mirror of
https://github.com/outbackdingo/homelab-v.git
synced 2026-08-25 14:53:19 +00:00
35 lines
1.7 KiB
HCL
35 lines
1.7 KiB
HCL
talos_cluster_config = {
|
|
name = "talos"
|
|
# This should point to the vip as below(if nodes on layer 2) or one of the nodes (if nodes not on layer 2)
|
|
# Note: Nodes are not on layer 2 if there is a router between them (even a mesh router)
|
|
# Not sure how it works if connected to the same router via ethernet (does it act as a switch then???)
|
|
# Ref: https://www.talos.dev/v1.9/talos-guides/network/vip/#requirements
|
|
# Note This is Kubernetes API endpoint. Different from all mentions of Talos endpoints.
|
|
endpoint = "192.168.1.102"
|
|
vip = "192.168.1.99"
|
|
gateway = "192.168.1.1"
|
|
# The version of talos features to use in generated machine configuration. Generally the same as image version.
|
|
# See https://github.com/siderolabs/terraform-provider-talos/blob/main/docs/data-sources/machine_configuration.md
|
|
talos_machine_config_version = "v1.9.2"
|
|
proxmox_cluster = "homelab"
|
|
kubernetes_version = "1.32.0" # renovate: github-releases=kubernetes/kubernetes
|
|
cilium = {
|
|
bootstrap_manifest_path = "talos/inline-manifests/cilium-install.yaml"
|
|
values_file_path = "../../k8s/infra/network/cilium/values.yaml"
|
|
}
|
|
kubelet = <<-EOT
|
|
extraArgs:
|
|
# Needed for Netbird agent https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls
|
|
allowed-unsafe-sysctls: net.ipv4.conf.all.src_valid_mark
|
|
EOT
|
|
api_server = <<-EOT
|
|
extraArgs:
|
|
oidc-issuer-url: "https://authelia.stonegarden.dev"
|
|
oidc-client-id: "kubectl"
|
|
oidc-username-claim: "preferred_username"
|
|
oidc-username-prefix: "authelia:"
|
|
oidc-groups-claim: "groups"
|
|
oidc-groups-prefix: "authelia:"
|
|
EOT
|
|
}
|