Back to Talos

API

website/content/v1.14/reference/api.md

1.14.0359.6 KB
Original Source

Table of Contents

<a name="common/common.proto"></a>

<p align="right"><a href="#top">Top</a></p>

common/common.proto

<a name="common.ContainerdInstance"></a>

ContainerdInstance

FieldTypeLabelDescription
driverContainerDriverContainerd instance to use.
namespaceContainerdNamespaceContainerd namespace to use.

<a name="common.Data"></a>

Data

FieldTypeLabelDescription
metadataMetadata
bytesbytes

<a name="common.DataResponse"></a>

DataResponse

FieldTypeLabelDescription
messagesDatarepeated

<a name="common.Empty"></a>

Empty

FieldTypeLabelDescription
metadataMetadata

<a name="common.EmptyResponse"></a>

EmptyResponse

FieldTypeLabelDescription
messagesEmptyrepeated

<a name="common.Error"></a>

Error

FieldTypeLabelDescription
codeCode
messagestring
detailsgoogle.protobuf.Anyrepeated

<a name="common.NetIP"></a>

NetIP

FieldTypeLabelDescription
ipbytes

<a name="common.NetIPPort"></a>

NetIPPort

FieldTypeLabelDescription
ipbytes
portint32

<a name="common.NetIPPrefix"></a>

NetIPPrefix

FieldTypeLabelDescription
ipbytes
prefix_lengthint32

<a name="common.PEMEncodedCertificate"></a>

PEMEncodedCertificate

FieldTypeLabelDescription
crtbytes

<a name="common.PEMEncodedCertificateAndKey"></a>

PEMEncodedCertificateAndKey

FieldTypeLabelDescription
crtbytes
keybytes

<a name="common.PEMEncodedKey"></a>

PEMEncodedKey

FieldTypeLabelDescription
keybytes

<a name="common.URL"></a>

URL

FieldTypeLabelDescription
full_pathstring
<!-- end messages -->

<a name="common.Code"></a>

Code

NameNumberDescription
FATAL0
LOCKED1
CANCELED2

<a name="common.ContainerDriver"></a>

ContainerDriver

NameNumberDescription
CONTAINERD0
CRI1

<a name="common.ContainerdNamespace"></a>

ContainerdNamespace

NameNumberDescription
NS_UNKNOWN0
NS_SYSTEM1
NS_CRI2
NS_TALOSCONTAINERS3NS_TALOSCONTAINERS is the namespace for containers declared via a ContainerConfig document.
<!-- end enums -->

<a name="common/common.proto-extensions"></a>

File-level Extensions

ExtensionTypeBaseNumberDescription
remove_deprecated_enumstring.google.protobuf.EnumOptions93117Indicates the Talos version when this deprecated enum will be removed from API.
remove_deprecated_enum_valuestring.google.protobuf.EnumValueOptions93117Indicates the Talos version when this deprecated enum value will be removed from API.
remove_deprecated_fieldstring.google.protobuf.FieldOptions93117Indicates the Talos version when this deprecated filed will be removed from API.
remove_deprecated_messagestring.google.protobuf.MessageOptions93117Indicates the Talos version when this deprecated message will be removed from API.
remove_deprecated_methodstring.google.protobuf.MethodOptions93117Indicates the Talos version when this deprecated method will be removed from API.
remove_deprecated_servicestring.google.protobuf.ServiceOptions93117Indicates the Talos version when this deprecated service will be removed from API.
<!-- end HasExtensions --> <!-- end services -->

<a name="cluster/cluster.proto"></a>

<p align="right"><a href="#top">Top</a></p>

cluster/cluster.proto

<a name="cluster.ClusterInfo"></a>

ClusterInfo

FieldTypeLabelDescription
control_plane_nodesstringrepeated
worker_nodesstringrepeated
force_endpointstring

<a name="cluster.HealthCheckProgress"></a>

HealthCheckProgress

FieldTypeLabelDescription
metadatacommon.Metadata
messagestring

<a name="cluster.HealthCheckRequest"></a>

HealthCheckRequest

FieldTypeLabelDescription
wait_timeoutgoogle.protobuf.Duration
cluster_infoClusterInfo
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions -->

<a name="cluster.ClusterService"></a>

ClusterService

The cluster service definition.

Method NameRequest TypeResponse TypeDescription
HealthCheckHealthCheckRequestHealthCheckProgress stream
<!-- end services -->

<a name="inspect/inspect.proto"></a>

<p align="right"><a href="#top">Top</a></p>

inspect/inspect.proto

<a name="inspect.ControllerDependencyEdge"></a>

ControllerDependencyEdge

FieldTypeLabelDescription
controller_namestring
edge_typeDependencyEdgeType
resource_namespacestring
resource_typestring
resource_idstring

<a name="inspect.ControllerRuntimeDependenciesResponse"></a>

ControllerRuntimeDependenciesResponse

FieldTypeLabelDescription
messagesControllerRuntimeDependencyrepeated

<a name="inspect.ControllerRuntimeDependency"></a>

ControllerRuntimeDependency

The ControllerRuntimeDependency message contains the graph of controller-resource dependencies.

FieldTypeLabelDescription
metadatacommon.Metadata
edgesControllerDependencyEdgerepeated
<!-- end messages -->

<a name="inspect.DependencyEdgeType"></a>

DependencyEdgeType

NameNumberDescription
OUTPUT_EXCLUSIVE0
OUTPUT_SHARED3
INPUT_STRONG1
INPUT_WEAK2
INPUT_DESTROY_READY4
<!-- end enums --> <!-- end HasExtensions -->

<a name="inspect.InspectService"></a>

InspectService

The inspect service definition.

InspectService provides auxiliary API to inspect OS internals.

Method NameRequest TypeResponse TypeDescription
ControllerRuntimeDependencies.google.protobuf.EmptyControllerRuntimeDependenciesResponse
<!-- end services -->

<a name="machine/debug.proto"></a>

<p align="right"><a href="#top">Top</a></p>

machine/debug.proto

<a name="machine.DebugContainerRunRequest"></a>

DebugContainerRunRequest

FieldTypeLabelDescription
specDebugContainerRunRequestSpec1. send the container spec
stdin_databytes2. send either of the three below to interact with the running container
signalint32
term_resizeDebugContainerTerminalResize

<a name="machine.DebugContainerRunRequestSpec"></a>

DebugContainerRunRequestSpec

FieldTypeLabelDescription
containerdcommon.ContainerdInstance
image_namestring
argsstringrepeated
envDebugContainerRunRequestSpec.EnvEntryrepeated
profileDebugContainerRunRequestSpec.Profile
ttybool

<a name="machine.DebugContainerRunRequestSpec.EnvEntry"></a>

DebugContainerRunRequestSpec.EnvEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="machine.DebugContainerRunResponse"></a>

DebugContainerRunResponse

FieldTypeLabelDescription
stdout_databytes
exit_codeint32

<a name="machine.DebugContainerTerminalResize"></a>

DebugContainerTerminalResize

FieldTypeLabelDescription
widthint32
heightint32
<!-- end messages -->

<a name="machine.DebugContainerRunRequestSpec.Profile"></a>

DebugContainerRunRequestSpec.Profile

NameNumberDescription
PROFILE_UNSPECIFIED0
PROFILE_PRIVILEGED1
PROFILE_HOST_NS2PROFILE_HOST_NS forks the host mount namespace, overlays image tools at /nix, and runs the shell directly on the host rootfs without nsenter.
<!-- end enums --> <!-- end HasExtensions -->

<a name="machine.DebugService"></a>

DebugService

DebugService provides debugging and inspection capabilities for a Talos node.

Method NameRequest TypeResponse TypeDescription
ContainerRunDebugContainerRunRequest streamDebugContainerRunResponse streamContainerRun runs a debug container, attaches to it, and streams I/O.
<!-- end services -->

<a name="machine/image.proto"></a>

<p align="right"><a href="#top">Top</a></p>

machine/image.proto

<a name="machine.ImageServiceCredentials"></a>

ImageServiceCredentials

FieldTypeLabelDescription
hoststringHost of the registry (e.g. "docker.io").
usernamestringUsername for the registry.
passwordstringPassword (token) for the registry.

<a name="machine.ImageServiceImportRequest"></a>

ImageServiceImportRequest

FieldTypeLabelDescription
containerdcommon.ContainerdInstanceContainerd instance to use.
image_chunkcommon.DataChunk of the image tarball.

<a name="machine.ImageServiceImportResponse"></a>

ImageServiceImportResponse

FieldTypeLabelDescription
namestringName of the imported image.

<a name="machine.ImageServiceListRequest"></a>

ImageServiceListRequest

FieldTypeLabelDescription
containerdcommon.ContainerdInstance

<a name="machine.ImageServiceListResponse"></a>

ImageServiceListResponse

FieldTypeLabelDescription
namestring
digeststring
sizeint64
created_atgoogle.protobuf.Timestamp
labelsImageServiceListResponse.LabelsEntryrepeated

<a name="machine.ImageServiceListResponse.LabelsEntry"></a>

ImageServiceListResponse.LabelsEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="machine.ImageServicePullLayerProgress"></a>

ImageServicePullLayerProgress

FieldTypeLabelDescription
statusImageServicePullLayerProgress.Status
elapsedgoogle.protobuf.Duration
offsetint64
totalint64

<a name="machine.ImageServicePullProgress"></a>

ImageServicePullProgress

FieldTypeLabelDescription
layer_idstring
progressImageServicePullLayerProgress

<a name="machine.ImageServicePullRequest"></a>

ImageServicePullRequest

FieldTypeLabelDescription
containerdcommon.ContainerdInstance
image_refstringImage reference to pull.

<a name="machine.ImageServicePullResponse"></a>

ImageServicePullResponse

FieldTypeLabelDescription
namestringName of the pulled image (when done).
pull_progressImageServicePullProgressProgress of the image pull (intermediate updates).

<a name="machine.ImageServiceRemoveRequest"></a>

ImageServiceRemoveRequest

FieldTypeLabelDescription
containerdcommon.ContainerdInstance
image_refstringImage reference to remove.

<a name="machine.ImageServiceVerifyRequest"></a>

ImageServiceVerifyRequest

FieldTypeLabelDescription
image_refstringImage reference to verify.

The image reference could be either in: * the digest form (e.g. "docker.io/library/nginx@sha256:abc123...") to ensure that the exact image is verified. * the tag form (e.g. "docker.io/library/nginx:latest") to verify the image currently pointed by the tag, and the resolved digested will be returned in the response.

Any other format will cause the error. | | credentials | ImageServiceCredentials | | Authentication credentials for the registry (if needed).

By default Talos will use configured auth, but additional image pull secret can be submitted here. |

<a name="machine.ImageServiceVerifyResponse"></a>

ImageServiceVerifyResponse

FieldTypeLabelDescription
verifiedboolWas the image verified: if it didn't match any verify rule, false will be returned. If the image matched the rule, but the verification failed, an error will be returned.
messagestringFree-form verification result message, e.g. with details about the matched rule and how the image was verified.
digested_image_refstringThe pinned image reference with resolved digest that was verified (e.g. "docker.io/library/nginx@sha256:abc123...").

This is only set if verified=true. |

<!-- end messages -->

<a name="machine.ImageServicePullLayerProgress.Status"></a>

ImageServicePullLayerProgress.Status

NameNumberDescription
DOWNLOADING0Keep this in sync with ImagePullLayerProgress.Status.
DOWNLOAD_COMPLETE1
EXTRACTING2
EXTRACT_COMPLETE3
ALREADY_EXISTS4
<!-- end enums --> <!-- end HasExtensions -->

<a name="machine.ImageService"></a>

ImageService

The machine service definition.

Method NameRequest TypeResponse TypeDescription
ListImageServiceListRequestImageServiceListResponse streamList images in the containerd.
PullImageServicePullRequestImageServicePullResponse streamPull an image into the containerd.
ImportImageServiceImportRequest streamImageServiceImportResponseImport an image from a stream (tarball).
RemoveImageServiceRemoveRequest.google.protobuf.EmptyRemove an image from the containerd.
VerifyImageServiceVerifyRequestImageServiceVerifyResponseVerify an image signature.
<!-- end services -->

<a name="machine/lifecycle.proto"></a>

<p align="right"><a href="#top">Top</a></p>

machine/lifecycle.proto

<a name="machine.InstallArtifactsSource"></a>

InstallArtifactsSource

InstallArtifactsSource specifies the source of the installation artifacts.

FieldTypeLabelDescription
image_namestringThe reference name of the image, as returned by talosctl image pull.

<a name="machine.InstallDestination"></a>

InstallDestination

InstallDestination specifies the target for installation.

FieldTypeLabelDescription
diskstringThe disk to which Talos should be installed, e.g. "/dev/sda".

<a name="machine.LifecycleServiceInstallProgress"></a>

LifecycleServiceInstallProgress

LifecycleServiceInstallProgress represents the progress of the installation or upgrade process.

FieldTypeLabelDescription
messagestringA message indicating the current progress of the installation or upgrade.
exit_codeint32An exit code indicating the result of the installation or upgrade process. A non-zero value indicates an error. Server SHOULD NOT respond with error, even if the value is non-zero. It's responsibility of the client to handle the exit code appropriately.

<a name="machine.LifecycleServiceInstallRequest"></a>

LifecycleServiceInstallRequest

LifecycleServiceInstallRequest contains the necessary information to perform an installation.

FieldTypeLabelDescription
containerdcommon.ContainerdInstanceThe containerd instance to use for pulling the installation artifacts.
sourceInstallArtifactsSourceThe source of the installation artifacts.
destinationInstallDestinationThe destination for the installation.

<a name="machine.LifecycleServiceInstallResponse"></a>

LifecycleServiceInstallResponse

LifecycleServiceInstallResponse is the response message for the Install RPC, containing progress updates.

FieldTypeLabelDescription
progressLifecycleServiceInstallProgressThe progress of the installation process.

<a name="machine.LifecycleServiceUpgradeRequest"></a>

LifecycleServiceUpgradeRequest

LifecycleServiceUpgradeRequest contains the necessary information to perform an upgrade.

FieldTypeLabelDescription
containerdcommon.ContainerdInstanceThe containerd instance to use for pulling the installation artifacts.
sourceInstallArtifactsSourceThe source of the installation artifacts for the upgrade.

<a name="machine.LifecycleServiceUpgradeResponse"></a>

LifecycleServiceUpgradeResponse

LifecycleServiceUpgradeResponse is the response message for the Upgrade RPC, containing progress updates.

FieldTypeLabelDescription
progressLifecycleServiceInstallProgressThe progress of the upgrade process.
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions -->

<a name="machine.LifecycleService"></a>

LifecycleService

The LifecycleService handles installation and upgrade operations.

Method NameRequest TypeResponse TypeDescription
InstallLifecycleServiceInstallRequestLifecycleServiceInstallResponse streamInstall Talos to disk. The RPC should fail if the Talos is already installed on the target disk.
UpgradeLifecycleServiceUpgradeRequestLifecycleServiceUpgradeResponse streamUpgrade Talos to a new version. The RPC should fail if Talos is not already installed on the target disk.
<!-- end services -->

<a name="machine/lvm.proto"></a>

<p align="right"><a href="#top">Top</a></p>

machine/lvm.proto

<a name="machine.LVMServiceLogicalVolumeRemoveRequest"></a>

LVMServiceLogicalVolumeRemoveRequest

LVMServiceLogicalVolumeRemoveRequest identifies a single LV to remove.

FieldTypeLabelDescription
volume_groupstringVolumeGroup is the name of the parent VG (e.g. "vg0").
logical_volumestringLogicalVolume is the name of the LV to remove (e.g. "lv0").

<a name="machine.LVMServicePhysicalVolumeRemoveRequest"></a>

LVMServicePhysicalVolumeRemoveRequest

LVMServicePhysicalVolumeRemoveRequest identifies a single PV label to wipe.

FieldTypeLabelDescription
devicestringDevice is the block device path of the PV (e.g. "/dev/sda1").

<a name="machine.LVMServiceVolumeGroupRemoveRequest"></a>

LVMServiceVolumeGroupRemoveRequest

LVMServiceVolumeGroupRemoveRequest identifies a single VG to remove.

FieldTypeLabelDescription
volume_groupstringVolumeGroup is the name of the VG to remove (e.g. "vg0").
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions -->

<a name="machine.LVMService"></a>

LVMService

LVMService manages LVM resources on a Talos node.

Method NameRequest TypeResponse TypeDescription
LogicalVolumeRemoveLVMServiceLogicalVolumeRemoveRequest.google.protobuf.EmptyLogicalVolumeRemove removes an LVM logical volume.

The LV must not be open (e.g. mounted or in use by another device). | | VolumeGroupRemove | LVMServiceVolumeGroupRemoveRequest | .google.protobuf.Empty | VolumeGroupRemove removes an LVM volume group.

WARNING: this cascades. Every logical volume inside the group is removed first, then the VG metadata itself. Callers that want fine-grained control should invoke LogicalVolumeRemove per LV before this RPC. The underlying physical volumes keep their LVM labels and must be cleared separately with PhysicalVolumeRemove. | | PhysicalVolumeRemove | LVMServicePhysicalVolumeRemoveRequest | .google.protobuf.Empty | PhysicalVolumeRemove wipes the LVM label and metadata from a block device.

The PV must not be part of an active volume group; remove the VG first with VolumeGroupRemove. |

<!-- end services -->

<a name="machine/machine.proto"></a>

<p align="right"><a href="#top">Top</a></p>

machine/machine.proto

<a name="machine.AddressEvent"></a>

AddressEvent

AddressEvent reports node endpoints aggregated from k8s.Endpoints and network.Hostname.

FieldTypeLabelDescription
hostnamestring
addressesstringrepeated

<a name="machine.ApplyConfiguration"></a>

ApplyConfiguration

ApplyConfigurationResponse describes the response to a configuration request.

FieldTypeLabelDescription
metadatacommon.Metadata
warningsstringrepeatedConfiguration validation warnings.
modeApplyConfigurationRequest.ModeStates which mode was actually chosen.
mode_detailsstringHuman-readable message explaining the result of the apply configuration call.

<a name="machine.ApplyConfigurationRequest"></a>

ApplyConfigurationRequest

rpc applyConfiguration ApplyConfiguration describes a request to assert a new configuration upon a node.

FieldTypeLabelDescription
databytes
modeApplyConfigurationRequest.Mode
dry_runbool
try_mode_timeoutgoogle.protobuf.Duration

<a name="machine.ApplyConfigurationResponse"></a>

ApplyConfigurationResponse

FieldTypeLabelDescription
messagesApplyConfigurationrepeated

<a name="machine.BPFInstruction"></a>

BPFInstruction

FieldTypeLabelDescription
opuint32
jtuint32
jfuint32
kuint32

<a name="machine.Bootstrap"></a>

Bootstrap

The bootstrap message containing the bootstrap status.

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.BootstrapRequest"></a>

BootstrapRequest

rpc Bootstrap

FieldTypeLabelDescription
recover_etcdboolEnable etcd recovery from the snapshot. Snapshot should be uploaded before this call via EtcdRecover RPC.
recover_skip_hash_checkboolSkip hash check on the snapshot (etcd). Enable this when recovering from data directory copy to skip integrity check.

<a name="machine.BootstrapResponse"></a>

BootstrapResponse

FieldTypeLabelDescription
messagesBootstraprepeated

<a name="machine.CNIConfig"></a>

CNIConfig

FieldTypeLabelDescription
namestring
urlsstringrepeated

<a name="machine.CPUFreqStats"></a>

CPUFreqStats

FieldTypeLabelDescription
current_frequencyuint64
minimum_frequencyuint64
maximum_frequencyuint64
governorstring

<a name="machine.CPUFreqStatsResponse"></a>

CPUFreqStatsResponse

FieldTypeLabelDescription
messagesCPUsFreqStatsrepeated

<a name="machine.CPUInfo"></a>

CPUInfo

FieldTypeLabelDescription
processoruint32
vendor_idstring
cpu_familystring
modelstring
model_namestring
steppingstring
microcodestring
cpu_mhzdouble
cache_sizestring
physical_idstring
siblingsuint32
core_idstring
cpu_coresuint32
apic_idstring
initial_apic_idstring
fpustring
fpu_exceptionstring
cpu_id_leveluint32
wpstring
flagsstringrepeated
bugsstringrepeated
bogo_mipsdouble
cl_flush_sizeuint32
cache_alignmentuint32
address_sizesstring
power_managementstring

<a name="machine.CPUInfoResponse"></a>

CPUInfoResponse

FieldTypeLabelDescription
messagesCPUsInforepeated

<a name="machine.CPUStat"></a>

CPUStat

FieldTypeLabelDescription
userdouble
nicedouble
systemdouble
idledouble
iowaitdouble
irqdouble
soft_irqdouble
stealdouble
guestdouble
guest_nicedouble

<a name="machine.CPUsFreqStats"></a>

CPUsFreqStats

FieldTypeLabelDescription
metadatacommon.Metadata
cpu_freq_statsCPUFreqStatsrepeated

<a name="machine.CPUsInfo"></a>

CPUsInfo

FieldTypeLabelDescription
metadatacommon.Metadata
cpu_infoCPUInforepeated

<a name="machine.ClusterConfig"></a>

ClusterConfig

FieldTypeLabelDescription
namestring
control_planeControlPlaneConfig
cluster_networkClusterNetworkConfig
allow_scheduling_on_control_planesbool

<a name="machine.ClusterNetworkConfig"></a>

ClusterNetworkConfig

FieldTypeLabelDescription
dns_domainstring
cni_configCNIConfig

<a name="machine.ConfigLoadErrorEvent"></a>

ConfigLoadErrorEvent

ConfigLoadErrorEvent is reported when the config loading has failed.

