23 lines
903 B
Markdown
23 lines
903 B
Markdown
# Cluster maintenance
|
|
|
|
## What the CLI handles now
|
|
|
|
- Bootstraps the Talos IaC repo
|
|
- Writes cluster-specific Terraform config
|
|
- Can trigger Terraform, Talos bootstrap, kubeconfig generation, and Flux bootstrap
|
|
- Can request Proxmox-side Talos ISO staging through Terraform inputs
|
|
|
|
## Manual operations still required
|
|
|
|
- Talos upgrades remain operator-driven
|
|
- Certificate rotation remains operator-driven
|
|
- etcd snapshots and restore drills remain operator-driven
|
|
|
|
## Candidate automation
|
|
|
|
- Add a `cicd-tool talos upgrade` workflow that updates version pins, stages images, and rolls nodes one by one
|
|
- Add a `cicd-tool talos certs check` workflow that reports expiry windows
|
|
- Add a scheduled GitHub Action in the Talos repo that opens PRs for new factory-compatible image pins
|
|
|
|
Use the standalone Talos repo maintenance guide for the actual runbook: `maidn/maidn-talos-proxmox/docs/maintenance.md`.
|