graham/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Upgrade Talos to v1.12.4, fix DNS and tailscale config

Browse source 
- Upgrade all nodes from v1.12.1/v1.12.2 to v1.12.4 installer image
- Set explicit nameservers (9.9.9.9, 149.112.112.112, 1.1.1.1) on
  workers to replace unreliable DHCP-provided resolver at 10.0.15.254
- Fix talos-worker2 missing ExtensionServiceConfig for ext-tailscale
  which was causing node reboots every ~35 minutes
- Update tailscale.patch.yaml with working auth key
This commit is contained in:
Graham McIntire 2026-02-18 12:08:32 -06:00
parent d9de8c351d
commit b3bb484bf0
No known key found for this signature in database
9 changed files with 20 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
home/cluster/tailscale.patch.yaml
View file

@ -2,4 +2,4 @@ apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: tailscale
environment:
- TS_AUTHKEY=tskey-auth-kQWvbQQPDQ11CNTRL-xzEZ6vSwfH22zJcVAHsFH2NemetVQ53Bg
- TS_AUTHKEY=tskey-auth-kwat3eR2p711CNTRL-K3m1PTL9hJHuqFJ5v5aDJHW2b8qsScQkF

2
talos/configs/talos-cp1.yaml
View file

@ -77,7 +77,7 @@ machine:
# Used to provide instructions for installations.
install:
disk: /dev/sda # The disk used for installations.
image: ghcr.io/siderolabs/installer:v1.12.1 # Allows for supplying the image used to perform the installation.
image: ghcr.io/siderolabs/installer:v1.12.4 # Allows for supplying the image used to perform the installation.
extensions:
- image: ghcr.io/siderolabs/tailscale:1.82.1
wipe: false # Indicates if the installation disk should be wiped at installation time.

2
talos/configs/talos-cp2.yaml
View file

@ -77,7 +77,7 @@ machine:
# Used to provide instructions for installations.
install:
disk: /dev/sda # The disk used for installations.
image: ghcr.io/siderolabs/installer:v1.12.1 # Allows for supplying the image used to perform the installation.
image: ghcr.io/siderolabs/installer:v1.12.4 # Allows for supplying the image used to perform the installation.
extensions:
- image: ghcr.io/siderolabs/tailscale:1.82.1
wipe: false # Indicates if the installation disk should be wiped at installation time.

2
talos/configs/talos-cp3.yaml
View file

@ -77,7 +77,7 @@ machine:
# Used to provide instructions for installations.
install:
disk: /dev/sda # The disk used for installations.
image: ghcr.io/siderolabs/installer:v1.12.1 # Allows for supplying the image used to perform the installation.
image: ghcr.io/siderolabs/installer:v1.12.4 # Allows for supplying the image used to perform the installation.
extensions:
- image: ghcr.io/siderolabs/tailscale:1.82.1
wipe: false # Indicates if the installation disk should be wiped at installation time.

2
talos/configs/talos-worker1.yaml
View file

@ -77,7 +77,7 @@ machine:
# Used to provide instructions for installations.
install:
disk: /dev/sda # The disk used for installations.
image: ghcr.io/siderolabs/installer:v1.12.1 # Allows for supplying the image used to perform the installation.
image: ghcr.io/siderolabs/installer:v1.12.4 # Allows for supplying the image used to perform the installation.
wipe: false # Indicates if the installation disk should be wiped at installation time.
grubUseUKICmdline: true # Indicates if legacy GRUB bootloader should use kernel cmdline from the UKI instead of building it on the host.
extraKernelArgs:

8
talos/configs/talos-worker2.yaml
View file

@ -77,7 +77,7 @@ machine:
# Used to provide instructions for installations.
install:
disk: /dev/sda # The disk used for installations.
image: ghcr.io/siderolabs/installer:v1.12.1 # Allows for supplying the image used to perform the installation.
image: ghcr.io/siderolabs/installer:v1.12.4 # Allows for supplying the image used to perform the installation.
wipe: false # Indicates if the installation disk should be wiped at installation time.
grubUseUKICmdline: true # Indicates if legacy GRUB bootloader should use kernel cmdline from the UKI instead of building it on the host.
extraKernelArgs:
@ -437,3 +437,9 @@ apiVersion: v1alpha1
kind: HostnameConfig
hostname: talos-worker2
# hostname: controlplane1.example.org
---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: tailscale
environment:
- TS_AUTHKEY=tskey-auth-kwat3eR2p711CNTRL-K3m1PTL9hJHuqFJ5v5aDJHW2b8qsScQkF

2
talos/configs/talos-worker3.yaml
View file

@ -77,7 +77,7 @@ machine:
# Used to provide instructions for installations.
install:
disk: /dev/sda # The disk used for installations.
image: ghcr.io/siderolabs/installer:v1.12.1 # Allows for supplying the image used to perform the installation.
image: ghcr.io/siderolabs/installer:v1.12.4 # Allows for supplying the image used to perform the installation.
wipe: false # Indicates if the installation disk should be wiped at installation time.
grubUseUKICmdline: true # Indicates if legacy GRUB bootloader should use kernel cmdline from the UKI instead of building it on the host.
extraKernelArgs:

2
talos/controlplane.yaml
View file

@ -77,7 +77,7 @@ machine:
# Used to provide instructions for installations.
install:
disk: /dev/sda # The disk used for installations.
image: ghcr.io/siderolabs/installer:v1.12.1 # Allows for supplying the image used to perform the installation.
image: ghcr.io/siderolabs/installer:v1.12.4 # Allows for supplying the image used to perform the installation.
wipe: false # Indicates if the installation disk should be wiped at installation time.
grubUseUKICmdline: true # Indicates if legacy GRUB bootloader should use kernel cmdline from the UKI instead of building it on the host.

8
talos/worker.yaml
View file

@ -69,7 +69,11 @@ machine:
# - '!10.0.0.3/32'
# - fdc7::/16
# Provides machine specific network configuration options.
network: {}
network:
nameservers:
- 9.9.9.9
- 149.112.112.112
- 1.1.1.1
# # Configures KubeSpan feature.
# kubespan:
# enabled: true # Enable the KubeSpan feature.
@ -77,7 +81,7 @@ machine:
# Used to provide instructions for installations.
install:
disk: /dev/sda # The disk used for installations.
image: ghcr.io/siderolabs/installer:v1.12.1 # Allows for supplying the image used to perform the installation.
image: ghcr.io/siderolabs/installer:v1.12.4 # Allows for supplying the image used to perform the installation.
wipe: false # Indicates if the installation disk should be wiped at installation time.
grubUseUKICmdline: true # Indicates if legacy GRUB bootloader should use kernel cmdline from the UKI instead of building it on the host.