talos/website/content/docs/v0.13/Reference
Andrey Smirnov caee24bf61
feat: implement KubeSpan identity controller
Fixes #4138

When KubeSpan is enabled, Talos automatically generates or loads
KubeSpan identity which consists of Wireguard key pair. ULA address is
calculated based on ClusterID and first NIC MAC address.

Some code was borrowed from #3577.

Example:

```
$ talosctl -n 172.20.0.2 get ksi
NODE         NAMESPACE   TYPE               ID      VERSION   ADDRESS                                       PUBLICKEY
172.20.0.2   kubespan    KubeSpanIdentity   local   1         fd71:6e1d:86be:6302:e871:1bff:feb2:ccee/128   Oak2fBEWngBhwslBxDVgnRNHXs88OAp4kjroSX0uqUE=
```

Additional changes:

* `--with-kubespan` flag for `talosctl cluster create` for quick testing
* validate that cluster discovery (and KubeSpan) requires ClusterID and
ClusterSecret.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
Signed-off-by: Seán C McCord <ulexus@gmail.com>
Co-authored-by: Seán C McCord <ulexus@gmail.com>
2021-08-27 18:49:15 +03:00
..
api.md docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
cli.md feat: implement KubeSpan identity controller 2021-08-27 18:49:15 +03:00
configuration.md feat: provide machine configuration for KubeSpan and cluster discovery 2021-08-26 22:55:56 +03:00
kernel.md docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00
platform.md docs: fork docs for 0.13 2021-08-25 21:43:05 +03:00