mirror of
https://github.com/optim-enterprises-bv/terraform-talos.git
synced 2025-10-29 17:42:47 +00:00
76 lines
1.6 KiB
Smarty
76 lines
1.6 KiB
Smarty
version: v1alpha1
|
|
debug: false
|
|
persist: true
|
|
machine:
|
|
type: worker
|
|
token: ${tokenMachine}
|
|
ca:
|
|
crt: ${caMachine}
|
|
kubelet:
|
|
image: ghcr.io/siderolabs/kubelet:${version}
|
|
defaultRuntimeSeccompProfileEnabled: true
|
|
extraArgs:
|
|
cloud-provider: external
|
|
rotate-server-certificates: true
|
|
node-labels: ${labels}
|
|
extraConfig:
|
|
imageGCHighThresholdPercent: 70
|
|
imageGCLowThresholdPercent: 50
|
|
allowedUnsafeSysctls: [net.core.somaxconn]
|
|
clusterDNS:
|
|
- 169.254.2.53
|
|
- ${cidrhost(split(",",serviceSubnets)[0], 10)}
|
|
nodeIP:
|
|
validSubnets: ${format("%#v",nodeSubnets)}
|
|
network:
|
|
interfaces:
|
|
- interface: dummy0
|
|
addresses:
|
|
- 169.254.2.53/32
|
|
kubespan:
|
|
enabled: false
|
|
allowDownPeerBypass: true
|
|
extraHostEntries:
|
|
- ip: ${ipv4_vip}
|
|
aliases:
|
|
- ${apiDomain}
|
|
install:
|
|
wipe: true
|
|
sysctls:
|
|
net.core.somaxconn: 65535
|
|
net.core.netdev_max_backlog: 4096
|
|
systemDiskEncryption:
|
|
state:
|
|
provider: luks2
|
|
keys:
|
|
- nodeID: {}
|
|
slot: 0
|
|
ephemeral:
|
|
provider: luks2
|
|
keys:
|
|
- nodeID: {}
|
|
slot: 0
|
|
options:
|
|
- no_read_workqueue
|
|
- no_write_workqueue
|
|
features:
|
|
rbac: true
|
|
stableHostname: true
|
|
apidCheckExtKeyUsage: true
|
|
cluster:
|
|
id: ${clusterID}
|
|
secret: ${clusterSecret}
|
|
controlPlane:
|
|
endpoint: https://${apiDomain}:6443
|
|
clusterName: ${clusterName}
|
|
discovery:
|
|
enabled: false
|
|
network:
|
|
dnsDomain: ${domain}
|
|
serviceSubnets: ${format("%#v",split(",",serviceSubnets))}
|
|
proxy:
|
|
disabled: true
|
|
token: ${token}
|
|
ca:
|
|
crt: ${ca}
|