FieldTypeLabelDescription
errorstring

<a name="machine.ConfigValidationErrorEvent"></a>

ConfigValidationErrorEvent

ConfigValidationErrorEvent is reported when config validation has failed.

FieldTypeLabelDescription
errorstring

<a name="machine.ConnectRecord"></a>

ConnectRecord

FieldTypeLabelDescription
l4protostring
localipstring
localportuint32
remoteipstring
remoteportuint32
stateConnectRecord.State
txqueueuint64
rxqueueuint64
trConnectRecord.TimerActive
timerwhenuint64
retrnsmtuint64
uiduint32
timeoutuint64
inodeuint64
refuint64
pointeruint64
processConnectRecord.Process
netnsstring

<a name="machine.ConnectRecord.Process"></a>

ConnectRecord.Process

FieldTypeLabelDescription
piduint32
namestring

<a name="machine.Container"></a>

Container

The messages message containing the requested containers.

FieldTypeLabelDescription
metadatacommon.Metadata
containersContainerInforepeated

<a name="machine.ContainerInfo"></a>

ContainerInfo

The messages message containing the requested containers.

FieldTypeLabelDescription
namespacestring
idstring
uidstring
internal_idstring
imagestring
piduint32
statusstring
pod_idstring
namestring
network_namespacestring

<a name="machine.ContainersRequest"></a>

ContainersRequest

FieldTypeLabelDescription
namespacestring
drivercommon.ContainerDriverdriver might be default "containerd" or "cri"

<a name="machine.ContainersResponse"></a>

ContainersResponse

FieldTypeLabelDescription
messagesContainerrepeated

<a name="machine.ControlPlaneConfig"></a>

ControlPlaneConfig

FieldTypeLabelDescription
endpointstring

<a name="machine.CopyRequest"></a>

CopyRequest

CopyRequest describes a request to copy data out of Talos node

Copy produces .tar.gz archive which is streamed back to the caller

FieldTypeLabelDescription
root_pathstringRoot path to start copying data out, it might be either a file or directory

<a name="machine.DHCPOptionsConfig"></a>

DHCPOptionsConfig

FieldTypeLabelDescription
route_metricuint32

<a name="machine.DiskStat"></a>

DiskStat

FieldTypeLabelDescription
namestring
read_completeduint64
read_mergeduint64
read_sectorsuint64
read_time_msuint64
write_completeduint64
write_mergeduint64
write_sectorsuint64
write_time_msuint64
io_in_progressuint64
io_time_msuint64
io_time_weighted_msuint64
discard_completeduint64
discard_mergeduint64
discard_sectorsuint64
discard_time_msuint64

<a name="machine.DiskStats"></a>

DiskStats

FieldTypeLabelDescription
metadatacommon.Metadata
totalDiskStat
devicesDiskStatrepeated

<a name="machine.DiskStatsResponse"></a>

DiskStatsResponse

FieldTypeLabelDescription
messagesDiskStatsrepeated

<a name="machine.DiskUsageInfo"></a>

DiskUsageInfo

DiskUsageInfo describes a file or directory's information for du command

FieldTypeLabelDescription
metadatacommon.Metadata
namestringName is the name (including prefixed path) of the file or directory
sizeint64Size indicates the number of bytes contained within the file
errorstringError describes any error encountered while trying to read the file information.
relative_namestringRelativeName is the name of the file or directory relative to the RootPath

<a name="machine.DiskUsageRequest"></a>

DiskUsageRequest

DiskUsageRequest describes a request to list disk usage of directories and regular files

FieldTypeLabelDescription
recursion_depthint32RecursionDepth indicates how many levels of subdirectories should be recursed. The default (0) indicates that no limit should be enforced.
allboolAll write sizes for all files, not just directories.
thresholdint64Threshold exclude entries smaller than SIZE if positive, or entries greater than SIZE if negative.
pathsstringrepeatedDiskUsagePaths is the list of directories to calculate disk usage for.

<a name="machine.DmesgRequest"></a>

DmesgRequest

dmesg

FieldTypeLabelDescription
followbool
tailbool

<a name="machine.EtcdAlarm"></a>

EtcdAlarm

FieldTypeLabelDescription
metadatacommon.Metadata
member_alarmsEtcdMemberAlarmrepeated

<a name="machine.EtcdAlarmDisarm"></a>

EtcdAlarmDisarm

FieldTypeLabelDescription
metadatacommon.Metadata
member_alarmsEtcdMemberAlarmrepeated

<a name="machine.EtcdAlarmDisarmResponse"></a>

EtcdAlarmDisarmResponse

FieldTypeLabelDescription
messagesEtcdAlarmDisarmrepeated

<a name="machine.EtcdAlarmListResponse"></a>

EtcdAlarmListResponse

FieldTypeLabelDescription
messagesEtcdAlarmrepeated

<a name="machine.EtcdClusterDowngrade"></a>

EtcdClusterDowngrade

FieldTypeLabelDescription
cluster_versionstring

<a name="machine.EtcdDefragment"></a>

EtcdDefragment

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.EtcdDefragmentResponse"></a>

EtcdDefragmentResponse

FieldTypeLabelDescription
messagesEtcdDefragmentrepeated

<a name="machine.EtcdDowngradeCancel"></a>

EtcdDowngradeCancel

FieldTypeLabelDescription
metadatacommon.Metadata
cluster_downgradeEtcdClusterDowngrade

<a name="machine.EtcdDowngradeCancelResponse"></a>

EtcdDowngradeCancelResponse

FieldTypeLabelDescription
messagesEtcdDowngradeCancelrepeated

<a name="machine.EtcdDowngradeEnable"></a>

EtcdDowngradeEnable

FieldTypeLabelDescription
metadatacommon.Metadata
cluster_downgradeEtcdClusterDowngrade

<a name="machine.EtcdDowngradeEnableRequest"></a>

EtcdDowngradeEnableRequest

FieldTypeLabelDescription
versionstring

<a name="machine.EtcdDowngradeEnableResponse"></a>

EtcdDowngradeEnableResponse

FieldTypeLabelDescription
messagesEtcdDowngradeEnablerepeated

<a name="machine.EtcdDowngradeValidate"></a>

EtcdDowngradeValidate

FieldTypeLabelDescription
metadatacommon.Metadata
cluster_downgradeEtcdClusterDowngrade

<a name="machine.EtcdDowngradeValidateRequest"></a>

EtcdDowngradeValidateRequest

FieldTypeLabelDescription
versionstring

<a name="machine.EtcdDowngradeValidateResponse"></a>

EtcdDowngradeValidateResponse

FieldTypeLabelDescription
messagesEtcdDowngradeValidaterepeated

<a name="machine.EtcdForfeitLeadership"></a>

EtcdForfeitLeadership

FieldTypeLabelDescription
metadatacommon.Metadata
memberstring

<a name="machine.EtcdForfeitLeadershipRequest"></a>

EtcdForfeitLeadershipRequest

<a name="machine.EtcdForfeitLeadershipResponse"></a>

EtcdForfeitLeadershipResponse

FieldTypeLabelDescription
messagesEtcdForfeitLeadershiprepeated

<a name="machine.EtcdLeaveCluster"></a>

EtcdLeaveCluster

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.EtcdLeaveClusterRequest"></a>

EtcdLeaveClusterRequest

<a name="machine.EtcdLeaveClusterResponse"></a>

EtcdLeaveClusterResponse

FieldTypeLabelDescription
messagesEtcdLeaveClusterrepeated

<a name="machine.EtcdMember"></a>

EtcdMember

EtcdMember describes a single etcd member.

FieldTypeLabelDescription
iduint64member ID.
hostnamestringhuman-readable name of the member.
peer_urlsstringrepeatedthe list of URLs the member exposes to clients for communication.
client_urlsstringrepeatedthe list of URLs the member exposes to the cluster for communication.
is_learnerboollearner flag

<a name="machine.EtcdMemberAlarm"></a>

EtcdMemberAlarm

FieldTypeLabelDescription
member_iduint64
alarmEtcdMemberAlarm.AlarmType

<a name="machine.EtcdMemberListRequest"></a>

EtcdMemberListRequest

FieldTypeLabelDescription
query_localbool

<a name="machine.EtcdMemberListResponse"></a>

EtcdMemberListResponse

FieldTypeLabelDescription
messagesEtcdMembersrepeated

<a name="machine.EtcdMemberStatus"></a>

EtcdMemberStatus

FieldTypeLabelDescription
storage_versionstring
member_iduint64
protocol_versionstring
db_sizeint64
db_size_in_useint64
leaderuint64
raft_indexuint64
raft_termuint64
raft_applied_indexuint64
errorsstringrepeated
is_learnerbool

<a name="machine.EtcdMembers"></a>

EtcdMembers

EtcdMembers contains the list of members registered on the host.

FieldTypeLabelDescription
metadatacommon.Metadata
legacy_membersstringrepeatedlist of member hostnames.
membersEtcdMemberrepeatedthe list of etcd members registered on the node.

<a name="machine.EtcdRecover"></a>

EtcdRecover

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.EtcdRecoverResponse"></a>

EtcdRecoverResponse

FieldTypeLabelDescription
messagesEtcdRecoverrepeated

<a name="machine.EtcdRemoveMember"></a>

EtcdRemoveMember

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.EtcdRemoveMemberByID"></a>

EtcdRemoveMemberByID

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.EtcdRemoveMemberByIDRequest"></a>

EtcdRemoveMemberByIDRequest

FieldTypeLabelDescription
member_iduint64

<a name="machine.EtcdRemoveMemberByIDResponse"></a>

EtcdRemoveMemberByIDResponse

FieldTypeLabelDescription
messagesEtcdRemoveMemberByIDrepeated

<a name="machine.EtcdRemoveMemberRequest"></a>

EtcdRemoveMemberRequest

FieldTypeLabelDescription
memberstring

<a name="machine.EtcdRemoveMemberResponse"></a>

EtcdRemoveMemberResponse

FieldTypeLabelDescription
messagesEtcdRemoveMemberrepeated

<a name="machine.EtcdSnapshotRequest"></a>

EtcdSnapshotRequest

<a name="machine.EtcdStatus"></a>

EtcdStatus

FieldTypeLabelDescription
metadatacommon.Metadata
member_statusEtcdMemberStatus

<a name="machine.EtcdStatusResponse"></a>

EtcdStatusResponse

FieldTypeLabelDescription
messagesEtcdStatusrepeated

<a name="machine.Event"></a>

Event

FieldTypeLabelDescription
metadatacommon.Metadata
datagoogle.protobuf.Any
idstring
actor_idstring

<a name="machine.EventsRequest"></a>

EventsRequest

FieldTypeLabelDescription
tail_eventsint32
tail_idstring
tail_secondsint32
with_actor_idstring

<a name="machine.FeaturesInfo"></a>

FeaturesInfo

FeaturesInfo describes individual Talos features that can be switched on or off.

FieldTypeLabelDescription
rbacboolRBAC is true if role-based access control is enabled.

<a name="machine.FileInfo"></a>

FileInfo

FileInfo describes a file or directory's information

FieldTypeLabelDescription
metadatacommon.Metadata
namestringName is the name (including prefixed path) of the file or directory
sizeint64Size indicates the number of bytes contained within the file
modeuint32Mode is the bitmap of UNIX mode/permission flags of the file
modifiedint64Modified indicates the UNIX timestamp at which the file was last modified
is_dirboolIsDir indicates that the file is a directory
errorstringError describes any error encountered while trying to read the file information.
linkstringLink is filled with symlink target
relative_namestringRelativeName is the name of the file or directory relative to the RootPath
uiduint32Owner uid
giduint32Owner gid
xattrsXattrrepeatedExtended attributes (if present and requested)

<a name="machine.GenerateClientConfiguration"></a>

GenerateClientConfiguration

FieldTypeLabelDescription
metadatacommon.Metadata
cabytesPEM-encoded CA certificate.
crtbytesPEM-encoded generated client certificate.
keybytesPEM-encoded generated client key.
talosconfigbytesClient configuration (talosconfig) file content.

<a name="machine.GenerateClientConfigurationRequest"></a>

GenerateClientConfigurationRequest

FieldTypeLabelDescription
rolesstringrepeatedRoles in the generated client certificate.
crt_ttlgoogle.protobuf.DurationClient certificate TTL.

<a name="machine.GenerateClientConfigurationResponse"></a>

GenerateClientConfigurationResponse

FieldTypeLabelDescription
messagesGenerateClientConfigurationrepeated

<a name="machine.Hostname"></a>

Hostname

FieldTypeLabelDescription
metadatacommon.Metadata
hostnamestring

<a name="machine.HostnameResponse"></a>

HostnameResponse

FieldTypeLabelDescription
messagesHostnamerepeated

<a name="machine.ImageListRequest"></a>

ImageListRequest

FieldTypeLabelDescription
namespacecommon.ContainerdNamespaceContainerd namespace to use.

<a name="machine.ImageListResponse"></a>

ImageListResponse

FieldTypeLabelDescription
metadatacommon.Metadata
namestring
digeststring
sizeint64
created_atgoogle.protobuf.Timestamp

<a name="machine.ImagePull"></a>

ImagePull

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.ImagePullRequest"></a>

ImagePullRequest

FieldTypeLabelDescription
namespacecommon.ContainerdNamespaceContainerd namespace to use.
referencestringImage reference to pull.

<a name="machine.ImagePullResponse"></a>

ImagePullResponse

FieldTypeLabelDescription
messagesImagePullrepeated

<a name="machine.InstallConfig"></a>

InstallConfig

FieldTypeLabelDescription
install_diskstring
install_imagestring

<a name="machine.ListRequest"></a>

ListRequest

ListRequest describes a request to list the contents of a directory.

FieldTypeLabelDescription
rootstringRoot indicates the root directory for the list. If not indicated, '/' is presumed.
recurseboolRecurse indicates that subdirectories should be recursed.
recursion_depthint32RecursionDepth indicates how many levels of subdirectories should be recursed. The default (0) indicates that no limit should be enforced.
typesListRequest.TyperepeatedTypes indicates what file type should be returned. If not indicated, all files will be returned.
report_xattrsboolReport xattrs

<a name="machine.LoadAvg"></a>

LoadAvg

FieldTypeLabelDescription
metadatacommon.Metadata
load1double
load5double
load15double

<a name="machine.LoadAvgResponse"></a>

LoadAvgResponse

FieldTypeLabelDescription
messagesLoadAvgrepeated

<a name="machine.LogsContainer"></a>

LogsContainer

LogsContainer describes all available registered log containers.

FieldTypeLabelDescription
metadatacommon.Metadata
idsstringrepeated

<a name="machine.LogsContainersResponse"></a>

LogsContainersResponse

FieldTypeLabelDescription
messagesLogsContainerrepeated

<a name="machine.LogsRequest"></a>

LogsRequest

rpc logs The request message containing the process name.

FieldTypeLabelDescription
namespacestring
idstring
drivercommon.ContainerDriverdriver might be default "containerd" or "cri"
followbool
tail_linesint32

<a name="machine.MachineConfig"></a>

MachineConfig

FieldTypeLabelDescription
typeMachineConfig.MachineType
install_configInstallConfig
network_configNetworkConfig
kubernetes_versionstring

<a name="machine.MachineStatusEvent"></a>

MachineStatusEvent

MachineStatusEvent reports changes to the MachineStatus resource.

FieldTypeLabelDescription
stageMachineStatusEvent.MachineStage
statusMachineStatusEvent.MachineStatus

<a name="machine.MachineStatusEvent.MachineStatus"></a>

MachineStatusEvent.MachineStatus

FieldTypeLabelDescription
readybool
unmet_conditionsMachineStatusEvent.MachineStatus.UnmetConditionrepeated

<a name="machine.MachineStatusEvent.MachineStatus.UnmetCondition"></a>

MachineStatusEvent.MachineStatus.UnmetCondition

FieldTypeLabelDescription
namestring
reasonstring

<a name="machine.MemInfo"></a>

MemInfo

FieldTypeLabelDescription
memtotaluint64
memfreeuint64
memavailableuint64
buffersuint64
cacheduint64
swapcacheduint64
activeuint64
inactiveuint64
activeanonuint64
inactiveanonuint64
activefileuint64
inactivefileuint64
unevictableuint64
mlockeduint64
swaptotaluint64
swapfreeuint64
dirtyuint64
writebackuint64
anonpagesuint64
mappeduint64
shmemuint64
slabuint64
sreclaimableuint64
sunreclaimuint64
kernelstackuint64
pagetablesuint64
nfsunstableuint64
bounceuint64
writebacktmpuint64
commitlimituint64
committedasuint64
vmalloctotaluint64
vmallocuseduint64
vmallocchunkuint64
hardwarecorrupteduint64
anonhugepagesuint64
shmemhugepagesuint64
shmempmdmappeduint64
cmatotaluint64
cmafreeuint64
hugepagestotaluint64
hugepagesfreeuint64
hugepagesrsvduint64
hugepagessurpuint64
hugepagesizeuint64
directmap4kuint64
directmap2muint64
directmap1guint64

<a name="machine.Memory"></a>

Memory

FieldTypeLabelDescription
metadatacommon.Metadata
meminfoMemInfo

<a name="machine.MemoryResponse"></a>

MemoryResponse

FieldTypeLabelDescription
messagesMemoryrepeated

<a name="machine.MetaDelete"></a>

MetaDelete

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.MetaDeleteRequest"></a>

MetaDeleteRequest

FieldTypeLabelDescription
keyuint32

<a name="machine.MetaDeleteResponse"></a>

MetaDeleteResponse

FieldTypeLabelDescription
messagesMetaDeleterepeated

<a name="machine.MetaWrite"></a>

MetaWrite

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.MetaWriteRequest"></a>

MetaWriteRequest

FieldTypeLabelDescription
keyuint32
valuebytes

<a name="machine.MetaWriteResponse"></a>

MetaWriteResponse

FieldTypeLabelDescription
messagesMetaWriterepeated

<a name="machine.MountStat"></a>

MountStat

The messages message containing the requested processes.

FieldTypeLabelDescription
filesystemstring
sizeuint64
availableuint64
mounted_onstring

<a name="machine.Mounts"></a>

Mounts

The messages message containing the requested df stats.

FieldTypeLabelDescription
metadatacommon.Metadata
statsMountStatrepeated

<a name="machine.MountsResponse"></a>

MountsResponse

FieldTypeLabelDescription
messagesMountsrepeated

<a name="machine.NetDev"></a>

NetDev

FieldTypeLabelDescription
namestring
rx_bytesuint64
rx_packetsuint64
rx_errorsuint64
rx_droppeduint64
rx_fifouint64
rx_frameuint64
rx_compresseduint64
rx_multicastuint64
tx_bytesuint64
tx_packetsuint64
tx_errorsuint64
tx_droppeduint64
tx_fifouint64
tx_collisionsuint64
tx_carrieruint64
tx_compresseduint64

<a name="machine.Netstat"></a>

Netstat

FieldTypeLabelDescription
metadatacommon.Metadata
connectrecordConnectRecordrepeated

<a name="machine.NetstatRequest"></a>

NetstatRequest

FieldTypeLabelDescription
filterNetstatRequest.Filter
featureNetstatRequest.Feature
l4protoNetstatRequest.L4proto
netnsNetstatRequest.NetNS

<a name="machine.NetstatRequest.Feature"></a>

NetstatRequest.Feature

FieldTypeLabelDescription
pidbool

<a name="machine.NetstatRequest.L4proto"></a>

NetstatRequest.L4proto

FieldTypeLabelDescription
tcpbool
tcp6bool
udpbool
udp6bool
udplitebool
udplite6bool
rawbool
raw6bool

<a name="machine.NetstatRequest.NetNS"></a>

NetstatRequest.NetNS

FieldTypeLabelDescription
hostnetworkbool
netnsstringrepeated
allnetnsbool

<a name="machine.NetstatResponse"></a>

NetstatResponse

FieldTypeLabelDescription
messagesNetstatrepeated

<a name="machine.NetworkConfig"></a>

NetworkConfig

FieldTypeLabelDescription
hostnamestring
interfacesNetworkDeviceConfigrepeated

<a name="machine.NetworkDeviceConfig"></a>

NetworkDeviceConfig

FieldTypeLabelDescription
interfacestring
cidrstring
mtuint32
dhcpbool
ignorebool
dhcp_optionsDHCPOptionsConfig
routesRouteConfigrepeated

<a name="machine.NetworkDeviceStats"></a>

NetworkDeviceStats

FieldTypeLabelDescription
metadatacommon.Metadata
totalNetDev
devicesNetDevrepeated

<a name="machine.NetworkDeviceStatsResponse"></a>

NetworkDeviceStatsResponse

FieldTypeLabelDescription
messagesNetworkDeviceStatsrepeated

<a name="machine.PacketCaptureRequest"></a>

PacketCaptureRequest

FieldTypeLabelDescription
interfacestringInterface name to perform packet capture on.
promiscuousboolEnable promiscuous mode.
snap_lenuint32Snap length in bytes.
bpf_filterBPFInstructionrepeatedBPF filter.

