A lowly tech priest's attempt to please Mars
feat: give both hosts an IP on vlan 1
+18
-3
+14
talos/talconfig.yaml
+14
talos/talconfig.yaml
···
18
18
machine:
19
19
sysctls:
20
20
net.ipv4.ip_forward: "1"
21
+
# allowSchedulingOnControlPlanes doesn't unblock load balancers
21
22
- |-
22
23
machine:
23
24
nodeLabels:
24
25
node.kubernetes.io/exclude-from-external-load-balancers:
25
26
$$patch: delete
27
+
# Limit kubelet communication to the server subnet, otherwise
28
+
# the nodes might try to talk on the admin subnet / via tailscale
29
+
# and that's not what we want
30
+
- |-
31
+
machine:
32
+
kubelet:
33
+
nodeIP:
34
+
validSubnets:
35
+
- ${proteus_secundus_ip}/24
26
36
# - '@./manifests/registry-mirrors.yaml'
27
37
28
38
cniConfig:
···
149
159
- network: 0.0.0.0/0
150
160
gateway: ${proteus_gateway}
151
161
mtu: 1500
162
+
vlans:
163
+
- vlanId: 1
164
+
addresses:
165
+
- "${proteus_secundus_ip_admin_vlan}/24"
152
166
153
167
patches:
154
168
- '@./manifests/tailscale.yaml'
+4
-3
talos/talenv.yaml
+4
-3
talos/talenv.yaml
···
1
1
proteus_gateway: ENC[AES256_GCM,data:xcFr7bVazTonOapF,iv:VgBTk3l1Q8CtpXorP0sukR2IwDhpwdcR8WP+wwwIvxY=,tag:tEnw5i8Tlx39fLil6siEHw==,type:str]
2
2
proteus_secundus_ip: ENC[AES256_GCM,data:gbdC0Ft+J0Tr461g,iv:sF1N9m/1w0EpzxCPjWSnd4Ht3tudo0XogXG8bYE3NkQ=,tag:3CKvozSHh92L+PQGUjdvQg==,type:str]
3
3
proteus_quartus_ip: ENC[AES256_GCM,data:043skbZMi2ceXzw44Q==,iv:LXjIBvNhbPcgaRpSdNj6QcZqOFJ8uYvLlq+FNCSTCKc=,tag:/Pz9Ay86ALk/S5K0lFVK1Q==,type:str]
4
+
proteus_secundus_ip_admin_vlan: ENC[AES256_GCM,data:HkXPi/fShf7JoTo=,iv:6Yx3OyNcUP0KXhLUx3o2TbAQ3feC/8Otq+eZP56UvWM=,tag:n6x/GZWMP1ixPA4fq5sr2g==,type:str]
4
5
proteus_quartus_ip_admin_vlan: ENC[AES256_GCM,data:kOZyYKzvhLAv/H0=,iv:lxDOeHngjQHmiuimcRMpijsCeWK7dOef1mWpnXXWm8Q=,tag:Zj+4juF1fEHRljhY6kJ2uQ==,type:str]
5
6
proteus_secundus_ssd_passphrase: ENC[AES256_GCM,data:X99/HFkWT3+Mz4zF+2YfwE9J2v6aBsuvtMx63oVs/P5wFYdcQtJ6/+ZYaAEC0mPgnenZSEzrbIVsIiue8IA3NOBor/sGOCDD8f2ATXcpKXYkZXoO9y6ELi7Infj76GSpJTu0IJUBpwjRKQPMVut/U0FJjR57ehjsYbcgSl51auec12C+yg3SaSThs5Nq2yde5FKDqV8qn+5/UsFUlxIv8TFD4pGtY10auw01EA==,iv:oqP2cR1VjerkcL7sxE8Iyqh5qJMH8jR57F/DWB2/a6Q=,tag:zMCNqXCUSIzm0+Zz10BGXw==,type:str]
6
7
proteus_quartus_ssd_passphrase: ENC[AES256_GCM,data:djE96vT/jFZiuc/eGcqlInDqb+c6zWGvcAK8pL/T+m2LcmJgExNI1GfA8GiCzj7hmQS7LOWZpmKM8wIWveQKavyyeAmeCaYJdLM9G5Arsf5gsIl8YnHS3Su+aITep4S4hfHXxjJ1Nut3cjdQsvCdvcsXjDgwB8vME5jJD7dxKl5R1uluyUQzFC5izrNZ6r7zsXg/GCu1lh//DG7r04/ObENnszib5znaaFmJlQ==,iv:HUYUjDL9ea4/7EOPrTy0HOeRGbHIXYwSgb/ZeGxDC/8=,tag:5F0w4cyoZLhtdyf8DzKpog==,type:str]
···
22
23
MFYyWWw0Q2pkajdOeVNRcmkwL1RxQnMK0g+KnIWd5tGyrW8XO/21XzZoy7EzJP/T
23
24
PvJ7f2tpLekKrBu/5YvIbl3davF+V1YV30L3ySFuDzdOcz3hg+DxbQ==
24
25
-----END AGE ENCRYPTED FILE-----
25
-
lastmodified: "2026-03-24T21:40:16Z"
26
-
mac: ENC[AES256_GCM,data:qbMXzynVfM7hLbtTtb4sMoqqdBGGrzbBz0RyHH5K+wnD+g/npiMmziS/LgwqyfUAwFgSHBYigxcNdu4CpP9t6OvdL4OeiPVjlJ8PBZqY3X6dFmxaWJUoNWO4BsPyxX9aIvM3RdgsKUOjBA2DN4sytnXpdNWg6r52/yzExJeq9vw=,iv:8dRO1CE+4opuwcuofzdU4nBq8sQtmyrIMY1iVHl8v1o=,tag:RMEJxFYYPo25mdBgxgrv5Q==,type:str]
26
+
lastmodified: "2026-03-31T20:09:10Z"
27
+
mac: ENC[AES256_GCM,data:LF70Bp/r/CGCC/rncJoVvTuAEf3vmyv7aW7wY32BWHZvoWXguqmLBg4P3ODlTtjZ6oklwuOvWdVIpWNHVHj5ztlRt8Te+gYtaHNeudKkD+BVR05GaEsWN5vyMeKBIAES3ogdi9n7gp7qgd/e1H5CykiwGBA0yMi6OLyLyWb5HEM=,iv:9y+fCOH7zu1JqTtg7EoODN2/jxNdeKDXUDBZKombHtY=,tag:cxNVbW+0brkkbpZSVBaImg==,type:str]
27
28
unencrypted_suffix: _unencrypted
28
-
version: 3.11.0
29
+
version: 3.12.2