Skip to content
This repository has been archived by the owner on May 5, 2024. It is now read-only.

Commit

Permalink
fix: static ip node ep
Browse files Browse the repository at this point in the history
  • Loading branch information
truxnell committed Mar 9, 2024
1 parent 04b959a commit e55c0fe
Show file tree
Hide file tree
Showing 3 changed files with 13 additions and 15 deletions.
14 changes: 9 additions & 5 deletions infrastructure/talos/hegira/talconfig.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
clusterName: hegira
talosVersion: v1.4.4
kubernetesVersion: 1.26.4
endpoint: https://hegira.${DOMAINNAME}:6443
talosVersion: v1.6.6
kubernetesVersion: 1.27.7
endpoint: https://10.8.20.30:6443
allowSchedulingOnMasters: true
cniConfig:
name: none
Expand All @@ -21,6 +21,8 @@ nodes:
- interface: eth0
mtu: 0
dhcp: true
vip:
ip: 10.8.20.30
- hostname: shodan.${DOMAINNAME}
ipAddress: 10.8.20.42
controlPlane: true
Expand All @@ -30,6 +32,8 @@ nodes:
- interface: eth0
mtu: 0
dhcp: true
vip:
ip: 10.8.20.30
- hostname: icarus.${DOMAINNAME}
ipAddress: 10.8.20.44
controlPlane: true
Expand All @@ -39,6 +43,8 @@ nodes:
- interface: eth0
mtu: 0
dhcp: true
vip:
ip: 10.8.20.30
controlPlane:
inlinePatch:
cluster:
Expand All @@ -50,7 +56,6 @@ controlPlane:
admissionControl: []
certSANs:
- ${CLUSTERENDPOINTIP}
- heigra.${DOMAINNAME}
extraArgs:
feature-gates: MixedProtocolLBService=true,EphemeralContainers=True
ca:
Expand Down Expand Up @@ -89,7 +94,6 @@ controlPlane:
key: ${MACHINECERTKEY}
certSANs:
- ${CLUSTERENDPOINTIP}
- hegira.${DOMAINNAME}
files:
- content: |
[plugins."io.containerd.grpc.v1.cri"]
Expand Down
2 changes: 1 addition & 1 deletion kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ spec:
kubeProxyReplacement: "strict"
kubeProxyReplacementHealthzBindAddr: 0.0.0.0:10256
ipv4NativeRoutingCIDR: ${NETWORK_K8S_POD_CIDR}
k8sServiceHost: "hegira.${INTERNAL_DOMAIN}"
k8sServiceHost: "10.8.20.30"
k8sServicePort: 6443
loadBalancer:
algorithm: "maglev"
Expand Down
12 changes: 3 additions & 9 deletions kubernetes/bootstrap/cilium.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -163,7 +163,6 @@ data:
---
# Source: cilium/templates/cilium-agent/clusterrole.yaml


apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
Expand Down Expand Up @@ -270,7 +269,6 @@ rules:
---
# Source: cilium/templates/cilium-operator/clusterrole.yaml


apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
Expand Down Expand Up @@ -378,7 +376,6 @@ rules:
---
# Source: cilium/templates/cilium-agent/clusterrolebinding.yaml


apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
Expand All @@ -399,7 +396,6 @@ subjects:
---
# Source: cilium/templates/cilium-operator/clusterrolebinding.yaml


apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
Expand All @@ -420,7 +416,6 @@ subjects:
---
# Source: cilium/templates/cilium-agent/daemonset.yaml


apiVersion: apps/v1
kind: DaemonSet
metadata:
Expand Down Expand Up @@ -546,7 +541,7 @@ spec:
key: custom-cni-conf
optional: true
- name: KUBERNETES_SERVICE_HOST
value: "hegira.natallan.com"
value: "10.8.20.30"
- name: KUBERNETES_SERVICE_PORT
value: "6443"
lifecycle:
Expand Down Expand Up @@ -634,7 +629,7 @@ spec:
key: clean-cilium-bpf-state
optional: true
- name: KUBERNETES_SERVICE_HOST
value: "hegira.natallan.com"
value: "10.8.20.30"
- name: KUBERNETES_SERVICE_PORT
value: "6443"
securityContext:
Expand Down Expand Up @@ -713,7 +708,6 @@ spec:
---
# Source: cilium/templates/cilium-operator/deployment.yaml


apiVersion: apps/v1
kind: Deployment
metadata:
Expand Down Expand Up @@ -785,7 +779,7 @@ spec:
name: cilium-config
optional: true
- name: KUBERNETES_SERVICE_HOST
value: "hegira.natallan.com"
value: "10.8.20.30"
- name: KUBERNETES_SERVICE_PORT
value: "6443"
livenessProbe:
Expand Down

0 comments on commit e55c0fe

Please sign in to comment.