Story Crater Bot 97330d780c feat(terraform): add per-node Cloudflare Tunnel cert SANs to controlplane certSANs — remote talosctl/kubectl over tunnel pass TLS verification ...

Adds optional cloudflare_talos_sans (machine.certSANs, talos API :50000) and
cloudflare_apiserver_sans (cluster.apiServer.certSANs, kube-apiserver :6443) per
control-plane node. cp-1 gets cp1.homelab + cp1-talos.homelab; cp-2/cp-3 get
their cpN-talos.homelab. Values set in gitignored tfvars.

2026-08-18 15:08:02 -07:00

..

templates

feat(terraform): add per-node Cloudflare Tunnel cert SANs to controlplane certSANs — remote talosctl/kubectl over tunnel pass TLS verification

2026-08-18 15:08:02 -07:00

.gitignore

feat(ci,iac): Consolidate Forgejo CI workflows and add Talos Terraform IaC

2026-08-18 15:08:01 -07:00

main.tf

feat(terraform): add per-node Cloudflare Tunnel cert SANs to controlplane certSANs — remote talosctl/kubectl over tunnel pass TLS verification

2026-08-18 15:08:02 -07:00

provider.tf

feat(ci,iac): Consolidate Forgejo CI workflows and add Talos Terraform IaC

2026-08-18 15:08:01 -07:00

variables.tf

feat(terraform): add per-node Cloudflare Tunnel cert SANs to controlplane certSANs — remote talosctl/kubectl over tunnel pass TLS verification

2026-08-18 15:08:02 -07:00