namespace: monitoring
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: myspeed
|
||||||
|
ports:
|
||||||
|
- port: 5216
|
||||||
|
targetPort: 5216
|
||||||
@@ -0,0 +1,60 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: monitoring
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: uptime-kuma-data
|
||||||
|
namespace: monitoring
|
||||||
|
spec:
|
||||||
|
storageClassName: longhorn
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteOnce
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 8Gi
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: uptime-kuma
|
||||||
|
namespace: monitoring
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: uptime-kuma
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: uptime-kuma
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: uptime-kuma
|
||||||
|
image: louislam/uptime-kuma:2.3.2
|
||||||
|
ports:
|
||||||
|
- containerPort: 3001
|
||||||
|
volumeMounts:
|
||||||
|
- name: uptime-kuma-data
|
||||||
|
mountPath: /app/data
|
||||||
|
volumes:
|
||||||
|
- name: uptime-kuma-data
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: uptime-kuma-data
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: uptime-kuma
|
||||||
|
namespace: monitoring
|
||||||
|
spec:
|
||||||
|
type: ClusterIP
|
||||||
|
selector:
|
||||||
|
app: uptime-kuma
|
||||||
|
ports:
|
||||||
|
- port: 3001
|
||||||
|
targetPort: 3001
|
||||||
@@ -0,0 +1,38 @@
|
|||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: metube
|
||||||
|
namespace: others
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: metube
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: metube
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: metube
|
||||||
|
image: ghcr.io/alexta69/metube:latest
|
||||||
|
ports:
|
||||||
|
- containerPort: 8081
|
||||||
|
env:
|
||||||
|
- name: UID
|
||||||
|
value: "1000"
|
||||||
|
- name: GID
|
||||||
|
value: "1000"
|
||||||
|
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: metube
|
||||||
|
namespace: others
|
||||||
|
spec:
|
||||||
|
selector:
|
||||||
|
app: metube
|
||||||
|
ports:
|
||||||
|
- port: 8081
|
||||||
|
targetPort: 8081
|
||||||
Vendored
BIN
Binary file not shown.
@@ -0,0 +1,22 @@
|
|||||||
|
authentik:
|
||||||
|
secret_key: "mpREYM2Ad+5+WIgtAKYvLwDnC1hbp/r/en+SROa/xwKpmqwhYWH4LirhMk6XaAeu
|
||||||
|
N8lga6oOBqMMmhzeWKn7/Q=="
|
||||||
|
postgresql:
|
||||||
|
host: "authentik-postgresql"
|
||||||
|
user: "authentik"
|
||||||
|
password: "9u3cbsYwH+YdI5Cib4K5iFGetg5QS1WtSBeVUlApWx0="
|
||||||
|
name: "authentik"
|
||||||
|
|
||||||
|
postgresql:
|
||||||
|
enabled: true
|
||||||
|
auth:
|
||||||
|
username: "authentik"
|
||||||
|
password: "9u3cbsYwH+YdI5Cib4K5iFGetg5QS1WtSBeVUlApWx0="
|
||||||
|
database: "authentik"
|
||||||
|
|
||||||
|
redis:
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
server:
|
||||||
|
ingress:
|
||||||
|
enabled: false
|
||||||
Vendored
BIN
Binary file not shown.
@@ -0,0 +1,81 @@
|
|||||||
|
node: 10.0.4.12
|
||||||
|
metadata:
|
||||||
|
namespace: config
|
||||||
|
type: MachineConfigs.config.talos.dev
|
||||||
|
id: v1alpha1
|
||||||
|
version: 1
|
||||||
|
owner:
|
||||||
|
phase: running
|
||||||
|
created: 2026-05-09T10:30:48Z
|
||||||
|
updated: 2026-05-09T10:30:48Z
|
||||||
|
annotations:
|
||||||
|
talos.dev/yaml-spec: 1
|
||||||
|
spec: |
|
||||||
|
version: v1alpha1
|
||||||
|
debug: false
|
||||||
|
persist: true
|
||||||
|
machine:
|
||||||
|
type: worker
|
||||||
|
token: ic1fbn.1hftihpg6t1iz8ac
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: ""
|
||||||
|
certSANs: []
|
||||||
|
kubelet:
|
||||||
|
image: ghcr.io/siderolabs/kubelet:v1.36.0
|
||||||
|
defaultRuntimeSeccompProfileEnabled: true
|
||||||
|
disableManifestsDirectory: true
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.12/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
image: ghcr.io/siderolabs/installer:v1.13.0
|
||||||
|
wipe: false
|
||||||
|
grubUseUKICmdline: true
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
features:
|
||||||
|
diskQuotaSupport: true
|
||||||
|
kubePrism:
|
||||||
|
enabled: true
|
||||||
|
port: 7445
|
||||||
|
hostDNS:
|
||||||
|
enabled: true
|
||||||
|
forwardKubeDNSToHost: true
|
||||||
|
cluster:
|
||||||
|
id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc=
|
||||||
|
secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI=
|
||||||
|
controlPlane:
|
||||||
|
endpoint: https://10.0.4.22:6443
|
||||||
|
clusterName: kozel-k8s
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
|
dnsDomain: cluster.local
|
||||||
|
podSubnets:
|
||||||
|
- 10.244.0.0/16
|
||||||
|
serviceSubnets:
|
||||||
|
