Skip to content

Commit

Permalink
chore(talos): update formatting in talconfig
Browse files Browse the repository at this point in the history
Signed-off-by: Devin Buhl <[email protected]>
  • Loading branch information
onedr0p committed May 22, 2024
1 parent 13412a7 commit 452398d
Showing 1 changed file with 14 additions and 6 deletions.
20 changes: 14 additions & 6 deletions bootstrap/templates/kubernetes/bootstrap/talos/talconfig.yaml.j2
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ talosVersion: v1.7.2
# renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
kubernetesVersion: v1.30.1

clusterName: &cluster #{ bootstrap_cluster_name|default('home-kubernetes', true) }#
clusterName: "#{ bootstrap_cluster_name | default('home-kubernetes', true) }#"
endpoint: https://#{ bootstrap_controller_vip }#:6443
clusterPodNets:
- "#{ bootstrap_pod_network.split(',')[0] }#"
Expand All @@ -18,6 +18,8 @@ additionalApiServerCertSans: &sans
- "#{ item }#"
#% endfor %#
additionalMachineCertSans: *sans

# Disable built-in Flannel to use Cilium
cniConfig:
name: none

Expand Down Expand Up @@ -125,7 +127,8 @@ patches:
extraArgs:
rotate-server-certificates: true
nodeIP:
validSubnets: ["#{ bootstrap_node_network }#"]
validSubnets:
- #{ bootstrap_node_network }#
#% if bootstrap_dns_servers | length %#
# Force nameserver
Expand Down Expand Up @@ -168,7 +171,10 @@ patches:
- destination: /var/openebs/local
type: bind
source: /var/openebs/local
options: ["bind", "rshared", "rw"]
options:
- bind
- rshared
- rw
#% if bootstrap_secureboot.enabled and bootstrap_secureboot.encrypt_disk_with_tpm %#
# Encrypt system disk with TPM
Expand Down Expand Up @@ -216,7 +222,7 @@ controlPlane:
extraArgs:
listen-metrics-urls: http://0.0.0.0:2381
advertisedSubnets:
- "#{ bootstrap_node_network }#"
- #{ bootstrap_node_network }#
# Disable default API server admission plugins.
- |-
Expand All @@ -229,8 +235,10 @@ controlPlane:
features:
kubernetesTalosAPIAccess:
enabled: true
allowedRoles: ["os:admin"]
allowedKubernetesNamespaces: ["system-upgrade"]
allowedRoles:
- os:admin
allowedKubernetesNamespaces:
- system-upgrade
#% if bootstrap_user_patches %#
# User specified controlPlane patches
- "@./patches/controlPlane.yaml"
Expand Down

0 comments on commit 452398d

Please sign in to comment.