infrastructure/weyma-talos
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: infrastructure:ec154c641f276070c158fa468a177b9c05e9ef06
Branches Tags
infrastructure:main
...
compare: infrastructure:da770facc59fa4cd3352de2ac57721e8714c7fb8
Branches Tags
infrastructure:main

2 Commits
ec154c641f ... da770facc5

Author SHA1 Message Date
williamp
da770facc5 Merge pull request 'create omni cluster template' (#158) from omni-templates into main 
Reviewed-on: #158
 2025-12-13 22:34:05 +00:00
William P
f0dad1e033 create omni cluster template 2025-12-13 12:48:56 -05:00
11 changed files with 475 additions and 0 deletions
Expand all files Collapse all files

289
omni/cluster.yaml Normal file
View File

@@ -0,0 +1,289 @@
kind: Cluster
name: weyma-talos
kubernetes:
version: v1.34.2
talos:
version: v1.11.5
features:
backupConfiguration:
interval: 6h0m0s
patches:
- idOverride: 500-5100c0c3-f72e-45f5-8cde-4a1c3b6f72a8
annotations:
description: pod-svc-subnets
name: User defined patch
inline:
cluster:
network:
podSubnets:
- 10.244.0.0/16
serviceSubnets:
- 10.112.0.0/12
- idOverride: 500-7c228773-8b44-40b0-8b4c-30f617668af0
annotations:
description: weyma-image-cache
name: User defined patch
inline:
machine:
registries:
mirrors:
docker.io:
endpoints:
- http://10.105.6.215:6000
factory.talos.dev:
endpoints:
- http://10.105.6.215:6004
gcr.io:
endpoints:
- http://10.105.6.215:6002
ghcr.io:
endpoints:
- http://10.105.6.215:6003
registry.k8s.io:
endpoints:
- http://10.105.6.215:6001
- idOverride: 500-f198cacc-280b-4874-a410-252c160621a7
annotations:
name: weyma-bind-addr
inline:
cluster:
controllerManager:
extraArgs:
bind-address: 0.0.0.0
proxy:
extraArgs:
metrics-bind-address: 0.0.0.0:10249
scheduler:
extraArgs:
bind-address: 0.0.0.0
- idOverride: 500-fc113705-0777-4b52-8df0-7cee67fcc68e
annotations:
name: weyma-bootstrap-metrics
inline:
cluster:
extraManifests:
- https://raw.githubusercontent.com/alex1989hu/kubelet-serving-cert-approver/main/deploy/standalone-install.yaml
inlineManifests:
- contents: |-
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
k8s-app: metrics-server
name: metrics-server
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
k8s-app: metrics-server
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-view: "true"
name: system:aggregated-metrics-reader
rules:
- apiGroups:
- metrics.k8s.io
resources:
- pods
- nodes
verbs:
- get
- list
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
k8s-app: metrics-server
name: system:metrics-server
rules:
- apiGroups:
- ""
resources:
- nodes/metrics
verbs:
- get
- apiGroups:
- ""
resources:
- pods
- nodes
verbs:
- get
- list
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
k8s-app: metrics-server
name: metrics-server-auth-reader
namespace: kube-system
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
k8s-app: metrics-server
name: metrics-server:system:auth-delegator
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:auth-delegator
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
k8s-app: metrics-server
name: system:metrics-server
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:metrics-server
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: kube-system
---
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: metrics-server
name: metrics-server
namespace: kube-system
spec:
ports:
- appProtocol: https
name: https
port: 443
protocol: TCP
targetPort: https
selector:
k8s-app: metrics-server
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
k8s-app: metrics-server
name: metrics-server
namespace: kube-system
spec:
selector:
matchLabels:
k8s-app: metrics-server
strategy:
rollingUpdate:
maxUnavailable: 0
template:
metadata:
labels:
k8s-app: metrics-server
spec:
containers:
- args:
- --cert-dir=/tmp
- --secure-port=10250
- --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
- --kubelet-use-node-status-port
- --metric-resolution=15s
- --kubelet-insecure-tls
image: registry.k8s.io/metrics-server/metrics-server:v0.8.0
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
path: /livez
port: https
scheme: HTTPS
periodSeconds: 10
name: metrics-server
ports:
- containerPort: 10250
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /readyz
port: https
scheme: HTTPS
initialDelaySeconds: 20
periodSeconds: 10
resources:
requests:
cpu: 100m
memory: 200Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
volumeMounts:
- mountPath: /tmp
name: tmp-dir
nodeSelector:
kubernetes.io/os: linux
priorityClassName: system-cluster-critical
serviceAccountName: metrics-server
volumes:
- emptyDir: {}
name: tmp-dir
---
apiVersion: apiregistration.k8s.io/v1
kind: APIService
metadata:
labels:
k8s-app: metrics-server
name: v1beta1.metrics.k8s.io
spec:
group: metrics.k8s.io
groupPriorityMinimum: 100
insecureSkipTLSVerify: true
service:
name: metrics-server
namespace: kube-system
version: v1beta1
versionPriority: 100
name: metrics-server
- contents: |-
apiVersion: v1
kind: Service
metadata:
name: metrics-lb
namespace: kube-system
annotations:
metallb.io/ip-allocated-from-pool: test-pool
spec:
type: LoadBalancer
ports:
- name: https
port: 443
protocol: TCP
targetPort: https
selector:
k8s-app: metrics-server
name: metrics-lb

