Talos
Omni
Kubernetes GuidesHow to read it
| Marker | Meaning |
|---|---|
| Green | Still configured in v1alpha1. No document replaces it as of v1.14. |
| Red, struck through | Moved out. A document replaces it and is where the setting now belongs. |
| Amber | Moved out along with its parent block, which a document replaces as a whole. |
| Grey | Removed. Deprecated with no replacement document. |
| Violet | New in v1.14 — new documents, and fields that moved out in this release. |
.machine.kubelet was green, because KubeletConfig did not arrive until v1.14 and v1alpha1 genuinely was the only way to configure the kubelet.
Moving a setting into a document is not required at upgrade time.
An existing
v1alpha1 configuration keeps working; deprecated fields are still honoured until they are removed.
See upgrading Talos before you change anything.Reference tables
The same data as the map above, in a form you can search, link to and copy.Top-level v1alpha1 fields
Where each top-level field of the v1alpha1 document is configured as of v1.14.
| Field | Status | Configure with |
|---|---|---|
.machine.type | Still v1alpha1 | v1alpha1 |
.machine.token | Still v1alpha1 | v1alpha1 |
.machine.ca | Still v1alpha1 | v1alpha1 |
.machine.acceptedCAs | Still v1alpha1 | v1alpha1 |
.machine.certSANs | Still v1alpha1 | v1alpha1 |
.machine.controlPlane | Moved out | KubeControllerManagerConfig, KubeSchedulerConfig |
.machine.kubelet | Moved out | KubeletConfig |
.machine.pods | Moved out | KubeStaticPodConfig |
.machine.network | Moved out | HostnameConfig, KubeSpanConfig, LinkConfig, ResolverConfig, StaticHostConfig |
.machine.disks | Moved out | UserVolumeConfig |
.machine.install | Moved out | UnattendedInstallConfig |
.machine.files | Moved out | CRICustomizationConfig, EtcFileConfig |
.machine.env | Moved out | EnvironmentConfig |
.machine.time | Moved out | TimeSyncConfig |
.machine.sysctls | Moved out | SysctlConfig |
.machine.sysfs | Moved out | SysfsConfig |
.machine.registries | Moved out | RegistryAuthConfig, RegistryMirrorConfig, RegistryTLSConfig |
.machine.systemDiskEncryption | Moved out | VolumeConfig |
.machine.features | Still v1alpha1 | v1alpha1 |
.machine.udev | Moved out | UdevRulesConfig |
.machine.logging | Still v1alpha1 | v1alpha1 |
.machine.kernel | Moved out | KernelModuleConfig |
.machine.seccompProfiles | Still v1alpha1 | v1alpha1 |
.machine.baseRuntimeSpecOverrides | Moved out | CRIBaseRuntimeSpecConfig |
.machine.nodeLabels | Moved out | KubeNodeConfig |
.machine.nodeAnnotations | Moved out | KubeNodeConfig |
.machine.nodeTaints | Moved out | KubeNodeConfig |
.cluster.id | Moved out | DiscoveryIdentityConfig |
.cluster.secret | Moved out | DiscoveryIdentityConfig |
.cluster.controlPlane | Moved out | KubeClusterConfig |
.cluster.clusterName | Moved out | KubeClusterConfig |
.cluster.network | Moved out | KubeFlannelCNIConfig, KubeNetworkConfig |
.cluster.token | Still v1alpha1 | v1alpha1 |
.cluster.aescbcEncryptionSecret | Moved out | KubeEtcdEncryptionConfig |
.cluster.secretboxEncryptionSecret | Moved out | KubeEtcdEncryptionConfig |
.cluster.ca | Moved out | KubeAPIServerCAConfig |
.cluster.acceptedCAs | Moved out | KubeAPIServerCAConfig |
.cluster.aggregatorCA | Moved out | KubeAggregatorCAConfig |
.cluster.serviceAccount | Moved out | KubeServiceAccountConfig |
.cluster.apiServer | Moved out | KubeAPIServerConfig |
.cluster.controllerManager | Moved out | KubeControllerManagerConfig |
.cluster.proxy | Moved out | KubeProxyConfig |
.cluster.scheduler | Moved out | KubeSchedulerConfig |
.cluster.discovery | Moved out | DiscoveryServiceConfig |
.cluster.etcd | Still v1alpha1 | v1alpha1 |
.cluster.coreDNS | Moved out | KubeCoreDNSConfig |
.cluster.externalCloudProvider | Still v1alpha1 | v1alpha1 |
.cluster.extraManifests | Moved out | KubeExternalManifestConfig |
.cluster.extraManifestHeaders | Moved out | KubeExternalManifestConfig |
.cluster.inlineManifests | Moved out | KubeInlineManifestConfig |
.cluster.adminKubeconfig | Still v1alpha1 | v1alpha1 |
.cluster.allowSchedulingOnMasters | Moved out | KubeNodeConfig |
.cluster.allowSchedulingOnControlPlanes | Moved out | KubeNodeConfig |
Config documents by release
Every configuration document available in v1.14, listed under the release that introduced it.Talos 1.8 and earlier
10 documents.| Document | Area | Replaces |
|---|---|---|
KubeSpanEndpointsConfig | Networking | new capability |
NetworkDefaultActionConfig | Networking | new capability |
NetworkRuleConfig | Networking | new capability |
VolumeConfig | Block and volumes | .machine.systemDiskEncryption |
EventSinkConfig | Runtime and OS | new capability |
KmsgLogConfig | Runtime and OS | new capability |
WatchdogTimerConfig | Runtime and OS | new capability |
TrustedRootsConfig | Security | new capability |
ExtensionServiceConfig | Extensions | new capability |
SideroLinkConfig | SideroLink | new capability |
Talos 1.10
3 documents.| Document | Area | Replaces |
|---|---|---|
EthernetConfig | Networking | new capability |
UserVolumeConfig | Block and volumes | .machine.disks |
PCIDriverRebindConfig | Hardware | new capability |
Talos 1.11
4 documents.| Document | Area | Replaces |
|---|---|---|
ExistingVolumeConfig | Block and volumes | new capability |
RawVolumeConfig | Block and volumes | new capability |
SwapVolumeConfig | Block and volumes | new capability |
ZswapConfig | Block and volumes | new capability |
Talos 1.12
19 documents.| Document | Area | Replaces |
|---|---|---|
BondConfig | Networking | new capability |
BridgeConfig | Networking | new capability |
DHCPv4Config | Networking | new capability |
DHCPv6Config | Networking | new capability |
DummyLinkConfig | Networking | new capability |
HCloudVIPConfig | Networking | new capability |
HostnameConfig | Networking | .machine.network, .machine.network.hostname, .machine.features.stableHostname |
Layer2VIPConfig | Networking | new capability |
LinkAliasConfig | Networking | new capability |
LinkConfig | Networking | .machine.network |
ResolverConfig | Networking | .machine.network, .machine.network.nameservers, .machine.network.searchDomains, .machine.network.disableSearchDomain, .machine.features.hostDNS |
StaticHostConfig | Networking | .machine.network, .machine.network.extraHostEntries |
TimeSyncConfig | Networking | .machine.time |
VLANConfig | Networking | new capability |
WireguardConfig | Networking | new capability |
RegistryAuthConfig | CRI and registries | .machine.registries |
RegistryMirrorConfig | CRI and registries | .machine.registries |
RegistryTLSConfig | CRI and registries | .machine.registries |
OOMConfig | Runtime and OS | new capability |
Talos 1.13
8 documents.| Document | Area | Replaces |
|---|---|---|
BlackholeRouteConfig | Networking | new capability |
KubeSpanConfig | Networking | .machine.network, .machine.network.kubespan |
RoutingRuleConfig | Networking | new capability |
TCPProbeConfig | Networking | new capability |
VRFConfig | Networking | new capability |
ExternalVolumeConfig | Block and volumes | new capability |
EnvironmentConfig | Runtime and OS | .machine.env |
ImageVerificationConfig | Security | new capability |
Talos 1.14
44 documents.| Document | Area | Replaces |
|---|---|---|
BGPInstanceConfig | Networking | new capability |
HTTPProbeConfig | Networking | new capability |
VethConfig | Networking | new capability |
KubeAPIServerCAConfig | Kubernetes | .cluster.ca, .cluster.acceptedCAs |