<a name="machine.PhaseEvent"></a>

PhaseEvent

FieldTypeLabelDescription
phasestring
actionPhaseEvent.Action

<a name="machine.PlatformInfo"></a>

PlatformInfo

FieldTypeLabelDescription
namestring
modestring

<a name="machine.Process"></a>

Process

FieldTypeLabelDescription
metadatacommon.Metadata
processesProcessInforepeated

<a name="machine.ProcessInfo"></a>

ProcessInfo

FieldTypeLabelDescription
pidint32
ppidint32
statestring
threadsint32
cpu_timedouble
virtual_memoryuint64
resident_memoryuint64
commandstring
executablestring
argsstring
labelstring

<a name="machine.ProcessesResponse"></a>

ProcessesResponse

rpc processes

FieldTypeLabelDescription
messagesProcessrepeated

<a name="machine.ReadRequest"></a>

ReadRequest

FieldTypeLabelDescription
pathstring

<a name="machine.Reboot"></a>

Reboot

The reboot message containing the reboot status.

FieldTypeLabelDescription
metadatacommon.Metadata
actor_idstring

<a name="machine.RebootRequest"></a>

RebootRequest

rpc reboot

FieldTypeLabelDescription
modeRebootRequest.Mode

<a name="machine.RebootResponse"></a>

RebootResponse

FieldTypeLabelDescription
messagesRebootrepeated

<a name="machine.Reset"></a>

Reset

The reset message containing the restart status.

FieldTypeLabelDescription
metadatacommon.Metadata
actor_idstring

<a name="machine.ResetPartitionSpec"></a>

ResetPartitionSpec

rpc reset

FieldTypeLabelDescription
labelstring
wipebool

<a name="machine.ResetRequest"></a>

ResetRequest

FieldTypeLabelDescription
gracefulboolGraceful indicates whether node should leave etcd before the upgrade, it also enforces etcd checks before leaving.
rebootboolReboot indicates whether node should reboot or halt after resetting.
system_partitions_to_wipeResetPartitionSpecrepeatedSystem_partitions_to_wipe lists specific system disk partitions to be reset (wiped). If system_partitions_to_wipe is empty, all the partitions are erased.
user_disks_to_wipestringrepeatedUserDisksToWipe lists specific connected block devices to be reset (wiped).
modeResetRequest.WipeModeWipeMode defines which devices should be wiped.

<a name="machine.ResetResponse"></a>

ResetResponse

FieldTypeLabelDescription
messagesResetrepeated

<a name="machine.Restart"></a>

Restart

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.RestartEvent"></a>

RestartEvent

FieldTypeLabelDescription
cmdint64

<a name="machine.RestartRequest"></a>

RestartRequest

rpc restart The request message containing the process to restart.

FieldTypeLabelDescription
namespacestring
idstring
drivercommon.ContainerDriverdriver might be default "containerd" or "cri"

<a name="machine.RestartResponse"></a>

RestartResponse

The messages message containing the restart status.

FieldTypeLabelDescription
messagesRestartrepeated

<a name="machine.Rollback"></a>

Rollback

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="machine.RollbackRequest"></a>

RollbackRequest

rpc rollback

<a name="machine.RollbackResponse"></a>

RollbackResponse

FieldTypeLabelDescription
messagesRollbackrepeated

<a name="machine.RouteConfig"></a>

RouteConfig

FieldTypeLabelDescription
networkstring
gatewaystring
metricuint32

<a name="machine.SequenceEvent"></a>

SequenceEvent

rpc events

FieldTypeLabelDescription
sequencestring
actionSequenceEvent.Action
errorcommon.Error

<a name="machine.ServiceEvent"></a>

ServiceEvent

FieldTypeLabelDescription
msgstring
statestring
tsgoogle.protobuf.Timestamp

<a name="machine.ServiceEvents"></a>

ServiceEvents

FieldTypeLabelDescription
eventsServiceEventrepeated

<a name="machine.ServiceHealth"></a>

ServiceHealth

FieldTypeLabelDescription
unknownbool
healthybool
last_messagestring
last_changegoogle.protobuf.Timestamp

<a name="machine.ServiceInfo"></a>

ServiceInfo

FieldTypeLabelDescription
idstring
statestring
eventsServiceEvents
healthServiceHealth

<a name="machine.ServiceList"></a>

ServiceList

rpc servicelist

FieldTypeLabelDescription
metadatacommon.Metadata
servicesServiceInforepeated

<a name="machine.ServiceListResponse"></a>

ServiceListResponse

FieldTypeLabelDescription
messagesServiceListrepeated

<a name="machine.ServiceRestart"></a>

ServiceRestart

FieldTypeLabelDescription
metadatacommon.Metadata
respstring

<a name="machine.ServiceRestartRequest"></a>

ServiceRestartRequest

FieldTypeLabelDescription
idstring

<a name="machine.ServiceRestartResponse"></a>

ServiceRestartResponse

FieldTypeLabelDescription
messagesServiceRestartrepeated

<a name="machine.ServiceStart"></a>

ServiceStart

FieldTypeLabelDescription
metadatacommon.Metadata
respstring

<a name="machine.ServiceStartRequest"></a>

ServiceStartRequest

rpc servicestart

FieldTypeLabelDescription
idstring

<a name="machine.ServiceStartResponse"></a>

ServiceStartResponse

FieldTypeLabelDescription
messagesServiceStartrepeated

<a name="machine.ServiceStateEvent"></a>

ServiceStateEvent

FieldTypeLabelDescription
servicestring
actionServiceStateEvent.Action
messagestring
healthServiceHealth

<a name="machine.ServiceStop"></a>

ServiceStop

FieldTypeLabelDescription
metadatacommon.Metadata
respstring

<a name="machine.ServiceStopRequest"></a>

ServiceStopRequest

FieldTypeLabelDescription
idstring

<a name="machine.ServiceStopResponse"></a>

ServiceStopResponse

FieldTypeLabelDescription
messagesServiceStoprepeated

<a name="machine.Shutdown"></a>

Shutdown

rpc shutdown The messages message containing the shutdown status.

FieldTypeLabelDescription
metadatacommon.Metadata
actor_idstring

<a name="machine.ShutdownRequest"></a>

ShutdownRequest

FieldTypeLabelDescription
forceboolForce indicates whether node should shutdown without first cordening and draining

<a name="machine.ShutdownResponse"></a>

ShutdownResponse

FieldTypeLabelDescription
messagesShutdownrepeated

<a name="machine.SoftIRQStat"></a>

SoftIRQStat

FieldTypeLabelDescription
hiuint64
timeruint64
net_txuint64
net_rxuint64
blockuint64
block_io_polluint64
taskletuint64
scheduint64
hrtimeruint64
rcuuint64

<a name="machine.Stat"></a>

Stat

The messages message containing the requested stat.

FieldTypeLabelDescription
namespacestring
idstring
memory_usageuint64
cpu_usageuint64
pod_idstring
namestring

<a name="machine.Stats"></a>

Stats

The messages message containing the requested stats.

FieldTypeLabelDescription
metadatacommon.Metadata
statsStatrepeated

<a name="machine.StatsRequest"></a>

StatsRequest

The request message containing the containerd namespace.

FieldTypeLabelDescription
namespacestring
drivercommon.ContainerDriverdriver might be default "containerd" or "cri"

<a name="machine.StatsResponse"></a>

StatsResponse

FieldTypeLabelDescription
messagesStatsrepeated

<a name="machine.SystemStat"></a>

SystemStat

FieldTypeLabelDescription
metadatacommon.Metadata
boot_timeuint64
cpu_totalCPUStat
cpuCPUStatrepeated
irq_totaluint64
irquint64repeated
context_switchesuint64
process_createduint64
process_runninguint64
process_blockeduint64
soft_irq_totaluint64
soft_irqSoftIRQStat

<a name="machine.SystemStatResponse"></a>

SystemStatResponse

FieldTypeLabelDescription
messagesSystemStatrepeated

<a name="machine.TaskEvent"></a>

TaskEvent

FieldTypeLabelDescription
taskstring
actionTaskEvent.Action

<a name="machine.Upgrade"></a>

Upgrade

FieldTypeLabelDescription
metadatacommon.Metadata
ackstring
actor_idstring

<a name="machine.UpgradeRequest"></a>

UpgradeRequest

rpc upgrade

FieldTypeLabelDescription
imagestring
preservebool
stagebool
forcebool
reboot_modeUpgradeRequest.RebootMode

<a name="machine.UpgradeResponse"></a>

UpgradeResponse

FieldTypeLabelDescription
messagesUpgraderepeated

<a name="machine.Version"></a>

Version

FieldTypeLabelDescription
metadatacommon.Metadata
versionVersionInfo
platformPlatformInfo
featuresFeaturesInfoFeatures describe individual Talos features that can be switched on or off.

<a name="machine.VersionInfo"></a>

VersionInfo

FieldTypeLabelDescription
tagstring
shastring
builtstring
go_versionstring
osstring
archstring

<a name="machine.VersionResponse"></a>

VersionResponse

FieldTypeLabelDescription
messagesVersionrepeated

<a name="machine.Xattr"></a>

Xattr

FieldTypeLabelDescription
namestring
databytes
<!-- end messages -->

<a name="machine.ApplyConfigurationRequest.Mode"></a>

ApplyConfigurationRequest.Mode

NameNumberDescription
REBOOT0Deprecated: use AUTO or NO_REBOOT instead
AUTO1
NO_REBOOT2
STAGED3
TRY4

<a name="machine.ConnectRecord.State"></a>

ConnectRecord.State

NameNumberDescription
RESERVED0
ESTABLISHED1
SYN_SENT2
SYN_RECV3
FIN_WAIT14
FIN_WAIT25
TIME_WAIT6
CLOSE7
CLOSEWAIT8
LASTACK9
LISTEN10
CLOSING11

<a name="machine.ConnectRecord.TimerActive"></a>

ConnectRecord.TimerActive

NameNumberDescription
OFF0
ON1
KEEPALIVE2
TIMEWAIT3
PROBE4

<a name="machine.EtcdMemberAlarm.AlarmType"></a>

EtcdMemberAlarm.AlarmType

NameNumberDescription
NONE0
NOSPACE1
CORRUPT2

<a name="machine.ListRequest.Type"></a>

ListRequest.Type

File type.

NameNumberDescription
REGULAR0Regular file (not directory, symlink, etc).
DIRECTORY1Directory.
SYMLINK2Symbolic link.

<a name="machine.MachineConfig.MachineType"></a>

MachineConfig.MachineType

NameNumberDescription
TYPE_UNKNOWN0
TYPE_INIT1
TYPE_CONTROL_PLANE2
TYPE_WORKER3

<a name="machine.MachineStatusEvent.MachineStage"></a>

MachineStatusEvent.MachineStage

NameNumberDescription
UNKNOWN0
BOOTING1
INSTALLING2
MAINTENANCE3
RUNNING4
REBOOTING5
SHUTTING_DOWN6
RESETTING7
UPGRADING8

<a name="machine.NetstatRequest.Filter"></a>

NetstatRequest.Filter

NameNumberDescription
ALL0
CONNECTED1
LISTENING2

<a name="machine.PhaseEvent.Action"></a>

PhaseEvent.Action

NameNumberDescription
START0
STOP1

<a name="machine.RebootRequest.Mode"></a>

RebootRequest.Mode

NameNumberDescription
DEFAULT0
POWERCYCLE1
FORCE2

<a name="machine.ResetRequest.WipeMode"></a>

ResetRequest.WipeMode

NameNumberDescription
ALL0
SYSTEM_DISK1
USER_DISKS2

<a name="machine.SequenceEvent.Action"></a>

SequenceEvent.Action

NameNumberDescription
NOOP0
START1
STOP2

<a name="machine.ServiceStateEvent.Action"></a>

ServiceStateEvent.Action

NameNumberDescription
INITIALIZED0
PREPARING1
WAITING2
RUNNING3
STOPPING4
FINISHED5
FAILED6
SKIPPED7
STARTING8

<a name="machine.TaskEvent.Action"></a>

TaskEvent.Action

NameNumberDescription
START0
STOP1

<a name="machine.UpgradeRequest.RebootMode"></a>

UpgradeRequest.RebootMode

NameNumberDescription
DEFAULT0
POWERCYCLE1
<!-- end enums --> <!-- end HasExtensions -->

<a name="machine.MachineService"></a>

MachineService

The machine service definition.

Method NameRequest TypeResponse TypeDescription
ApplyConfigurationApplyConfigurationRequestApplyConfigurationResponse
BootstrapBootstrapRequestBootstrapResponseBootstrap method makes control plane node enter etcd bootstrap mode. Node aborts etcd join sequence and creates single-node etcd cluster. If recover_etcd argument is specified, etcd is recovered from a snapshot uploaded with EtcdRecover.
ContainersContainersRequestContainersResponse
CopyCopyRequest.common.Data stream
CPUFreqStats.google.protobuf.EmptyCPUFreqStatsResponse
CPUInfo.google.protobuf.EmptyCPUInfoResponse
DiskStats.google.protobuf.EmptyDiskStatsResponse
DmesgDmesgRequest.common.Data stream
EventsEventsRequestEvent stream
EtcdMemberListEtcdMemberListRequestEtcdMemberListResponse
EtcdRemoveMemberByIDEtcdRemoveMemberByIDRequestEtcdRemoveMemberByIDResponseEtcdRemoveMemberByID removes a member from the etcd cluster identified by member ID. This API should be used to remove members which don't have an associated Talos node anymore. To remove a member with a running Talos node, use EtcdLeaveCluster API on the node to be removed.
EtcdLeaveClusterEtcdLeaveClusterRequestEtcdLeaveClusterResponse
EtcdForfeitLeadershipEtcdForfeitLeadershipRequestEtcdForfeitLeadershipResponse
EtcdRecover.common.Data streamEtcdRecoverResponseEtcdRecover method uploads etcd data snapshot created with EtcdSnapshot to the node. Snapshot can be later used to recover the cluster via Bootstrap method.
EtcdSnapshotEtcdSnapshotRequest.common.Data streamEtcdSnapshot method creates etcd data snapshot (backup) from the local etcd instance and streams it back to the client. This method is available only on control plane nodes (which run etcd).
EtcdAlarmList.google.protobuf.EmptyEtcdAlarmListResponseEtcdAlarmList lists etcd alarms for the current node. This method is available only on control plane nodes (which run etcd).
EtcdAlarmDisarm.google.protobuf.EmptyEtcdAlarmDisarmResponseEtcdAlarmDisarm disarms etcd alarms for the current node. This method is available only on control plane nodes (which run etcd).
EtcdDefragment.google.protobuf.EmptyEtcdDefragmentResponseEtcdDefragment defragments etcd data directory for the current node. Defragmentation is a resource-heavy operation, so it should only run on a specific node. This method is available only on control plane nodes (which run etcd).
EtcdStatus.google.protobuf.EmptyEtcdStatusResponseEtcdStatus returns etcd status for the current member. This method is available only on control plane nodes (which run etcd).
EtcdDowngradeValidateEtcdDowngradeValidateRequestEtcdDowngradeValidateResponseEtcdDowngradeValidate validates etcd cluster for downgrade to a specific version. This method is available only on control plane nodes (which run etcd).
EtcdDowngradeEnableEtcdDowngradeEnableRequestEtcdDowngradeEnableResponseEtcdDowngradeEnable enables etcd cluster downgrade to a specific version. This method is available only on control plane nodes (which run etcd).
EtcdDowngradeCancel.google.protobuf.EmptyEtcdDowngradeCancelResponseEtcdDowngradeCancel cancels etcd cluster downgrade that is in progress. This method is available only on control plane nodes (which run etcd).
Hostname.google.protobuf.EmptyHostnameResponse
Kubeconfig.google.protobuf.Empty.common.Data stream
ListListRequestFileInfo stream
DiskUsageDiskUsageRequestDiskUsageInfo stream
LoadAvg.google.protobuf.EmptyLoadAvgResponse
LogsLogsRequest.common.Data stream
LogsContainers.google.protobuf.EmptyLogsContainersResponse
Memory.google.protobuf.EmptyMemoryResponse
Mounts.google.protobuf.EmptyMountsResponse
NetworkDeviceStats.google.protobuf.EmptyNetworkDeviceStatsResponse
Processes.google.protobuf.EmptyProcessesResponse
ReadReadRequest.common.Data stream
RebootRebootRequestRebootResponse
RestartRestartRequestRestartResponse
RollbackRollbackRequestRollbackResponse
ResetResetRequestResetResponse
ServiceList.google.protobuf.EmptyServiceListResponse
ServiceRestartServiceRestartRequestServiceRestartResponse
ServiceStartServiceStartRequestServiceStartResponse
ServiceStopServiceStopRequestServiceStopResponse
ShutdownShutdownRequestShutdownResponse
StatsStatsRequestStatsResponse
SystemStat.google.protobuf.EmptySystemStatResponse
UpgradeUpgradeRequestUpgradeResponseUpgrade initiates the upgrade of the node to a new version of Talos.

Use LifecycleService Upgrade RPC instead. | | Version | .google.protobuf.Empty | VersionResponse | | | GenerateClientConfiguration | GenerateClientConfigurationRequest | GenerateClientConfigurationResponse | GenerateClientConfiguration generates talosctl client configuration (talosconfig). | | PacketCapture | PacketCaptureRequest | .common.Data stream | PacketCapture performs packet capture and streams back pcap file. | | Netstat | NetstatRequest | NetstatResponse | Netstat provides information about network connections. | | MetaWrite | MetaWriteRequest | MetaWriteResponse | MetaWrite writes a META key-value pair. | | MetaDelete | MetaDeleteRequest | MetaDeleteResponse | MetaDelete deletes a META key. | | ImageList | ImageListRequest | ImageListResponse stream | ImageList lists images in the CRI.

Use ImageService List RPC instead. | | ImagePull | ImagePullRequest | ImagePullResponse | ImagePull pulls an image into the CRI.

Use ImageService Pull RPC instead. |

<!-- end services -->

<a name="machine/md.proto"></a>

<p align="right"><a href="#top">Top</a></p>

machine/md.proto

<a name="machine.MDDestroyRequest"></a>

MDDestroyRequest

MDDestroyRequest identifies the array device to tear down.

FieldTypeLabelDescription
devicestringDevice is the full array device path to destroy (e.g. "/dev/disk/by-id/md-name-data").
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions -->

<a name="machine.MDService"></a>

MDService

MDService maintains MD (Multiple Device, software RAID) arrays.

  • Destroy: stop the array and clear member superblocks.
Method NameRequest TypeResponse TypeDescription
DestroyMDDestroyRequest.google.protobuf.EmptyDestroy stops the array and clears the superblock on every member.

The array must not be in use (e.g. mounted or claimed by another device) at the time of the call. |

<!-- end services -->

<a name="resource/config/config.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/config/config.proto

<a name="resource.config.MachineConfigSpec"></a>

MachineConfigSpec

MessageConfigSpec is the spec for the config.MachineConfig resource.

FieldTypeLabelDescription
yaml_marshalledbytesContains YAML marshalled machine configuration.

Byte representation is preserved as the machine configuration was submitted to the node. |

<a name="resource.config.MachineTypeSpec"></a>

MachineTypeSpec

MachineTypeSpec is the spec for the config.MachineType resource.

FieldTypeLabelDescription
machine_typeMachineType
<!-- end messages -->

<a name="resource.config.MachineType"></a>

MachineType

MachineType matches machine.Type constants.

NameNumberDescription
UNKNOWN0
INIT1
CONTROL_PLANE2
WORKER3
<!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/enums/enums.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/enums/enums.proto

<!-- end messages -->

<a name="talos.resource.definitions.enums.BlockEncryptionKeyType"></a>

BlockEncryptionKeyType

BlockEncryptionKeyType describes encryption key type.

NameNumberDescription
ENCRYPTION_KEY_STATIC0
ENCRYPTION_KEY_NODE_ID1
ENCRYPTION_KEY_KMS2
ENCRYPTION_KEY_TPM3

<a name="talos.resource.definitions.enums.BlockEncryptionProviderType"></a>

BlockEncryptionProviderType

BlockEncryptionProviderType describes encryption provider type.

NameNumberDescription
ENCRYPTION_PROVIDER_NONE0
ENCRYPTION_PROVIDER_LUKS21

<a name="talos.resource.definitions.enums.BlockFSParameterType"></a>

BlockFSParameterType

BlockFSParameterType describes Filesystem Parameter type.

