Files
homelab/tofu/kubernetes/talos/machine-config/control-plane.yaml.tftpl
2025-02-10 20:18:45 +01:00

45 lines
1.3 KiB
Plaintext

machine:
kubelet:
extraArgs:
# Needed for Netbird agent https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls
allowed-unsafe-sysctls: net.ipv4.conf.all.src_valid_mark
network:
hostname: ${hostname}
nodeLabels:
topology.kubernetes.io/region: ${cluster_name}
topology.kubernetes.io/zone: ${node_name}
cluster:
allowSchedulingOnControlPlanes: true
apiServer:
extraArgs:
oidc-issuer-url: https://authelia.stonegarden.dev
oidc-client-id: kubectl
oidc-username-claim: preferred_username
oidc-username-prefix: 'authelia:'
oidc-groups-claim: groups
oidc-groups-prefix: 'authelia:'
network:
cni:
name: none
proxy:
disabled: true
extraManifests:
- https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.2.1/standard-install.yaml
- https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/v1.2.1/config/crd/experimental/gateway.networking.k8s.io_tlsroutes.yaml
inlineManifests:
- name: cilium-values
contents: |
---
apiVersion: v1
kind: ConfigMap
metadata:
name: cilium-values
namespace: kube-system
data:
values.yaml: |-
${indent(10, cilium_values)}
- name: cilium-bootstrap
contents: |
${indent(6, cilium_install)}