- 10.96.0.0/12
|
||||||
|
token: jqb3h8.8r6msfb5i17onky4
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: ""
|
||||||
|
discovery:
|
||||||
|
enabled: true
|
||||||
|
registries:
|
||||||
|
kubernetes:
|
||||||
|
disabled: true
|
||||||
|
service: {}
|
||||||
|
---
|
||||||
|
apiVersion: v1alpha1
|
||||||
|
kind: HostnameConfig
|
||||||
|
auto: stable
|
||||||
@@ -0,0 +1,81 @@
|
|||||||
|
node: 10.0.4.13
|
||||||
|
metadata:
|
||||||
|
namespace: config
|
||||||
|
type: MachineConfigs.config.talos.dev
|
||||||
|
id: v1alpha1
|
||||||
|
version: 1
|
||||||
|
owner:
|
||||||
|
phase: running
|
||||||
|
created: 2026-05-09T10:33:27Z
|
||||||
|
updated: 2026-05-09T10:33:27Z
|
||||||
|
annotations:
|
||||||
|
talos.dev/yaml-spec: 1
|
||||||
|
spec: |
|
||||||
|
version: v1alpha1
|
||||||
|
debug: false
|
||||||
|
persist: true
|
||||||
|
machine:
|
||||||
|
type: worker
|
||||||
|
token: ic1fbn.1hftihpg6t1iz8ac
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: ""
|
||||||
|
certSANs: []
|
||||||
|
kubelet:
|
||||||
|
image: ghcr.io/siderolabs/kubelet:v1.36.0
|
||||||
|
defaultRuntimeSeccompProfileEnabled: true
|
||||||
|
disableManifestsDirectory: true
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.13/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
image: ghcr.io/siderolabs/installer:v1.13.0
|
||||||
|
wipe: false
|
||||||
|
grubUseUKICmdline: true
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
features:
|
||||||
|
diskQuotaSupport: true
|
||||||
|
kubePrism:
|
||||||
|
enabled: true
|
||||||
|
port: 7445
|
||||||
|
hostDNS:
|
||||||
|
enabled: true
|
||||||
|
forwardKubeDNSToHost: true
|
||||||
|
cluster:
|
||||||
|
id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc=
|
||||||
|
secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI=
|
||||||
|
controlPlane:
|
||||||
|
endpoint: https://10.0.4.22:6443
|
||||||
|
clusterName: kozel-k8s
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
|
dnsDomain: cluster.local
|
||||||
|
podSubnets:
|
||||||
|
- 10.244.0.0/16
|
||||||
|
serviceSubnets:
|
||||||
|
- 10.96.0.0/12
|
||||||
|
token: jqb3h8.8r6msfb5i17onky4
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: ""
|
||||||
|
discovery:
|
||||||
|
enabled: true
|
||||||
|
registries:
|
||||||
|
kubernetes:
|
||||||
|
disabled: true
|
||||||
|
service: {}
|
||||||
|
---
|
||||||
|
apiVersion: v1alpha1
|
||||||
|
kind: HostnameConfig
|
||||||
|
auto: stable
|
||||||
@@ -0,0 +1,81 @@
|
|||||||
|
node: 10.0.4.14
|
||||||
|
metadata:
|
||||||
|
namespace: config
|
||||||
|
type: MachineConfigs.config.talos.dev
|
||||||
|
id: v1alpha1
|
||||||
|
version: 1
|
||||||
|
owner:
|
||||||
|
phase: running
|
||||||
|
created: 2026-05-09T10:25:07Z
|
||||||
|
updated: 2026-05-09T10:25:07Z
|
||||||
|
annotations:
|
||||||
|
talos.dev/yaml-spec: 1
|
||||||
|
spec: |
|
||||||
|
version: v1alpha1
|
||||||
|
debug: false
|
||||||
|
persist: true
|
||||||
|
machine:
|
||||||
|
type: worker
|
||||||
|
token: ic1fbn.1hftihpg6t1iz8ac
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: ""
|
||||||
|
certSANs: []
|
||||||
|
kubelet:
|
||||||
|
image: ghcr.io/siderolabs/kubelet:v1.36.0
|
||||||
|
defaultRuntimeSeccompProfileEnabled: true
|
||||||
|
disableManifestsDirectory: true
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.14/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
image: ghcr.io/siderolabs/installer:v1.13.0
|
||||||
|
wipe: false
|
||||||
|
grubUseUKICmdline: true
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
features:
|
||||||
|
diskQuotaSupport: true
|
||||||
|
kubePrism:
|
||||||
|
enabled: true
|
||||||
|
port: 7445
|
||||||
|
hostDNS:
|
||||||
|
enabled: true
|
||||||
|
forwardKubeDNSToHost: true
|
||||||
|
cluster:
|
||||||
|
id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc=
|
||||||
|
secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI=
|
||||||
|
controlPlane:
|
||||||
|
endpoint: https://10.0.4.22:6443
|
||||||
|
clusterName: kozel-k8s
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
|
dnsDomain: cluster.local
|
||||||
|
podSubnets:
|
||||||
|
- 10.244.0.0/16
|
||||||
|
serviceSubnets:
|
||||||
|
- 10.96.0.0/12
|
||||||
|
token: jqb3h8.8r6msfb5i17onky4
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: ""
|
||||||
|
discovery:
|
||||||
|
enabled: true
|
||||||
|
registries:
|
||||||
|
kubernetes:
|
||||||
|
disabled: true
|
||||||
|
service: {}
|
||||||
|
---
|
||||||
|
apiVersion: v1alpha1
|
||||||
|
kind: HostnameConfig
|
||||||
|
auto: stable
|
||||||
@@ -0,0 +1,125 @@
|
|||||||
|
node: 10.0.4.2
|
||||||
|
metadata:
|
||||||
|
namespace: config
|
||||||
|
type: MachineConfigs.config.talos.dev
