talos/website/content/docs/v0.13
Andrey Smirnov caee24bf61
feat: implement KubeSpan identity controller
Fixes #4138

When KubeSpan is enabled, Talos automatically generates or loads
KubeSpan identity which consists of Wireguard key pair. ULA address is
calculated based on ClusterID and first NIC MAC address.

Some code was borrowed from #3577.

Example:

```
$ talosctl -n 172.20.0.2 get ksi
NODE         NAMESPACE   TYPE               ID      VERSION   ADDRESS                                       PUBLICKEY
172.20.0.2   kubespan    KubeSpanIdentity   local   1         fd71:6e1d:86be:6302:e871:1bff:feb2:ccee/128   Oak2fBEWngBhwslBxDVgnRNHXs88OAp4kjroSX0uqUE=
```

Additional changes:

* `--with-kubespan` flag for `talosctl cluster create` for quick testing
* validate that cluster discovery (and KubeSpan) requires ClusterID and
ClusterSecret.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
Signed-off-by: Seán C McCord <ulexus@gmail.com>
Co-authored-by: Seán C McCord <ulexus@gmail.com>
2021-08-27 18:49:15 +03:00
..
Bare Metal Platforms docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
Cloud Platforms docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
Guides docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
Introduction docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
Learn More docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
Local Platforms docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
Reference feat: implement KubeSpan identity controller 2021-08-27 18:49:15 +03:00
Single Board Computers docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
Virtualized Platforms docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
index.md docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00