5
omni/controlplane.yaml Normal file
View File

@@ -0,0 +1,5 @@
kind: ControlPlane
machines:
- 20b4c826-e699-43b3-826d-73eb5173680b
- 30303031-3030-3030-6335-303731636665
- 5fdea709-56ad-45f2-966d-5e344dbe4fdf

16
omni/machine/weyma-talos-cp01.yaml Normal file
View File

@@ -0,0 +1,16 @@
kind: Machine
systemExtensions:
- siderolabs/nut-client
- siderolabs/qemu-guest-agent
name: 5fdea709-56ad-45f2-966d-5e344dbe4fdf
patches:
- idOverride: 400-cm-5fdea709-56ad-45f2-966d-5e344dbe4fdf
inline:
machine:
network:
hostname: weyma-talos-cp01
interfaces:
- deviceSelector:
driver: virtio*
hardwareAddr: bc:24:11:e6:ff:7b
dhcp: true

13
omni/machine/weyma-talos-cp02.yaml Normal file
View File

@@ -0,0 +1,13 @@
kind: Machine
name: 20b4c826-e699-43b3-826d-73eb5173680b
patches:
- idOverride: 400-cm-20b4c826-e699-43b3-826d-73eb5173680b
inline:
machine:
network:
hostname: weyma-talos-cp02
interfaces:
- deviceSelector:
driver: virtio*
hardwareAddr: 00:16:3e:9c:01:27
dhcp: true

14
omni/machine/weyma-talos-cp04.yaml Normal file
View File

@@ -0,0 +1,14 @@
kind: Machine
systemExtensions:
- siderolabs/nut-client
name: 30303031-3030-3030-6335-303731636665
patches:
- idOverride: 400-cm-30303031-3030-3030-6335-303731636665
inline:
machine:
network:
hostname: weyma-talos-cp04
interfaces:
- deviceSelector:
hardwareAddr: dc:a6:32:95:0f:cb
dhcp: true

30
omni/machine/weyma-talos-testw01.yaml Normal file
View File

@@ -0,0 +1,30 @@
kind: Machine
systemExtensions:
- siderolabs/i915
- siderolabs/nut-client
name: 03000200-0400-0500-0006-000700080009
install:
disk: /dev/sda
patches:
- idOverride: 400-cm-03000200-0400-0500-0006-000700080009
inline:
machine:
network:
hostname: weyma-talos-testw01
interfaces:
- deviceSelector:
driver: igc
hardwareAddr: e8:ff:1e:d5:f8:22
dhcp: true
vlans:
- dhcp: false
vlanId: 50
- deviceSelector:
hardwareAddr: e8:ff:1e:d5:f8:21
dhcp: true
mtu: 9000
- bridge:
interfaces:
- enp2s0.50
dhcp: false
interface: br0

