Standalone Talos on Proxmox IaC for Maidn
Find a file
2026-07-20 00:24:04 +02:00
docs feat: extract talos proxmox stack 2026-07-18 21:43:53 +02:00
terraform fix: store nocloud disk with vm disks 2026-07-20 00:24:04 +02:00
.gitignore feat: extract talos proxmox stack 2026-07-18 21:43:53 +02:00
README.md feat: extract talos proxmox stack 2026-07-18 21:43:53 +02:00

maidn-talos-proxmox

Standalone Talos-on-Proxmox IaC for Maidn.

Layout

  • terraform/ provisions Proxmox networking and VMs and generates generated/talconfig.yaml
  • generated/ holds local generated Talos artifacts and should stay uncommitted

Usage

  1. Copy terraform/terraform.examples.tfvars to terraform/terraform.tfvars
  2. Set Proxmox, cluster, and node values
  3. Run:
cd terraform
terraform init
terraform apply
  1. Generate secrets/config outside Terraform:
cd ../generated
talhelper gensecret > talsecret.sops.yaml
sops -e -i talsecret.sops.yaml
talhelper genconfig
  1. Bootstrap Talos and Flux:
talosctl bootstrap --talosconfig=./clusterconfig/talosconfig --nodes=<control-plane-ip>
talosctl kubeconfig --talosconfig=./clusterconfig/talosconfig --nodes=<control-plane-ip> .
flux bootstrap git --url=<git-url> --branch=main --path=./clusters/<cluster>

Image updates

Keep Talos version and factory schematic in config. A repo automation job can resolve the matching installer/raw/iso artifacts and open a PR updating pins.

If talos_image_update_mode = "download", Terraform also stages the required Talos ISO onto every Proxmox node used by the cluster before VM creation.

Maintenance

See docs/maintenance.md for upgrades, certificate rotation, health checks, and backup basics.