Bootstrap a Talos Linux cluster for Cozystack using talos-bootstrap
talos-bootstrap is an interactive script for bootstrapping Kubernetes clusters on Talos OS.
It was created by Ænix to simplify the installation of Talos Linux on bare metal nodes in a user-friendly manner.
Install dependencies:
talosctldialognmap
Preparation
Create a new directory for holding your cluster configuration
mkdir cluster1
cd cluster1
Write configuration for Cozystack:
cat > patch.yaml <<\EOT
machine:
kubelet:
nodeIP:
validSubnets:
- 192.168.100.0/24
extraConfig:
maxPods: 512
kernel:
modules:
- name: openvswitch
- name: drbd
parameters:
- usermode_helper=disabled
- name: zfs
- name: spl
- name: vfio_pci
- name: vfio_iommu_type1
install:
image: ghcr.io/cozystack/cozystack/talos:v1.9.5
registries:
mirrors:
docker.io:
endpoints:
- https://mirror.gcr.io
files:
- content: |
[plugins]
[plugins."io.containerd.grpc.v1.cri"]
device_ownership_from_security_context = true
[plugins."io.containerd.cri.v1.runtime"]
device_ownership_from_security_context = true
path: /etc/cri/conf.d/20-customization.part
op: create
cluster:
network:
cni:
name: none
dnsDomain: cozy.local
podSubnets:
- 10.244.0.0/16
serviceSubnets:
- 10.96.0.0/16
EOT
cat > patch-controlplane.yaml <<\EOT
machine:
nodeLabels:
node.kubernetes.io/exclude-from-external-load-balancers:
$patch: delete
cluster:
allowSchedulingOnControlPlanes: true
controllerManager:
extraArgs:
bind-address: 0.0.0.0
scheduler:
extraArgs:
bind-address: 0.0.0.0
apiServer:
certSANs:
- 127.0.0.1
proxy:
disabled: true
discovery:
enabled: false
etcd:
advertisedSubnets:
- 192.168.100.0/24
EOT
If you use keycloak.
- Add in
patch-controlplane.yaml:cluster: apiServer: apiServer: extraArgs: oidc-issuer-url: "https://keycloak.example.com/realms/cozy" oidc-client-id: "kubernetes" oidc-username-claim: "preferred_username" oidc-groups-claim: "groups"
Where example.com is your root-host.
Run talos-bootstrap to deploy the first node in a cluster:
talos-bootstrap install
⚠️ If your nodes are running on an external network, you must specify each node explicitly in the argument:
talos-bootstrap install -n 1.2.3.4
Where 1.2.3.4 is the IP-address of your remote node.
Export your KUBECONFIG variable:
export KUBECONFIG=$PWD/kubeconfig
Check connection:
kubectl get ns
example output:
NAME STATUS AGE
default Active 7m56s
kube-node-lease Active 7m56s
kube-public Active 7m56s
kube-system Active 7m56s
BOOTSTRAP_ETCD=false from your cluster.conf file.Repeat the step for the other nodes in a cluster.
READY: False, don’t worry about that, this is because you disabled the default CNI plugin in the previous step. Cozystack will install it’s own CNI-plugin on the next step.Now follow Get Started guide starting from the Install Cozystack section, to continue the installation.