feat(talos): bootstrap Kubernetes cluster funk (3 nodes, v1.33.1)

- Add talconfig.yaml with compute-01/02/03 (nvme0n1, Flannel CNI)
- Add SOPS/age encryption for talsecret.sops.yaml
- Add patches: NTP/DNS → storage-01, kubelet reserved for 8GB workers
- Fix nftables: open DHCP port 67 for cluster LAN
- Add dnsmasq DHCP with static leases for all 3 compute nodes
- Add admin/talos.md: full install procedure + admin commands
- Install kubectl + talosctl on storage-01

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
alkatrazz 2026-05-12 22:11:38 +02:00
parent a87d1baf76
commit bb72145365
10 changed files with 392 additions and 3 deletions

1
.gitignore vendored
View file

@ -14,6 +14,7 @@ talos/clusterconfig/
# SOPS / age (clés privées — jamais dans git)
*.age
keys.txt
.config/sops/
# Claude Code (settings locaux à la machine)
.claude/settings.local.json