|
||||||
|
id: v1alpha1
|
||||||
|
version: 1
|
||||||
|
owner:
|
||||||
|
phase: running
|
||||||
|
created: 2026-05-09T10:36:46Z
|
||||||
|
updated: 2026-05-09T10:36:46Z
|
||||||
|
annotations:
|
||||||
|
talos.dev/yaml-spec: 1
|
||||||
|
spec: |
|
||||||
|
version: v1alpha1
|
||||||
|
debug: false
|
||||||
|
persist: true
|
||||||
|
machine:
|
||||||
|
type: controlplane
|
||||||
|
token: ic1fbn.1hftihpg6t1iz8ac
|
||||||
|
ca:
|
||||||
|
crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJQekNCOHFBREFnRUNBaEVBKzFzMUtxamJBa0FVZFJKWnAxem1JakFGQmdNclpYQXdFREVPTUF3R0ExVUUKQ2hNRmRHRnNiM013SGhjTk1qWXdOVEE0TURreE1ETTVXaGNOTXpZd05UQTFNRGt4TURNNVdqQVFNUTR3REFZRApWUVFLRXdWMFlXeHZjekFxTUFVR0F5dGxjQU1oQUFBSlFPaGFaZnVtc2wzaDhGUUlTL2h4Tk5Wa2E1YkI0WHNLCm5pcGJENitZbzJFd1h6QU9CZ05WSFE4QkFmOEVCQU1DQW9Rd0hRWURWUjBsQkJZd0ZBWUlLd1lCQlFVSEF3RUcKQ0NzR0FRVUZCd01DTUE4R0ExVWRFd0VCL3dRRk1BTUJBZjh3SFFZRFZSME9CQllFRk4xQzB4dlc1S0F0cmdGZwpoNzg5ZkI5Q2FFYXFNQVVHQXl0bGNBTkJBQ0JObnlvUVlqT29tYVpFUDFpTVQ2bWlkSlkvYUZUNHd4RXNJRzVHCjlYdDlNS0gvcStzNXpiV0s5cWZWYmdIdXFaeVNQUkdNa0lDTldvZ204blQ4alE4PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
|
||||||
|
key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFFzekVqWk1ZZnZqbVBvbDl3TDcrSTFWSEhvWjluMDdwWUViUlJnVWtXeQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K
|
||||||
|
certSANs: []
|
||||||
|
kubelet:
|
||||||
|
image: ghcr.io/siderolabs/kubelet:v1.36.0
|
||||||
|
defaultRuntimeSeccompProfileEnabled: true
|
||||||
|
disableManifestsDirectory: true
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.2/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
image: ghcr.io/siderolabs/installer:v1.13.0
|
||||||
|
wipe: false
|
||||||
|
grubUseUKICmdline: true
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
features:
|
||||||
|
diskQuotaSupport: true
|
||||||
|
kubePrism:
|
||||||
|
enabled: true
|
||||||
|
port: 7445
|
||||||
|
hostDNS:
|
||||||
|
enabled: true
|
||||||
|
forwardKubeDNSToHost: true
|
||||||
|
nodeLabels:
|
||||||
|
node.kubernetes.io/exclude-from-external-load-balancers: ""
|
||||||
|
cluster:
|
||||||
|
id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc=
|
||||||
|
secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI=
|
||||||
|
controlPlane:
|
||||||
|
endpoint: https://10.0.4.22:6443
|
||||||
|
clusterName: kozel-k8s
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
|
dnsDomain: cluster.local
|
||||||
|
podSubnets:
|
||||||
|
- 10.244.0.0/16
|
||||||
|
serviceSubnets:
|
||||||
|
- 10.96.0.0/12
|
||||||
|
token: jqb3h8.8r6msfb5i17onky4
|
||||||
|
secretboxEncryptionSecret: X33FAohETFs7CNi8C0yf0m/g+g3qd4+EQCP8xnZp0Lw=
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlhdHgvZmV3S05MSXFRdFQzenRQTjhMYkFEUSsxU1A4c3VOWVdNWFhiSkRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZFRxM1lsdU02azNRN0NZWW9RZzB1ZjhoRVdzaEc1TEc1dmVNMUx1Z1FEUk5BLzFEN1ZaQgpkYmtiaC9Hd21XbDQvR1U4eFJxRkMzc2NhMVRxWTNSWW13PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
aggregatorCA:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVA0c0IvRVk3d3pveWc2Mm8zaU5GVzZ6QXkzWmxiN3IwL0FjVnlLL1RORU1vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFd0lSZ2UvTldHdTQ1TDhPOFgwMmxHSFdUR2pEUnhKM1JpVkNibnN4dTFMaXFzbGxHNTNHWQpweVFxVWFpVjRCV0oyZWd2ZUtXbisrOWpDVEdyclRIV29BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
serviceAccount:
|
||||||
|
key: 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
|
||||||
|
apiServer:
|
||||||
|
image: registry.k8s.io/kube-apiserver:v1.36.0
|
||||||
|
admissionControl:
|
||||||
|
- name: PodSecurity
|
||||||
|
configuration:
|
||||||
|
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
|
||||||
|
defaults:
|
||||||
|
audit: restricted
|
||||||
|
audit-version: latest
|
||||||
|
enforce: baseline
|
||||||
|
enforce-version: latest
|
||||||
|
warn: restricted
|
||||||
|
warn-version: latest
|
||||||
|
exemptions:
|
||||||
|
namespaces:
|
||||||
|
- kube-system
|
||||||
|
runtimeClasses: []
|
||||||
|
usernames: []
|
||||||
|
kind: PodSecurityConfiguration
|
||||||
|
auditPolicy:
|
||||||
|
apiVersion: audit.k8s.io/v1
|
||||||
|
kind: Policy
|
||||||
|
rules:
|
||||||
|
- level: Metadata
|
||||||
|
controllerManager:
|
||||||
|
image: registry.k8s.io/kube-controller-manager:v1.36.0
|
||||||
|
proxy:
|
||||||
|
image: registry.k8s.io/kube-proxy:v1.36.0
|
||||||
|
scheduler:
|
||||||
|
image: registry.k8s.io/kube-scheduler:v1.36.0
|
||||||
|
discovery:
|
||||||
|
enabled: true
|
||||||
|
registries:
|
||||||
|
kubernetes:
|
||||||
|
disabled: true
|
||||||
|
service: {}
|
||||||
|
etcd:
