diff options
| author | Alex Corcoles <alex@pdp7.net> | 2023-03-25 18:07:54 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-03-25 18:07:54 +0100 |
| commit | 02235af24dc4ffbd82bcc39fe4bd2a1bffd07ff4 (patch) | |
| tree | 572f5d0fdfee9150a67c728681170a83f0b80a62 | |
| parent | fd237fd5f7851e320a76367253afa663386e8779 (diff) | |
Document Talos role
| -rw-r--r-- | personal_infra/playbooks/roles/talos/README.md | 51 |
1 files changed, 49 insertions, 2 deletions
diff --git a/personal_infra/playbooks/roles/talos/README.md b/personal_infra/playbooks/roles/talos/README.md index 6c45f997..c5c35590 100644 --- a/personal_infra/playbooks/roles/talos/README.md +++ b/personal_infra/playbooks/roles/talos/README.md @@ -1,4 +1,51 @@ +# Talos Ansible role + +This role helps provision Talos clusters using Ansible. +Currently, this role only supports VMs on Proxmox and single node clusters. + +## Variables + +### Host variables + ``` -$ talosctl gen secrets -o talos/$cluster-secrets.yaml -$ ansible-vault encrypt talos/$cluster-secrets.yaml +proxmox: + id: 123 + host: inventory_name_of_proxmox_host + cores: n + memory: in MB + disk: in GB +network: + ip: x.y.z.t +talos_host: + talos_cluster: cluster_name + install_disk: /dev/vda ``` + +### Group variables + +``` +talos_clusters: + cluster_name: # you can have multiple clusters + endpoint: https://host_name:6443 +``` + +## Talos configuration + +Only the Talos secret for the cluster must be stored in version control. +You must create the secret and vault it: + +``` +$ talosctl gen secrets -o talos/${cluster_name}-secrets.yaml +$ ansible-vault encrypt talos/${cluster_name}-secrets.yaml +``` + +## Role + +With the above configuration, the role will: + +* Create the VM in Proxmox. +Until Talos includes https://github.com/siderolabs/talos/pull/5897 , [the playbook fishes the IP from the dnsmasq Proxmox instance](tasks/proxmox.yml#L13) by using [this script](files/get-ip). +* Sets up Talos. +* Fetches the kubeconfig. +* Deploys kustomizations in `k8s/base`. +See [my kustomizations](../../../k8s/base/). |