| docs | ||
| terraform | ||
| .gitignore | ||
| README.md | ||
maidn-talos-proxmox
Standalone Talos-on-Proxmox IaC for Maidn.
Layout
terraform/provisions Proxmox networking and VMs and generatesgenerated/talconfig.yamlgenerated/holds local generated Talos artifacts and should stay uncommitted
Usage
- Copy
terraform/terraform.examples.tfvarstoterraform/terraform.tfvars - Set Proxmox, cluster, and node values
- Run:
cd terraform
terraform init
terraform apply
- Generate secrets/config outside Terraform:
cd ../generated
talhelper gensecret > talsecret.sops.yaml
sops -e -i talsecret.sops.yaml
talhelper genconfig
- Bootstrap Talos and Flux:
talosctl bootstrap --talosconfig=./clusterconfig/talosconfig --nodes=<control-plane-ip>
talosctl kubeconfig --talosconfig=./clusterconfig/talosconfig --nodes=<control-plane-ip> .
flux bootstrap git --url=<git-url> --branch=main --path=./clusters/<cluster>
Image updates
Keep Talos version and factory schematic in config. A repo automation job can resolve the matching installer/raw/iso artifacts and open a PR updating pins.
If talos_image_update_mode = "download", Terraform also stages the required Talos ISO onto every Proxmox node used by the cluster before VM creation.
Maintenance
See docs/maintenance.md for upgrades, certificate rotation, health checks, and backup basics.