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU4vZXFHVjdTRGdCOE50dW1nVlVTS3hxTmJKUVNrWVdtV3JabzNFNVVTNjZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSzZmUXBOK2xhWmNYWHRSVWQyR1pGUkNPeUNaSXNXSDM0N0NzU2ZZMkpoaE9WN1QyZ3lGOQo0cTJhV0srd0tjZCtpTVBtdE5ncy9UUnlSbGhwQlhRQnBBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
---
|
||||||
|
apiVersion: v1alpha1
|
||||||
|
kind: HostnameConfig
|
||||||
|
auto: stable
|
||||||
@@ -0,0 +1,125 @@
|
|||||||
|
node: 10.0.4.3
|
||||||
|
metadata:
|
||||||
|
namespace: config
|
||||||
|
type: MachineConfigs.config.talos.dev
|
||||||
|
id: v1alpha1
|
||||||
|
version: 1
|
||||||
|
owner:
|
||||||
|
phase: running
|
||||||
|
created: 2026-05-09T10:47:48Z
|
||||||
|
updated: 2026-05-09T10:47:48Z
|
||||||
|
annotations:
|
||||||
|
talos.dev/yaml-spec: 1
|
||||||
|
spec: |
|
||||||
|
version: v1alpha1
|
||||||
|
debug: false
|
||||||
|
persist: true
|
||||||
|
machine:
|
||||||
|
type: controlplane
|
||||||
|
token: ic1fbn.1hftihpg6t1iz8ac
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFFzekVqWk1ZZnZqbVBvbDl3TDcrSTFWSEhvWjluMDdwWUViUlJnVWtXeQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K
|
||||||
|
certSANs: []
|
||||||
|
kubelet:
|
||||||
|
image: ghcr.io/siderolabs/kubelet:v1.36.0
|
||||||
|
defaultRuntimeSeccompProfileEnabled: true
|
||||||
|
disableManifestsDirectory: true
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.3/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
image: ghcr.io/siderolabs/installer:v1.13.0
|
||||||
|
wipe: false
|
||||||
|
grubUseUKICmdline: true
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
features:
|
||||||
|
diskQuotaSupport: true
|
||||||
|
kubePrism:
|
||||||
|
enabled: true
|
||||||
|
port: 7445
|
||||||
|
hostDNS:
|
||||||
|
enabled: true
|
||||||
|
forwardKubeDNSToHost: true
|
||||||
|
nodeLabels:
|
||||||
|
node.kubernetes.io/exclude-from-external-load-balancers: ""
|
||||||
|
cluster:
|
||||||
|
id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc=
|
||||||
|
secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI=
|
||||||
|
controlPlane:
|
||||||
|
endpoint: https://10.0.4.22:6443
|
||||||
|
clusterName: kozel-k8s
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
|
dnsDomain: cluster.local
|
||||||
|
podSubnets:
|
||||||
|
- 10.244.0.0/16
|
||||||
|
serviceSubnets:
|
||||||
|
- 10.96.0.0/12
|
||||||
|
token: jqb3h8.8r6msfb5i17onky4
|
||||||
|
secretboxEncryptionSecret: X33FAohETFs7CNi8C0yf0m/g+g3qd4+EQCP8xnZp0Lw=
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlhdHgvZmV3S05MSXFRdFQzenRQTjhMYkFEUSsxU1A4c3VOWVdNWFhiSkRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZFRxM1lsdU02azNRN0NZWW9RZzB1ZjhoRVdzaEc1TEc1dmVNMUx1Z1FEUk5BLzFEN1ZaQgpkYmtiaC9Hd21XbDQvR1U4eFJxRkMzc2NhMVRxWTNSWW13PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
aggregatorCA:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVA0c0IvRVk3d3pveWc2Mm8zaU5GVzZ6QXkzWmxiN3IwL0FjVnlLL1RORU1vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFd0lSZ2UvTldHdTQ1TDhPOFgwMmxHSFdUR2pEUnhKM1JpVkNibnN4dTFMaXFzbGxHNTNHWQpweVFxVWFpVjRCV0oyZWd2ZUtXbisrOWpDVEdyclRIV29BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
serviceAccount:
|
||||||
|
key: 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
|
||||||
|
apiServer:
|
||||||
|
image: registry.k8s.io/kube-apiserver:v1.36.0
|
||||||
|
admissionControl:
|
||||||
|
- name: PodSecurity
|
||||||
|
configuration:
|
||||||
|
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
|
||||||
|
defaults:
|
||||||
|
audit: restricted
|
||||||
|
audit-version: latest
|
||||||
|
enforce: baseline
|
||||||
|
enforce-version: latest
|
||||||
|
warn: restricted
|
||||||
|
warn-version: latest
|
||||||
|
exemptions:
|
||||||
|
namespaces:
|
||||||
|
- kube-system
|
||||||
|
runtimeClasses: []
|
||||||
|
usernames: []
|
||||||
|
kind: PodSecurityConfiguration
|
||||||
|
auditPolicy:
|
||||||
|
apiVersion: audit.k8s.io/v1
|
||||||
|
kind: Policy
|
||||||
|
rules:
|
||||||
|
- level: Metadata
|
||||||
|
controllerManager:
|
||||||
|
image: registry.k8s.io/kube-controller-manager:v1.36.0
|
||||||
|
proxy:
|
||||||
|
image: registry.k8s.io/kube-proxy:v1.36.0
|
||||||
|
scheduler:
|
||||||
|
image: registry.k8s.io/kube-scheduler:v1.36.0
|
||||||
|
discovery:
|
||||||
|
enabled: true
|
||||||
|
registries:
|
||||||
|
kubernetes:
|
||||||
|
disabled: true
|
||||||
|
service: {}
|
||||||
|
etcd:
|
||||||
|
ca:
|
||||||
|
crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJmVENDQVNPZ0F3SUJBZ0lRVU5QbWpvWjNkWXA1dFBVMTA1SHhXVEFLQmdncWhrak9QUVFEQWpBUE1RMHcKQ3dZRFZRUUtFd1JsZEdOa01CNFhEVEkyTURVd09EQTVNVEF6T1ZvWERUTTJNRFV3TlRBNU1UQXpPVm93RHpFTgpNQXNHQTFVRUNoTUVaWFJqWkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkN1bjBLVGZwV21YCkYxN1VWSGRobVJVUWpzZ21TTEZoOStPd3JFbjJOaVlZVGxlMDlvTWhmZUt0bWxpdnNDbkhmb2pENXJUWUxQMDAKY2taWWFRVjBBYVNqWVRCZk1BNEdBMVVkRHdFQi93UUVBd0lDaERBZEJnTlZIU1VFRmpBVUJnZ3JCZ0VGQlFjRApBUVlJS3dZQkJRVUhBd0l3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFkQmdOVkhRNEVGZ1FVWUU2VUNKTWl6VUJJCnhVUVYxaXQrK2ZoL1ErSXdDZ1lJS29aSXpqMEVBd0lEU0FBd1JRSWhBTUZVSDE5K2xjYkIvdEwrRENFaHIwTWcKWHVieCtHakRJV1lQRU9URDlacTVBaUJLcVBYYklaZ2RQZmF1a2JPQk16TUMva2VpY29zNlNxZzRUaGJ4Z0RQKwo4UT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU4vZXFHVjdTRGdCOE50dW1nVlVTS3hxTmJKUVNrWVdtV3JabzNFNVVTNjZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSzZmUXBOK2xhWmNYWHRSVWQyR1pGUkNPeUNaSXNXSDM0N0NzU2ZZMkpoaE9WN1QyZ3lGOQo0cTJhV0srd0tjZCtpTVBtdE5ncy9UUnlSbGhwQlhRQnBBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
---
|
||||||
|
apiVersion: v1alpha1
|
||||||
|
kind: HostnameConfig
|
||||||
|
auto: stable
|
||||||
@@ -0,0 +1,125 @@
|
|||||||
|
node: 10.0.4.4
|
||||||
|
metadata:
|
||||||
|
namespace: config
|
||||||
|
type: MachineConfigs.config.talos.dev
|
||||||
|
id: v1alpha1
|
||||||
|
version: 1
|
||||||
|
owner:
|
||||||
|
phase: running
|
||||||
|
created: 2026-05-09T10:51:11Z
|
||||||
|
updated: 2026-05-09T10:51:11Z
|
||||||
|
annotations:
|
||||||
|
talos.dev/yaml-spec: 1
|
||||||
|
spec: |
|
||||||
|
version: v1alpha1
|
||||||
|
debug: false
|
||||||
|
persist: true
|
||||||
|
machine:
|
||||||
|
type: controlplane
|
||||||
|
token: ic1fbn.1hftihpg6t1iz8ac
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFFzekVqWk1ZZnZqbVBvbDl3TDcrSTFWSEhvWjluMDdwWUViUlJnVWtXeQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K
|
||||||
|
certSANs: []
|
||||||
|
kubelet:
|
||||||
|
image: ghcr.io/siderolabs/kubelet:v1.36.0
|
||||||
|
defaultRuntimeSeccompProfileEnabled: true
|
||||||
|
disableManifestsDirectory: true
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.4/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
image: ghcr.io/siderolabs/installer:v1.13.0
|
||||||
|
wipe: false
|
||||||
|
grubUseUKICmdline: true
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
features:
|
||||||
|
diskQuotaSupport: true
|
||||||
|
kubePrism:
|
||||||
|
enabled: true
|
||||||
|
port: 7445
|
||||||
|
hostDNS:
|
||||||
|
enabled: true
|
||||||
|
forwardKubeDNSToHost: true
|
||||||
|
nodeLabels:
|
||||||
|
node.kubernetes.io/exclude-from-external-load-balancers: ""
|
||||||
|
cluster:
|
||||||
|
id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc=
|
||||||
|
secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI=
|
||||||
|
controlPlane:
|
||||||
|
endpoint: https://10.0.4.22:6443
|
||||||
|
clusterName: kozel-k8s
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
|
dnsDomain: cluster.local
|
||||||
|
podSubnets:
|
||||||
|
- 10.244.0.0/16
|
||||||
|
serviceSubnets:
|
||||||
|
- 10.96.0.0/12
|
||||||
|
token: jqb3h8.8r6msfb5i17onky4
|
||||||
|
secretboxEncryptionSecret: X33FAohETFs7CNi8C0yf0m/g+g3qd4+EQCP8xnZp0Lw=
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlhdHgvZmV3S05MSXFRdFQzenRQTjhMYkFEUSsxU1A4c3VOWVdNWFhiSkRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZFRxM1lsdU02azNRN0NZWW9RZzB1ZjhoRVdzaEc1TEc1dmVNMUx1Z1FEUk5BLzFEN1ZaQgpkYmtiaC9Hd21XbDQvR1U4eFJxRkMzc2NhMVRxWTNSWW13PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
aggregatorCA:
|
||||||
|
crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJYekNDQVFhZ0F3SUJBZ0lSQUtuNjZiazBMN0RrR0tYMk12MThHRFl3Q2dZSUtvWkl6ajBFQXdJd0FEQWUKRncweU5qQTFNRGd3T1RFd016bGFGdzB6TmpBMU1EVXdPVEV3TXpsYU1BQXdXVEFUQmdjcWhrak9QUUlCQmdncQpoa2pPUFFNQkJ3TkNBQVRBaEdCNzgxWWE3amt2dzd4ZlRhVVlkWk1hTU5IRW5kR0pVSnVlekc3VXVLcXlXVWJuCmNaaW5KQ3BScUpYZ0ZZblo2Qzk0cGFmNzcyTUpNYXV0TWRhZ28yRXdYekFPQmdOVkhROEJBZjhFQkFNQ0FvUXcKSFFZRFZSMGxCQll3RkFZSUt3WUJCUVVIQXdFR0NDc0dBUVVGQndNQ01BOEdBMVVkRXdFQi93UUZNQU1CQWY4dwpIUVlEVlIwT0JCWUVGTEoyQ1NtVWFrTjBFMy8wenZ6VldmK1lSY1ozTUFvR0NDcUdTTTQ5QkFNQ0EwY0FNRVFDCklENCtpVFVlakNuWnRsOWI5NVlIMy9KU3ZVbWFBOGswTlArbmJtMmQyR203QWlCTC8vQzhDU3Y2NHlYZVA5dHcKeEw1QlM1a1JRcUxrVWhlMkt2cjlDL1RlN1E9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVA0c0IvRVk3d3pveWc2Mm8zaU5GVzZ6QXkzWmxiN3IwL0FjVnlLL1RORU1vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFd0lSZ2UvTldHdTQ1TDhPOFgwMmxHSFdUR2pEUnhKM1JpVkNibnN4dTFMaXFzbGxHNTNHWQpweVFxVWFpVjRCV0oyZWd2ZUtXbisrOWpDVEdyclRIV29BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
serviceAccount:
|
||||||
|
key: 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
|
||||||
|
apiServer:
|
||||||
|
image: registry.k8s.io/kube-apiserver:v1.36.0
|
||||||
|
admissionControl:
|
||||||
|
- name: PodSecurity
|
||||||
|
configuration:
|
||||||
|
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
|
||||||
|
