akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-08 07:54:42 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(talos): bootstrap Kubernetes cluster funk (3 nodes, v1.33.1)

Browse source 
- Add talconfig.yaml with compute-01/02/03 (nvme0n1, Flannel CNI)
- Add SOPS/age encryption for talsecret.sops.yaml
- Add patches: NTP/DNS → storage-01, kubelet reserved for 8GB workers
- Fix nftables: open DHCP port 67 for cluster LAN
- Add dnsmasq DHCP with static leases for all 3 compute nodes
- Add admin/talos.md: full install procedure + admin commands
- Install kubectl + talosctl on storage-01

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
alkatrazz 2026-05-12 22:11:38 +02:00
parent a87d1baf76
commit bb72145365
10 changed files with 392 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
ansible/roles/gateway/templates/nftables.conf.j2
View file

@ -20,9 +20,10 @@ table inet filter {
# SSH depuis le LAN domestique et le LAN cluster
tcp dport 22 ip saddr { 192.168.1.0/24, 192.168.10.0/24 } accept
# DNS (dnsmasq)
# DNS + DHCP (dnsmasq)
udp dport 53 ip saddr 192.168.10.0/24 accept
tcp dport 53 ip saddr 192.168.10.0/24 accept
udp dport 67 iif {{ lan_interface }} accept
# NFS
tcp dport { 111, 2049 } ip saddr 192.168.10.0/24 accept