25
omni/machine/weyma-talos-testw04.yaml Normal file
View File

@@ -0,0 +1,25 @@
kind: Machine
name: 1006b91a-ecbf-11ea-aed4-046ba1ee3700
patches:
- idOverride: 400-cm-1006b91a-ecbf-11ea-aed4-046ba1ee3700
inline:
machine:
network:
hostname: weyma-talos-testw04
interfaces:
- deviceSelector:
driver: mlx4_core
hardwareAddr: f4:52:14:60:5e:30
dhcp: true
vlans:
- dhcp: false
vlanId: 50
- deviceSelector:
hardwareAddr: f4:52:14:60:5e:31
dhcp: true
mtu: 9000
- bridge:
interfaces:
- eno1.50
dhcp: false
interface: br0

24
omni/machine/weyma-talos-testw05.yaml Normal file
View File

@@ -0,0 +1,24 @@
kind: Machine
name: 5f0cd701-0784-4fcc-8e52-3b3304049972
patches:
- idOverride: 400-cm-5f0cd701-0784-4fcc-8e52-3b3304049972
inline:
machine:
network:
hostname: weyma-talos-testw05
interfaces:
- deviceSelector:
hardwareAddr: 00:16:3e:b3:dd:f8
dhcp: true
- deviceSelector:
hardwareAddr: 00:16:3e:e5:79:0a
dhcp: true
mtu: 9000
- deviceSelector:
hardwareAddr: 00:16:3e:6b:1c:1d
dhcp: false
- bridge:
interfaces:
- enx00163e6b1c1d
dhcp: false
interface: br0

25
omni/machine/weyma-talos-w02.yaml Normal file
View File

@@ -0,0 +1,25 @@
kind: Machine
name: 02c02200-f403-11ef-9372-70f446672600
patches:
- idOverride: 400-cm-02c02200-f403-11ef-9372-70f446672600
inline:
machine:
network:
hostname: weyma-talos-w02
interfaces:
- deviceSelector:
driver: igc
hardwareAddr: e8:ff:1e:d4:b8:89
dhcp: true
vlans:
- dhcp: false
vlanId: 50
- deviceSelector:
hardwareAddr: e8:ff:1e:d4:b8:8a
dhcp: true
mtu: 9000
- bridge:
interfaces:
- enp1s0.50
dhcp: false
interface: br0

27
omni/machine/weyma-talos-w03.yaml Normal file
View File

@@ -0,0 +1,27 @@
kind: Machine
name: da507021-8912-4337-86a3-94a05bd1cf05
patches:
- idOverride: 400-cm-da507021-8912-4337-86a3-94a05bd1cf05
inline:
machine:
network:
hostname: weyma-talos-w03
interfaces:
- deviceSelector:
driver: virtio*
hardwareAddr: bc:24:11:be:6c:08
dhcp: true
- deviceSelector:
driver: virtio*
hardwareAddr: bc:24:11:f8:4a:92
dhcp: true
mtu: 8996
- deviceSelector:
driver: virtio*
hardwareAddr: bc:24:11:93:02:0e
dhcp: false
- bridge:
interfaces:
- enxbc241193020e
dhcp: false
interface: br0

7
omni/workers.yaml Normal file
View File

@@ -0,0 +1,7 @@
kind: Workers
machines:
- 02c02200-f403-11ef-9372-70f446672600
- 03000200-0400-0500-0006-000700080009
- 1006b91a-ecbf-11ea-aed4-046ba1ee3700
- 5f0cd701-0784-4fcc-8e52-3b3304049972
- da507021-8912-4337-86a3-94a05bd1cf05