NameNumberDescription
FS_PARAMETER_TYPE_STRING_VALUE0
FS_PARAMETER_TYPE_BOOLEAN_VALUE1
FS_PARAMETER_TYPE_BINARY_VALUE2

<a name="talos.resource.definitions.enums.BlockFilesystemType"></a>

BlockFilesystemType

BlockFilesystemType describes filesystem type.

NameNumberDescription
FILESYSTEM_TYPE_NONE0
FILESYSTEM_TYPE_XFS1
FILESYSTEM_TYPE_VFAT2
FILESYSTEM_TYPE_EXT43
FILESYSTEM_TYPE_ISO96604
FILESYSTEM_TYPE_SWAP5
FILESYSTEM_TYPE_VIRTIOFS6
FILESYSTEM_TYPE_BTRFS7

<a name="talos.resource.definitions.enums.BlockVolumePhase"></a>

BlockVolumePhase

BlockVolumePhase describes volume phase.

NameNumberDescription
VOLUME_PHASE_WAITING0
VOLUME_PHASE_FAILED1
VOLUME_PHASE_MISSING2
VOLUME_PHASE_LOCATED3
VOLUME_PHASE_PROVISIONED4
VOLUME_PHASE_PREPARED5
VOLUME_PHASE_READY6
VOLUME_PHASE_CLOSED7

<a name="talos.resource.definitions.enums.BlockVolumeType"></a>

BlockVolumeType

BlockVolumeType describes volume type.

NameNumberDescription
VOLUME_TYPE_PARTITION0
VOLUME_TYPE_DISK1
VOLUME_TYPE_TMPFS2
VOLUME_TYPE_DIRECTORY3
VOLUME_TYPE_SYMLINK4
VOLUME_TYPE_OVERLAY5
VOLUME_TYPE_EXTERNAL6

<a name="talos.resource.definitions.enums.ContainersContainerImagePhase"></a>

ContainersContainerImagePhase

ContainersContainerImagePhase describes the state of a container's image pull.

NameNumberDescription
CONTAINER_IMAGE_PHASE_PENDING0
CONTAINER_IMAGE_PHASE_PULLING1
CONTAINER_IMAGE_PHASE_READY2
CONTAINER_IMAGE_PHASE_FAILED3

<a name="talos.resource.definitions.enums.ContainersContainerInstancePhase"></a>

ContainersContainerInstancePhase

ContainersContainerInstancePhase describes the state of a container instance's execution.

NameNumberDescription
CONTAINER_INSTANCE_PHASE_CREATED0
CONTAINER_INSTANCE_PHASE_RUNNING1
CONTAINER_INSTANCE_PHASE_TERMINATED2
CONTAINER_INSTANCE_PHASE_FAILED3

<a name="talos.resource.definitions.enums.CriImageCacheCopyStatus"></a>

CriImageCacheCopyStatus

CriImageCacheCopyStatus describes image cache copy status type.

NameNumberDescription
IMAGE_CACHE_COPY_STATUS_UNKNOWN0
IMAGE_CACHE_COPY_STATUS_SKIPPED1
IMAGE_CACHE_COPY_STATUS_PENDING2
IMAGE_CACHE_COPY_STATUS_READY3

<a name="talos.resource.definitions.enums.CriImageCacheStatus"></a>

CriImageCacheStatus

CriImageCacheStatus describes image cache status type.

NameNumberDescription
IMAGE_CACHE_STATUS_UNKNOWN0
IMAGE_CACHE_STATUS_DISABLED1
IMAGE_CACHE_STATUS_PREPARING2
IMAGE_CACHE_STATUS_READY3

<a name="talos.resource.definitions.enums.KubespanPeerState"></a>

KubespanPeerState

KubespanPeerState is KubeSpan peer current state.

NameNumberDescription
PEER_STATE_UNKNOWN0
PEER_STATE_UP1
PEER_STATE_DOWN2

<a name="talos.resource.definitions.enums.MachineType"></a>

MachineType

MachineType represents a machine type.

NameNumberDescription
TYPE_UNKNOWN0TypeUnknown represents undefined node type, when there is no machine configuration yet.
TYPE_INIT1TypeInit type designates the first control plane node to come up. You can think of it like a bootstrap node. This node will perform the initial steps to bootstrap the cluster -- generation of TLS assets, starting of the control plane, etc.
TYPE_CONTROL_PLANE2TypeControlPlane designates the node as a control plane member. This means it will host etcd along with the Kubernetes controlplane components such as API Server, Controller Manager, Scheduler.
TYPE_WORKER3TypeWorker designates the node as a worker node. This means it will be an available compute node for scheduling workloads.

<a name="talos.resource.definitions.enums.NethelpersADLACPActive"></a>

NethelpersADLACPActive

NethelpersADLACPActive is ADLACPActive.

NameNumberDescription
ADLACP_ACTIVE_OFF0
ADLACP_ACTIVE_ON1

<a name="talos.resource.definitions.enums.NethelpersADSelect"></a>

NethelpersADSelect

NethelpersADSelect is ADSelect.

NameNumberDescription
AD_SELECT_STABLE0
AD_SELECT_BANDWIDTH1
AD_SELECT_COUNT2

<a name="talos.resource.definitions.enums.NethelpersARPAllTargets"></a>

NethelpersARPAllTargets

NethelpersARPAllTargets is an ARP targets mode.

NameNumberDescription
ARP_ALL_TARGETS_ANY0
ARP_ALL_TARGETS_ALL1

<a name="talos.resource.definitions.enums.NethelpersARPValidate"></a>

NethelpersARPValidate

NethelpersARPValidate is an ARP Validation mode.

NameNumberDescription
ARP_VALIDATE_NONE0
ARP_VALIDATE_ACTIVE1
ARP_VALIDATE_BACKUP2
ARP_VALIDATE_ALL3
ARP_VALIDATE_FILTER4
ARP_VALIDATE_FILTER_ACTIVE5
ARP_VALIDATE_FILTER_BACKUP6

<a name="talos.resource.definitions.enums.NethelpersAddressFlag"></a>

NethelpersAddressFlag

NethelpersAddressFlag wraps IFF_* constants.

NameNumberDescription
NETHELPERS_ADDRESSFLAG_UNSPECIFIED0
ADDRESS_TEMPORARY1
ADDRESS_NO_DAD2
ADDRESS_OPTIMISTIC4
ADDRESS_DAD_FAILED8
ADDRESS_HOME16
ADDRESS_DEPRECATED32
ADDRESS_TENTATIVE64
ADDRESS_PERMANENT128
ADDRESS_MANAGEMENT_TEMP256
ADDRESS_NO_PREFIX_ROUTE512
ADDRESS_MC_AUTO_JOIN1024
ADDRESS_STABLE_PRIVACY2048

<a name="talos.resource.definitions.enums.NethelpersAddressSortAlgorithm"></a>

NethelpersAddressSortAlgorithm

NethelpersAddressSortAlgorithm is an internal address sorting algorithm.

NameNumberDescription
ADDRESS_SORT_ALGORITHM_V10
ADDRESS_SORT_ALGORITHM_V21

<a name="talos.resource.definitions.enums.NethelpersAutoHostnameKind"></a>

NethelpersAutoHostnameKind

NethelpersAutoHostnameKind is a kind of automatically generated hostname.

NameNumberDescription
AUTO_HOSTNAME_KIND_OFF0
AUTO_HOSTNAME_KIND_ADDR1
AUTO_HOSTNAME_KIND_STABLE2

<a name="talos.resource.definitions.enums.NethelpersBGPSessionState"></a>

NethelpersBGPSessionState

NethelpersBGPSessionState is the state of a BGP peering session (RFC 4271 FSM).

NameNumberDescription
BGP_SESSION_STATE_UNKNOWN0
BGP_SESSION_STATE_IDLE1
BGP_SESSION_STATE_CONNECT2
BGP_SESSION_STATE_ACTIVE3
BGP_SESSION_STATE_OPEN_SENT4
BGP_SESSION_STATE_OPEN_CONFIRM5
BGP_SESSION_STATE_ESTABLISHED6

<a name="talos.resource.definitions.enums.NethelpersBondMode"></a>

NethelpersBondMode

NethelpersBondMode is a bond mode.

NameNumberDescription
BOND_MODE_ROUNDROBIN0
BOND_MODE_ACTIVE_BACKUP1
BOND_MODE_XOR2
BOND_MODE_BROADCAST3
BOND_MODE8023_AD4
BOND_MODE_TLB5
BOND_MODE_ALB6

<a name="talos.resource.definitions.enums.NethelpersBondXmitHashPolicy"></a>

NethelpersBondXmitHashPolicy

NethelpersBondXmitHashPolicy is a bond hash policy.

NameNumberDescription
BOND_XMIT_POLICY_LAYER20
BOND_XMIT_POLICY_LAYER341
BOND_XMIT_POLICY_LAYER232
BOND_XMIT_POLICY_ENCAP233
BOND_XMIT_POLICY_ENCAP344

<a name="talos.resource.definitions.enums.NethelpersClientIdentifier"></a>

NethelpersClientIdentifier

NethelpersClientIdentifier is a DHCP client identifier.

NameNumberDescription
CLIENT_IDENTIFIER_NONE0
CLIENT_IDENTIFIER_MAC1
CLIENT_IDENTIFIER_DUID2

<a name="talos.resource.definitions.enums.NethelpersConntrackState"></a>

NethelpersConntrackState

NethelpersConntrackState is a conntrack state.

NameNumberDescription
NETHELPERS_CONNTRACKSTATE_UNSPECIFIED0
CONNTRACK_STATE_NEW8
CONNTRACK_STATE_RELATED4
CONNTRACK_STATE_ESTABLISHED2
CONNTRACK_STATE_INVALID1

<a name="talos.resource.definitions.enums.NethelpersDNSProtocol"></a>

NethelpersDNSProtocol

NethelpersDNSProtocol is a kind of DNS protocol.

NameNumberDescription
DNS_PROTOCOL_DEFAULT0
DNS_PROTOCOL_DNS_OVER_TLS1
DNS_PROTOCOL_DNS_OVER_HTTP2

<a name="talos.resource.definitions.enums.NethelpersDuplex"></a>

NethelpersDuplex

NethelpersDuplex wraps ethtool.Duplex for YAML marshaling.

NameNumberDescription
HALF0
FULL1
UNKNOWN255

<a name="talos.resource.definitions.enums.NethelpersFailOverMAC"></a>

NethelpersFailOverMAC

NethelpersFailOverMAC is a MAC failover mode.

NameNumberDescription
FAIL_OVER_MAC_NONE0
FAIL_OVER_MAC_ACTIVE1
FAIL_OVER_MAC_FOLLOW2

<a name="talos.resource.definitions.enums.NethelpersFamily"></a>

NethelpersFamily

NethelpersFamily is a network family.

NameNumberDescription
NETHELPERS_FAMILY_UNSPECIFIED0
FAMILY_INET42
FAMILY_INET610

<a name="talos.resource.definitions.enums.NethelpersICMPType"></a>

NethelpersICMPType

NethelpersICMPType is a ICMP packet type.

NameNumberDescription
NETHELPERS_ICMPTYPE_UNSPECIFIED0
ICMP_TYPE_TIMESTAMP_REQUEST13
ICMP_TYPE_TIMESTAMP_REPLY14
ICMP_TYPE_ADDRESS_MASK_REQUEST17
ICMP_TYPE_ADDRESS_MASK_REPLY18

<a name="talos.resource.definitions.enums.NethelpersLACPRate"></a>

NethelpersLACPRate

NethelpersLACPRate is a LACP rate.

NameNumberDescription
LACP_RATE_SLOW0
LACP_RATE_FAST1

<a name="talos.resource.definitions.enums.NethelpersLinkType"></a>

NethelpersLinkType

NethelpersLinkType is a link type.

NameNumberDescription
LINK_NETROM0
LINK_ETHER1
LINK_EETHER2
LINK_AX253
LINK_PRONET4
LINK_CHAOS5
LINK_IEE8026
LINK_ARCNET7
LINK_ATALK8
LINK_DLCI15
LINK_ATM19
LINK_METRICOM23
LINK_IEEE139424
LINK_EUI6427
LINK_INFINIBAND32
LINK_SLIP256
LINK_CSLIP257
LINK_SLIP6258
LINK_CSLIP6259
LINK_RSRVD260
LINK_ADAPT264
LINK_ROSE270
LINK_X25271
LINK_HWX25272
LINK_CAN280
LINK_PPP512
LINK_CISCO513
LINK_HDLC513
LINK_LAPB516
LINK_DDCMP517
LINK_RAWHDLC518
LINK_TUNNEL768
LINK_TUNNEL6769
LINK_FRAD770
LINK_SKIP771
LINK_LOOPBCK772
LINK_LOCALTLK773
LINK_FDDI774
LINK_BIF775
LINK_SIT776
LINK_IPDDP777
LINK_IPGRE778
LINK_PIMREG779
LINK_HIPPI780
LINK_ASH781
LINK_ECONET782
LINK_IRDA783
LINK_FCPP784
LINK_FCAL785
LINK_FCPL786
LINK_FCFABRIC787
LINK_FCFABRIC1788
LINK_FCFABRIC2789
LINK_FCFABRIC3790
LINK_FCFABRIC4791
LINK_FCFABRIC5792
LINK_FCFABRIC6793
LINK_FCFABRIC7794
LINK_FCFABRIC8795
LINK_FCFABRIC9796
LINK_FCFABRIC10797
LINK_FCFABRIC11798
LINK_FCFABRIC12799
LINK_IEE802TR800
LINK_IEE80211801
LINK_IEE80211PRISM802
LINK_IEE80211_RADIOTAP803
LINK_IEE8021154804
LINK_IEE8021154MONITOR805
LINK_PHONET820
LINK_PHONETPIPE821
LINK_CAIF822
LINK_IP6GRE823
LINK_NETLINK824
LINK6_LOWPAN825
LINK_VOID65535
LINK_NONE65534

<a name="talos.resource.definitions.enums.NethelpersMatchOperator"></a>

NethelpersMatchOperator

NethelpersMatchOperator is a netfilter match operator.

NameNumberDescription
OPERATOR_EQUAL0
OPERATOR_NOT_EQUAL1

<a name="talos.resource.definitions.enums.NethelpersNfTablesChainHook"></a>

NethelpersNfTablesChainHook

NethelpersNfTablesChainHook wraps nftables.ChainHook for YAML marshaling.

NameNumberDescription
CHAIN_HOOK_PREROUTING0
CHAIN_HOOK_INPUT1
CHAIN_HOOK_FORWARD2
CHAIN_HOOK_OUTPUT3
CHAIN_HOOK_POSTROUTING4

<a name="talos.resource.definitions.enums.NethelpersNfTablesChainPriority"></a>

NethelpersNfTablesChainPriority

NethelpersNfTablesChainPriority wraps nftables.ChainPriority for YAML marshaling.

NameNumberDescription
NETHELPERS_NFTABLESCHAINPRIORITY_UNSPECIFIED0
CHAIN_PRIORITY_FIRST-2147483648
CHAIN_PRIORITY_CONNTRACK_DEFRAG-400
CHAIN_PRIORITY_RAW-300
CHAIN_PRIORITY_SE_LINUX_FIRST-225
CHAIN_PRIORITY_CONNTRACK-200
CHAIN_PRIORITY_MANGLE-150
CHAIN_PRIORITY_NAT_DEST-100
CHAIN_PRIORITY_FILTER0
CHAIN_PRIORITY_SECURITY50
CHAIN_PRIORITY_NAT_SOURCE100
CHAIN_PRIORITY_SE_LINUX_LAST225
CHAIN_PRIORITY_CONNTRACK_HELPER300
CHAIN_PRIORITY_LAST2147483647

<a name="talos.resource.definitions.enums.NethelpersNfTablesVerdict"></a>

NethelpersNfTablesVerdict

NethelpersNfTablesVerdict wraps nftables.Verdict for YAML marshaling.

NameNumberDescription
VERDICT_DROP0
VERDICT_ACCEPT1

<a name="talos.resource.definitions.enums.NethelpersOperationalState"></a>

NethelpersOperationalState

NethelpersOperationalState wraps rtnetlink.OperationalState for YAML marshaling.

NameNumberDescription
OPER_STATE_UNKNOWN0
OPER_STATE_NOT_PRESENT1
OPER_STATE_DOWN2
OPER_STATE_LOWER_LAYER_DOWN3
OPER_STATE_TESTING4
OPER_STATE_DORMANT5
OPER_STATE_UP6

<a name="talos.resource.definitions.enums.NethelpersPort"></a>

NethelpersPort

NethelpersPort wraps ethtool.Port for YAML marshaling.

NameNumberDescription
TWISTED_PAIR0
AUI1
MII2
FIBRE3
BNC4
DIRECT_ATTACH5
NONE239
OTHER255

<a name="talos.resource.definitions.enums.NethelpersPrimaryReselect"></a>

NethelpersPrimaryReselect

NethelpersPrimaryReselect is an ARP targets mode.

NameNumberDescription
PRIMARY_RESELECT_ALWAYS0
PRIMARY_RESELECT_BETTER1
PRIMARY_RESELECT_FAILURE2

<a name="talos.resource.definitions.enums.NethelpersProtocol"></a>

NethelpersProtocol

NethelpersProtocol is a inet protocol.

NameNumberDescription
NETHELPERS_PROTOCOL_UNSPECIFIED0
PROTOCOL_ICMP1
PROTOCOL_TCP6
PROTOCOL_UDP17
PROTOCOL_ICM_PV658

<a name="talos.resource.definitions.enums.NethelpersRouteFlag"></a>

NethelpersRouteFlag

NethelpersRouteFlag wraps RTM_F_* constants.

NameNumberDescription
NETHELPERS_ROUTEFLAG_UNSPECIFIED0
ROUTE_NOTIFY256
ROUTE_CLONED512
ROUTE_EQUALIZE1024
ROUTE_PREFIX2048
ROUTE_LOOKUP_TABLE4096
ROUTE_FIB_MATCH8192
ROUTE_OFFLOAD16384
ROUTE_TRAP32768

<a name="talos.resource.definitions.enums.NethelpersRouteProtocol"></a>

NethelpersRouteProtocol

NethelpersRouteProtocol is a routing protocol.

NameNumberDescription
PROTOCOL_UNSPEC0
PROTOCOL_REDIRECT1
PROTOCOL_KERNEL2
PROTOCOL_BOOT3
PROTOCOL_STATIC4
PROTOCOL_RA9
PROTOCOL_MRT10
PROTOCOL_ZEBRA11
PROTOCOL_BIRD12
PROTOCOL_DNROUTED13
PROTOCOL_XORP14
PROTOCOL_NTK15
PROTOCOL_DHCP16
PROTOCOL_MRTD17
PROTOCOL_KEEPALIVED18
PROTOCOL_BABEL42
PROTOCOL_OPENR99
PROTOCOL_BGP186
PROTOCOL_ISIS187
PROTOCOL_OSPF188
PROTOCOL_RIP189
PROTOCOL_EIGRP192

<a name="talos.resource.definitions.enums.NethelpersRouteType"></a>

NethelpersRouteType

NethelpersRouteType is a route type.

NameNumberDescription
TYPE_UNSPEC0
TYPE_UNICAST1
TYPE_LOCAL2
TYPE_BROADCAST3
TYPE_ANYCAST4
TYPE_MULTICAST5
TYPE_BLACKHOLE6
TYPE_UNREACHABLE7
TYPE_PROHIBIT8
TYPE_THROW9
TYPE_NAT10
TYPE_X_RESOLVE11

<a name="talos.resource.definitions.enums.NethelpersRoutingRuleAction"></a>

NethelpersRoutingRuleAction

NethelpersRoutingRuleAction is a routing rule action.

NameNumberDescription
ROUTING_RULE_ACTION_UNSPEC0
ROUTING_RULE_ACTION_UNICAST1
ROUTING_RULE_ACTION_BLACKHOLE6
ROUTING_RULE_ACTION_UNREACHABLE7
ROUTING_RULE_ACTION_PROHIBIT8

<a name="talos.resource.definitions.enums.NethelpersRoutingTable"></a>

NethelpersRoutingTable

NethelpersRoutingTable is a routing table ID.

