feat(terraform): add GPU-enabled Talos schematic and worker node template support

2026-08-10 19:44:18 -07:00
parent feb7b25aba
commit 8589c40b44
6 changed files with 197 additions and 0 deletions
@@ -0,0 +1,93 @@
+version: ${version}
+debug: false
+persist: true
+
+machine:
+  type: worker
+  token: ${token}
+  ca:
+    crt: ${ca_crt}
+  certSANs:
+    - ${lan_ip}
+  network:
+    hostname: ${hostname}
+    interfaces:
+      - interface: eno1
+        addresses:
+          - ${lan_ip}/24
+        routes:
+          - network: 0.0.0.0/0
+            gateway: ${lan_gateway}
+        dhcp: false
+        dhcpOptions:
+          ipv6: false
+    nameservers:
+%{ for ns in dns_servers ~}
+      - ${ns}
+%{ endfor ~}
+    extraHostEntries:
+      - ip: ${forgejo_registry_ip}
+        aliases:
+          - ${forgejo_hostname}
+  kubelet:
+    image: ${kubelet_image}
+    defaultRuntimeSeccompProfileEnabled: true
+    disableManifestsDirectory: true
+    clusterDNS:
+      - ${cluster_dns_ip}
+    extraArgs:
+      rotate-server-certificates: true
+    nodeIP:
+      validSubnets:
+        - 192.168.1.0/24
+  install:
+    disk: ${install_disk}
+    image: ${factory_image}
+    wipe: false
+    grubUseUKICmdline: true
+  disks:
+%{ for disk in extra_disks ~}
+    - device: ${disk.device}
+      partitions:
+        - mountpoint: ${disk.mountpoint}
+%{ endfor ~}
+  features:
+    kubePrism:
+      enabled: true
+      port: 7445
+    hostDNS:
+      enabled: false
+  nodeLabels:
+    topology.kubernetes.io/region: homelab
+    topology.kubernetes.io/zone: ${zone}
+%{ if gpu_count > 0 ~}
+    nvidia.com/gpu: "true"
+    gpu-count: "${gpu_count}"
+%{ endif ~}
+
+cluster:
+  id: ${cluster_id}
+  secret: ${cluster_secret}
+  controlPlane:
+    endpoint: https://${controlplane_ip}:6443
+  clusterName: ${cluster_name}
+  network:
+    dnsDomain: ${dns_domain}
+    podSubnets:
+%{ for subnet in pod_subnets ~}
+      - ${subnet}
+%{ endfor ~}
+    serviceSubnets:
+%{ for subnet in service_subnets ~}
+      - ${subnet}
+%{ endfor ~}
+    cni:
+      name: none
+  token: ${bootstrap_token}
+  secretboxEncryptionSecret: ${secretbox_encryption_secret}
+  discovery:
+    enabled: true
+    registries:
+      kubernetes:
+        disabled: true
+      service: {}