3.1 KiB
Network map
Every real IP address this cluster hands out, and exactly what's reachable
there. This file isn't a template with the rest of the repo — it's a log
of your actual setup, meant to be updated every time an address is
assigned or changed, so you (or Claude) never have to reverse-engineer
"wait, what's running on .241 again?" from kubectl output.
Keep this current. If you're working with Claude and an IP changes — a new app gets a
LoadBalanceraddress, the MetalLB pool is resized, Argo CD's address changes — ask it to update this file, or just point it here after any networking change. SeeCLAUDE.mdfor the standing instruction that tells Claude to do this on its own when it makes such a change itself.
The five nodes and the VIP
None of these are from the MetalLB pool below — they're the machines
themselves and the shared address Talos elects between the three control-plane
nodes. Set in talos/README.md; see
docs/02-talos-bootstrap.md for what the VIP is
and why it's separate from any one node's address. Port 6443 is the Kubernetes
API on control-plane nodes; port 50000 is Talos's TLS-protected management API
on every node.
| Address | What | Port(s) | URL(s) |
|---|---|---|---|
10.10.10.200 |
talos-m4x-o87 — control plane (Raspberry Pi 4) |
6443, 50000 | https://10.10.10.200:6443, https://10.10.10.200:50000 |
10.10.10.201 |
talos-woj-ep6 — control plane (Raspberry Pi 4) |
6443, 50000 | https://10.10.10.201:6443, https://10.10.10.201:50000 |
10.10.10.202 |
talos-s2g-djt — control plane (Raspberry Pi 4) |
6443, 50000 | https://10.10.10.202:6443, https://10.10.10.202:50000 |
10.10.10.203 |
worker01 — worker (Proxmox VM) |
50000 | https://10.10.10.203:50000 |
10.10.10.204 |
worker02 — worker (Proxmox VM) |
50000 | https://10.10.10.204:50000 |
10.10.10.210 |
Cluster VIP (use this one, not a node's own address) | 6443 | https://10.10.10.210:6443 |
MetalLB pool
| Range | EDIT ME — e.g. 192.168.1.240-192.168.1.250 |
| Configured in | apps/metallb/templates/ipaddresspool.yaml |
Allocated addresses (from the MetalLB pool)
| Address | What | Namespace | Port(s) | URL | Source |
|---|---|---|---|---|---|
EDIT ME |
Argo CD UI/API (argocd-server) |
argocd |
443 | https://EDIT ME |
Patched to LoadBalancer by hand — see docs/05-metallb.md |
EDIT ME |
Demo app | demo |
80 | http://EDIT ME |
apps/demo/service.yaml |
Add a row here every time you add a new app with a LoadBalancer Service
(see docs/08-adding-new-apps.md). Leave the URL
column's port number off only when it's the protocol default (80 for
http://, 443 for https://) — include it otherwise.
Free in the pool
Addresses from the range above that aren't spoken for yet. Update this alongside the table above so it's obvious at a glance what's safe to hand to the next app.
EDIT ME