35 Commits

Author SHA1 Message Date
Serge Logvinov
750949124b fix: csr dns name check
The certificate’s DNS name cannot be set to kubernetes,
because that name is reserved for the default service (kubernetes.default.svc) and is already used by the kube-api server daemons.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-09-16 13:06:58 +07:00
Serge Logvinov
4402b31acc chore: bump deps
Update deps

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-09-02 11:36:54 +07:00
Serge Logvinov
9c000cf546 chore: bump deps
Update deps

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-07-29 14:38:53 +07:00
Serge Logvinov
bbe9294e9f chore: bump deps
Update deps

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-06-27 12:27:49 +07:00
Serge Logvinov
01d526dc34 chore: bump deps
Update deps

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-06-01 09:20:30 +07:00
Serge Logvinov
95b4c4be60 fix: ipv6 small subnets
Additionally, check the subnet mask — it should not be set as /128

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-05-15 11:08:37 +07:00
Serge Logvinov
a0e8169dd2 chore: bump deps
Update deps

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-05-06 19:43:53 +07:00
Serge Logvinov
470f45c559 chore: bump deps
Update deps

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-04-11 08:54:57 +07:00
Serge Logvinov
dc5bfc451f chore: bump deps
Update deps

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-02-25 10:41:32 +02:00
Serge Logvinov
2c0bd2f3d7 feat: add special transformer func
As in helm, these functions are very useful.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-02-17 12:19:21 +02:00
Serge Logvinov
82c154a238 feat: add taints capabilities
Add the capability to taint nodes during the initialization stage.
It applies only once, as other controllers may later untaint the node.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-02-02 12:05:17 +02:00
Serge Logvinov
d9a9fe0fa1 chore: release v1.9.0
Release v1.9.0

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2025-01-03 13:06:04 +02:00
Serge Logvinov
adb835e3d0 chore: bump deps
Update talos deps to 1.9.0

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-12-23 12:13:49 +02:00
Serge Logvinov
2cfa7c64ac chore: bump deps
Update talos deps to 1.8.3

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-11-25 20:58:47 +02:00
Serge Logvinov
68d41338b1 fix: node allocator
If a node has a large subnet, such as a /56 or larger, we need to allocate a /64 subnet for each individual node.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-10-14 16:57:01 +03:00
Serge Logvinov
8350f49123 chore: bump deps
Update talos deps to 1.8.0

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-09-24 09:41:56 +03:00
Serge Logvinov
09a5b9e24d refactor: csr approval controller
Move CSR Approval to separate controller.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-08-28 17:12:08 +03:00
Serge Logvinov
122019a142 chore: bump deps
Update:
   kubernetes
   COSI runtime 0.5.5

Add stale issues action.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-08-05 14:33:02 +03:00
Serge Logvinov
326fc53c84 feat: gcp spot instances
Remove node kubernetes resource on spot node eviction event.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-07-11 14:45:01 +03:00
Serge Logvinov
e1a0e0e5a4 feat: node ipam controller
Add node IPAM controller.

It supports two modes:
* RangeAllocator - classic mode (kubernetes does the same)
* CloudAllocator - Talos is responsible for setting PodCIDRs

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-07-05 11:27:03 +03:00
Serge Logvinov
3a4ae03854 feat: prefer permanent ipv6
In ipDiscovery() we prefer permanent ipv6 addresses over temporary ones.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-06-17 09:31:31 +03:00
Serge Logvinov
22e398449c feat: node transformer
Node transformer allows you to add extra labels/annotations and modify platform metadata.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-05-03 00:11:26 +03:00
Serge Logvinov
27aa781d17 chore: bump deps
Update:
  Github Actions deps
  Talos 1.6.7
  COSI runtime 0.4.1

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-04-16 07:50:14 +03:00
Serge Logvinov
9d65a90e9f chore: bump deps
Update:
  Go to 1.22
  K8s to 0.29.3
  Github Actions deps
  Talos 1.6.6

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-03-19 10:14:32 +02:00
Serge Logvinov
33faa60ccb chore: bump deps
Update:
  K8s to 0.29.1
  Github Actions deps
  Talos 1.6.4

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2024-02-05 10:51:04 +02:00
Serge Logvinov
eff652f311 chore: bump deps
Update:
  K8s to 0.28.3
  Github Actions deps
  Talos 1.5.5

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2023-11-15 23:31:09 +02:00
Serge Logvinov
214cc87c55 chore: bump deps
Update k8s to 0.28.2
Github Actions deps.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2023-09-20 09:29:43 +03:00
Serge Logvinov
5a1eaf7d29 chore: bump deps
Update k8s to 0.27.4

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2023-08-08 21:40:19 +03:00
Serge Logvinov
e44f5bcedc chore: bump deps
Update k8s to 0.27.2

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2023-05-27 11:31:38 +03:00
Serge Logvinov
2b53c2b9e7 feat: add node certificate approval
TalosCCM now can verify node CSR, and approve it if it OK.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2023-04-21 12:03:07 +03:00
Serge Logvinov
8583f5959f chore: bump deps
Update golang to 1.20.3 and bump deps.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2023-04-05 22:34:32 +03:00
Serge Logvinov
5a4413f353 chore: bump deps
Update golang to 1.20.2 and bump deps.

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2023-03-13 20:19:26 +02:00
Serge Logvinov
9e1b15e7c6 chore: bump deps
Bump deps

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2023-02-12 12:19:46 +02:00
Serge Logvinov
e34ca47fa6 chore: update go.mod
Update:
* talos machinery v1.3.0
* kubernetes machinery v0.26.0

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2022-12-17 10:43:49 +02:00
Serge Logvinov
345c59f4e9 feat: init ccm
* Add base function of CCM
* Helm-chart deployment

Signed-off-by: Serge Logvinov <serge.logvinov@sinextra.dev>
2022-11-18 07:49:54 +02:00