Update docs, fix metallb ip pool
This commit is contained in:
parent
e36a1f348e
commit
f2d73d6cc2
@ -7,13 +7,18 @@ Like the cloud but local.
|
|||||||
- bitwarded secrets CLI (https://bitwarden.com/help/secrets-manager-cli/ )
|
- bitwarded secrets CLI (https://bitwarden.com/help/secrets-manager-cli/ )
|
||||||
|
|
||||||
## Talos Cluster
|
## Talos Cluster
|
||||||
|
### Machine check list
|
||||||
|
Using refurbished hardware is an adventure in configuration, make sure some things are standard before starting.
|
||||||
|
- Secure boot is off
|
||||||
|
- BIOS password disabled
|
||||||
|
- Enable restore after power outage
|
||||||
### Generate config
|
### Generate config
|
||||||
```sh
|
```sh
|
||||||
bws secret get <talos-secret-id> -o json | jq .value --raw-output > talos/secrets.yaml
|
bws secret get <talos-secret-id> -o json | jq .value --raw-output > talos/secrets.yaml
|
||||||
talosctl gen config fog https://192.168.1.43:6443 \
|
talosctl gen config fog https://192.168.1.43:6443 \
|
||||||
--with-secrets talos/secrets.yaml \
|
--with-secrets talos/secrets.yaml \
|
||||||
--config-patch @talos/machine_patch.yaml \
|
--config-patch @talos/machine_patch.yaml \
|
||||||
--config-patch-control-plane @talos/cluster_patch.yaml
|
--config-patch @talos/cluster_patch.yaml
|
||||||
```
|
```
|
||||||
### Add node to talos cluster
|
### Add node to talos cluster
|
||||||
```sh
|
```sh
|
||||||
@ -52,6 +57,8 @@ helm install --create-namespace --namespace metallb-system metallb metallb/metal
|
|||||||
kubectl label namespace metallb-system pod-security.kubernetes.io/enforce=privileged
|
kubectl label namespace metallb-system pod-security.kubernetes.io/enforce=privileged
|
||||||
kubectl label namespace metallb-system pod-security.kubernetes.io/audit=privileged
|
kubectl label namespace metallb-system pod-security.kubernetes.io/audit=privileged
|
||||||
kubectl label namespace metallb-system pod-security.kubernetes.io/warn=privileged
|
kubectl label namespace metallb-system pod-security.kubernetes.io/warn=privileged
|
||||||
|
kubectl -n metallb-system apply -f metallb/ipaddresspool.yaml
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
### Traefik
|
### Traefik
|
||||||
|
@ -5,6 +5,6 @@ metadata:
|
|||||||
namespace: metallb-system
|
namespace: metallb-system
|
||||||
spec:
|
spec:
|
||||||
addresses:
|
addresses:
|
||||||
- 192.168.1.38/32
|
# random range outside of DHCP and NOT the node ips
|
||||||
- 192.168.1.39/32
|
- 192.168.1.60-192.168.1.70
|
||||||
- 192.168.1.43/32
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user