defaults:
|
||||||
|
audit: restricted
|
||||||
|
audit-version: latest
|
||||||
|
enforce: baseline
|
||||||
|
enforce-version: latest
|
||||||
|
warn: restricted
|
||||||
|
warn-version: latest
|
||||||
|
exemptions:
|
||||||
|
namespaces:
|
||||||
|
- kube-system
|
||||||
|
runtimeClasses: []
|
||||||
|
usernames: []
|
||||||
|
kind: PodSecurityConfiguration
|
||||||
|
auditPolicy:
|
||||||
|
apiVersion: audit.k8s.io/v1
|
||||||
|
kind: Policy
|
||||||
|
rules:
|
||||||
|
- level: Metadata
|
||||||
|
controllerManager:
|
||||||
|
image: registry.k8s.io/kube-controller-manager:v1.36.0
|
||||||
|
proxy:
|
||||||
|
image: registry.k8s.io/kube-proxy:v1.36.0
|
||||||
|
scheduler:
|
||||||
|
image: registry.k8s.io/kube-scheduler:v1.36.0
|
||||||
|
discovery:
|
||||||
|
enabled: true
|
||||||
|
registries:
|
||||||
|
kubernetes:
|
||||||
|
disabled: true
|
||||||
|
service: {}
|
||||||
|
etcd:
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU4vZXFHVjdTRGdCOE50dW1nVlVTS3hxTmJKUVNrWVdtV3JabzNFNVVTNjZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSzZmUXBOK2xhWmNYWHRSVWQyR1pGUkNPeUNaSXNXSDM0N0NzU2ZZMkpoaE9WN1QyZ3lGOQo0cTJhV0srd0tjZCtpTVBtdE5ncy9UUnlSbGhwQlhRQnBBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
---
|
||||||
|
apiVersion: v1alpha1
|
||||||
|
kind: HostnameConfig
|
||||||
|
auto: stable
|
||||||
@@ -0,0 +1,125 @@
|
|||||||
|
node: 10.0.4.2
|
||||||
|
metadata:
|
||||||
|
namespace: config
|
||||||
|
type: MachineConfigs.config.talos.dev
|
||||||
|
id: v1alpha1
|
||||||
|
version: 1
|
||||||
|
owner:
|
||||||
|
phase: running
|
||||||
|
created: 2026-05-09T10:36:46Z
|
||||||
|
updated: 2026-05-09T10:36:46Z
|
||||||
|
annotations:
|
||||||
|
talos.dev/yaml-spec: 1
|
||||||
|
spec: |
|
||||||
|
version: v1alpha1
|
||||||
|
debug: false
|
||||||
|
persist: true
|
||||||
|
machine:
|
||||||
|
type: controlplane
|
||||||
|
token: ic1fbn.1hftihpg6t1iz8ac
|
||||||
|
ca:
|
||||||
|
crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJQekNCOHFBREFnRUNBaEVBKzFzMUtxamJBa0FVZFJKWnAxem1JakFGQmdNclpYQXdFREVPTUF3R0ExVUUKQ2hNRmRHRnNiM013SGhjTk1qWXdOVEE0TURreE1ETTVXaGNOTXpZd05UQTFNRGt4TURNNVdqQVFNUTR3REFZRApWUVFLRXdWMFlXeHZjekFxTUFVR0F5dGxjQU1oQUFBSlFPaGFaZnVtc2wzaDhGUUlTL2h4Tk5Wa2E1YkI0WHNLCm5pcGJENitZbzJFd1h6QU9CZ05WSFE4QkFmOEVCQU1DQW9Rd0hRWURWUjBsQkJZd0ZBWUlLd1lCQlFVSEF3RUcKQ0NzR0FRVUZCd01DTUE4R0ExVWRFd0VCL3dRRk1BTUJBZjh3SFFZRFZSME9CQllFRk4xQzB4dlc1S0F0cmdGZwpoNzg5ZkI5Q2FFYXFNQVVHQXl0bGNBTkJBQ0JObnlvUVlqT29tYVpFUDFpTVQ2bWlkSlkvYUZUNHd4RXNJRzVHCjlYdDlNS0gvcStzNXpiV0s5cWZWYmdIdXFaeVNQUkdNa0lDTldvZ204blQ4alE4PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
|
||||||
|
key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFFzekVqWk1ZZnZqbVBvbDl3TDcrSTFWSEhvWjluMDdwWUViUlJnVWtXeQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K
|
||||||
|
certSANs: []
|
||||||
|
kubelet:
|
||||||
|
image: ghcr.io/siderolabs/kubelet:v1.36.0
|
||||||
|
defaultRuntimeSeccompProfileEnabled: true
|
||||||
|
disableManifestsDirectory: true
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.2/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
image: ghcr.io/siderolabs/installer:v1.13.0
|
||||||
|
wipe: false
|
||||||
|
grubUseUKICmdline: true
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
features:
|
||||||
|
diskQuotaSupport: true
|
||||||
|
kubePrism:
|
||||||
|
enabled: true
|
||||||
|
port: 7445
|
||||||
|
hostDNS:
|
||||||
|
enabled: true
|
||||||
|
forwardKubeDNSToHost: true
|
||||||
|
nodeLabels:
|
||||||
|
node.kubernetes.io/exclude-from-external-load-balancers: ""
|
||||||
|
cluster:
|
||||||
|
id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc=
|
||||||
|
secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI=
|
||||||
|
controlPlane:
|
||||||
|
endpoint: https://10.0.4.22:6443
|
||||||
|
clusterName: kozel-k8s
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
|
dnsDomain: cluster.local
|
||||||
|
podSubnets:
|
||||||
|
- 10.244.0.0/16
|
||||||
|
serviceSubnets:
|
||||||
|
- 10.96.0.0/12
|
||||||
|
token: jqb3h8.8r6msfb5i17onky4
|
||||||
|
secretboxEncryptionSecret: X33FAohETFs7CNi8C0yf0m/g+g3qd4+EQCP8xnZp0Lw=
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUlhdHgvZmV3S05MSXFRdFQzenRQTjhMYkFEUSsxU1A4c3VOWVdNWFhiSkRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZFRxM1lsdU02azNRN0NZWW9RZzB1ZjhoRVdzaEc1TEc1dmVNMUx1Z1FEUk5BLzFEN1ZaQgpkYmtiaC9Hd21XbDQvR1U4eFJxRkMzc2NhMVRxWTNSWW13PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
aggregatorCA:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVA0c0IvRVk3d3pveWc2Mm8zaU5GVzZ6QXkzWmxiN3IwL0FjVnlLL1RORU1vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFd0lSZ2UvTldHdTQ1TDhPOFgwMmxHSFdUR2pEUnhKM1JpVkNibnN4dTFMaXFzbGxHNTNHWQpweVFxVWFpVjRCV0oyZWd2ZUtXbisrOWpDVEdyclRIV29BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