NameNumberDescription
TABLE_UNSPEC0
TABLE11
TABLE22
TABLE33
TABLE44
TABLE55
TABLE66
TABLE77
TABLE88
TABLE99
TABLE1010
TABLE1111
TABLE1212
TABLE1313
TABLE1414
TABLE1515
TABLE1616
TABLE1717
TABLE1818
TABLE1919
TABLE2020
TABLE2121
TABLE2222
TABLE2323
TABLE2424
TABLE2525
TABLE2626
TABLE2727
TABLE2828
TABLE2929
TABLE3030
TABLE3131
TABLE3232
TABLE3333
TABLE3434
TABLE3535
TABLE3636
TABLE3737
TABLE3838
TABLE3939
TABLE4040
TABLE4141
TABLE4242
TABLE4343
TABLE4444
TABLE4545
TABLE4646
TABLE4747
TABLE4848
TABLE4949
TABLE5050
TABLE5151
TABLE5252
TABLE5353
TABLE5454
TABLE5555
TABLE5656
TABLE5757
TABLE5858
TABLE5959
TABLE6060
TABLE6161
TABLE6262
TABLE6363
TABLE6464
TABLE6565
TABLE6666
TABLE6767
TABLE6868
TABLE6969
TABLE7070
TABLE7171
TABLE7272
TABLE7373
TABLE7474
TABLE7575
TABLE7676
TABLE7777
TABLE7878
TABLE7979
TABLE8080
TABLE8181
TABLE8282
TABLE8383
TABLE8484
TABLE8585
TABLE8686
TABLE8787
TABLE8888
TABLE8989
TABLE9090
TABLE9191
TABLE9292
TABLE9393
TABLE9494
TABLE9595
TABLE9696
TABLE9797
TABLE9898
TABLE9999
TABLE100100
TABLE101101
TABLE102102
TABLE103103
TABLE104104
TABLE105105
TABLE106106
TABLE107107
TABLE108108
TABLE109109
TABLE110110
TABLE111111
TABLE112112
TABLE113113
TABLE114114
TABLE115115
TABLE116116
TABLE117117
TABLE118118
TABLE119119
TABLE120120
TABLE121121
TABLE122122
TABLE123123
TABLE124124
TABLE125125
TABLE126126
TABLE127127
TABLE128128
TABLE129129
TABLE130130
TABLE131131
TABLE132132
TABLE133133
TABLE134134
TABLE135135
TABLE136136
TABLE137137
TABLE138138
TABLE139139
TABLE140140
TABLE141141
TABLE142142
TABLE143143
TABLE144144
TABLE145145
TABLE146146
TABLE147147
TABLE148148
TABLE149149
TABLE150150
TABLE151151
TABLE152152
TABLE153153
TABLE154154
TABLE155155
TABLE156156
TABLE157157
TABLE158158
TABLE159159
TABLE160160
TABLE161161
TABLE162162
TABLE163163
TABLE164164
TABLE165165
TABLE166166
TABLE167167
TABLE168168
TABLE169169
TABLE170170
TABLE171171
TABLE172172
TABLE173173
TABLE174174
TABLE175175
TABLE176176
TABLE177177
TABLE178178
TABLE179179
TABLE180180
TABLE181181
TABLE182182
TABLE183183
TABLE184184
TABLE185185
TABLE186186
TABLE187187
TABLE188188
TABLE189189
TABLE190190
TABLE191191
TABLE192192
TABLE193193
TABLE194194
TABLE195195
TABLE196196
TABLE197197
TABLE198198
TABLE199199
TABLE200200
TABLE201201
TABLE202202
TABLE203203
TABLE204204
TABLE205205
TABLE206206
TABLE207207
TABLE208208
TABLE209209
TABLE210210
TABLE211211
TABLE212212
TABLE213213
TABLE214214
TABLE215215
TABLE216216
TABLE217217
TABLE218218
TABLE219219
TABLE220220
TABLE221221
TABLE222222
TABLE223223
TABLE224224
TABLE225225
TABLE226226
TABLE227227
TABLE228228
TABLE229229
TABLE230230
TABLE231231
TABLE232232
TABLE233233
TABLE234234
TABLE235235
TABLE236236
TABLE237237
TABLE238238
TABLE239239
TABLE240240
TABLE241241
TABLE242242
TABLE243243
TABLE244244
TABLE245245
TABLE246246
TABLE247247
TABLE248248
TABLE249249
TABLE250250
TABLE251251
TABLE252252
TABLE_DEFAULT253
TABLE_MAIN254
TABLE_LOCAL255

<a name="talos.resource.definitions.enums.NethelpersScope"></a>

NethelpersScope

NethelpersScope is an address scope.

NameNumberDescription
SCOPE_GLOBAL0
SCOPE_SITE200
SCOPE_LINK253
SCOPE_HOST254
SCOPE_NOWHERE255

<a name="talos.resource.definitions.enums.NethelpersVLANProtocol"></a>

NethelpersVLANProtocol

NethelpersVLANProtocol is a VLAN protocol.

NameNumberDescription
NETHELPERS_VLANPROTOCOL_UNSPECIFIED0
VLAN_PROTOCOL8021_Q33024
VLAN_PROTOCOL8021_AD34984

<a name="talos.resource.definitions.enums.NethelpersWOLMode"></a>

NethelpersWOLMode

NethelpersWOLMode wraps ethtool.WOLMode for YAML marshaling.

NameNumberDescription
NETHELPERS_WOLMODE_UNSPECIFIED0
WOL_MODE_PHY1
WOL_MODE_UNICAST2
WOL_MODE_MULTICAST4
WOL_MODE_BROADCAST8
WOL_MODE_MAGIC32
WOL_MODE_MAGIC_SECURE64
WOL_MODE_FILTER128

<a name="talos.resource.definitions.enums.NetworkConfigLayer"></a>

NetworkConfigLayer

NetworkConfigLayer describes network configuration layers, with lowest priority first.

NameNumberDescription
CONFIG_DEFAULT0
CONFIG_CMDLINE1
CONFIG_PLATFORM2
CONFIG_OPERATOR3
CONFIG_MACHINE_CONFIGURATION4

<a name="talos.resource.definitions.enums.NetworkOperator"></a>

NetworkOperator

NetworkOperator enumerates Talos network operators.

NameNumberDescription
OPERATOR_DHCP40
OPERATOR_DHCP61
OPERATOR_VIP2

<a name="talos.resource.definitions.enums.RuntimeFIPSState"></a>

RuntimeFIPSState

RuntimeFIPSState describes the current FIPS status.

NameNumberDescription
FIPS_STATE_DISABLED0
FIPS_STATE_ENABLED1
FIPS_STATE_STRICT2

<a name="talos.resource.definitions.enums.RuntimeKernelModuleState"></a>

RuntimeKernelModuleState

RuntimeKernelModuleState represents the operational state of a kernel module.

NameNumberDescription
KERNEL_MODULE_STATE_LIVE0
KERNEL_MODULE_STATE_LOADING1
KERNEL_MODULE_STATE_UNLOADING2
KERNEL_MODULE_STATE_BUILTIN3

<a name="talos.resource.definitions.enums.RuntimeKernelModuleType"></a>

RuntimeKernelModuleType

RuntimeKernelModuleType represents whether a kernel module is built into the kernel or dynamically loaded.

NameNumberDescription
KERNEL_MODULE_TYPE_UNKNOWN0
KERNEL_MODULE_TYPE_BUILTIN1
KERNEL_MODULE_TYPE_DYNAMIC2

<a name="talos.resource.definitions.enums.RuntimeMachineStage"></a>

RuntimeMachineStage

RuntimeMachineStage describes the stage of the machine boot/run process.

NameNumberDescription
MACHINE_STAGE_UNKNOWN0
MACHINE_STAGE_BOOTING1
MACHINE_STAGE_INSTALLING2
MACHINE_STAGE_MAINTENANCE3
MACHINE_STAGE_RUNNING4
MACHINE_STAGE_REBOOTING5
MACHINE_STAGE_SHUTTING_DOWN6
MACHINE_STAGE_RESETTING7
MACHINE_STAGE_UPGRADING8

<a name="talos.resource.definitions.enums.RuntimeSELinuxState"></a>

RuntimeSELinuxState

RuntimeSELinuxState describes the current SELinux status.

NameNumberDescription
SE_LINUX_STATE_DISABLED0
SE_LINUX_STATE_PERMISSIVE1
SE_LINUX_STATE_ENFORCING2

<a name="talos.resource.definitions.enums.RuntimeUnattendedInstallPhase"></a>

RuntimeUnattendedInstallPhase

RuntimeUnattendedInstallPhase describes the phase of the unattended install.

NameNumberDescription
UNATTENDED_INSTALL_PHASE_PENDING0
UNATTENDED_INSTALL_PHASE_INSTALLING1
UNATTENDED_INSTALL_PHASE_INSTALLED2
UNATTENDED_INSTALL_PHASE_WAITING_FOR_REBOOT3
UNATTENDED_INSTALL_PHASE_FAILED4

<a name="talos.resource.definitions.enums.StorageLVMLogicalVolumeType"></a>

StorageLVMLogicalVolumeType

StorageLVMLogicalVolumeType describes the layout of an LVM logical volume.

NameNumberDescription
LVM_LOGICAL_VOLUME_TYPE_LINEAR0
LVM_LOGICAL_VOLUME_TYPE_RAID11
LVM_LOGICAL_VOLUME_TYPE_RAID02
LVM_LOGICAL_VOLUME_TYPE_RAID103

<a name="talos.resource.definitions.enums.StorageMDArrayPhase"></a>

StorageMDArrayPhase

StorageMDArrayPhase describes the provisioning/sync state of an MD array.

NameNumberDescription
MD_ARRAY_PHASE_UNKNOWN0
MD_ARRAY_PHASE_WAITING1
MD_ARRAY_PHASE_REBUILDING2
MD_ARRAY_PHASE_READY3
MD_ARRAY_PHASE_ERROR4

<a name="talos.resource.definitions.enums.StorageMDLevel"></a>

StorageMDLevel

StorageMDLevel describes the RAID level of an MD (software RAID) array.

NameNumberDescription
MD_LEVEL_RAID10

<a name="talos.resource.definitions.enums.StorageMDMetadata"></a>

StorageMDMetadata

StorageMDMetadata describes the on-disk metadata format of an MD (software RAID) array.

NameNumberDescription
MD_METADATA100
MD_METADATA121
<!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/block/block.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/block/block.proto

<a name="talos.resource.definitions.block.DeviceSpec"></a>

DeviceSpec

DeviceSpec is the spec for devices status.

FieldTypeLabelDescription
typestring
majorint64
minorint64
partition_namestring
partition_numberint64
generationint64Generation is bumped every time the device might have changed and might need to be re-probed.
device_pathstring
parentstringParent (if set) specifies the parent device ID.
secondariesstringrepeatedSecondaries (if set) specifies the secondary device IDs.

E.g. for a LVM volume secondary is a list of blockdevices that the volume consists of. |

<a name="talos.resource.definitions.block.DiscoveredVolumeSpec"></a>

DiscoveredVolumeSpec

DiscoveredVolumeSpec is the spec for DiscoveredVolumes resource.

FieldTypeLabelDescription
sizeuint64Overall size of the probed device (in bytes).
sector_sizeuint64Sector size of the device (in bytes).
io_sizeuint64Optimal I/O size for the device (in bytes).
namestring
uuidstring
labelstring
block_sizeuint32
filesystem_block_sizeuint32
probed_sizeuint64
partition_uuidstring
partition_typestring
partition_labelstring
partition_indexuint64
typestring
device_pathstring
parentstring
dev_pathstring
parent_dev_pathstring
pretty_sizestring
offsetuint64Offset of the partition/volume inside Parent device (in bytes).

<a name="talos.resource.definitions.block.DiscoveredVolumesStatusSpec"></a>

DiscoveredVolumesStatusSpec

DiscoveredVolumesStatusSpec is the spec for discovered volumes status.

FieldTypeLabelDescription
readyboolVolume discovery has been completed and the discovered volumes are ready to be used.

<a name="talos.resource.definitions.block.DiscoveryRefreshRequestSpec"></a>

DiscoveryRefreshRequestSpec

DiscoveryRefreshRequestSpec is the spec for DiscoveryRefreshRequest.

FieldTypeLabelDescription
requestint64

<a name="talos.resource.definitions.block.DiscoveryRefreshStatusSpec"></a>

DiscoveryRefreshStatusSpec

DiscoveryRefreshStatusSpec is the spec for DiscoveryRefreshStatus status.

FieldTypeLabelDescription
requestint64

<a name="talos.resource.definitions.block.DiskSelector"></a>

DiskSelector

DiskSelector selects a disk for the volume.

FieldTypeLabelDescription
matchgoogle.api.expr.v1alpha1.CheckedExpr
externalstring

<a name="talos.resource.definitions.block.DiskSpec"></a>

DiskSpec

DiskSpec is the spec for Disks status.

FieldTypeLabelDescription
sizeuint64
io_sizeuint64
sector_sizeuint64
readonlybool
modelstring
serialstring
modaliasstring
wwidstring
bus_pathstring
sub_systemstring
transportstring
rotationalbool
cdrombool
dev_pathstring
pretty_sizestring
secondary_disksstringrepeatedSecondaryDisks (if set) specifies the secondary disk IDs.

E.g. if the blockdevice secondary is vda5, the secondary disk will be set as vda. This allows to map secondaries between disks ignoring the partitions. | | uuid | string | | | | symlinks | string | repeated | | | firmware_version | string | | |

<a name="talos.resource.definitions.block.EncryptionKey"></a>

EncryptionKey

EncryptionKey is the spec for volume encryption key.

FieldTypeLabelDescription
slotint64
typetalos.resource.definitions.enums.BlockEncryptionKeyType
static_passphrasebytesOnly for Type == "static":
kms_endpointstringOnly for Type == "kms":
tpm_check_secureboot_status_on_enrollboolOnly for Type == "tpm":
lock_to_statebool
tpmpc_rsint64repeatedOnly for Type == "tpm":
tpm_pub_key_pc_rsint64repeatedOnly for Type == "tpm":

<a name="talos.resource.definitions.block.EncryptionSpec"></a>

EncryptionSpec

EncryptionSpec is the spec for volume encryption.

FieldTypeLabelDescription
providertalos.resource.definitions.enums.BlockEncryptionProviderType
keysEncryptionKeyrepeated
cipherstring
key_sizeuint64
block_sizeuint64
perf_optionsstringrepeated
allow_discardsbool

<a name="talos.resource.definitions.block.FSScrubScheduleSpec"></a>

FSScrubScheduleSpec

FSScrubScheduleSpec is the spec for FSScrubSchedule resource.

FieldTypeLabelDescription
filesystemtalos.resource.definitions.enums.BlockFilesystemTypeFilesystem is the filesystem type of the volume to be scrubbed.
intervalgoogle.protobuf.DurationInterval is the scrub interval for the volume.
next_scrubgoogle.protobuf.TimestampNextScrub is the next scheduled scrub time for the volume.

<a name="talos.resource.definitions.block.FSScrubStatusSpec"></a>

FSScrubStatusSpec

FSScrubStatusSpec describes status of filesystem scrub jobs.

FieldTypeLabelDescription
mountpointstring
intervalgoogle.protobuf.Duration
timegoogle.protobuf.Timestamp
durationgoogle.protobuf.Duration
statusstring

<a name="talos.resource.definitions.block.FilesystemSpec"></a>

FilesystemSpec

FilesystemSpec is the spec for volume filesystem.

FieldTypeLabelDescription
typetalos.resource.definitions.enums.BlockFilesystemTypeFilesystem type.
labelstringFilesystem label.
min_allocation_group_sizeuint64MinAllocationGroupSize is the minimum XFS allocation group size in bytes.

Zero leaves the mkfs.xfs defaults alone. |

<a name="talos.resource.definitions.block.LocatorSpec"></a>

LocatorSpec

LocatorSpec is the spec for volume locator.

FieldTypeLabelDescription
matchgoogle.api.expr.v1alpha1.CheckedExprMatch is a volume locator match expression.
disk_matchgoogle.api.expr.v1alpha1.CheckedExprDiskMatch is a disk locator match expression.

<a name="talos.resource.definitions.block.MountRequestSpec"></a>

MountRequestSpec

MountRequestSpec is the spec for MountRequest.

FieldTypeLabelDescription
volume_idstring
parent_mount_idstring
requestersstringrepeated
requester_i_dsstringrepeated
read_onlybool
detachedbool
disable_access_timebool
securebool
no_execbool

<a name="talos.resource.definitions.block.MountSpec"></a>

MountSpec

MountSpec is the spec for volume mount.

FieldTypeLabelDescription
target_pathstringMount path for the volume.
selinux_labelstringSELinux label for the volume.
project_quota_supportboolEnable project quota (xfs) for the volume.
parent_idstringParent mount request ID.
file_modeuint32FileMode is the file mode for the mount target.
uidint64UID is the user ID for the mount target.
gidint64GID is the group ID for the mount target.
recursive_relabelboolRecursiveRelabel is the recursive relabel/chown flag for the mount target.
bind_targetstringBindTarget is an optional path on the host to bind-mount the volume onto.
parametersParameterSpecrepeatedParameters are additional filesystem mount options used when mounting the volume.
secureboolSecure applies MOUNT_ATTR_NOSUID|NODEV to the mount.
no_execboolNoExec applies MOUNT_ATTR_NOEXEC to the mount.

<a name="talos.resource.definitions.block.MountStatusSpec"></a>

MountStatusSpec

MountStatusSpec is the spec for MountStatus.

FieldTypeLabelDescription
specMountRequestSpec
targetstring
sourcestring
filesystemtalos.resource.definitions.enums.BlockFilesystemType
read_onlybool
project_quota_supportbool
encryption_providertalos.resource.definitions.enums.BlockEncryptionProviderType
detachedbool

<a name="talos.resource.definitions.block.ParameterSpec"></a>

ParameterSpec

ParameterSpec is a mount parameter.

FieldTypeLabelDescription
typetalos.resource.definitions.enums.BlockFSParameterTypeType of the parameter.
namestringName of the parameter.
stringstringString value of the parameter.
binarybytesBinary value of the parameter.

<a name="talos.resource.definitions.block.PartitionSpec"></a>

PartitionSpec

PartitionSpec is the spec for volume partitioning.

FieldTypeLabelDescription
min_sizeuint64Partition minimum size in bytes.
max_sizeuint64Partition maximum size in bytes, if not set, grows to the maximum size.
growboolGrow the partition automatically to the maximum size.
labelstringLabel for the partition.
type_uuidstringPartition type UUID.
relative_max_sizeuint64Partition maximum size (relative), if not set, grows to the maximum size.
negative_max_sizeboolNegativeMaxSize indicates that MaxSize or RelativeMaxSize represents space to be left free on the device rather than space to consume.

<a name="talos.resource.definitions.block.ProvisioningSpec"></a>

ProvisioningSpec

ProvisioningSpec is the spec for volume provisioning.

FieldTypeLabelDescription
disk_selectorDiskSelectorDiskSelector selects a disk for the volume.
partition_specPartitionSpecPartitionSpec describes how to provision the volume (partition type).
waveint64Provisioning wave for the volume.

Waves are processed sequentially - the volumes in the wave are only provisioned after the previous wave is done. | | filesystem_spec | FilesystemSpec | | FilesystemSpec describes how to provision the volume (filesystem type). |

<a name="talos.resource.definitions.block.SwapStatusSpec"></a>

SwapStatusSpec

SwapStatusSpec is the spec for SwapStatuss resource.

FieldTypeLabelDescription
devicestring
size_bytesuint64
size_humanstring
used_bytesuint64
used_humanstring
priorityint32
typestring

<a name="talos.resource.definitions.block.SymlinkProvisioningSpec"></a>

SymlinkProvisioningSpec

SymlinkProvisioningSpec is the spec for volume symlink.

FieldTypeLabelDescription
symlink_target_pathstringSymlink target path for the volume.
forceboolForce symlink creation.

<a name="talos.resource.definitions.block.SymlinkSpec"></a>

SymlinkSpec

SymlinkSpec is the spec for Symlinks resource.

FieldTypeLabelDescription
pathsstringrepeated

<a name="talos.resource.definitions.block.SystemDiskSpec"></a>

SystemDiskSpec

SystemDiskSpec is the spec for SystemDisks resource.

FieldTypeLabelDescription
disk_idstring
dev_pathstring

<a name="talos.resource.definitions.block.TPMEncryptionOptionsInfo"></a>

TPMEncryptionOptionsInfo

TPMEncryptionOptionsInfo is the options for TPM-based encryption.

FieldTypeLabelDescription
pc_rsint64repeated
pub_key_pc_rsint64repeated

<a name="talos.resource.definitions.block.UserDiskConfigStatusSpec"></a>

UserDiskConfigStatusSpec

UserDiskConfigStatusSpec is the spec for UserDiskConfigStatus resource.

FieldTypeLabelDescription
readybool
torn_downbool

<a name="talos.resource.definitions.block.VolumeConfigSpec"></a>

VolumeConfigSpec

VolumeConfigSpec is the spec for VolumeConfig resource.

FieldTypeLabelDescription
parent_idstringParent volume ID, if set no operations on the volume continue until the parent volume is ready.
typetalos.resource.definitions.enums.BlockVolumeTypeVolume type.
provisioningProvisioningSpecProvisioning configuration (how to provision a volume).
locatorLocatorSpecHow to find a volume.
mountMountSpecMount options for the volume.
encryptionEncryptionSpecEncryption configuration (how to encrypt a volume).
symlinkSymlinkProvisioningSpecSymlink options for the volume.
trim_enabledboolTrimEnabled indicates whether the volume should be trimmed (fstrim) on a schedule.
trim_intervalgoogle.protobuf.DurationTrimInterval is the resolved interval at which the volume should be trimmed.
scrub_enabledboolScrubEnabled indicates whether the volume filesystem should be scrubbed on a schedule.
scrub_intervalgoogle.protobuf.DurationScrubInterval is the resolved period at which the volume filesystem should be scrubbed.

