Skip to content

Initial implementation - #1

Draft
simu wants to merge 25 commits into
masterfrom
initial-implementation
Draft

Initial implementation#1
simu wants to merge 25 commits into
masterfrom
initial-implementation

Conversation

@simu

@simu simu commented Jun 18, 2026

Copy link
Copy Markdown
Member

Checklist

  • The PR has a meaningful title. It will be used to auto-generate the
    changelog.
    The PR has a meaningful description that sums up the change. It will be
    linked in the changelog.
  • PR contains a single logical change (to build a better changelog).
  • Update the documentation.
  • Categorize the PR by adding one of the labels:
    bug, enhancement, documentation, change, breaking, dependency
    as they show up in the changelog.
  • Link this PR to related issues or PRs.

@simu
simu force-pushed the initial-implementation branch from 9d530df to d5acf2c Compare June 23, 2026 18:38
@simu
simu force-pushed the initial-implementation branch 2 times, most recently from cf98e55 to 33a79b5 Compare June 25, 2026 09:09
@simu
simu force-pushed the initial-implementation branch from 33a79b5 to ac3dd81 Compare June 25, 2026 09:10
@simu
simu force-pushed the initial-implementation branch from a3d9fec to 45d2c3c Compare July 2, 2026 11:14
@simu
simu force-pushed the initial-implementation branch from 07339b4 to 5ecdeb8 Compare July 3, 2026 08:32
@simu
simu force-pushed the initial-implementation branch from 5ecdeb8 to 58f491b Compare July 3, 2026 08:38
We default to patch version `0` for `install.image` in the
MachineConfig. This should be unproblematic since the field only needs
to be present in order for Tuppr to be able to determine the base image
for upgrades and the whole `install` section has no effect on machines
created from the OpenStack raw base image.
@simu
simu force-pushed the initial-implementation branch from 6a9ca4d to 588e0f0 Compare July 6, 2026 07:42
@simu
simu force-pushed the initial-implementation branch from 3dddf0f to 5efa258 Compare August 3, 2026 13:35
@simu
simu force-pushed the initial-implementation branch 3 times, most recently from 41af465 to 4872063 Compare August 3, 2026 13:55
…figuration`

Tested that this config works on Talos 1.13. Note that on Talos 1.14 we
should get a real MachineConfiguration field for
`AuthenticationConfiguration`.

We can't write to one of the already mounted directories of the K8s API
server pods, so we write our config file to
`/var/config/kubernetes/kube-apiserver` and mount that directory in the
API server pods.
@simu
simu force-pushed the initial-implementation branch from 4872063 to f301c81 Compare August 3, 2026 15:47
simu added 3 commits August 13, 2026 09:06
CAPI auto-generates the selector and when switching to server-side apply
we can't have an explicit `matchLabels: null` anymore.
This is required for metrics-server, but requires a mechanism to approve
Kubelet CSRs. We currently use https://github.com/alex1989hu/kubelet-serving-cert-approver
@simu
simu force-pushed the initial-implementation branch from ccb535c to 8c94468 Compare August 13, 2026 07:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant