title 
description 
 
 
API 
Talos gRPC API reference. 
 
 
Table of Contents 
Top 
common/common.proto 
Data 
DataResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Data repeated 
 
 
Empty 
Field 
Type 
Label 
Description 
 
 
metadata 
Metadata  
 
EmptyResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Empty repeated 
 
 
Error 
Metadata 
Common metadata message nested in all reply message types
Field 
Type 
Label 
Description 
 
 
hostname 
string hostname of the server response comes from (injected by proxy) 
 
error 
string error is set if request failed to the upstream (rest of response is undefined) 
 
status 
google.rpc.Status error as gRPC Status 
 
 
NetIP 
Field 
Type 
Label 
Description 
 
 
ip 
bytes  
 
NetIPPort 
NetIPPrefix 
Field 
Type 
Label 
Description 
 
 
ip 
bytes  
prefix_length 
int32  
 
PEMEncodedCertificateAndKey 
PEMEncodedKey 
Field 
Type 
Label 
Description 
 
 
key 
bytes  
 
URL 
Field 
Type 
Label 
Description 
 
 
full_path 
string  
 
 
Code 
Name 
Number 
Description 
 
 
FATAL 
0 
 
LOCKED 
1 
 
CANCELED 
2 
 
 
ContainerDriver 
Name 
Number 
Description 
 
 
CONTAINERD 
0 
 
CRI 
1 
 
 
ContainerdNamespace 
Name 
Number 
Description 
 
 
NS_UNKNOWN 
0 
 
NS_SYSTEM 
1 
 
NS_CRI 
2 
 
 
 
File-level Extensions 
Extension 
Type 
Base 
Number 
Description 
 
 
remove_deprecated_enum 
string 
.google.protobuf.EnumOptions 
93117 
Indicates the Talos version when this deprecated enum will be removed from API. 
 
remove_deprecated_enum_value 
string 
.google.protobuf.EnumValueOptions 
93117 
Indicates the Talos version when this deprecated enum value will be removed from API. 
 
remove_deprecated_field 
string 
.google.protobuf.FieldOptions 
93117 
Indicates the Talos version when this deprecated filed will be removed from API. 
 
remove_deprecated_message 
string 
.google.protobuf.MessageOptions 
93117 
Indicates the Talos version when this deprecated message will be removed from API. 
 
remove_deprecated_method 
string 
.google.protobuf.MethodOptions 
93117 
Indicates the Talos version when this deprecated method will be removed from API. 
 
remove_deprecated_service 
string 
.google.protobuf.ServiceOptions 
93117 
Indicates the Talos version when this deprecated service will be removed from API. 
 
 
 
 
Top 
resource/definitions/cluster/cluster.proto 
AffiliateSpec 
AffiliateSpec describes Affiliate state.
ConfigSpec 
ConfigSpec describes KubeSpan configuration.
Field 
Type 
Label 
Description 
 
 
discovery_enabled 
bool  
registry_kubernetes_enabled 
bool  
registry_service_enabled 
bool  
service_endpoint 
string  
service_endpoint_insecure 
bool  
service_encryption_key 
bytes  
service_cluster_id 
string  
 
ControlPlane 
ControlPlane describes ControlPlane data if any.
Field 
Type 
Label 
Description 
 
 
api_server_port 
int64  
 
IdentitySpec 
IdentitySpec describes status of rendered secrets.
Note: IdentitySpec is persisted on disk in the STATE partition,
so YAML serialization should be kept backwards compatible.
Field 
Type 
Label 
Description 
 
 
node_id 
string  
 
InfoSpec 
InfoSpec describes cluster information.
Field 
Type 
Label 
Description 
 
 
cluster_id 
string  
cluster_name 
string  
 
KubeSpanAffiliateSpec 
KubeSpanAffiliateSpec describes additional information specific for the KubeSpan.
MemberSpec 
MemberSpec describes Member state.
 
 
 
 
Top 
resource/definitions/cri/cri.proto 
SeccompProfileSpec 
SeccompProfileSpec represents the SeccompProfile.
 
 
 
 
Top 
resource/definitions/enums/enums.proto 
 
KubespanPeerState 
KubespanPeerState is KubeSpan peer current state.
Name 
Number 
Description 
 
 
PEER_STATE_UNKNOWN 
0 
 
PEER_STATE_UP 
1 
 
PEER_STATE_DOWN 
2 
 
 
MachineType 
MachineType represents a machine type.
Name 
Number 
Description 
 
 
TYPE_UNKNOWN 
0 
TypeUnknown represents undefined node type, when there is no machine configuration yet. 
 
TYPE_INIT 
1 
TypeInit type designates the first control plane node to come up. You can think of it like a bootstrap node. This node will perform the initial steps to bootstrap the cluster -- generation of TLS assets, starting of the control plane, etc. 
 
TYPE_CONTROL_PLANE 
2 
TypeControlPlane designates the node as a control plane member. This means it will host etcd along with the Kubernetes controlplane components such as API Server, Controller Manager, Scheduler. 
 
TYPE_WORKER 
3 
TypeWorker designates the node as a worker node. This means it will be an available compute node for scheduling workloads. 
 
 
NethelpersADSelect 
NethelpersADSelect is ADSelect.
Name 
Number 
Description 
 
 
AD_SELECT_STABLE 
0 
 
AD_SELECT_BANDWIDTH 
1 
 
AD_SELECT_COUNT 
2 
 
 
NethelpersARPAllTargets 
NethelpersARPAllTargets is an ARP targets mode.
Name 
Number 
Description 
 
 
ARP_ALL_TARGETS_ANY 
0 
 
ARP_ALL_TARGETS_ALL 
1 
 
 
NethelpersARPValidate 
NethelpersARPValidate is an ARP Validation mode.
Name 
Number 
Description 
 
 
ARP_VALIDATE_NONE 
0 
 
ARP_VALIDATE_ACTIVE 
1 
 
ARP_VALIDATE_BACKUP 
2 
 
ARP_VALIDATE_ALL 
3 
 
 
NethelpersAddressFlag 
NethelpersAddressFlag wraps IFF_* constants.
Name 
Number 
Description 
 
 
NETHELPERS_ADDRESSFLAG_UNSPECIFIED 
0 
 
ADDRESS_TEMPORARY 
1 
 
ADDRESS_NO_DAD 
2 
 
ADDRESS_OPTIMISTIC 
4 
 
ADDRESS_DAD_FAILED 
8 
 
ADDRESS_HOME 
16 
 
ADDRESS_DEPRECATED 
32 
 
ADDRESS_TENTATIVE 
64 
 
ADDRESS_PERMANENT 
128 
 
ADDRESS_MANAGEMENT_TEMP 
256 
 
ADDRESS_NO_PREFIX_ROUTE 
512 
 
ADDRESS_MC_AUTO_JOIN 
1024 
 
ADDRESS_STABLE_PRIVACY 
2048 
 
 
NethelpersBondMode 
NethelpersBondMode is a bond mode.
Name 
Number 
Description 
 
 
BOND_MODE_ROUNDROBIN 
0 
 
BOND_MODE_ACTIVE_BACKUP 
1 
 
BOND_MODE_XOR 
2 
 
BOND_MODE_BROADCAST 
3 
 
BOND_MODE8023_AD 
4 
 
BOND_MODE_TLB 
5 
 
BOND_MODE_ALB 
6 
 
 
NethelpersBondXmitHashPolicy 
NethelpersBondXmitHashPolicy is a bond hash policy.
Name 
Number 
Description 
 
 
BOND_XMIT_POLICY_LAYER2 
0 
 
BOND_XMIT_POLICY_LAYER34 
1 
 
BOND_XMIT_POLICY_LAYER23 
2 
 
BOND_XMIT_POLICY_ENCAP23 
3 
 
BOND_XMIT_POLICY_ENCAP34 
4 
 
 
NethelpersConntrackState 
NethelpersConntrackState is a conntrack state.
Name 
Number 
Description 
 
 
NETHELPERS_CONNTRACKSTATE_UNSPECIFIED 
0 
 
CONNTRACK_STATE_NEW 
8 
 
CONNTRACK_STATE_RELATED 
4 
 
CONNTRACK_STATE_ESTABLISHED 
2 
 
CONNTRACK_STATE_INVALID 
1 
 
 
NethelpersDuplex 
NethelpersDuplex wraps ethtool.Duplex for YAML marshaling.
Name 
Number 
Description 
 
 
HALF 
0 
 
FULL 
1 
 
UNKNOWN 
255 
 
 
NethelpersFailOverMAC 
NethelpersFailOverMAC is a MAC failover mode.
Name 
Number 
Description 
 
 
FAIL_OVER_MAC_NONE 
0 
 
FAIL_OVER_MAC_ACTIVE 
1 
 
FAIL_OVER_MAC_FOLLOW 
2 
 
 
NethelpersFamily 
NethelpersFamily is a network family.
Name 
Number 
Description 
 
 
NETHELPERS_FAMILY_UNSPECIFIED 
0 
 
FAMILY_INET4 
2 
 
FAMILY_INET6 
10 
 
 
NethelpersLACPRate 
NethelpersLACPRate is a LACP rate.
Name 
Number 
Description 
 
 
LACP_RATE_SLOW 
0 
 
LACP_RATE_FAST 
1 
 
 
NethelpersLinkType 
NethelpersLinkType is a link type.
Name 
Number 
Description 
 
 
LINK_NETROM 
0 
 
LINK_ETHER 
1 
 
LINK_EETHER 
2 
 
LINK_AX25 
3 
 
LINK_PRONET 
4 
 
LINK_CHAOS 
5 
 
LINK_IEE802 
6 
 
LINK_ARCNET 
7 
 
LINK_ATALK 
8 
 
LINK_DLCI 
15 
 
LINK_ATM 
19 
 
LINK_METRICOM 
23 
 
LINK_IEEE1394 
24 
 
LINK_EUI64 
27 
 
LINK_INFINIBAND 
32 
 
LINK_SLIP 
256 
 
LINK_CSLIP 
257 
 
LINK_SLIP6 
258 
 
LINK_CSLIP6 
259 
 
LINK_RSRVD 
260 
 
LINK_ADAPT 
264 
 
LINK_ROSE 
270 
 
LINK_X25 
271 
 
LINK_HWX25 
272 
 
LINK_CAN 
280 
 
LINK_PPP 
512 
 
LINK_CISCO 
513 
 
LINK_HDLC 
513 
 
LINK_LAPB 
516 
 
LINK_DDCMP 
517 
 
LINK_RAWHDLC 
518 
 
LINK_TUNNEL 
768 
 
LINK_TUNNEL6 
769 
 
LINK_FRAD 
770 
 
LINK_SKIP 
771 
 
LINK_LOOPBCK 
772 
 
LINK_LOCALTLK 
773 
 
LINK_FDDI 
774 
 
LINK_BIF 
775 
 
LINK_SIT 
776 
 
LINK_IPDDP 
777 
 
LINK_IPGRE 
778 
 
LINK_PIMREG 
779 
 
LINK_HIPPI 
780 
 
LINK_ASH 
781 
 
LINK_ECONET 
782 
 
LINK_IRDA 
783 
 
LINK_FCPP 
784 
 
LINK_FCAL 
785 
 
LINK_FCPL 
786 
 
LINK_FCFABRIC 
787 
 
LINK_FCFABRIC1 
788 
 
LINK_FCFABRIC2 
789 
 
LINK_FCFABRIC3 
790 
 
LINK_FCFABRIC4 
791 
 
LINK_FCFABRIC5 
792 
 
LINK_FCFABRIC6 
793 
 
LINK_FCFABRIC7 
794 
 
LINK_FCFABRIC8 
795 
 
LINK_FCFABRIC9 
796 
 
LINK_FCFABRIC10 
797 
 
LINK_FCFABRIC11 
798 
 
LINK_FCFABRIC12 
799 
 
LINK_IEE802TR 
800 
 
LINK_IEE80211 
801 
 
LINK_IEE80211PRISM 
802 
 
LINK_IEE80211_RADIOTAP 
803 
 
LINK_IEE8021154 
804 
 
LINK_IEE8021154MONITOR 
805 
 
LINK_PHONET 
820 
 
LINK_PHONETPIPE 
821 
 
LINK_CAIF 
822 
 
LINK_IP6GRE 
823 
 
LINK_NETLINK 
824 
 
LINK6_LOWPAN 
825 
 
LINK_VOID 
65535 
 
LINK_NONE 
65534 
 
 
NethelpersMatchOperator 
NethelpersMatchOperator is a netfilter match operator.
Name 
Number 
Description 
 
 
OPERATOR_EQUAL 
0 
 
OPERATOR_NOT_EQUAL 
1 
 
 
NethelpersNfTablesChainHook 
NethelpersNfTablesChainHook wraps nftables.ChainHook for YAML marshaling.
Name 
Number 
Description 
 
 
CHAIN_HOOK_PREROUTING 
0 
 
CHAIN_HOOK_INPUT 
1 
 
CHAIN_HOOK_FORWARD 
2 
 
CHAIN_HOOK_OUTPUT 
3 
 
CHAIN_HOOK_POSTROUTING 
4 
 
 
NethelpersNfTablesChainPriority 
NethelpersNfTablesChainPriority wraps nftables.ChainPriority for YAML marshaling.
Name 
Number 
Description 
 
 
NETHELPERS_NFTABLESCHAINPRIORITY_UNSPECIFIED 
0 
 
CHAIN_PRIORITY_FIRST 
-2147483648 
 
CHAIN_PRIORITY_CONNTRACK_DEFRAG 
-400 
 
CHAIN_PRIORITY_RAW 
-300 
 
CHAIN_PRIORITY_SE_LINUX_FIRST 
-225 
 
CHAIN_PRIORITY_CONNTRACK 
-200 
 
CHAIN_PRIORITY_MANGLE 
-150 
 
CHAIN_PRIORITY_NAT_DEST 
-100 
 
CHAIN_PRIORITY_FILTER 
0 
 
CHAIN_PRIORITY_SECURITY 
50 
 
CHAIN_PRIORITY_NAT_SOURCE 
100 
 
CHAIN_PRIORITY_SE_LINUX_LAST 
225 
 
CHAIN_PRIORITY_CONNTRACK_HELPER 
300 
 
CHAIN_PRIORITY_LAST 
2147483647 
 
 
NethelpersNfTablesVerdict 
NethelpersNfTablesVerdict wraps nftables.Verdict for YAML marshaling.
Name 
Number 
Description 
 
 
VERDICT_DROP 
0 
 
VERDICT_ACCEPT 
1 
 
 
NethelpersOperationalState 
NethelpersOperationalState wraps rtnetlink.OperationalState for YAML marshaling.
Name 
Number 
Description 
 
 
OPER_STATE_UNKNOWN 
0 
 
OPER_STATE_NOT_PRESENT 
1 
 
OPER_STATE_DOWN 
2 
 
OPER_STATE_LOWER_LAYER_DOWN 
3 
 
OPER_STATE_TESTING 
4 
 
OPER_STATE_DORMANT 
5 
 
OPER_STATE_UP 
6 
 
 
NethelpersPort 
NethelpersPort wraps ethtool.Port for YAML marshaling.
Name 
Number 
Description 
 
 
TWISTED_PAIR 
0 
 
AUI 
1 
 
MII 
2 
 
FIBRE 
3 
 
BNC 
4 
 
DIRECT_ATTACH 
5 
 
NONE 
239 
 
OTHER 
255 
 
 
NethelpersPrimaryReselect 
NethelpersPrimaryReselect is an ARP targets mode.
Name 
Number 
Description 
 
 
PRIMARY_RESELECT_ALWAYS 
0 
 
PRIMARY_RESELECT_BETTER 
1 
 
PRIMARY_RESELECT_FAILURE 
2 
 
 
NethelpersProtocol 
NethelpersProtocol is a inet protocol.
Name 
Number 
Description 
 
 
NETHELPERS_PROTOCOL_UNSPECIFIED 
0 
 
PROTOCOL_ICMP 
1 
 
PROTOCOL_TCP 
6 
 
PROTOCOL_UDP 
17 
 
PROTOCOL_ICM_PV6 
58 
 
 
NethelpersRouteFlag 
NethelpersRouteFlag wraps RTM_F_* constants.
Name 
Number 
Description 
 
 
NETHELPERS_ROUTEFLAG_UNSPECIFIED 
0 
 
ROUTE_NOTIFY 
256 
 
ROUTE_CLONED 
512 
 
ROUTE_EQUALIZE 
1024 
 
ROUTE_PREFIX 
2048 
 
ROUTE_LOOKUP_TABLE 
4096 
 
ROUTE_FIB_MATCH 
8192 
 
ROUTE_OFFLOAD 
16384 
 
ROUTE_TRAP 
32768 
 
 
NethelpersRouteProtocol 
NethelpersRouteProtocol is a routing protocol.
Name 
Number 
Description 
 
 
PROTOCOL_UNSPEC 
0 
 
PROTOCOL_REDIRECT 
1 
 
PROTOCOL_KERNEL 
2 
 
PROTOCOL_BOOT 
3 
 
PROTOCOL_STATIC 
4 
 
PROTOCOL_RA 
9 
 
PROTOCOL_MRT 
10 
 
PROTOCOL_ZEBRA 
11 
 
PROTOCOL_BIRD 
12 
 
PROTOCOL_DNROUTED 
13 
 
PROTOCOL_XORP 
14 
 
PROTOCOL_NTK 
15 
 
PROTOCOL_DHCP 
16 
 
PROTOCOL_MRTD 
17 
 
PROTOCOL_KEEPALIVED 
18 
 
PROTOCOL_BABEL 
42 
 
PROTOCOL_OPENR 
99 
 
PROTOCOL_BGP 
186 
 
PROTOCOL_ISIS 
187 
 
PROTOCOL_OSPF 
188 
 
PROTOCOL_RIP 
189 
 
PROTOCOL_EIGRP 
192 
 
 
NethelpersRouteType 
NethelpersRouteType is a route type.
Name 
Number 
Description 
 
 
TYPE_UNSPEC 
0 
 
TYPE_UNICAST 
1 
 
TYPE_LOCAL 
2 
 
TYPE_BROADCAST 
3 
 
TYPE_ANYCAST 
4 
 
TYPE_MULTICAST 
5 
 
TYPE_BLACKHOLE 
6 
 
TYPE_UNREACHABLE 
7 
 
TYPE_PROHIBIT 
8 
 
TYPE_THROW 
9 
 
TYPE_NAT 
10 
 
TYPE_X_RESOLVE 
11 
 
 
NethelpersRoutingTable 
NethelpersRoutingTable is a routing table ID.
Name 
Number 
Description 
 
 
TABLE_UNSPEC 
0 
 
TABLE_DEFAULT 
253 
 
TABLE_MAIN 
254 
 
TABLE_LOCAL 
255 
 
 
NethelpersScope is an address scope.
Name 
Number 
Description 
 
 
SCOPE_GLOBAL 
0 
 
SCOPE_SITE 
200 
 
SCOPE_LINK 
253 
 
SCOPE_HOST 
254 
 
SCOPE_NOWHERE 
255 
 
 
NethelpersVLANProtocol 
NethelpersVLANProtocol is a VLAN protocol.
Name 
Number 
Description 
 
 
NETHELPERS_VLANPROTOCOL_UNSPECIFIED 
0 
 
VLAN_PROTOCOL8021_Q 
33024 
 
VLAN_PROTOCOL8021_AD 
34984 
 
 
NetworkConfigLayer 
NetworkConfigLayer describes network configuration layers, with lowest priority first.
Name 
Number 
Description 
 
 
CONFIG_DEFAULT 
0 
 
CONFIG_CMDLINE 
1 
 
CONFIG_PLATFORM 
2 
 
CONFIG_OPERATOR 
3 
 
CONFIG_MACHINE_CONFIGURATION 
4 
 
 
NetworkOperator 
NetworkOperator enumerates Talos network operators.
Name 
Number 
Description 
 
 
OPERATOR_DHCP4 
0 
 
OPERATOR_DHCP6 
1 
 
OPERATOR_VIP 
2 
 
 
RuntimeMachineStage 
RuntimeMachineStage describes the stage of the machine boot/run process.
Name 
Number 
Description 
 
 
MACHINE_STAGE_UNKNOWN 
0 
 
MACHINE_STAGE_BOOTING 
1 
 
MACHINE_STAGE_INSTALLING 
2 
 
MACHINE_STAGE_MAINTENANCE 
3 
 
MACHINE_STAGE_RUNNING 
4 
 
MACHINE_STAGE_REBOOTING 
5 
 
MACHINE_STAGE_SHUTTING_DOWN 
6 
 
MACHINE_STAGE_RESETTING 
7 
 
MACHINE_STAGE_UPGRADING 
8 
 
 
 
 
 
Top 
resource/definitions/etcd/etcd.proto 
ConfigSpec 
ConfigSpec describes (some) configuration settings of etcd.
MemberSpec 
MemberSpec holds information about an etcd member.
Field 
Type 
Label 
Description 
 
 
member_id 
string  
 
PKIStatusSpec 
PKIStatusSpec describes status of rendered secrets.
Field 
Type 
Label 
Description 
 
 
ready 
bool  
version 
string  
 
SpecSpec 
SpecSpec describes (some) Specuration settings of etcd.
 
 
 
 
Top 
resource/definitions/extensions/extensions.proto 
Compatibility 
Compatibility describes extension compatibility.
Constraint 
Constraint describes compatibility constraint.
Field 
Type 
Label 
Description 
 
 
version 
string  
 
Layer 
Layer defines overlay mount layer.
Metadata 
Metadata describes base extension metadata.
 
 
 
 
Top 
resource/definitions/files/files.proto 
EtcFileSpecSpec 
EtcFileSpecSpec describes status of rendered secrets.
Field 
Type 
Label 
Description 
 
 
contents 
bytes  
mode 
uint32  
 
EtcFileStatusSpec 
EtcFileStatusSpec describes status of rendered secrets.
Field 
Type 
Label 
Description 
 
 
spec_version 
string  
 
 
 
 
 
Top 
resource/definitions/hardware/hardware.proto 
MemoryModuleSpec 
MemoryModuleSpec represents a single Memory.
ProcessorSpec 
ProcessorSpec represents a single processor.
SystemInformationSpec 
SystemInformationSpec represents the system information obtained from smbios.
 
 
 
 
Top 
resource/definitions/k8s/k8s.proto 
APIServerConfigSpec 
APIServerConfigSpec is configuration for kube-apiserver.
APIServerConfigSpec.EnvironmentVariablesEntry 
AdmissionControlConfigSpec 
AdmissionControlConfigSpec is configuration for kube-apiserver.
AdmissionPluginSpec 
AdmissionPluginSpec is a single admission plugin configuration Admission Control plugins.
AuditPolicyConfigSpec 
AuditPolicyConfigSpec is audit policy configuration for kube-apiserver.
BootstrapManifestsConfigSpec 
BootstrapManifestsConfigSpec is configuration for bootstrap manifests.
ConfigStatusSpec 
ConfigStatusSpec describes status of rendered secrets.
Field 
Type 
Label 
Description 
 
 
ready 
bool  
version 
string  
 
ControllerManagerConfigSpec 
ControllerManagerConfigSpec is configuration for kube-controller-manager.
ControllerManagerConfigSpec.EnvironmentVariablesEntry 
EndpointSpec 
EndpointSpec describes status of rendered secrets.
Field 
Type 
Label 
Description 
 
 
addresses 
common.NetIP repeated 
 
 
ExtraManifest defines a single extra manifest to download.
ExtraManifestsConfigSpec is configuration for extra bootstrap manifests.
Field 
Type 
Label 
Description 
 
 
extra_manifests 
ExtraManifest repeated 
 
 
ExtraVolume is a configuration of extra volume.
KubePrismConfigSpec 
KubePrismConfigSpec describes KubePrismConfig data.
KubePrismEndpoint 
KubePrismEndpoint holds data for control plane endpoint.
KubePrismEndpointsSpec 
KubePrismEndpointsSpec describes KubePrismEndpoints configuration.
KubePrismStatusesSpec 
KubePrismStatusesSpec describes KubePrismStatuses data.
Field 
Type 
Label 
Description 
 
 
host 
string  
healthy 
bool  
 
KubeletConfigSpec 
KubeletConfigSpec holds the source of kubelet configuration.
KubeletSpecSpec 
KubeletSpecSpec holds the source of kubelet configuration.
ManifestSpec 
ManifestSpec holds the Kubernetes resources spec.
ManifestStatusSpec 
ManifestStatusSpec describes manifest application status.
Field 
Type 
Label 
Description 
 
 
manifests_applied 
string repeated 
 
 
NodeIPConfigSpec 
NodeIPConfigSpec holds the Node IP specification.
Field 
Type 
Label 
Description 
 
 
valid_subnets 
string repeated 
 
exclude_subnets 
string repeated 
 
 
NodeIPSpec 
NodeIPSpec holds the Node IP specification.
Field 
Type 
Label 
Description 
 
 
addresses 
common.NetIP repeated 
 
 
NodeLabelSpecSpec 
NodeLabelSpecSpec represents a label that's attached to a Talos node.
NodeStatusSpec 
NodeStatusSpec describes Kubernetes NodeStatus.
NodeStatusSpec.AnnotationsEntry 
NodeStatusSpec.LabelsEntry 
NodeTaintSpecSpec 
NodeTaintSpecSpec represents a label that's attached to a Talos node.
NodenameSpec 
NodenameSpec describes Kubernetes nodename.
Field 
Type 
Label 
Description 
 
 
nodename 
string  
hostname_version 
string  
skip_node_registration 
bool  
 
Resources 
Resources is a configuration of cpu and memory resources.
Resources.LimitsEntry 
Resources.RequestsEntry 
SchedulerConfigSpec 
SchedulerConfigSpec is configuration for kube-scheduler.
SchedulerConfigSpec.EnvironmentVariablesEntry 
SecretsStatusSpec 
SecretsStatusSpec describes status of rendered secrets.
Field 
Type 
Label 
Description 
 
 
ready 
bool  
version 
string  
 
SingleManifest 
SingleManifest is a single manifest.
StaticPodServerStatusSpec 
StaticPodServerStatusSpec describes static pod spec, it contains marshaled *v1.Pod spec.
Field 
Type 
Label 
Description 
 
 
url 
string  
 
StaticPodSpec 
StaticPodSpec describes static pod spec, it contains marshaled *v1.Pod spec.
StaticPodStatusSpec 
StaticPodStatusSpec describes kubelet static pod status.
 
 
 
 
Top 
resource/definitions/kubeaccess/kubeaccess.proto 
ConfigSpec 
ConfigSpec describes KubeSpan configuration..
Field 
Type 
Label 
Description 
 
 
enabled 
bool  
allowed_api_roles 
string repeated 
 
allowed_kubernetes_namespaces 
string repeated 
 
 
 
 
 
 
Top 
resource/definitions/kubespan/kubespan.proto 
ConfigSpec 
ConfigSpec describes KubeSpan configuration..
Field 
Type 
Label 
Description 
 
 
enabled 
bool  
cluster_id 
string  
shared_secret 
string  
force_routing 
bool  
advertise_kubernetes_networks 
bool  
mtu 
uint32  
endpoint_filters 
string repeated 
 
harvest_extra_endpoints 
bool  
 
EndpointSpec 
EndpointSpec describes Endpoint state.
IdentitySpec 
IdentitySpec describes KubeSpan keys and address.
Note: IdentitySpec is persisted on disk in the STATE partition,
so YAML serialization should be kept backwards compatible.
PeerSpecSpec 
PeerSpecSpec describes PeerSpec state.
PeerStatusSpec 
PeerStatusSpec describes PeerStatus state.
 
 
 
 
Top 
resource/definitions/network/network.proto 
AddressSpecSpec 
AddressSpecSpec describes status of rendered secrets.
AddressStatusSpec 
AddressStatusSpec describes status of rendered secrets.
BondMasterSpec 
BondMasterSpec describes bond settings if Kind == "bond".
BondSlave 
BondSlave contains a bond's master name and slave index.
Field 
Type 
Label 
Description 
 
 
master_name 
string  
slave_index 
int64  
 
BridgeMasterSpec 
BridgeMasterSpec describes bridge settings if Kind == "bridge".
Field 
Type 
Label 
Description 
 
 
stp 
STPSpec  
 
BridgeSlave 
BridgeSlave contains a bond's master name and slave index.
Field 
Type 
Label 
Description 
 
 
master_name 
string  
 
DHCP4OperatorSpec 
DHCP4OperatorSpec describes DHCP4 operator options.
Field 
Type 
Label 
Description 
 
 
route_metric 
uint32  
skip_hostname_request 
bool  
 
DHCP6OperatorSpec 
DHCP6OperatorSpec describes DHCP6 operator options.
Field 
Type 
Label 
Description 
 
 
duid 
string  
route_metric 
uint32  
skip_hostname_request 
bool  
 
HardwareAddrSpec 
HardwareAddrSpec describes spec for the link.
Field 
Type 
Label 
Description 
 
 
name 
string  
hardware_addr 
bytes  
 
HostnameSpecSpec 
HostnameSpecSpec describes node hostname.
HostnameStatusSpec 
HostnameStatusSpec describes node hostname.
Field 
Type 
Label 
Description 
 
 
hostname 
string  
domainname 
string  
 
LinkRefreshSpec 
LinkRefreshSpec describes status of rendered secrets.
Field 
Type 
Label 
Description 
 
 
generation 
int64  
 
LinkSpecSpec 
LinkSpecSpec describes spec for the link.
LinkStatusSpec 
LinkStatusSpec describes status of rendered secrets.
NfTablesAddressMatch 
NfTablesAddressMatch describes the match on the IP address.
NfTablesChainSpec 
NfTablesChainSpec describes status of rendered secrets.
NfTablesClampMSS 
NfTablesClampMSS describes the TCP MSS clamping operation.
MSS is limited by the MaxMTU so that:
IPv4: MSS = MaxMTU - 40 
IPv6: MSS = MaxMTU - 60. 
 
Field 
Type 
Label 
Description 
 
 
mtu 
fixed32  
 
NfTablesConntrackStateMatch 
NfTablesConntrackStateMatch describes the match on the connection tracking state.
NfTablesIfNameMatch 
NfTablesIfNameMatch describes the match on the interface name.
NfTablesLayer4Match 
NfTablesLayer4Match describes the match on the transport layer protocol.
NfTablesLimitMatch 
NfTablesLimitMatch describes the match on the packet rate.
Field 
Type 
Label 
Description 
 
 
packet_rate_per_second 
uint64  
 
NfTablesMark 
NfTablesMark encodes packet mark match/update operation.
When used as a match computes the following condition:
(mark & mask) ^ xor == value
When used as an update computes the following operation:
mark = (mark & mask) ^ xor.
NfTablesPortMatch 
NfTablesPortMatch describes the match on the transport layer port.
Field 
Type 
Label 
Description 
 
 
ranges 
PortRange repeated 
 
 
NfTablesRule 
NfTablesRule describes a single rule in the nftables chain.
NodeAddressFilterSpec 
NodeAddressFilterSpec describes a filter for NodeAddresses.
NodeAddressSpec 
NodeAddressSpec describes a set of node addresses.
OperatorSpecSpec 
OperatorSpecSpec describes DNS resolvers.
PortRange 
PortRange describes a range of ports.
Range is [lo, hi].
ProbeSpecSpec 
ProbeSpecSpec describes the Probe.
ProbeStatusSpec 
ProbeStatusSpec describes the Probe.
Field 
Type 
Label 
Description 
 
 
success 
bool  
last_error 
string  
 
ResolverSpecSpec 
ResolverSpecSpec describes DNS resolvers.
ResolverStatusSpec 
ResolverStatusSpec describes DNS resolvers.
Field 
Type 
Label 
Description 
 
 
dns_servers 
common.NetIP repeated 
 
 
RouteSpecSpec 
RouteSpecSpec describes the route.
RouteStatusSpec 
RouteStatusSpec describes status of rendered secrets.
STPSpec 
STPSpec describes Spanning Tree Protocol (STP) settings of a bridge.
Field 
Type 
Label 
Description 
 
 
enabled 
bool  
 
StatusSpec 
StatusSpec describes network state.
Field 
Type 
Label 
Description 
 
 
address_ready 
bool  
connectivity_ready 
bool  
hostname_ready 
bool  
etc_files_ready 
bool  
 
TCPProbeSpec 
TCPProbeSpec describes the TCP Probe.
TimeServerSpecSpec 
TimeServerSpecSpec describes NTP servers.
TimeServerStatusSpec 
TimeServerStatusSpec describes NTP servers.
Field 
Type 
Label 
Description 
 
 
ntp_servers 
string repeated 
 
 
VIPEquinixMetalSpec 
VIPEquinixMetalSpec describes virtual (elastic) IP settings for Equinix Metal.
VIPHCloudSpec 
VIPHCloudSpec describes virtual (elastic) IP settings for Hetzner Cloud.
VIPOperatorSpec 
VIPOperatorSpec describes virtual IP operator options.
VLANSpec 
VLANSpec describes VLAN settings if Kind == "vlan".
WireguardPeer 
WireguardPeer describes a single peer.
WireguardSpec 
WireguardSpec describes Wireguard settings if Kind == "wireguard".
 
 
 
 
Top 
resource/definitions/perf/perf.proto 
CPUSpec 
CPUSpec represents the last CPU stats snapshot.
CPUStat 
CPUStat represents a single cpu stat.
MemorySpec 
MemorySpec represents the last Memory stats snapshot.
 
 
 
 
Top 
resource/definitions/proto/proto.proto 
LinuxIDMapping 
LinuxIDMapping specifies UID/GID mappings.
Mount 
Mount specifies a mount for a container.
 
 
 
 
Top 
resource/definitions/runtime/runtime.proto 
DevicesStatusSpec 
DevicesStatusSpec is the spec for devices status.
Field 
Type 
Label 
Description 
 
 
ready 
bool  
 
EventSinkConfigSpec 
EventSinkConfigSpec describes configuration of Talos event log streaming.
Field 
Type 
Label 
Description 
 
 
endpoint 
string  
 
KernelModuleSpecSpec 
KernelModuleSpecSpec describes Linux kernel module to load.
Field 
Type 
Label 
Description 
 
 
name 
string  
parameters 
string repeated 
 
 
KernelParamSpecSpec 
KernelParamSpecSpec describes status of the defined sysctls.
Field 
Type 
Label 
Description 
 
 
value 
string  
ignore_errors 
bool  
 
KernelParamStatusSpec 
KernelParamStatusSpec describes status of the defined sysctls.
KmsgLogConfigSpec 
KmsgLogConfigSpec describes configuration for kmsg log streaming.
Field 
Type 
Label 
Description 
 
 
destinations 
common.URL repeated 
 
 
MachineStatusSpec 
MachineStatusSpec describes status of the defined sysctls.
MachineStatusStatus 
MachineStatusStatus describes machine current status at the stage.
MaintenanceServiceConfigSpec 
MaintenanceServiceConfigSpec describes configuration for maintenance service API.
Field 
Type 
Label 
Description 
 
 
listen_address 
string  
reachable_addresses 
common.NetIP repeated 
 
 
MetaKeySpec 
MetaKeySpec describes status of the defined sysctls.
Field 
Type 
Label 
Description 
 
 
value 
string  
 
MetaLoadedSpec 
MetaLoadedSpec is the spec for meta loaded. The Done field is always true when resource exists.
Field 
Type 
Label 
Description 
 
 
done 
bool  
 
MountStatusSpec 
MountStatusSpec describes status of the defined sysctls.
PlatformMetadataSpec 
PlatformMetadataSpec describes platform metadata properties.
SecurityStateSpec 
SecurityStateSpec describes the security state resource properties.
Field 
Type 
Label 
Description 
 
 
secure_boot 
bool  
uki_signing_key_fingerprint 
string  
pcr_signing_key_fingerprint 
string  
 
UniqueMachineTokenSpec 
UniqueMachineTokenSpec is the spec for the machine unique token. Token can be empty if machine wasn't assigned any.
Field 
Type 
Label 
Description 
 
 
token 
string  
 
UnmetCondition 
UnmetCondition is a failure which prevents machine from being ready at the stage.
 
 
 
 
Top 
resource/definitions/secrets/secrets.proto 
APICertsSpec 
APICertsSpec describes etcd certs secrets.
CertSANSpec 
CertSANSpec describes fields of the cert SANs.
EtcdCertsSpec 
EtcdCertsSpec describes etcd certs secrets.
EtcdRootSpec 
EtcdRootSpec describes etcd CA secrets.
KubeletSpec 
KubeletSpec describes root Kubernetes secrets.
KubernetesCertsSpec 
KubernetesCertsSpec describes generated Kubernetes certificates.
Field 
Type 
Label 
Description 
 
 
scheduler_kubeconfig 
string  
controller_manager_kubeconfig 
string  
localhost_admin_kubeconfig 
string  
admin_kubeconfig 
string  
 
KubernetesDynamicCertsSpec 
KubernetesDynamicCertsSpec describes generated KubernetesCerts certificates.
KubernetesRootSpec 
KubernetesRootSpec describes root Kubernetes secrets.
MaintenanceRootSpec 
MaintenanceRootSpec describes maintenance service CA.
MaintenanceServiceCertsSpec 
MaintenanceServiceCertsSpec describes maintenance service certs secrets.
OSRootSpec 
OSRootSpec describes operating system CA.
TrustdCertsSpec 
TrustdCertsSpec describes etcd certs secrets.
 
 
 
 
Top 
resource/definitions/siderolink/siderolink.proto 
ConfigSpec 
ConfigSpec describes KubeSpan configuration..
Field 
Type 
Label 
Description 
 
 
api_endpoint 
string  
 
 
 
 
 
Top 
resource/definitions/time/time.proto 
AdjtimeStatusSpec 
AdjtimeStatusSpec describes Linux internal adjtime state.
StatusSpec 
StatusSpec describes time sync state.
Field 
Type 
Label 
Description 
 
 
synced 
bool  
epoch 
int64  
sync_disabled 
bool  
 
 
 
 
 
Top 
resource/definitions/v1alpha1/v1alpha1.proto 
ServiceSpec 
ServiceSpec describe service state.
Field 
Type 
Label 
Description 
 
 
running 
bool  
healthy 
bool  
unknown 
bool  
 
 
 
 
 
Top 
inspect/inspect.proto 
ControllerDependencyEdge 
ControllerRuntimeDependenciesResponse 
ControllerRuntimeDependency 
The ControllerRuntimeDependency message contains the graph of controller-resource dependencies.
 
DependencyEdgeType 
Name 
Number 
Description 
 
 
OUTPUT_EXCLUSIVE 
0 
 
OUTPUT_SHARED 
3 
 
INPUT_STRONG 
1 
 
INPUT_WEAK 
2 
 
INPUT_DESTROY_READY 
4 
 
 
 
 
InspectService 
The inspect service definition.
InspectService provides auxiliary API to inspect OS internals.
 
Top 
machine/machine.proto 
AddressEvent 
AddressEvent reports node endpoints aggregated from k8s.Endpoints and network.Hostname.
Field 
Type 
Label 
Description 
 
 
hostname 
string  
addresses 
string repeated 
 
 
ApplyConfiguration 
ApplyConfigurationResponse describes the response to a configuration request.
Field 
Type 
Label 
Description 
 
 
metadata 
common.Metadata  
warnings 
string repeated 
Configuration validation warnings. 
 
mode 
ApplyConfigurationRequest.Mode States which mode was actually chosen. 
 
mode_details 
string Human-readable message explaining the result of the apply configuration call. 
 
 
ApplyConfigurationRequest 
rpc applyConfiguration
ApplyConfiguration describes a request to assert a new configuration upon a
node.
ApplyConfigurationResponse 
BPFInstruction 
Bootstrap 
The bootstrap message containing the bootstrap status.
BootstrapRequest 
rpc Bootstrap
Field 
Type 
Label 
Description 
 
 
recover_etcd 
bool Enable etcd recovery from the snapshot. Snapshot should be uploaded before this call via EtcdRecover RPC. 
 
recover_skip_hash_check 
bool Skip hash check on the snapshot (etcd). Enable this when recovering from data directory copy to skip integrity check. 
 
 
BootstrapResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Bootstrap repeated 
 
 
CNIConfig 
Field 
Type 
Label 
Description 
 
 
name 
string  
urls 
string repeated 
 
 
CPUInfo 
CPUInfoResponse 
Field 
Type 
Label 
Description 
 
 
messages 
CPUsInfo repeated 
 
 
CPUStat 
CPUsInfo 
ClusterConfig 
ClusterNetworkConfig 
ConfigLoadErrorEvent 
ConfigLoadErrorEvent is reported when the config loading has failed.
Field 
Type 
Label 
Description 
 
 
error 
string  
 
ConfigValidationErrorEvent 
ConfigValidationErrorEvent is reported when config validation has failed.
Field 
Type 
Label 
Description 
 
 
error 
string  
 
ConnectRecord 
ConnectRecord.Process 
Container 
The messages message containing the requested containers.
ContainerInfo 
The messages message containing the requested containers.
ContainersRequest 
ContainersResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Container repeated 
 
 
ControlPlaneConfig 
Field 
Type 
Label 
Description 
 
 
endpoint 
string  
 
CopyRequest 
CopyRequest describes a request to copy data out of Talos node
Copy produces .tar.gz archive which is streamed back to the caller
Field 
Type 
Label 
Description 
 
 
root_path 
string Root path to start copying data out, it might be either a file or directory 
 
 
DHCPOptionsConfig 
Field 
Type 
Label 
Description 
 
 
route_metric 
uint32  
 
DiskStat 
DiskStats 
DiskStatsResponse 
Field 
Type 
Label 
Description 
 
 
messages 
DiskStats repeated 
 
 
DiskUsageInfo 
DiskUsageInfo describes a file or directory's information for du command
Field 
Type 
Label 
Description 
 
 
metadata 
common.Metadata  
name 
string Name is the name (including prefixed path) of the file or directory 
 
size 
int64 Size indicates the number of bytes contained within the file 
 
error 
string Error describes any error encountered while trying to read the file information. 
 
relative_name 
string RelativeName is the name of the file or directory relative to the RootPath 
 
 
DiskUsageRequest 
DiskUsageRequest describes a request to list disk usage of directories and regular files
Field 
Type 
Label 
Description 
 
 
recursion_depth 
int32 RecursionDepth indicates how many levels of subdirectories should be recursed. The default (0) indicates that no limit should be enforced. 
 
all 
bool All write sizes for all files, not just directories. 
 
threshold 
int64 Threshold exclude entries smaller than SIZE if positive, or entries greater than SIZE if negative. 
 
paths 
string repeated 
DiskUsagePaths is the list of directories to calculate disk usage for. 
 
 
DmesgRequest 
dmesg
Field 
Type 
Label 
Description 
 
 
follow 
bool  
tail 
bool  
 
EtcdAlarm 
EtcdAlarmDisarm 
EtcdAlarmDisarmResponse 
EtcdAlarmListResponse 
Field 
Type 
Label 
Description 
 
 
messages 
EtcdAlarm repeated 
 
 
EtcdDefragment 
EtcdDefragmentResponse 
EtcdForfeitLeadership 
EtcdForfeitLeadershipRequest 
EtcdForfeitLeadershipResponse 
EtcdLeaveCluster 
EtcdLeaveClusterRequest 
EtcdLeaveClusterResponse 
EtcdMember 
EtcdMember describes a single etcd member.
Field 
Type 
Label 
Description 
 
 
id 
uint64 member ID. 
 
hostname 
string human-readable name of the member. 
 
peer_urls 
string repeated 
the list of URLs the member exposes to clients for communication. 
 
client_urls 
string repeated 
the list of URLs the member exposes to the cluster for communication. 
 
is_learner 
bool learner flag 
 
 
EtcdMemberAlarm 
EtcdMemberListRequest 
Field 
Type 
Label 
Description 
 
 
query_local 
bool  
 
EtcdMemberListResponse 
Field 
Type 
Label 
Description 
 
 
messages 
EtcdMembers repeated 
 
 
EtcdMemberStatus 
EtcdMembers 
EtcdMembers contains the list of members registered on the host.
Field 
Type 
Label 
Description 
 
 
metadata 
common.Metadata  
legacy_members 
string repeated 
list of member hostnames. 
 
members 
EtcdMember repeated 
the list of etcd members registered on the node. 
 
 
EtcdRecover 
EtcdRecoverResponse 
Field 
Type 
Label 
Description 
 
 
messages 
EtcdRecover repeated 
 
 
EtcdRemoveMember 
EtcdRemoveMemberByID 
EtcdRemoveMemberByIDRequest 
Field 
Type 
Label 
Description 
 
 
member_id 
uint64  
 
EtcdRemoveMemberByIDResponse 
EtcdRemoveMemberRequest 
Field 
Type 
Label 
Description 
 
 
member 
string  
 
EtcdRemoveMemberResponse 
EtcdSnapshotRequest 
EtcdStatus 
EtcdStatusResponse 
Field 
Type 
Label 
Description 
 
 
messages 
EtcdStatus repeated 
 
 
Event 
EventsRequest 
FeaturesInfo 
FeaturesInfo describes individual Talos features that can be switched on or off.
Field 
Type 
Label 
Description 
 
 
rbac 
bool RBAC is true if role-based access control is enabled. 
 
 
FileInfo 
FileInfo describes a file or directory's information
Field 
Type 
Label 
Description 
 
 
metadata 
common.Metadata  
name 
string Name is the name (including prefixed path) of the file or directory 
 
size 
int64 Size indicates the number of bytes contained within the file 
 
mode 
uint32 Mode is the bitmap of UNIX mode/permission flags of the file 
 
modified 
int64 Modified indicates the UNIX timestamp at which the file was last modified 
 
is_dir 
bool IsDir indicates that the file is a directory 
 
error 
string Error describes any error encountered while trying to read the file information. 
 
link 
string Link is filled with symlink target 
 
relative_name 
string RelativeName is the name of the file or directory relative to the RootPath 
 
uid 
uint32 Owner uid 
 
gid 
uint32 Owner gid 
 
 
GenerateClientConfiguration 
Field 
Type 
Label 
Description 
 
 
metadata 
common.Metadata  
ca 
bytes PEM-encoded CA certificate. 
 
crt 
bytes PEM-encoded generated client certificate. 
 
key 
bytes PEM-encoded generated client key. 
 
talosconfig 
bytes Client configuration (talosconfig) file content. 
 
 
GenerateClientConfigurationRequest 
Field 
Type 
Label 
Description 
 
 
roles 
string repeated 
Roles in the generated client certificate. 
 
crt_ttl 
google.protobuf.Duration Client certificate TTL. 
 
 
GenerateClientConfigurationResponse 
GenerateConfiguration 
GenerateConfiguration describes the response to a generate configuration request.
GenerateConfigurationRequest 
GenerateConfigurationRequest describes a request to generate a new configuration
on a node.
GenerateConfigurationResponse 
Hostname 
HostnameResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Hostname repeated 
 
 
ImageListRequest 
ImageListResponse 
ImagePull 
ImagePullRequest 
ImagePullResponse 
Field 
Type 
Label 
Description 
 
 
messages 
ImagePull repeated 
 
 
InstallConfig 
Field 
Type 
Label 
Description 
 
 
install_disk 
string  
install_image 
string  
 
ListRequest 
ListRequest describes a request to list the contents of a directory.
Field 
Type 
Label 
Description 
 
 
root 
string Root indicates the root directory for the list. If not indicated, '/' is presumed. 
 
recurse 
bool Recurse indicates that subdirectories should be recursed. 
 
recursion_depth 
int32 RecursionDepth indicates how many levels of subdirectories should be recursed. The default (0) indicates that no limit should be enforced. 
 
types 
ListRequest.Type repeated 
Types indicates what file type should be returned. If not indicated, all files will be returned. 
 
 
LoadAvg 
LoadAvgResponse 
Field 
Type 
Label 
Description 
 
 
messages 
LoadAvg repeated 
 
 
LogsRequest 
rpc logs
The request message containing the process name.
MachineConfig 
MachineStatusEvent 
MachineStatusEvent reports changes to the MachineStatus resource.
MachineStatusEvent.MachineStatus 
MachineStatusEvent.MachineStatus.UnmetCondition 
MemInfo 
Memory 
MemoryResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Memory repeated 
 
 
MetaDelete 
MetaDeleteRequest 
Field 
Type 
Label 
Description 
 
 
key 
uint32  
 
MetaDeleteResponse 
Field 
Type 
Label 
Description 
 
 
messages 
MetaDelete repeated 
 
 
MetaWrite 
MetaWriteRequest 
MetaWriteResponse 
Field 
Type 
Label 
Description 
 
 
messages 
MetaWrite repeated 
 
 
MountStat 
The messages message containing the requested processes.
Mounts 
The messages message containing the requested df stats.
MountsResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Mounts repeated 
 
 
NetDev 
Netstat 
NetstatRequest 
NetstatRequest.Feature 
Field 
Type 
Label 
Description 
 
 
pid 
bool  
 
NetstatRequest.L4proto 
NetstatRequest.NetNS 
Field 
Type 
Label 
Description 
 
 
hostnetwork 
bool  
netns 
string repeated 
 
allnetns 
bool  
 
NetstatResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Netstat repeated 
 
 
NetworkConfig 
NetworkDeviceConfig 
NetworkDeviceStats 
NetworkDeviceStatsResponse 
PacketCaptureRequest 
Field 
Type 
Label 
Description 
 
 
interface 
string Interface name to perform packet capture on. 
 
promiscuous 
bool Enable promiscuous mode. 
 
snap_len 
uint32 Snap length in bytes. 
 
bpf_filter 
BPFInstruction repeated 
BPF filter. 
 
 
PhaseEvent 
PlatformInfo 
Process 
ProcessInfo 
ProcessesResponse 
rpc processes
Field 
Type 
Label 
Description 
 
 
messages 
Process repeated 
 
 
ReadRequest 
Field 
Type 
Label 
Description 
 
 
path 
string  
 
Reboot 
The reboot message containing the reboot status.
RebootRequest 
rpc reboot
RebootResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Reboot repeated 
 
 
Reset 
The reset message containing the restart status.
ResetPartitionSpec 
rpc reset
Field 
Type 
Label 
Description 
 
 
label 
string  
wipe 
bool  
 
ResetRequest 
Field 
Type 
Label 
Description 
 
 
graceful 
bool Graceful indicates whether node should leave etcd before the upgrade, it also enforces etcd checks before leaving. 
 
reboot 
bool Reboot indicates whether node should reboot or halt after resetting. 
 
system_partitions_to_wipe 
ResetPartitionSpec repeated 
System_partitions_to_wipe lists specific system disk partitions to be reset (wiped). If system_partitions_to_wipe is empty, all the partitions are erased. 
 
user_disks_to_wipe 
string repeated 
UserDisksToWipe lists specific connected block devices to be reset (wiped). 
 
mode 
ResetRequest.WipeMode WipeMode defines which devices should be wiped. 
 
 
ResetResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Reset repeated 
 
 
Restart 
RestartEvent 
Field 
Type 
Label 
Description 
 
 
cmd 
int64  
 
RestartRequest 
rpc restart
The request message containing the process to restart.
RestartResponse 
The messages message containing the restart status.
Field 
Type 
Label 
Description 
 
 
messages 
Restart repeated 
 
 
Rollback 
RollbackRequest 
rpc rollback
RollbackResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Rollback repeated 
 
 
RouteConfig 
SequenceEvent 
rpc events
ServiceEvent 
ServiceEvents 
ServiceHealth 
ServiceInfo 
ServiceList 
rpc servicelist
ServiceListResponse 
Field 
Type 
Label 
Description 
 
 
messages 
ServiceList repeated 
 
 
ServiceRestart 
ServiceRestartRequest 
Field 
Type 
Label 
Description 
 
 
id 
string  
 
ServiceRestartResponse 
ServiceStart 
ServiceStartRequest 
rpc servicestart
Field 
Type 
Label 
Description 
 
 
id 
string  
 
ServiceStartResponse 
ServiceStateEvent 
ServiceStop 
ServiceStopRequest 
Field 
Type 
Label 
Description 
 
 
id 
string  
 
ServiceStopResponse 
Field 
Type 
Label 
Description 
 
 
messages 
ServiceStop repeated 
 
 
Shutdown 
rpc shutdown
The messages message containing the shutdown status.
ShutdownRequest 
Field 
Type 
Label 
Description 
 
 
force 
bool Force indicates whether node should shutdown without first cordening and draining 
 
 
ShutdownResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Shutdown repeated 
 
 
SoftIRQStat 
Stat 
The messages message containing the requested stat.
Stats 
The messages message containing the requested stats.
StatsRequest 
The request message containing the containerd namespace.
StatsResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Stats repeated 
 
 
SystemStat 
SystemStatResponse 
Field 
Type 
Label 
Description 
 
 
messages 
SystemStat repeated 
 
 
TaskEvent 
Upgrade 
UpgradeRequest 
rpc upgrade
UpgradeResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Upgrade repeated 
 
 
Version 
VersionInfo 
VersionResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Version repeated 
 
 
 
ApplyConfigurationRequest.Mode 
Name 
Number 
Description 
 
 
REBOOT 
0 
 
AUTO 
1 
 
NO_REBOOT 
2 
 
STAGED 
3 
 
TRY 
4 
 
 
ConnectRecord.State 
Name 
Number 
Description 
 
 
RESERVED 
0 
 
ESTABLISHED 
1 
 
SYN_SENT 
2 
 
SYN_RECV 
3 
 
FIN_WAIT1 
4 
 
FIN_WAIT2 
5 
 
TIME_WAIT 
6 
 
CLOSE 
7 
 
CLOSEWAIT 
8 
 
LASTACK 
9 
 
LISTEN 
10 
 
CLOSING 
11 
 
 
ConnectRecord.TimerActive 
Name 
Number 
Description 
 
 
OFF 
0 
 
ON 
1 
 
KEEPALIVE 
2 
 
TIMEWAIT 
3 
 
PROBE 
4 
 
 
EtcdMemberAlarm.AlarmType 
Name 
Number 
Description 
 
 
NONE 
0 
 
NOSPACE 
1 
 
CORRUPT 
2 
 
 
ListRequest.Type 
File type.
Name 
Number 
Description 
 
 
REGULAR 
0 
Regular file (not directory, symlink, etc). 
 