KubeAPIServerConfig | Kubernetes | .cluster.controlPlane.localAPIServerPort, .cluster.apiServer |
KubeAdmissionControlConfig | Kubernetes | .cluster.apiServer.admissionControl |
KubeAggregatorCAConfig | Kubernetes | .cluster.aggregatorCA |
KubeAuditPolicyConfig | Kubernetes | .cluster.apiServer.auditPolicy |
KubeAuthenticationConfig | Kubernetes | new capability |
KubeAuthorizerConfig | Kubernetes | .cluster.apiServer.authorizationConfig |
KubeClusterConfig | Kubernetes | .cluster.controlPlane, .cluster.clusterName |
KubeControllerManagerConfig | Kubernetes | .machine.controlPlane, .machine.controlPlane.controllerManager, .cluster.controllerManager |
KubeCoreDNSConfig | Kubernetes | .cluster.coreDNS |
KubeCredentialProviderConfig | Kubernetes | new capability |
KubeEtcdEncryptionConfig | Kubernetes | .cluster.aescbcEncryptionSecret, .cluster.secretboxEncryptionSecret |
KubeExternalManifestConfig | Kubernetes | .cluster.extraManifests, .cluster.extraManifestHeaders |
KubeFlannelCNIConfig | Kubernetes | .cluster.network |
KubeInlineManifestConfig | Kubernetes | .cluster.inlineManifests |
KubeNetworkConfig | Kubernetes | .cluster.network |
KubeNodeConfig | Kubernetes | .machine.kubelet.registerWithFQDN, .machine.kubelet.nodeIP, .machine.kubelet.skipNodeRegistration, .machine.nodeLabels, .machine.nodeAnnotations, .machine.nodeTaints, .cluster.allowSchedulingOnMasters, .cluster.allowSchedulingOnControlPlanes |
KubePrismConfig | Kubernetes | .machine.features.kubePrism |
KubeProxyConfig | Kubernetes | .cluster.proxy |
KubeSchedulerConfig | Kubernetes | .machine.controlPlane, .machine.controlPlane.scheduler, .cluster.scheduler |
KubeServiceAccountConfig | Kubernetes | .cluster.serviceAccount |
KubeStaticPodConfig | Kubernetes | .machine.pods |
KubeTalosAPIAccessConfig | Kubernetes | .machine.features.kubernetesTalosAPIAccess |
KubeletConfig | Kubernetes | .machine.kubelet, .machine.kubelet.image, .machine.kubelet.clusterDNS, .machine.kubelet.extraArgs, .machine.kubelet.extraConfig, .machine.kubelet.defaultRuntimeSeccompProfileEnabled |
FilesystemScrubConfig | Block and volumes | new capability |
FilesystemTrimConfig | Block and volumes | new capability |
LVMLogicalVolumeConfig | Storage (LVM/RAID) | new capability |
LVMVolumeGroupConfig | Storage (LVM/RAID) | new capability |
RAIDArrayConfig | Storage (LVM/RAID) | new capability |
CRIBaseRuntimeSpecConfig | CRI and registries | .machine.baseRuntimeSpecOverrides |
CRICustomizationConfig | CRI and registries | .machine.files |
ImageCacheConfig | CRI and registries | .machine.features.imageCache |
EtcFileConfig | Runtime and OS | .machine.files |
KernelModuleConfig | Runtime and OS | .machine.kernel, .machine.kernel.modules, .machine.kernel.modules.name, .machine.kernel.modules.parameters |
SecurityProfileConfig | Runtime and OS | new capability |
SysctlConfig | Runtime and OS | .machine.sysctls |
SysfsConfig | Runtime and OS | .machine.sysfs |
UdevRulesConfig | Runtime and OS | .machine.udev, .machine.udev.rules |
UnattendedInstallConfig | Runtime and OS | .machine.install |
DiscoveryIdentityConfig | Cluster and discovery | .cluster.id, .cluster.secret |
DiscoveryServiceConfig | Cluster and discovery | .cluster.discovery, .cluster.discovery.enabled, .cluster.discovery.registries, .cluster.discovery.registries.kubernetes, .cluster.discovery.registries.service |
Talos 1.9 introduced no new configuration documents.
See also
- Configuration overview — how multi-document configuration is parsed and merged
v1alpha1reference — every field of the legacy document- Configuration patches — applying documents to an existing configuration
- Editing live machine configuration