serviceAccount:
|
||||||
|
key: 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
|
||||||
|
apiServer:
|
||||||
|
image: registry.k8s.io/kube-apiserver:v1.36.0
|
||||||
|
admissionControl:
|
||||||
|
- name: PodSecurity
|
||||||
|
configuration:
|
||||||
|
apiVersion: pod-security.admission.config.k8s.io/v1alpha1
|
||||||
|
defaults:
|
||||||
|
audit: restricted
|
||||||
|
audit-version: latest
|
||||||
|
enforce: baseline
|
||||||
|
enforce-version: latest
|
||||||
|
warn: restricted
|
||||||
|
warn-version: latest
|
||||||
|
exemptions:
|
||||||
|
namespaces:
|
||||||
|
- kube-system
|
||||||
|
runtimeClasses: []
|
||||||
|
usernames: []
|
||||||
|
kind: PodSecurityConfiguration
|
||||||
|
auditPolicy:
|
||||||
|
apiVersion: audit.k8s.io/v1
|
||||||
|
kind: Policy
|
||||||
|
rules:
|
||||||
|
- level: Metadata
|
||||||
|
controllerManager:
|
||||||
|
image: registry.k8s.io/kube-controller-manager:v1.36.0
|
||||||
|
proxy:
|
||||||
|
image: registry.k8s.io/kube-proxy:v1.36.0
|
||||||
|
scheduler:
|
||||||
|
image: registry.k8s.io/kube-scheduler:v1.36.0
|
||||||
|
discovery:
|
||||||
|
enabled: true
|
||||||
|
registries:
|
||||||
|
kubernetes:
|
||||||
|
disabled: true
|
||||||
|
service: {}
|
||||||
|
etcd:
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU4vZXFHVjdTRGdCOE50dW1nVlVTS3hxTmJKUVNrWVdtV3JabzNFNVVTNjZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSzZmUXBOK2xhWmNYWHRSVWQyR1pGUkNPeUNaSXNXSDM0N0NzU2ZZMkpoaE9WN1QyZ3lGOQo0cTJhV0srd0tjZCtpTVBtdE5ncy9UUnlSbGhwQlhRQnBBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
|
---
|
||||||
|
apiVersion: v1alpha1
|
||||||
|
kind: HostnameConfig
|
||||||
|
auto: stable
|
||||||
@@ -0,0 +1,19 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
clusters:
|
||||||
|
- cluster:
|
||||||
|
certificate-authority-data: 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
|
||||||
|
server: https://10.0.4.22:6443
|
||||||
|
name: kozel-k8s
|
||||||
|
contexts:
|
||||||
|
- context:
|
||||||
|
cluster: kozel-k8s
|
||||||
|
namespace: default
|
||||||
|
user: admin@kozel-k8s
|
||||||
|
name: admin@kozel-k8s
|
||||||
|
current-context: admin@kozel-k8s
|
||||||
|
kind: Config
|
||||||
|
users:
|
||||||
|
- name: admin@kozel-k8s
|
||||||
|
user:
|
||||||
|
client-certificate-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJoVENDQVN1Z0F3SUJBZ0lSQU8zeDhYemY4dFQ4SDJtTEFjcHN0TWd3Q2dZSUtvWkl6ajBFQXdJd0ZURVQKTUJFR0ExVUVDaE1LYTNWaVpYSnVaWFJsY3pBZUZ3MHlOakExTURneE1EQXlNamRhRncweU56QTFNRGd4TURBeQpNemRhTUNreEZ6QVZCZ05WQkFvVERuTjVjM1JsYlRwdFlYTjBaWEp6TVE0d0RBWURWUVFERXdWaFpHMXBiakJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkd6cmplc1JjTUd2bHp1alRmNHhWektJTlVMcDBlSHUKR1JhMnRiZ3MreG4yYmxzalNHYWo2M1BpOVpVOW5TL1hZcnFvRjVaS25zK0gzb1JqT1hoZmdZeWpTREJHTUE0RwpBMVVkRHdFQi93UUVBd0lGb0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFqQWZCZ05WSFNNRUdEQVdnQlIwCnFKWW84Ym1QLzNUTjduRWtQb2NDUXJYdmFEQUtCZ2dxaGtqT1BRUURBZ05JQURCRkFpQmRydnFDM3RidytpME8KN3NuTXhYVTh2c3orcU9Eelh2UVplb1BoMG5qblZnSWhBTzJLemYwZUNjQTlSQndqOFVoTzRkaGMxUGFhdDRyVApwbVlpRERObGovQ3EKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
|
||||||
|
client-key-data: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUgzaEo3SzdYU2xNSWNBbkNRQlhrSzlNRUdHU2gzejRaaGJKRFlxdGZKVThvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFYk91TjZ4Rnd3YStYTzZOTi9qRlhNb2cxUXVuUjRlNFpGcmExdUN6N0dmWnVXeU5JWnFQcgpjK0wxbFQyZEw5ZGl1cWdYbGtxZXo0ZmVoR001ZUYrQmpBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
machine:
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
network:
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
|
||||||
|
cluster:
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
hostname: k8s-cp-00
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.2/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
hostname: k8s-cp-01
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.3/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
hostname: k8s-cp-02
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.4/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
@@ -0,0 +1,10 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
hostname: k8s-wrk-00
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.12/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
@@ -0,0 +1,10 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
hostname: k8s-wrk-01
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.13/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
@@ -0,0 +1,10 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
hostname: k8s-wrk-02
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.14/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
machine:
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
network:
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
|
||||||
|
cluster:
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.2/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.3/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.4/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
vip:
|
||||||
|
ip: 10.0.4.22
|
||||||
@@ -0,0 +1,9 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.12/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
@@ -0,0 +1,9 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.13/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
@@ -0,0 +1,9 @@
|
|||||||
|
machine:
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.14/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
factory.talos.dev/installer/cc493cae44e0bdbbefb5b5d1fb22ff724134cd7c6bb65172fa84e181568be45d:v1.13.0
|
||||||
@@ -0,0 +1,10 @@
|
|||||||
|
context: kozel-k8s
|
||||||
|
contexts:
|
||||||
|
kozel-k8s:
|
||||||
|
endpoints:
|
||||||
|
- 10.0.4.22
|
||||||
|
nodes:
|
||||||
|
- 10.0.4.2
|
||||||
|
ca: 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
|
||||||
|
crt: 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
|
||||||
|
key: LS0tLS1CRUdJTiBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0KTUM0Q0FRQXdCUVlESzJWd0JDSUVJSFZxTy9zSDlyTnlJbThUZmlPa3BZdWZnMnNZejJYQWhnUUtuZllidDV4UQotLS0tLUVORCBFRDI1NTE5IFBSSVZBVEUgS0VZLS0tLS0K
|
||||||
@@ -0,0 +1,81 @@
|
|||||||
|
node: 10.0.4.12
|
||||||
|
metadata:
|
||||||
|
namespace: config
|
||||||
|
type: MachineConfigs.config.talos.dev
|
||||||
|
id: v1alpha1
|
||||||
|
version: 1
|
||||||
|
owner:
|
||||||
|
phase: running
|
||||||
|
created: 2026-05-09T10:30:48Z
|
||||||
|
updated: 2026-05-09T10:30:48Z
|
||||||
|
annotations:
|
||||||
|
talos.dev/yaml-spec: 1
|
||||||
|
spec: |
|
||||||
|
version: v1alpha1
|
||||||
|
debug: false
|
||||||
|
persist: true
|
||||||
|
machine:
|
||||||
|
type: worker
|
||||||
|
token: ic1fbn.1hftihpg6t1iz8ac
|
||||||
|
ca:
|
||||||
|
crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJQekNCOHFBREFnRUNBaEVBKzFzMUtxamJBa0FVZFJKWnAxem1JakFGQmdNclpYQXdFREVPTUF3R0ExVUUKQ2hNRmRHRnNiM013SGhjTk1qWXdOVEE0TURreE1ETTVXaGNOTXpZd05UQTFNRGt4TURNNVdqQVFNUTR3REFZRApWUVFLRXdWMFlXeHZjekFxTUFVR0F5dGxjQU1oQUFBSlFPaGFaZnVtc2wzaDhGUUlTL2h4Tk5Wa2E1YkI0WHNLCm5pcGJENitZbzJFd1h6QU9CZ05WSFE4QkFmOEVCQU1DQW9Rd0hRWURWUjBsQkJZd0ZBWUlLd1lCQlFVSEF3RUcKQ0NzR0FRVUZCd01DTUE4R0ExVWRFd0VCL3dRRk1BTUJBZjh3SFFZRFZSME9CQllFRk4xQzB4dlc1S0F0cmdGZwpoNzg5ZkI5Q2FFYXFNQVVHQXl0bGNBTkJBQ0JObnlvUVlqT29tYVpFUDFpTVQ2bWlkSlkvYUZUNHd4RXNJRzVHCjlYdDlNS0gvcStzNXpiV0s5cWZWYmdIdXFaeVNQUkdNa0lDTldvZ204blQ4alE4PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
|
||||||
|
key: ""
|
||||||
|
certSANs: []
|
||||||
|
kubelet:
|
||||||
|
image: ghcr.io/siderolabs/kubelet:v1.36.0
|
||||||
|
defaultRuntimeSeccompProfileEnabled: true
|
||||||
|
disableManifestsDirectory: true
|
||||||
|
network:
|
||||||
|
interfaces:
|
||||||
|
- interface: ens18
|
||||||
|
addresses:
|
||||||
|
- 10.0.4.12/24
|
||||||
|
routes:
|
||||||
|
- network: 0.0.0.0/0
|
||||||
|
gateway: 10.0.4.1
|
||||||
|
nameservers:
|
||||||
|
- 10.0.4.1
|
||||||
|
install:
|
||||||
|
disk: /dev/sda
|
||||||
|
image: ghcr.io/siderolabs/installer:v1.13.0
|
||||||
|
wipe: false
|
||||||
|
grubUseUKICmdline: true
|
||||||
|
time:
|
||||||
|
servers:
|
||||||
|
- cz.pool.ntp.org
|
||||||
|
features:
|
||||||
|
diskQuotaSupport: true
|
||||||
|
kubePrism:
|
||||||
|
enabled: true
|
||||||
|
port: 7445
|
||||||
|
hostDNS:
|
||||||
|
enabled: true
|
||||||
|
forwardKubeDNSToHost: true
|
||||||
|
cluster:
|
||||||
|
id: rcdtSQFfBJ0CKKuExo5wD8wx7fIEC6YlA2SfQSkuxVc=
|
||||||
|
secret: C6O41K5frzT+kDhmmlopbmqTedQxMTUXIhyy+IwExkI=
|
||||||
|
controlPlane:
|
||||||
|
endpoint: https://10.0.4.22:6443
|
||||||
|
clusterName: kozel-k8s
|
||||||
|
network:
|
||||||
|
cni:
|
||||||
|
name: none
|
||||||
|
dnsDomain: cluster.local
|
||||||
|
podSubnets:
|
||||||
|
- 10.244.0.0/16
|
||||||
|
serviceSubnets:
|
||||||
|
- 10.96.0.0/12
|
||||||
|
token: jqb3h8.8r6msfb5i17onky4
|
||||||
|
ca:
|
||||||
|
crt: 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
|
||||||
|
key: ""
|
||||||
|
discovery:
|
||||||
|
enabled: true
|
||||||
|
registries:
|
||||||
|
kubernetes:
|
||||||
|
disabled: true
|
||||||
|
service: {}
|
||||||
|
---
|
||||||
|
apiVersion: v1alpha1
|
||||||
|
kind: HostnameConfig
|
||||||
|
auto: stable
|
||||||
Reference in New Issue
Block a user