join.yaml

version: v1alpha1
debug: false
persist: true # Indicates whether to pull the machine config upon every boot.
machine:
  type: worker
  token: {{MACHINE_TOKEN}}
  kubelet:
    extraArgs:
      rotate-server-certificates: true
  network:
    hostname: {{WORKER_HOSTNAME}}
    interfaces:
      - interface: eth0
        cidr: {{WORKER_IP}}/24
        routes:
          - network: 0.0.0.0/0
            gateway: {{NET_GATEWAY}}
    nameservers:
      - {{NET_NAMESERVER}}
  install:
    disk: /dev/mmcblk0
    image: ghcr.io/talos-systems/installer:v0.10.0
    bootloader: true # Indicates if a bootloader should be installed.
    wipe: false # Indicates if the installation disk should be wiped at installation time.
    extraKernelArgs:
      - talos.platform=metal
      - talos.board=rpi_4
# Optionally, pull-through cache for the container image registries will help speed things up.
# See the Talos docs for more info: https://www.talos.dev/docs/v0.10/guides/configuring-pull-through-cache
#  registries:
#    mirrors:
#      docker.io:
#        endpoints:
#          - http://192.168.57.2:5000
#      k8s.gcr.io:
#        endpoints:
#          - http://192.168.57.2:5001
#      quay.io:
#        endpoints:
#          - http://192.168.57.2:5002
#      gcr.io:
#        endpoints:
#          - http://192.168.57.2:5003
#      ghcr.io:
#        endpoints:
#          - http://192.168.57.2:5004
cluster:
  controlPlane:
    endpoint: https://{{CLUSTER_VIP}}:6443
  network:
    dnsDomain: cluster.local
    podSubnets:
      - 10.244.0.0/16
    serviceSubnets:
      - 10.96.0.0/12
  token: {{CLUSTER_TOKEN}} # The [bootstrap token](https://kubernetes.io/docs/reference/access-authn-authz/bootstrap-tokens/) used to join the cluster.
  aescbcEncryptionSecret: "" # Not used on worker nodes
  # The base64 encoded root certificate authority used by Kubernetes.
  ca:
    crt: {{CA_CERT}}
    key: "" # Not used on worker nodes