<a name="talos.resource.definitions.block.VolumeMountRequestSpec"></a>

VolumeMountRequestSpec

VolumeMountRequestSpec is the spec for VolumeMountRequest.

FieldTypeLabelDescription
volume_idstring
requesterstring
read_onlybool
detachedbool
disable_access_timebool
securebool
no_execbool

<a name="talos.resource.definitions.block.VolumeMountStatusSpec"></a>

VolumeMountStatusSpec

VolumeMountStatusSpec is the spec for VolumeMountStatus.

FieldTypeLabelDescription
volume_idstring
requesterstring
targetstring
read_onlybool
detachedbool
disable_access_timebool
securebool
no_execbool

<a name="talos.resource.definitions.block.VolumeStatusSpec"></a>

VolumeStatusSpec

VolumeStatusSpec is the spec for VolumeStatus resource.

FieldTypeLabelDescription
phasetalos.resource.definitions.enums.BlockVolumePhase
locationstringLocation is the path to the block device (raw).
error_messagestring
uuidstring
partition_uuidstring
pre_fail_phasetalos.resource.definitions.enums.BlockVolumePhase
parent_locationstringParentLocation (if present) is the location of the parent block device for partitions.
partition_indexint64
sizeuint64
filesystemtalos.resource.definitions.enums.BlockFilesystemTypeFilesystem is the filesystem type.
mount_locationstringMountLocation is the location to be mounted, might be different from location.
encryption_providertalos.resource.definitions.enums.BlockEncryptionProviderTypeEncryptionProvider is the provider of the encryption which was used to unlock the volume.
pretty_sizestring
encryption_failed_syncsstringrepeatedEncryptionFailedSyncs is the list of failed syncs for the volume (per key/provider).
mount_specMountSpecMountSpec is the mount specification.
typetalos.resource.definitions.enums.BlockVolumeType
configured_encryption_keysstringrepeatedConfiguredEncryptionKeys is the list of configured encryption keys for the volume.
symlink_specSymlinkProvisioningSpecSymlink is the symlink specification.
parent_idstring
encryption_locked_to_stateboolEncryptionLockedToState indicates if the encryption is locked to STATE partition
encryption_slotint64EncryptionSlot indicates the currently used encryption slot used for decryption.
tpm_encryption_optionsTPMEncryptionOptionsInfoTPMEncryptionOptions is the options for TPM-based encryption.
encryption_allow_discardsboolEncryptionAllowDiscards indicates whether the encrypted volume passes discards to the underlying device.
trim_enabledboolTrimEnabled indicates whether the volume should be trimmed (fstrim) on a schedule.
trim_intervalgoogle.protobuf.DurationTrimInterval is the resolved interval at which the volume should be trimmed.
scrub_enabledboolScrubEnabled indicates whether the volume filesystem should be scrubbed on a schedule.
scrub_intervalgoogle.protobuf.DurationScrubInterval is the resolved period at which the volume filesystem should be scrubbed.

<a name="talos.resource.definitions.block.VolumeTrimScheduleSpec"></a>

VolumeTrimScheduleSpec

VolumeTrimScheduleSpec is the spec for VolumeTrimSchedule resource.

FieldTypeLabelDescription
filesystemtalos.resource.definitions.enums.BlockFilesystemTypeFilesystem is the filesystem type of the volume to be trimmed.
intervalgoogle.protobuf.DurationInterval is the trim interval for the volume.
next_trimgoogle.protobuf.TimestampNextTrim is the next scheduled trim time for the volume.

<a name="talos.resource.definitions.block.ZswapStatusSpec"></a>

ZswapStatusSpec

ZswapStatusSpec is the spec for ZswapStatus resource.

FieldTypeLabelDescription
total_size_bytesuint64
total_size_humanstring
stored_pagesuint64
pool_limit_hituint64
reject_reclaim_failuint64
reject_alloc_failuint64
reject_kmemcache_failuint64
reject_compress_failuint64
reject_compress_pooruint64
written_back_pagesuint64
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/cluster/cluster.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/cluster/cluster.proto

<a name="talos.resource.definitions.cluster.AffiliateSpec"></a>

AffiliateSpec

AffiliateSpec describes Affiliate state.

FieldTypeLabelDescription
node_idstring
addressescommon.NetIPrepeated
hostnamestring
nodenamestring
operating_systemstring
machine_typetalos.resource.definitions.enums.MachineType
kube_spanKubeSpanAffiliateSpec
control_planeControlPlane

<a name="talos.resource.definitions.cluster.ConfigSpec"></a>

ConfigSpec

ConfigSpec describes Discovery configuration.

FieldTypeLabelDescription
discovery_enabledboolDeprecated: use ServiceEndpoints instead (configured via DiscoveryServiceConfig documents)
registry_kubernetes_enabledbool
registry_service_enabledboolDeprecated: enabled via DiscoveryServiceConfig documents instead.
service_endpointstringDeprecated: use ServiceEndpoints instead
service_endpoint_insecureboolDeprecated: use ServiceEndpoints instead
service_encryption_keybytes
service_cluster_idstring
service_endpointsServiceEndpointrepeated

<a name="talos.resource.definitions.cluster.ControlPlane"></a>

ControlPlane

ControlPlane describes ControlPlane data if any.

FieldTypeLabelDescription
api_server_portint64

<a name="talos.resource.definitions.cluster.IdentitySpec"></a>

IdentitySpec

IdentitySpec describes status of rendered secrets.

Note: IdentitySpec is persisted on disk in the STATE partition, so YAML serialization should be kept backwards compatible.

FieldTypeLabelDescription
node_idstringNodeID is a random value which is persisted across reboots, but it gets reset on wipe.

<a name="talos.resource.definitions.cluster.InfoSpec"></a>

InfoSpec

InfoSpec describes cluster information.

FieldTypeLabelDescription
cluster_idstring
cluster_namestring

<a name="talos.resource.definitions.cluster.KubeSpanAffiliateSpec"></a>

KubeSpanAffiliateSpec

KubeSpanAffiliateSpec describes additional information specific for the KubeSpan.

FieldTypeLabelDescription
public_keystring
addresscommon.NetIP
additional_addressescommon.NetIPPrefixrepeated
endpointscommon.NetIPPortrepeated
exclude_advertised_networkscommon.NetIPPrefixrepeated

<a name="talos.resource.definitions.cluster.MemberSpec"></a>

MemberSpec

MemberSpec describes Member state.

FieldTypeLabelDescription
node_idstring
addressescommon.NetIPrepeated
hostnamestring
machine_typetalos.resource.definitions.enums.MachineType
operating_systemstring
control_planeControlPlane

<a name="talos.resource.definitions.cluster.ServiceEndpoint"></a>

ServiceEndpoint

ServiceEndpoint describes a service endpoint for discovery.

FieldTypeLabelDescription
namestring
endpointstring
insecurebool
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/containers/containers.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/containers/containers.proto

<a name="talos.resource.definitions.containers.ContainerDependsOnSpec"></a>

ContainerDependsOnSpec

ContainerDependsOnSpec is the resolved dependency set.

FieldTypeLabelDescription
pathsstringrepeated
networksstringrepeated
timebool
containersstringrepeated

<a name="talos.resource.definitions.containers.ContainerImageSpec"></a>

ContainerImageSpec

ContainerImageSpec is a resolved container image reference.

FieldTypeLabelDescription
refstring

<a name="talos.resource.definitions.containers.ContainerImageStatusSpec"></a>

ContainerImageStatusSpec

ContainerImageStatusSpec is the spec for ContainerImageStatus.

FieldTypeLabelDescription
phasetalos.resource.definitions.enums.ContainersContainerImagePhase
imagestringImage is the reference that was requested, in canonical form.
digeststringDigest is the resolved digest, set once the pull completes.
errorstringError is the last pull failure, verbatim.

<a name="talos.resource.definitions.containers.ContainerInstanceSpecSpec"></a>

ContainerInstanceSpecSpec

ContainerInstanceSpecSpec is the spec for ContainerInstanceSpec.

It carries a resolved snapshot of everything needed to run one execution, so whatever runs it never has to re-read the container spec or image status. That keeps the execution independent of later changes to those inputs: a spec change destroys this instance rather than mutating it.

FieldTypeLabelDescription
container_idstringContainerID is the name of the owning container, i.e. the ContainerSpec ID.
generationuint64Generation is this instance's sequence number for that container.
imagestringImage is the digest-resolved reference to run.
entrypointstringrepeated
argsstringrepeated
working_dirstring
run_asContainerRunAsSpec
environmentstringrepeated
mountsResolvedMountSpecrepeatedMounts are fully resolved, with host source paths filled in.
securityContainerSecuritySpec
networkContainerNetworkSpec
resourcesContainerResourcesSpec

<a name="talos.resource.definitions.containers.ContainerInstanceStatusSpec"></a>

ContainerInstanceStatusSpec

ContainerInstanceStatusSpec is the spec for ContainerInstanceStatus.

FieldTypeLabelDescription
container_idstringContainerID is the name of the owning container, i.e. the ContainerSpec ID.
generationuint64Generation is the reported instance's sequence number for that container.
phasetalos.resource.definitions.enums.ContainersContainerInstancePhasePhase is the current execution phase.
piduint32PID is the task's process ID while running.
exit_codeint32ExitCode is the task's exit code, meaningful only once Phase is ContainerInstancePhaseTerminated.
errorstringError describes why the task never started or exited abnormally.
started_atgoogle.protobuf.TimestampStartedAt is when the task's process started.
finished_atgoogle.protobuf.TimestampFinishedAt is when the task stopped running.

<a name="talos.resource.definitions.containers.ContainerMountSpec"></a>

ContainerMountSpec

ContainerMountSpec is a resolved mount.

Exactly one of VolumeID, Tmpfs or HostPath describes the source; Kind says which.

FieldTypeLabelDescription
kindstringKind is one of "userVolume", "tmpfs" or "hostPath".
volume_idstringVolumeID is the block volume ID for a userVolume mount, e.g. "u-web-content".
sourcestringSource is the host path for a hostPath mount.
destinationstringDestination inside the container.
sizeuint64Size of a tmpfs mount, in bytes; zero means the kernel default.
optionsstringrepeatedOptions with the writable default already applied.

<a name="talos.resource.definitions.containers.ContainerMountStatusSpec"></a>

ContainerMountStatusSpec

ContainerMountStatusSpec is the spec for ContainerMountStatus.

FieldTypeLabelDescription
readyboolReady is true once every mount the container declares is available.
mountsResolvedMountSpecrepeatedMounts are the resolved mounts, with host source paths filled in. Only meaningful when Ready.
errorstringError describes why the mounts are not ready.

<a name="talos.resource.definitions.containers.ContainerNetworkSpec"></a>

ContainerNetworkSpec

ContainerNetworkSpec is the resolved network configuration.

FieldTypeLabelDescription
host_networkboolHostNetwork shares the host network namespace instead of creating an empty one.

<a name="talos.resource.definitions.containers.ContainerResourcesSpec"></a>

ContainerResourcesSpec

ContainerResourcesSpec is the resolved cgroup configuration, in bytes and millicores.

Zero means unset, which for a limit means unlimited.

FieldTypeLabelDescription
memory_limituint64
cpu_limituint64

<a name="talos.resource.definitions.containers.ContainerRunAsSpec"></a>

ContainerRunAsSpec

ContainerRunAsSpec is the resolved uid/gid override.

Nil means use the image's own USER for that half.

FieldTypeLabelDescription
uidint32
gidint32

<a name="talos.resource.definitions.containers.ContainerSecuritySpec"></a>

ContainerSecuritySpec

ContainerSecuritySpec is the resolved security posture.

FieldTypeLabelDescription
privilegedboolPrivileged grants all grantable capabilities and all devices, matching what extension services get implicitly.
capabilities_addstringrepeated
capabilities_dropstringrepeated
machined_accessboolMachinedAccess publishes the container's PID as a ServicePID resource and mounts the machined API socket into the container.

<a name="talos.resource.definitions.containers.ContainerSpecSpec"></a>

ContainerSpecSpec

ContainerSpecSpec is the spec for ContainerSpec.

FieldTypeLabelDescription
imageContainerImageSpecImage is the OCI reference in canonical form, already normalized by ContainerConfigController.
entrypointstringrepeated
argsstringrepeated
working_dirstring
run_asContainerRunAsSpec
environmentstringrepeated
mountsContainerMountSpecrepeated
securityContainerSecuritySpec
networkContainerNetworkSpec
resourcesContainerResourcesSpec
depends_onContainerDependsOnSpec

<a name="talos.resource.definitions.containers.ResolvedMountSpec"></a>

ResolvedMountSpec

ResolvedMountSpec is a mount with its host-side source resolved.

FieldTypeLabelDescription
kindstring
sourcestringSource is the host path to bind from; empty for tmpfs and userVolume.
destinationstring
sizeuint64
optionsstringrepeated
volume_idstringVolumeID is the resolved userVolume's ID; empty for tmpfs and hostPath.
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/cri/cri.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/cri/cri.proto

<a name="talos.resource.definitions.cri.BaseRuntimeSpecConfigSpec"></a>

BaseRuntimeSpecConfigSpec

BaseRuntimeSpecConfigSpec describes an OCI runtime spec configuration source.

FieldTypeLabelDescription
objectgoogle.protobuf.Struct

<a name="talos.resource.definitions.cri.CustomizationConfigSpec"></a>

CustomizationConfigSpec

CustomizationConfigSpec describes one CRI customization fragment.

FieldTypeLabelDescription
contentstring

<a name="talos.resource.definitions.cri.ImageCacheConfigSpec"></a>

ImageCacheConfigSpec

ImageCacheConfigSpec represents the ImageCacheConfig.

FieldTypeLabelDescription
statustalos.resource.definitions.enums.CriImageCacheStatus
rootsstringrepeated
copy_statustalos.resource.definitions.enums.CriImageCacheCopyStatus

<a name="talos.resource.definitions.cri.RegistriesConfigSpec"></a>

RegistriesConfigSpec

RegistriesConfigSpec describes status of rendered secrets.

FieldTypeLabelDescription
registry_mirrorsRegistriesConfigSpec.RegistryMirrorsEntryrepeated
registry_authsRegistriesConfigSpec.RegistryAuthsEntryrepeated
registry_tl_ssRegistriesConfigSpec.RegistryTlSsEntryrepeated

<a name="talos.resource.definitions.cri.RegistriesConfigSpec.RegistryAuthsEntry"></a>

RegistriesConfigSpec.RegistryAuthsEntry

FieldTypeLabelDescription
keystring
valueRegistryAuthConfig

<a name="talos.resource.definitions.cri.RegistriesConfigSpec.RegistryMirrorsEntry"></a>

RegistriesConfigSpec.RegistryMirrorsEntry

FieldTypeLabelDescription
keystring
valueRegistryMirrorConfig

<a name="talos.resource.definitions.cri.RegistriesConfigSpec.RegistryTlSsEntry"></a>

RegistriesConfigSpec.RegistryTlSsEntry

FieldTypeLabelDescription
keystring
valueRegistryTLSConfig

<a name="talos.resource.definitions.cri.RegistryAuthConfig"></a>

RegistryAuthConfig

RegistryAuthConfig specifies authentication configuration for a registry.

FieldTypeLabelDescription
registry_usernamestring
registry_passwordstring
registry_authstring
registry_identity_tokenstring

<a name="talos.resource.definitions.cri.RegistryEndpointConfig"></a>

RegistryEndpointConfig

RegistryEndpointConfig represents a single registry endpoint.

FieldTypeLabelDescription
endpoint_endpointstring
endpoint_override_pathbool

<a name="talos.resource.definitions.cri.RegistryMirrorConfig"></a>

RegistryMirrorConfig

RegistryMirrorConfig represents mirror configuration for a registry.

FieldTypeLabelDescription
mirror_endpointsRegistryEndpointConfigrepeated
mirror_skip_fallbackbool

<a name="talos.resource.definitions.cri.RegistryTLSConfig"></a>

RegistryTLSConfig

RegistryTLSConfig specifies TLS config for HTTPS registries.

FieldTypeLabelDescription
tls_client_identitycommon.PEMEncodedCertificateAndKey
tlscabytes
tls_insecure_skip_verifybool

<a name="talos.resource.definitions.cri.SeccompProfileSpec"></a>

SeccompProfileSpec

SeccompProfileSpec represents the SeccompProfile.

FieldTypeLabelDescription
namestring
valuegoogle.protobuf.Struct
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/etcd/etcd.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/etcd/etcd.proto

<a name="talos.resource.definitions.etcd.ArgValues"></a>

ArgValues

ArgValues represents values for a command line argument which can be specified multiple times.

FieldTypeLabelDescription
valuesstringrepeated

<a name="talos.resource.definitions.etcd.ConfigSpec"></a>

ConfigSpec

ConfigSpec describes (some) configuration settings of etcd.

FieldTypeLabelDescription
advertise_valid_subnetsstringrepeated
advertise_exclude_subnetsstringrepeated
imagestring
listen_valid_subnetsstringrepeated
listen_exclude_subnetsstringrepeated
extra_argsConfigSpec.ExtraArgsEntryrepeated

<a name="talos.resource.definitions.etcd.ConfigSpec.ExtraArgsEntry"></a>

ConfigSpec.ExtraArgsEntry

FieldTypeLabelDescription
keystring
valueArgValues

<a name="talos.resource.definitions.etcd.MemberSpec"></a>

MemberSpec

MemberSpec holds information about an etcd member.

FieldTypeLabelDescription
member_idstring

<a name="talos.resource.definitions.etcd.PKIStatusSpec"></a>

PKIStatusSpec

PKIStatusSpec describes status of rendered secrets.

FieldTypeLabelDescription
readybool
versionstring

<a name="talos.resource.definitions.etcd.SpecSpec"></a>

SpecSpec

SpecSpec describes (some) Specuration settings of etcd.

FieldTypeLabelDescription
namestring
advertised_addressescommon.NetIPrepeated
imagestring
listen_peer_addressescommon.NetIPrepeated
listen_client_addressescommon.NetIPrepeated
extra_argsSpecSpec.ExtraArgsEntryrepeated

<a name="talos.resource.definitions.etcd.SpecSpec.ExtraArgsEntry"></a>

SpecSpec.ExtraArgsEntry

FieldTypeLabelDescription
keystring
valueArgValues
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/extensions/extensions.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/extensions/extensions.proto

<a name="talos.resource.definitions.extensions.Compatibility"></a>

Compatibility

Compatibility describes extension compatibility.

FieldTypeLabelDescription
talosConstraint

<a name="talos.resource.definitions.extensions.Constraint"></a>

Constraint

Constraint describes compatibility constraint.

FieldTypeLabelDescription
versionstring

<a name="talos.resource.definitions.extensions.Layer"></a>

Layer

Layer defines overlay mount layer.

FieldTypeLabelDescription
imagestring
metadataMetadata

<a name="talos.resource.definitions.extensions.Metadata"></a>

Metadata

Metadata describes base extension metadata.

FieldTypeLabelDescription
namestring
versionstring
authorstring
descriptionstring
compatibilityCompatibility
extra_infostring
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/files/files.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/files/files.proto

<a name="talos.resource.definitions.files.EtcFileSpecSpec"></a>

EtcFileSpecSpec

EtcFileSpecSpec describes status of rendered secrets.

FieldTypeLabelDescription
contentsbytes
modeuint32
selinux_labelstring

<a name="talos.resource.definitions.files.EtcFileStatusSpec"></a>

EtcFileStatusSpec

EtcFileStatusSpec describes status of rendered secrets.

FieldTypeLabelDescription
spec_versionstring
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/hardware/hardware.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/hardware/hardware.proto

<a name="talos.resource.definitions.hardware.CPUCoreSpec"></a>

CPUCoreSpec

CPUCoreSpec represents a single CPU core as seen by the Linux kernel.

FieldTypeLabelDescription
socketstringSocket is the physical package (socket) identifier the core belongs to.
core_idstringCoreID is the core identifier within the socket.
logical_cp_usuint32repeatedLogicalCPUs is the sorted list of logical CPU (hardware thread) numbers belonging to this core.
vendor_idstringVendorID is the CPU vendor identifier (e.g. GenuineIntel, AuthenticAMD).
cpu_familystringCPUFamily is the CPU family.
modelstringModel is the CPU model number.
model_namestringModelName is the human-readable CPU model name.
steppingstringStepping is the CPU stepping.
microcodestringMicrocode is the microcode revision.
cache_sizestringCacheSize is the CPU cache size as reported by the kernel (e.g. 512 KB).
cores_per_socketuint32CoresPerSocket is the number of cores in the socket this core belongs to.
threads_per_socketuint32ThreadsPerSocket is the number of logical CPUs (siblings) in the socket this core belongs to.
flagsstringrepeatedFlags is the list of CPU feature flags.
bugsstringrepeatedBugs is the list of known CPU bugs.
bogo_mipsdoubleBogoMips is the kernel BogoMips measurement for the core.
address_sizesstringAddressSizes describes the physical and virtual address sizes.

