Open TimJones opened 2 years ago
@TimJones Is there any documentation on the necessity of ‘insecure’ (unauthenticated, it deserves a rename) bootstrapping the config (in maintainance mode)? Can it be avoided? What impact does it have when network-level security can't be guaranteed?
It can be avoided with Omni (as SideroLink has a secure tunnel to Omni), but not with plain Talos - have to get the config onto the system somehow...
In the meantime I found out that some installation procedures do allow providing the machine config out-of-band/without networking, e.g. NoCloud with cloud-init.
It is unclear currently which of the APIs/
talosctl
commands are available when a node is not configured, using--insecure
flag.