Andrey Smirnov
Andrey Smirnov
Docs: https://www.talos.dev/v1.1/talos-guides/network/device-selector/
it's hard as some interface names might be used before machine config is available - kernel args might reference them as well
by the way Talos runs Kubernetes control plane components pointed to the localhost:6443 for the API server endpoint, so they don't require load-balancer to be up
/ok-to-test
Looks like build failed in some obscure ways: https://ci.dev.talos-systems.io/siderolabs/talos/26014
Looks like this package also requires CGo, and in Talos we avoid CGo at all costs, in fact it is disabled for the build.
Please see also #5637 which is a similar idea
as an overall thought: we need more tests
Thanks for the report. At the moment there's no way to configure firewall with Talos. There's a "hacky" way - inject `iptables` rules via some privileged pod in Kubernetes -...
No update so far, see also #4421