<a name="talos.resource.definitions.hardware.MemoryModuleSpec"></a>

MemoryModuleSpec

MemoryModuleSpec represents a single Memory.

FieldTypeLabelDescription
sizeuint32
device_locatorstring
bank_locatorstring
speeduint32
manufacturerstring
serial_numberstring
asset_tagstring
product_namestring

<a name="talos.resource.definitions.hardware.PCIDeviceSpec"></a>

PCIDeviceSpec

PCIDeviceSpec represents a single processor.

FieldTypeLabelDescription
classstring
subclassstring
vendorstring
productstring
class_idstring
subclass_idstring
vendor_idstring
product_idstring
driverstring

<a name="talos.resource.definitions.hardware.PCIDriverRebindConfigSpec"></a>

PCIDriverRebindConfigSpec

PCIDriverRebindConfigSpec describes PCI rebind configuration.

FieldTypeLabelDescription
pciidstring
target_driverstring

<a name="talos.resource.definitions.hardware.PCIDriverRebindStatusSpec"></a>

PCIDriverRebindStatusSpec

PCIDriverRebindStatusSpec describes status of rebinded drivers.

FieldTypeLabelDescription
pciidstring
target_driverstring

<a name="talos.resource.definitions.hardware.ProcessorSpec"></a>

ProcessorSpec

ProcessorSpec represents a single processor.

FieldTypeLabelDescription
socketstring
manufacturerstring
product_namestring
max_speeduint32MaxSpeed is in megahertz (MHz).
boot_speeduint32BootSpeed is in megahertz (MHz).
statusuint32
serial_numberstring
asset_tagstring
part_numberstring
core_countuint32
core_enableduint32
thread_countuint32

<a name="talos.resource.definitions.hardware.SystemInformationSpec"></a>

SystemInformationSpec

SystemInformationSpec represents the system information obtained from smbios.

FieldTypeLabelDescription
manufacturerstring
product_namestring
versionstring
serial_numberstring
uuidstring
wake_up_typestring
sku_numberstring
bios_versionstring
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/proto/proto.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/proto/proto.proto

<a name="talos.resource.definitions.proto.LinuxIDMapping"></a>

LinuxIDMapping

LinuxIDMapping specifies UID/GID mappings.

FieldTypeLabelDescription
container_iduint32
host_iduint32
sizeuint32

<a name="talos.resource.definitions.proto.Mount"></a>

Mount

Mount specifies a mount for a container.

FieldTypeLabelDescription
destinationstring
typestring
sourcestring
optionsstringrepeated
uid_mappingsLinuxIDMappingrepeated
gid_mappingsLinuxIDMappingrepeated
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/k8s/k8s.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/k8s/k8s.proto

<a name="talos.resource.definitions.k8s.APIServerConfigSpec"></a>

APIServerConfigSpec

APIServerConfigSpec is configuration for kube-apiserver.

FieldTypeLabelDescription
imagestring
cloud_providerstring
control_plane_endpointstring
etcd_serversstringrepeated
local_portint64
service_cid_rsstringrepeated
extra_volumesExtraVolumerepeated
environment_variablesAPIServerConfigSpec.EnvironmentVariablesEntryrepeated
advertised_addressstring
resourcesResources
extra_argsAPIServerConfigSpec.ExtraArgsEntryrepeated
startup_probes_enabledbool
use_authentication_configbool
argsstringrepeated

<a name="talos.resource.definitions.k8s.APIServerConfigSpec.EnvironmentVariablesEntry"></a>

APIServerConfigSpec.EnvironmentVariablesEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.APIServerConfigSpec.ExtraArgsEntry"></a>

APIServerConfigSpec.ExtraArgsEntry

FieldTypeLabelDescription
keystring
valueArgValues

<a name="talos.resource.definitions.k8s.AdmissionControlConfigSpec"></a>

AdmissionControlConfigSpec

AdmissionControlConfigSpec is configuration for kube-apiserver.

FieldTypeLabelDescription
configAdmissionPluginSpecrepeated

<a name="talos.resource.definitions.k8s.AdmissionPluginSpec"></a>

AdmissionPluginSpec

AdmissionPluginSpec is a single admission plugin configuration Admission Control plugins.

FieldTypeLabelDescription
namestring
configurationgoogle.protobuf.Struct

<a name="talos.resource.definitions.k8s.ArgValues"></a>

ArgValues

ArgValues represents values for a command line argument which can be specified multiple times.

FieldTypeLabelDescription
valuesstringrepeated

<a name="talos.resource.definitions.k8s.AuditPolicyConfigSpec"></a>

AuditPolicyConfigSpec

AuditPolicyConfigSpec is audit policy configuration for kube-apiserver.

FieldTypeLabelDescription
configgoogle.protobuf.Struct

<a name="talos.resource.definitions.k8s.AuthenticationConfigSpec"></a>

AuthenticationConfigSpec

AuthenticationConfigSpec is authentication configuration for kube-apiserver.

FieldTypeLabelDescription
configgoogle.protobuf.Struct

<a name="talos.resource.definitions.k8s.AuthorizationAuthorizersSpec"></a>

AuthorizationAuthorizersSpec

AuthorizationAuthorizersSpec is a configuration of authorization authorizers.

FieldTypeLabelDescription
typestring
namestring
webhookgoogle.protobuf.Struct

<a name="talos.resource.definitions.k8s.AuthorizationConfigSpec"></a>

AuthorizationConfigSpec

AuthorizationConfigSpec is authorization configuration for kube-apiserver.

FieldTypeLabelDescription
imagestring
configAuthorizationAuthorizersSpecrepeated

<a name="talos.resource.definitions.k8s.BootstrapManifestsConfigSpec"></a>

BootstrapManifestsConfigSpec

BootstrapManifestsConfigSpec is configuration for bootstrap manifests.

FieldTypeLabelDescription
serverstring
cluster_domainstring
pod_cid_rsstringrepeated
proxy_enabledbool
proxy_imagestring
proxy_argsstringrepeated
core_dns_enabledbool
core_dns_imagestring
dns_service_ipstring
dns_service_i_pv6string
flannel_enabledbool
flannel_imagestring
pod_security_policy_enabledbool
talos_api_service_enabledbool
flannel_extra_argsstringrepeated
flannel_kube_service_hoststring
flannel_kube_service_portstring
flannel_kube_network_policies_enabledbool
flannel_kube_network_policies_imagestring
cni_namestring
flannel_backend_mtuuint32
flannel_backend_typestring
flannel_backend_portuint32
flannel_resourcesResources
flannel_backend_extra_configgoogle.protobuf.Struct
proxy_configgoogle.protobuf.Struct
proxy_resourcesResources
proxy_config_checksumstring

<a name="talos.resource.definitions.k8s.ConfigStatusSpec"></a>

ConfigStatusSpec

ConfigStatusSpec describes status of rendered secrets.

FieldTypeLabelDescription
readybool
versionstring

<a name="talos.resource.definitions.k8s.ControllerManagerConfigSpec"></a>

ControllerManagerConfigSpec

ControllerManagerConfigSpec is configuration for kube-controller-manager.

FieldTypeLabelDescription
enabledbool
imagestring
cloud_providerstring
pod_cid_rsstringrepeated
service_cid_rsstringrepeated
extra_volumesExtraVolumerepeated
environment_variablesControllerManagerConfigSpec.EnvironmentVariablesEntryrepeated
resourcesResources
extra_argsControllerManagerConfigSpec.ExtraArgsEntryrepeated
argsstringrepeated
node_cidr_mask_size_i_pv4int64
node_cidr_mask_size_i_pv6int64

<a name="talos.resource.definitions.k8s.ControllerManagerConfigSpec.EnvironmentVariablesEntry"></a>

ControllerManagerConfigSpec.EnvironmentVariablesEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.ControllerManagerConfigSpec.ExtraArgsEntry"></a>

ControllerManagerConfigSpec.ExtraArgsEntry

FieldTypeLabelDescription
keystring
valueArgValues

<a name="talos.resource.definitions.k8s.EndpointSpec"></a>

EndpointSpec

EndpointSpec describes a list of endpoints to connect to.

FieldTypeLabelDescription
addressescommon.NetIPrepeated
hostsstringrepeated

<a name="talos.resource.definitions.k8s.EtcdEncryptionConfigSpec"></a>

EtcdEncryptionConfigSpec

EtcdEncryptionConfigSpec describes root Kubernetes secrets.

FieldTypeLabelDescription
configurationstring

<a name="talos.resource.definitions.k8s.ExtraManifest"></a>

ExtraManifest

ExtraManifest defines a single extra manifest to download.

FieldTypeLabelDescription
namestring
urlstring
prioritystring
extra_headersExtraManifest.ExtraHeadersEntryrepeated
inline_manifeststring

<a name="talos.resource.definitions.k8s.ExtraManifest.ExtraHeadersEntry"></a>

ExtraManifest.ExtraHeadersEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.ExtraManifestsConfigSpec"></a>

ExtraManifestsConfigSpec

ExtraManifestsConfigSpec is configuration for extra bootstrap manifests.

FieldTypeLabelDescription
extra_manifestsExtraManifestrepeated

<a name="talos.resource.definitions.k8s.ExtraVolume"></a>

ExtraVolume

ExtraVolume is a configuration of extra volume.

FieldTypeLabelDescription
namestring
host_pathstring
mount_pathstring
read_onlybool

<a name="talos.resource.definitions.k8s.KubePrismConfigSpec"></a>

KubePrismConfigSpec

KubePrismConfigSpec describes KubePrismConfig data.

FieldTypeLabelDescription
hoststring
portint64
endpointsKubePrismEndpointrepeated

<a name="talos.resource.definitions.k8s.KubePrismEndpoint"></a>

KubePrismEndpoint

KubePrismEndpoint holds data for control plane endpoint.

FieldTypeLabelDescription
hoststring
portuint32

<a name="talos.resource.definitions.k8s.KubePrismEndpointsSpec"></a>

KubePrismEndpointsSpec

KubePrismEndpointsSpec describes KubePrismEndpoints configuration.

FieldTypeLabelDescription
endpointsKubePrismEndpointrepeated

<a name="talos.resource.definitions.k8s.KubePrismStatusesSpec"></a>

KubePrismStatusesSpec

KubePrismStatusesSpec describes KubePrismStatuses data.

FieldTypeLabelDescription
hoststring
healthybool

<a name="talos.resource.definitions.k8s.KubeletConfigSpec"></a>

KubeletConfigSpec

KubeletConfigSpec holds the source of kubelet configuration.

FieldTypeLabelDescription
imagestring
cluster_dnsstringrepeated
cluster_domainstring
extra_mountstalos.resource.definitions.proto.Mountrepeated
extra_configgoogle.protobuf.Struct
cloud_provider_externalbool
default_runtime_seccomp_enabledbool
skip_node_registrationbool
static_pod_list_urlstring
disable_manifests_directorybool
enable_fs_quota_monitoringbool
credential_provider_configgoogle.protobuf.Struct
extra_argsKubeletConfigSpec.ExtraArgsEntryrepeated
register_with_taintsKubeletConfigSpec.RegisterWithTaintsEntryrepeated

<a name="talos.resource.definitions.k8s.KubeletConfigSpec.ExtraArgsEntry"></a>

KubeletConfigSpec.ExtraArgsEntry

FieldTypeLabelDescription
keystring
valueArgValues

<a name="talos.resource.definitions.k8s.KubeletConfigSpec.RegisterWithTaintsEntry"></a>

KubeletConfigSpec.RegisterWithTaintsEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.KubeletKubeconfigSpec"></a>

KubeletKubeconfigSpec

KubeletKubeconfigSpec describes the current kubelet kubeconfig file.

FieldTypeLabelDescription
hashstringHash is a content digest of the kubeconfig file. It changes whenever the file contents change, which is the signal consumers use to rebuild their Kubernetes clients.

<a name="talos.resource.definitions.k8s.KubeletSpecSpec"></a>

KubeletSpecSpec

KubeletSpecSpec holds the source of kubelet configuration.

FieldTypeLabelDescription
imagestring
argsstringrepeated
extra_mountstalos.resource.definitions.proto.Mountrepeated
expected_nodenamestring
configgoogle.protobuf.Struct
credential_provider_configgoogle.protobuf.Struct

<a name="talos.resource.definitions.k8s.KubeletStatusSpec"></a>

KubeletStatusSpec

KubeletStatusSpec describes the current kubelet state.

FieldTypeLabelDescription
imagestringImage is the kubelet image reference.

<a name="talos.resource.definitions.k8s.ManifestSpec"></a>

ManifestSpec

ManifestSpec holds the Kubernetes resources spec.

FieldTypeLabelDescription
itemsSingleManifestrepeated

<a name="talos.resource.definitions.k8s.ManifestStatusSpec"></a>

ManifestStatusSpec

ManifestStatusSpec describes manifest application status.

FieldTypeLabelDescription
manifests_appliedstringrepeated

<a name="talos.resource.definitions.k8s.NodeAnnotationSpecSpec"></a>

NodeAnnotationSpecSpec

NodeAnnotationSpecSpec represents an annoation that's attached to a Talos node.

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.NodeIPConfigSpec"></a>

NodeIPConfigSpec

NodeIPConfigSpec holds the Node IP specification.

FieldTypeLabelDescription
valid_subnetsstringrepeated
exclude_subnetsstringrepeated

<a name="talos.resource.definitions.k8s.NodeIPSpec"></a>

NodeIPSpec

NodeIPSpec holds the Node IP specification.

FieldTypeLabelDescription
addressescommon.NetIPrepeated

<a name="talos.resource.definitions.k8s.NodeLabelSpecSpec"></a>

NodeLabelSpecSpec

NodeLabelSpecSpec represents a label that's attached to a Talos node.

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.NodeStatusSpec"></a>

NodeStatusSpec

NodeStatusSpec describes Kubernetes NodeStatus.

FieldTypeLabelDescription
nodenamestring
node_readybool
unschedulablebool
labelsNodeStatusSpec.LabelsEntryrepeated
annotationsNodeStatusSpec.AnnotationsEntryrepeated
pod_cid_rscommon.NetIPPrefixrepeated

<a name="talos.resource.definitions.k8s.NodeStatusSpec.AnnotationsEntry"></a>

NodeStatusSpec.AnnotationsEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.NodeStatusSpec.LabelsEntry"></a>

NodeStatusSpec.LabelsEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.NodeTaintSpecSpec"></a>

NodeTaintSpecSpec

NodeTaintSpecSpec represents a label that's attached to a Talos node.

FieldTypeLabelDescription
keystring
effectstring
valuestring

<a name="talos.resource.definitions.k8s.NodenameSpec"></a>

NodenameSpec

NodenameSpec describes Kubernetes nodename.

FieldTypeLabelDescription
nodenamestring
hostname_versionstring
skip_node_registrationbool

<a name="talos.resource.definitions.k8s.Resources"></a>

Resources

Resources is a configuration of cpu and memory resources.

FieldTypeLabelDescription
requestsResources.RequestsEntryrepeated
limitsResources.LimitsEntryrepeated

<a name="talos.resource.definitions.k8s.Resources.LimitsEntry"></a>

Resources.LimitsEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.Resources.RequestsEntry"></a>

Resources.RequestsEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.SchedulerConfigSpec"></a>

SchedulerConfigSpec

SchedulerConfigSpec is configuration for kube-scheduler.

FieldTypeLabelDescription
enabledbool
imagestring
extra_volumesExtraVolumerepeated
environment_variablesSchedulerConfigSpec.EnvironmentVariablesEntryrepeated
resourcesResources
configgoogle.protobuf.Struct
extra_argsSchedulerConfigSpec.ExtraArgsEntryrepeated
argsstringrepeated

<a name="talos.resource.definitions.k8s.SchedulerConfigSpec.EnvironmentVariablesEntry"></a>

SchedulerConfigSpec.EnvironmentVariablesEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.k8s.SchedulerConfigSpec.ExtraArgsEntry"></a>

SchedulerConfigSpec.ExtraArgsEntry

FieldTypeLabelDescription
keystring
valueArgValues

<a name="talos.resource.definitions.k8s.SecretsStatusSpec"></a>

SecretsStatusSpec

SecretsStatusSpec describes status of rendered secrets.

FieldTypeLabelDescription
readybool
versionstring

<a name="talos.resource.definitions.k8s.SingleManifest"></a>

SingleManifest

SingleManifest is a single manifest.

FieldTypeLabelDescription
objectgoogle.protobuf.Struct

<a name="talos.resource.definitions.k8s.StaticPodServerStatusSpec"></a>

StaticPodServerStatusSpec

StaticPodServerStatusSpec describes static pod spec, it contains marshaled *v1.Pod spec.

FieldTypeLabelDescription
urlstring

<a name="talos.resource.definitions.k8s.StaticPodSpec"></a>

StaticPodSpec

StaticPodSpec describes static pod spec, it contains marshaled *v1.Pod spec.

FieldTypeLabelDescription
podgoogle.protobuf.Struct

<a name="talos.resource.definitions.k8s.StaticPodStatusSpec"></a>

StaticPodStatusSpec

StaticPodStatusSpec describes kubelet static pod status.

FieldTypeLabelDescription
pod_statusgoogle.protobuf.Struct
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/kubeaccess/kubeaccess.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/kubeaccess/kubeaccess.proto

<a name="talos.resource.definitions.kubeaccess.ConfigSpec"></a>

ConfigSpec

ConfigSpec describes KubeSpan configuration..

FieldTypeLabelDescription
enabledbool
allowed_api_rolesstringrepeated
allowed_kubernetes_namespacesstringrepeated
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/kubespan/kubespan.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/kubespan/kubespan.proto

<a name="talos.resource.definitions.kubespan.ConfigSpec"></a>

ConfigSpec

ConfigSpec describes KubeSpan configuration..

FieldTypeLabelDescription
enabledbool
cluster_idstring
shared_secretstring
force_routingboolForce routing via KubeSpan even if the peer connection is not up.
advertise_kubernetes_networksboolAdvertise Kubernetes pod networks or skip it completely.
mtuuint32Force kubeSpan MTU size.
endpoint_filtersstringrepeatedIf not empty, filter advertised endpoints using the list of CIDRs.
harvest_extra_endpointsboolHarvest endpoints from the peer statuses.
extra_endpointscommon.NetIPPortrepeatedExtra endpoints to announce.
exclude_advertised_networkscommon.NetIPPrefixrepeatedIf not empty, filter advertised networks using the list of CIDRs.

<a name="talos.resource.definitions.kubespan.EndpointSpec"></a>

EndpointSpec

EndpointSpec describes Endpoint state.

FieldTypeLabelDescription
affiliate_idstring
endpointcommon.NetIPPort

<a name="talos.resource.definitions.kubespan.IdentitySpec"></a>

IdentitySpec

IdentitySpec describes KubeSpan keys and address.

Note: IdentitySpec is persisted on disk in the STATE partition, so YAML serialization should be kept backwards compatible.

FieldTypeLabelDescription
addresscommon.NetIPPrefixAddress of the node on the Wireguard network.
subnetcommon.NetIPPrefix
private_keystringPublic and private Wireguard keys.
public_keystring

<a name="talos.resource.definitions.kubespan.PeerSpecSpec"></a>

PeerSpecSpec

PeerSpecSpec describes PeerSpec state.

FieldTypeLabelDescription
addresscommon.NetIP
allowed_ipscommon.NetIPPrefixrepeated
endpointscommon.NetIPPortrepeated
labelstring

<a name="talos.resource.definitions.kubespan.PeerStatusSpec"></a>

PeerStatusSpec

PeerStatusSpec describes PeerStatus state.

FieldTypeLabelDescription
endpointcommon.NetIPPortActive endpoint as seen by the Wireguard.
labelstringLabel derived from the peer spec.
statetalos.resource.definitions.enums.KubespanPeerStateCalculated state.
receive_bytesint64Tx/Rx bytes.
transmit_bytesint64
last_handshake_timegoogle.protobuf.TimestampHandshake.
last_used_endpointcommon.NetIPPortEndpoint selection input.
last_endpoint_changegoogle.protobuf.Timestamp
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/runtime/runtime.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/runtime/runtime.proto

<a name="talos.resource.definitions.runtime.APIServiceConfigSpec"></a>

APIServiceConfigSpec

APIServiceConfigSpec describes configuration for Talos API service (apid).

FieldTypeLabelDescription
listen_addressstring
node_routing_disabledbool
readonly_role_modebool
skip_verifying_client_certbool

<a name="talos.resource.definitions.runtime.BootIDSpec"></a>

BootIDSpec

BootIDSpec presents the kernel boot ID (contents of /proc/sys/kernel/random/boot_id).

FieldTypeLabelDescription
boot_idstring

<a name="talos.resource.definitions.runtime.BootedEntrySpec"></a>

BootedEntrySpec

BootedEntrySpec describes the booted entry resource properties.

FieldTypeLabelDescription
booted_entrystring

<a name="talos.resource.definitions.runtime.DevicesStatusSpec"></a>

DevicesStatusSpec

DevicesStatusSpec is the spec for devices status.

FieldTypeLabelDescription
readyboolDevices are settled down and ready to be used.