DIRECTORY 
1 
Directory. 
 
SYMLINK 
2 
Symbolic link. 
 
 
MachineConfig.MachineType 
Name 
Number 
Description 
 
 
TYPE_UNKNOWN 
0 
 
TYPE_INIT 
1 
 
TYPE_CONTROL_PLANE 
2 
 
TYPE_WORKER 
3 
 
 
MachineStatusEvent.MachineStage 
Name 
Number 
Description 
 
 
UNKNOWN 
0 
 
BOOTING 
1 
 
INSTALLING 
2 
 
MAINTENANCE 
3 
 
RUNNING 
4 
 
REBOOTING 
5 
 
SHUTTING_DOWN 
6 
 
RESETTING 
7 
 
UPGRADING 
8 
 
 
NetstatRequest.Filter 
Name 
Number 
Description 
 
 
ALL 
0 
 
CONNECTED 
1 
 
LISTENING 
2 
 
 
PhaseEvent.Action 
Name 
Number 
Description 
 
 
START 
0 
 
STOP 
1 
 
 
RebootRequest.Mode 
Name 
Number 
Description 
 
 
DEFAULT 
0 
 
POWERCYCLE 
1 
 
 
ResetRequest.WipeMode 
Name 
Number 
Description 
 
 
ALL 
0 
 
SYSTEM_DISK 
1 
 
USER_DISKS 
2 
 
 
SequenceEvent.Action 
Name 
Number 
Description 
 
 
NOOP 
0 
 
START 
1 
 
STOP 
2 
 
 
ServiceStateEvent.Action 
Name 
Number 
Description 
 
 
INITIALIZED 
0 
 
PREPARING 
1 
 
WAITING 
2 
 
RUNNING 
3 
 
STOPPING 
4 
 
FINISHED 
5 
 
FAILED 
6 
 
SKIPPED 
7 
 
 
TaskEvent.Action 
Name 
Number 
Description 
 
 
START 
0 
 
STOP 
1 
 
 
UpgradeRequest.RebootMode 
Name 
Number 
Description 
 
 
DEFAULT 
0 
 
POWERCYCLE 
1 
 
 
 
 
MachineService 
The machine service definition.
 
Top 
security/security.proto 
CertificateRequest 
The request message containing the certificate signing request.
Field 
Type 
Label 
Description 
 
 
csr 
bytes Certificate Signing Request in PEM format. 
 
 
CertificateResponse 
The response message containing signed certificate.
Field 
Type 
Label 
Description 
 
 
ca 
bytes Certificate of the CA that signed the requested certificate in PEM format. 
 
crt 
bytes Signed X.509 requested certificate in PEM format. 
 
 
 
 
 
SecurityService 
The security service definition.
 
Top 
storage/storage.proto 
Disk 
Disk represents a disk.
Field 
Type 
Label 
Description 
 
 
size 
uint64 Size indicates the disk size in bytes. 
 
model 
string Model idicates the disk model. 
 
device_name 
string DeviceName indicates the disk name (e.g. sda). 
 
name 
string Name as in /sys/block/<dev>/device/name. 
 
serial 
string Serial as in /sys/block/<dev>/device/serial. 
 
modalias 
string Modalias as in /sys/block/<dev>/device/modalias. 
 
uuid 
string Uuid as in /sys/block/<dev>/device/uuid. 
 
wwid 
string Wwid as in /sys/block/<dev>/device/wwid. 
 
type 
Disk.DiskType Type is a type of the disk: nvme, ssd, hdd, sd card. 
 
bus_path 
string BusPath is the bus path of the disk. 
 
system_disk 
bool SystemDisk indicates that the disk is used as Talos system disk. 
 
subsystem 
string Subsystem is the symlink path in the /sys/block/<dev>/subsystem. 
 
readonly 
bool Readonly specifies if the disk is read only. 
 
 
Disks 
DisksResponse represents the response of the Disks RPC.
DisksResponse 
Field 
Type 
Label 
Description 
 
 
messages 
Disks repeated 
 
 
 
Disk.DiskType 
Name 
Number 
Description 
 
 
UNKNOWN 
0 
 
SSD 
1 
 
HDD 
2 
 
NVME 
3 
 
SD 
4 
 
 
 
 
StorageService 
StorageService represents the storage service.
 
Top 
time/time.proto 
Time 
TimeRequest 
The response message containing the ntp server
Field 
Type 
Label 
Description 
 
 
server 
string  
 
TimeResponse 
The response message containing the ntp server, time, and offset
Field 
Type 
Label 
Description 
 
 
messages 
Time repeated 
 
 
 
 
 
TimeService 
The time service definition.
 
Scalar Value Types 
.proto Type 
Notes 
C++ 
Java 
Python 
Go 
C# 
PHP 
Ruby 
 
 
 double double 
double 
float 
float64 
double 
float 
Float 
 
 float float 
float 
float 
float32 
float 
float 
Float 
 
 int32 Uses variable-length encoding. Inefficient for encoding negative numbers –  
int32 
int 
int 
int32 
int 
integer 
Bignum or Fixnum (as required) 
 
 int64 Uses variable-length encoding. Inefficient for encoding negative numbers –  
int64 
long 
int/long 
int64 
long 
integer/string 
Bignum 
 
 uint32 Uses variable-length encoding. 
uint32 
int 
int/long 
uint32 
uint 
integer 
Bignum or Fixnum (as required) 
 
 uint64 Uses variable-length encoding. 
uint64 
long 
int/long 
uint64 
ulong 
integer/string 
Bignum or Fixnum (as required) 
 
 sint32 Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int32s. 
int32 
int 
int 
int32 
int 
integer 
Bignum or Fixnum (as required) 
 
 sint64 Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int64s. 
int64 
long 
int/long 
int64 
long 
integer/string 
Bignum 
 
 fixed32 Always four bytes. More efficient than uint32 if values are often greater than 2^28. 
uint32 
int 
int 
uint32 
uint 
integer 
Bignum or Fixnum (as required) 
 
 fixed64 Always eight bytes. More efficient than uint64 if values are often greater than 2^56. 
uint64 
long 
int/long 
uint64 
ulong 
integer/string 
Bignum 
 
 sfixed32 Always four bytes. 
int32 
int 
int 
int32 
int 
integer 
Bignum or Fixnum (as required) 
 
 sfixed64 Always eight bytes. 
int64 
long 
int/long 
int64 
long 
integer/string 
Bignum 
 
 bool bool 
boolean 
boolean 
bool 
bool 
boolean 
TrueClass/FalseClass 
 
 string A string must always contain UTF-8 encoded or 7-bit ASCII text. 
string 
String 
str/unicode 
string 
string 
string 
String (UTF-8) 
 
 bytes May contain any arbitrary sequence of bytes. 
string 
ByteString 
str 
[]byte 
ByteString 
string 
String (ASCII-8BIT)