feat: remove kubelet-csr-approver

.taskfiles/Talos/Taskfile.yaml

@@ -36,7 +36,7 @@ tasks:
     cmds:
       - task: '{{if ne .ROLLOUT true}}down{{else}}noop{{end}}'
       - talosctl --nodes {{.HOSTNAME}} upgrade --image="factory.talos.dev/installer/{{.TALOS_SCHEMATIC_ID}}:{{.TALOS_VERSION}}" --timeout=10m
-      - talosctl --nodes {{.HOSTNAME}} health --wait-timeout=10m --server=false
+      - talosctl --nodes {{.HOSTNAME}} health
       - task: '{{if ne .ROLLOUT true}}up{{else}}noop{{end}}'
     vars:
       TALOS_SCHEMATIC_ID:

.taskfiles/bootstrap/Taskfile.yaml

@@ -57,7 +57,6 @@ tasks:
       - which flux kubectl sops
 
   apps:
-    internal: true
     dir: '{{.KUBERNETES_DIR}}/bootstrap/talos'
     cmds:
       - until kubectl wait --for=condition=Ready=False nodes --all --timeout=600s; do sleep 10; done

config/talos/clusterconfig/.gitignore

@@ -1,4 +1,4 @@
-olympus-artemis.yaml
-olympus-apollo.yaml
-olympus-athena.yaml
 talosconfig
+valhalla-odin.yaml
+valhalla-thor.yaml
+valhalla-frigg.yaml

config/talos/talconfig.yaml

@@ -3,9 +3,9 @@
 # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
 talosVersion: v1.9.0
 # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-kubernetesVersion: v1.32.0
+kubernetesVersion: v1.31.0
 
-clusterName: "olympus"
+clusterName: "valhalla"
 endpoint: https://192.168.2.101:6443
 clusterPodNets:
   - "10.69.0.0/16"
@@ -21,7 +21,7 @@ cniConfig:
   name: none
 
 nodes:
-  - hostname: "artemis"
+  - hostname: "odin"
     ipAddress: "192.168.2.102"
     installDisk: "/dev/sda"
     talosImageURL: factory.talos.dev/installer/376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
@@ -38,7 +38,7 @@ nodes:
         mtu: 1500
         vip:
           ip: "192.168.2.101"
-  - hostname: "apollo"
+  - hostname: "thor"
     ipAddress: "192.168.2.103"
     installDisk: "/dev/sda"
     talosImageURL: factory.talos.dev/installer/376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba
@@ -55,7 +55,7 @@ nodes:
         mtu: 1500
         vip:
           ip: "192.168.2.101"
-  - hostname: "athena"
+  - hostname: "frigg"
     ipAddress: "192.168.2.104"
     installDisk: "/dev/sda"
     talosImageURL: factory.talos.dev/installer/376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba

kubernetes/apps/kube-system/kustomization.yaml

@@ -8,4 +8,3 @@ resources:
   - ./csi-driver-nfs/ks.yaml
   - ./metrics-server/ks.yaml
   - ./reloader/ks.yaml
-  - ./kubelet-csr-approver/ks.yaml

kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml

@@ -22,9 +22,11 @@ spec:
       retries: 3
   values:
     args:
+      - --kubelet-insecure-tls
       - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
       - --kubelet-use-node-status-port
-      - --metric-resolution=15s
+      - --metric-resolution=10s
+      - --kubelet-request-timeout=2s
     metrics:
       enabled: true
     serviceMonitor:

kubernetes/bootstrap/helmfile.yaml

@@ -11,8 +11,6 @@ repositories:
     url: https://helm.cilium.io
   - name: coredns
     url: https://coredns.github.io/helm
-  - name: postfinance
-    url: https://postfinance.github.io/kubelet-csr-approver
 
 releases:
   - name: prometheus-operator-crds
@@ -36,16 +34,6 @@ releases:
     needs:
       - observability/prometheus-operator-crds
       - kube-system/cilium
-  - name: kubelet-csr-approver
-    namespace: kube-system
-    chart: postfinance/kubelet-csr-approver
-    version: 1.2.3
-    values:
-      - ../apps/kube-system/kubelet-csr-approver/app/helm-values.yaml
-    needs:
-      - observability/prometheus-operator-crds
-      - kube-system/cilium
-      - kube-system/coredns
   - name: spegel
     namespace: kube-system
     chart: oci://ghcr.io/spegel-org/helm-charts/spegel
@@ -56,4 +44,3 @@ releases:
       - observability/prometheus-operator-crds
       - kube-system/cilium
       - kube-system/coredns
-      - kube-system/kubelet-csr-approver

kubernetes/config/talos/clusterconfig/.gitignore

@@ -0,0 +1,4 @@
+valhalla-odin.yaml
+valhalla-thor.yaml
+valhalla-frigg.yaml
+talosconfig

kubernetes/flux/repositories/helm/kustomization.yaml

@@ -17,7 +17,6 @@ resources:
   - ./ingress-nginx.yaml
   - ./openebs.yaml
   - ./pireaus.yaml
-  - ./postfinance.yaml
   - ./prometheus-community.yaml
   - ./rook-ceph.yaml
   - ./spegel.yaml