<a name="talos.resource.definitions.runtime.DiagnosticSpec"></a>

DiagnosticSpec

DiagnosticSpec is the spec for devices status.

FieldTypeLabelDescription
messagestringShort message describing the problem.
detailsstringrepeatedDetails about the problem.

<a name="talos.resource.definitions.runtime.EnvironmentSpec"></a>

EnvironmentSpec

EnvironmentSpec describes the specification of Environment resource.

FieldTypeLabelDescription
variablesstringrepeated

<a name="talos.resource.definitions.runtime.EventSinkConfigSpec"></a>

EventSinkConfigSpec

EventSinkConfigSpec describes configuration of Talos event log streaming.

FieldTypeLabelDescription
endpointstring

<a name="talos.resource.definitions.runtime.ExtensionServiceConfigFile"></a>

ExtensionServiceConfigFile

ExtensionServiceConfigFile describes extensions service config files.

FieldTypeLabelDescription
contentstring
mount_pathstring

<a name="talos.resource.definitions.runtime.ExtensionServiceConfigSpec"></a>

ExtensionServiceConfigSpec

ExtensionServiceConfigSpec describes status of rendered extensions service config files.

FieldTypeLabelDescription
filesExtensionServiceConfigFilerepeated
environmentstringrepeated

<a name="talos.resource.definitions.runtime.ExtensionServiceConfigStatusSpec"></a>

ExtensionServiceConfigStatusSpec

ExtensionServiceConfigStatusSpec describes status of rendered extensions service config files.

FieldTypeLabelDescription
spec_versionstring

<a name="talos.resource.definitions.runtime.ImageFactorySchematicSpec"></a>

ImageFactorySchematicSpec

ImageFactorySchematicSpec describes Image Factory schematic information.

FieldTypeLabelDescription
schematic_idstring
flavorstring
apiurlstring

<a name="talos.resource.definitions.runtime.KernelCmdlineSpec"></a>

KernelCmdlineSpec

KernelCmdlineSpec presents kernel command line (contents of /proc/cmdline).

FieldTypeLabelDescription
cmdlinestring

<a name="talos.resource.definitions.runtime.KernelModuleSpecSpec"></a>

KernelModuleSpecSpec

KernelModuleSpecSpec describes Linux kernel module to load.

FieldTypeLabelDescription
namestring
parametersstringrepeated

<a name="talos.resource.definitions.runtime.KernelModuleStatusSpec"></a>

KernelModuleStatusSpec

KernelModuleStatusSpec represents the status of a Linux kernel module.

FieldTypeLabelDescription
typetalos.resource.definitions.enums.RuntimeKernelModuleTypeType indicates whether the kernel module is built-in or dynamically loaded.
sizeint64Size is the size of the kernel module in bytes.
reference_countint64ReferenceCount is the number of references to this kernel module.
dependenciesstringrepeatedDependencies lists the names of kernel modules that this module depends on.
statetalos.resource.definitions.enums.RuntimeKernelModuleStateState is the operational state of the kernel module.
addressstringAddress is the memory address where the kernel module is loaded (if applicable).

<a name="talos.resource.definitions.runtime.KernelParamSpecSpec"></a>

KernelParamSpecSpec

KernelParamSpecSpec describes status of the defined sysctls.

FieldTypeLabelDescription
valuestring
ignore_errorsbool

<a name="talos.resource.definitions.runtime.KernelParamStatusSpec"></a>

KernelParamStatusSpec

KernelParamStatusSpec describes status of the defined sysctls.

FieldTypeLabelDescription
currentstring
defaultstring
unsupportedbool

<a name="talos.resource.definitions.runtime.KmsgLogConfigSpec"></a>

KmsgLogConfigSpec

KmsgLogConfigSpec describes configuration for kmsg log streaming.

FieldTypeLabelDescription
destinationscommon.URLrepeated

<a name="talos.resource.definitions.runtime.MachineStatusSpec"></a>

MachineStatusSpec

MachineStatusSpec describes status of the defined sysctls.

FieldTypeLabelDescription
stagetalos.resource.definitions.enums.RuntimeMachineStage
statusMachineStatusStatus

<a name="talos.resource.definitions.runtime.MachineStatusStatus"></a>

MachineStatusStatus

MachineStatusStatus describes machine current status at the stage.

FieldTypeLabelDescription
readybool
unmet_conditionsUnmetConditionrepeated

<a name="talos.resource.definitions.runtime.MaintenanceServiceConfigSpec"></a>

MaintenanceServiceConfigSpec

MaintenanceServiceConfigSpec describes configuration for maintenance service API.

FieldTypeLabelDescription
listen_addressstring
reachable_addressescommon.NetIPrepeated

<a name="talos.resource.definitions.runtime.MetaKeySpec"></a>

MetaKeySpec

MetaKeySpec describes status of the defined sysctls.

FieldTypeLabelDescription
valuestring

<a name="talos.resource.definitions.runtime.MetaLoadedSpec"></a>

MetaLoadedSpec

MetaLoadedSpec is the spec for meta loaded. The Done field is always true when resource exists.

FieldTypeLabelDescription
donebool

<a name="talos.resource.definitions.runtime.MountStatusSpec"></a>

MountStatusSpec

MountStatusSpec describes status of the defined sysctls.

FieldTypeLabelDescription
sourcestring
targetstring
filesystem_typestring
optionsstringrepeated
encryptedbool
encryption_providersstringrepeated

<a name="talos.resource.definitions.runtime.OOMActionSpec"></a>

OOMActionSpec

OOMActionSpec describes the OOM action record resource properties.

FieldTypeLabelDescription
trigger_contextstring
scoredouble
processesstringrepeated

<a name="talos.resource.definitions.runtime.PlatformMetadataSpec"></a>

PlatformMetadataSpec

PlatformMetadataSpec describes platform metadata properties.

FieldTypeLabelDescription
platformstring
hostnamestring
regionstring
zonestring
instance_typestring
instance_idstring
provider_idstring
spotbool
internal_dnsstring
external_dnsstring
tagsPlatformMetadataSpec.TagsEntryrepeated

<a name="talos.resource.definitions.runtime.PlatformMetadataSpec.TagsEntry"></a>

PlatformMetadataSpec.TagsEntry

FieldTypeLabelDescription
keystring
valuestring

<a name="talos.resource.definitions.runtime.SBOMItemSpec"></a>

SBOMItemSpec

SBOMItemSpec describes the SBOM item resource properties.

FieldTypeLabelDescription
namestring
versionstring
licensestring
cp_esstringrepeated
pur_lsstringrepeated
extensionbool

<a name="talos.resource.definitions.runtime.SecurityStateSpec"></a>

SecurityStateSpec

SecurityStateSpec describes the security state resource properties.

FieldTypeLabelDescription
secure_bootbool
uki_signing_key_fingerprintstring
pcr_signing_key_fingerprintstring
se_linux_statetalos.resource.definitions.enums.RuntimeSELinuxState
booted_with_ukibool
fips_statetalos.resource.definitions.enums.RuntimeFIPSState
module_signature_enforcedbool

<a name="talos.resource.definitions.runtime.ServicePIDSpec"></a>

ServicePIDSpec

ServicePIDSpec is the spec for the service PID.

FieldTypeLabelDescription
pidint32PID is the host PID of the service.
mount_namespacestringMountNamespace is the mount namespace of the service.

<a name="talos.resource.definitions.runtime.UnattendedInstallStatusSpec"></a>

UnattendedInstallStatusSpec

UnattendedInstallStatusSpec describes the unattended install status.

FieldTypeLabelDescription
imagestring
phasetalos.resource.definitions.enums.RuntimeUnattendedInstallPhase
errorstring

<a name="talos.resource.definitions.runtime.UniqueMachineTokenSpec"></a>

UniqueMachineTokenSpec

UniqueMachineTokenSpec is the spec for the machine unique token. Token can be empty if machine wasn't assigned any.

FieldTypeLabelDescription
tokenstring

<a name="talos.resource.definitions.runtime.UnmetCondition"></a>

UnmetCondition

UnmetCondition is a failure which prevents machine from being ready at the stage.

FieldTypeLabelDescription
namestring
reasonstring

<a name="talos.resource.definitions.runtime.VersionSpec"></a>

VersionSpec

VersionSpec describes version of Talos.

FieldTypeLabelDescription
versionstring
namestring

<a name="talos.resource.definitions.runtime.WatchdogTimerConfigSpec"></a>

WatchdogTimerConfigSpec

WatchdogTimerConfigSpec describes configuration of watchdog timer.

FieldTypeLabelDescription
devicestring
timeoutgoogle.protobuf.Duration

<a name="talos.resource.definitions.runtime.WatchdogTimerStatusSpec"></a>

WatchdogTimerStatusSpec

WatchdogTimerStatusSpec describes configuration of watchdog timer.

FieldTypeLabelDescription
devicestring
timeoutgoogle.protobuf.Duration
feed_intervalgoogle.protobuf.Duration
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/network/network.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/network/network.proto

<a name="talos.resource.definitions.network.AddressSpecSpec"></a>

AddressSpecSpec

AddressSpecSpec describes status of rendered secrets.

FieldTypeLabelDescription
addresscommon.NetIPPrefix
link_namestring
familytalos.resource.definitions.enums.NethelpersFamily
scopetalos.resource.definitions.enums.NethelpersScope
flagsuint32
announce_with_arpbool
config_layertalos.resource.definitions.enums.NetworkConfigLayer
priorityuint32

<a name="talos.resource.definitions.network.AddressStatusSpec"></a>

AddressStatusSpec

AddressStatusSpec describes status of rendered secrets.

FieldTypeLabelDescription
addresscommon.NetIPPrefix
localcommon.NetIP
broadcastcommon.NetIP
anycastcommon.NetIP
multicastcommon.NetIP
link_indexuint32
link_namestring
familytalos.resource.definitions.enums.NethelpersFamily
scopetalos.resource.definitions.enums.NethelpersScope
flagsuint32
priorityuint32

<a name="talos.resource.definitions.network.BGPBFDConfigSpec"></a>

BGPBFDConfigSpec

BGPBFDConfigSpec contains BFD parameters for a BGP neighbor.

FieldTypeLabelDescription
transmit_intervalgoogle.protobuf.Duration
receive_intervalgoogle.protobuf.Duration
detect_multiplieruint32

<a name="talos.resource.definitions.network.BGPImportRouteSpec"></a>

BGPImportRouteSpec

BGPImportRouteSpec selects routes learned by another BGP instance for one-way import.

FieldTypeLabelDescription
bgp_instancestring
prefixescommon.NetIPPrefixrepeated

<a name="talos.resource.definitions.network.BGPInstanceConfigSpec"></a>

BGPInstanceConfigSpec

BGPInstanceConfigSpec contains the resolved runtime configuration for a BGP routing instance.

FieldTypeLabelDescription
local_asnuint32
router_idcommon.NetIP
route_sourcecommon.NetIP
advertise_linksstringrepeated
multipathbool
max_pathsuint32
neighborsBGPNeighborConfigSpecrepeated
vrfstring
vrf_tabletalos.resource.definitions.enums.NethelpersRoutingTable
import_routesBGPImportRouteSpecrepeated
install_routesbool

<a name="talos.resource.definitions.network.BGPNeighborConfigSpec"></a>

BGPNeighborConfigSpec

BGPNeighborConfigSpec contains the runtime configuration for a BGP neighbor.

FieldTypeLabelDescription
addresscommon.NetIP
linkstring
peer_asnuint32
hold_timegoogle.protobuf.Duration
bfdBGPBFDConfigSpec
local_asnuint32
passivebool

<a name="talos.resource.definitions.network.BGPPeerStatusSpec"></a>

BGPPeerStatusSpec

BGPPeerStatusSpec describes the status of a BGP peering session.

FieldTypeLabelDescription
peerstring
local_asnuint32
peer_asnuint32
statetalos.resource.definitions.enums.NethelpersBGPSessionState
router_idcommon.NetIP
sincegoogle.protobuf.Timestamp
receiveduint32
advertiseduint32
accepteduint32
bfd_statestring
instancestring

<a name="talos.resource.definitions.network.BondMasterSpec"></a>

BondMasterSpec

BondMasterSpec describes bond settings if Kind == "bond".

FieldTypeLabelDescription
modetalos.resource.definitions.enums.NethelpersBondModeMode specifies the bonding policy
hash_policytalos.resource.definitions.enums.NethelpersBondXmitHashPolicyHashPolicy selects the transmit hash policy to use for slave selection.
lacp_ratetalos.resource.definitions.enums.NethelpersLACPRateLACPRate specifies the rate at which LACPDU frames are sent.
arp_validatetalos.resource.definitions.enums.NethelpersARPValidateARPValidate specifies whether or not ARP probes and replies should be validated.
arp_all_targetstalos.resource.definitions.enums.NethelpersARPAllTargetsARPAllTargets specifies whether ARP probes should be sent to any or all targets.
primary_indexuint32PrimaryIndex is a device index specifying which slave is the primary device.
primary_reselecttalos.resource.definitions.enums.NethelpersPrimaryReselectPrimaryReselect specifies the policy under which the primary slave should be reselected.
fail_over_mactalos.resource.definitions.enums.NethelpersFailOverMACFailOverMac whether active-backup mode should set all slaves to the same MAC address at enslavement, when enabled, or perform special handling.
ad_selecttalos.resource.definitions.enums.NethelpersADSelectADSelect specifies the aggregate selection policy for 802.3ad.
mii_monuint32MIIMon is the link monitoring frequency in milliseconds.
up_delayuint32UpDelay is the time, in milliseconds, to wait before enabling a slave after a link recovery has been detected.
down_delayuint32DownDelay is the time, in milliseconds, to wait before disabling a slave after a link failure has been detected.
arp_intervaluint32ARPInterval is the ARP link monitoring frequency in milliseconds.
resend_igmpuint32ResendIGMP specifies the number of times IGMP packets should be resent.
min_linksuint32MinLinks specifies the minimum number of active links to assert carrier.
lp_intervaluint32LPInterval specifies the number of seconds between instances where the bonding driver sends learning packets to each slave's peer switch.
packets_per_slaveuint32PacketsPerSlave specifies the number of packets to transmit through a slave before moving to the next one.
num_peer_notifuint32NumPeerNotif specifies the number of peer notifications (gratuitous ARPs and unsolicited IPv6 Neighbor Advertisements) to be issued after a failover event.
tlb_dynamic_lbuint32TLBDynamicLB specifies if dynamic shuffling of flows is enabled in tlb or alb mode.
all_slaves_activeuint32AllSlavesActive specifies that duplicate frames (received on inactive ports) should be dropped (0) or delivered (1).
use_carrierboolUseCarrier specifies whether or not miimon should use MII or ETHTOOL.
ad_actor_sys_priouint32ADActorSysPrio is the actor system priority for 802.3ad.
ad_user_port_keyuint32ADUserPortKey is the user port key (upper 10 bits) for 802.3ad.
peer_notify_delayuint32PeerNotifyDelay is the delay, in milliseconds, between each peer notification.
arpip_targetscommon.NetIPrepeatedARPIPTargets is the list of IP addresses to use for ARP link monitoring when ARPInterval is set.

Maximum of 16 targets are supported. | | nsip6_targets | common.NetIP | repeated | NSIP6Targets is the list of IPv6 addresses to use for NS link monitoring when ARPInterval is set.

Maximum of 16 targets are supported. | | adlacp_active | talos.resource.definitions.enums.NethelpersADLACPActive | | ADLACPActive specifies whether to send LACPDU frames periodically. | | missed_max | uint32 | | MissedMax is the number of arp_interval monitor checks that must fail in order for an interface to be marked down by the ARP monitor. |

<a name="talos.resource.definitions.network.BondSlave"></a>

BondSlave

BondSlave contains a bond's master name and slave index.

FieldTypeLabelDescription
master_namestringMasterName indicates master link for enslaved bonded interfaces.
slave_indexint64SlaveIndex indicates a slave's position in bond.

<a name="talos.resource.definitions.network.BridgeMasterSpec"></a>

BridgeMasterSpec

BridgeMasterSpec describes bridge settings if Kind == "bridge".

FieldTypeLabelDescription
stpSTPSpec
vlanBridgeVLANSpec

<a name="talos.resource.definitions.network.BridgeSlave"></a>

BridgeSlave

BridgeSlave contains the name of the master bridge of a bridged interface

FieldTypeLabelDescription
master_namestringMasterName indicates master link for enslaved bridged interfaces.

<a name="talos.resource.definitions.network.BridgeVLANSpec"></a>

BridgeVLANSpec

BridgeVLANSpec describes VLAN settings of a bridge.

FieldTypeLabelDescription
filtering_enabledbool

<a name="talos.resource.definitions.network.ClientIdentifierSpec"></a>

ClientIdentifierSpec

ClientIdentifierSpec is a shared DHCP4/DHCP6 client identifier spec.

FieldTypeLabelDescription
client_identifiertalos.resource.definitions.enums.NethelpersClientIdentifier
duid_raw_hexstring

<a name="talos.resource.definitions.network.DHCP4OperatorSpec"></a>

DHCP4OperatorSpec

DHCP4OperatorSpec describes DHCP4 operator options.

FieldTypeLabelDescription
route_metricuint32
skip_hostname_requestbool
client_identifierClientIdentifierSpec
skip_routesbool

<a name="talos.resource.definitions.network.DHCP6OperatorSpec"></a>

DHCP6OperatorSpec

DHCP6OperatorSpec describes DHCP6 operator options.

FieldTypeLabelDescription
route_metricuint32
skip_hostname_requestbool
client_identifierClientIdentifierSpec

<a name="talos.resource.definitions.network.DNSResolveCacheSpec"></a>

DNSResolveCacheSpec

DNSResolveCacheSpec describes DNS servers status.

FieldTypeLabelDescription
statusstring

<a name="talos.resource.definitions.network.EthernetChannelsSpec"></a>

EthernetChannelsSpec

EthernetChannelsSpec describes config of Ethernet channels.

FieldTypeLabelDescription
rxuint32
txuint32
otheruint32
combineduint32

<a name="talos.resource.definitions.network.EthernetChannelsStatus"></a>

EthernetChannelsStatus

EthernetChannelsStatus describes status of Ethernet channels.

FieldTypeLabelDescription
rx_maxuint32Read-only settings.
tx_maxuint32
other_maxuint32
combined_maxuint32
rxuint32Current settings (read-write).
txuint32
otheruint32
combineduint32

<a name="talos.resource.definitions.network.EthernetFeatureStatus"></a>

EthernetFeatureStatus

EthernetFeatureStatus describes status of Ethernet features.

FieldTypeLabelDescription
namestring
statusstring

<a name="talos.resource.definitions.network.EthernetRingsSpec"></a>

EthernetRingsSpec

EthernetRingsSpec describes config of Ethernet rings.

FieldTypeLabelDescription
rxuint32
rx_miniuint32
rx_jumbouint32
txuint32
rx_buf_lenuint32
cqe_sizeuint32
tx_pushbool
rx_pushbool
tx_push_buf_lenuint32
tcp_data_splitbool

<a name="talos.resource.definitions.network.EthernetRingsStatus"></a>

EthernetRingsStatus

EthernetRingsStatus describes status of Ethernet rings.

FieldTypeLabelDescription
rx_maxuint32Read-only settings.
rx_mini_maxuint32
rx_jumbo_maxuint32
tx_maxuint32
tx_push_buf_len_maxuint32
rxuint32Current settings (read-write).
rx_miniuint32
rx_jumbouint32
txuint32
rx_buf_lenuint32
cqe_sizeuint32
tx_pushbool
rx_pushbool
tx_push_buf_lenuint32
tcp_data_splitbool

<a name="talos.resource.definitions.network.EthernetSpecSpec"></a>

EthernetSpecSpec

EthernetSpecSpec describes config of Ethernet link.

FieldTypeLabelDescription
ringsEthernetRingsSpec
featuresEthernetSpecSpec.FeaturesEntryrepeated
channelsEthernetChannelsSpec
wake_on_lantalos.resource.definitions.enums.NethelpersWOLModerepeated

<a name="talos.resource.definitions.network.EthernetSpecSpec.FeaturesEntry"></a>

EthernetSpecSpec.FeaturesEntry

FieldTypeLabelDescription
keystring
valuebool

<a name="talos.resource.definitions.network.EthernetStatusSpec"></a>

EthernetStatusSpec

EthernetStatusSpec describes status of rendered secrets.

FieldTypeLabelDescription
link_statebool
speed_megabitsint64
porttalos.resource.definitions.enums.NethelpersPort
duplextalos.resource.definitions.enums.NethelpersDuplex
our_modesstringrepeated
peer_modesstringrepeated
ringsEthernetRingsStatus
featuresEthernetFeatureStatusrepeated
channelsEthernetChannelsStatus
wake_on_lantalos.resource.definitions.enums.NethelpersWOLModerepeated

<a name="talos.resource.definitions.network.HTTPProbeSpec"></a>

HTTPProbeSpec

HTTPProbeSpec describes the HTTP Probe.

FieldTypeLabelDescription
urlcommon.URLURL to probe: http:// or https:// URL.
timeoutgoogle.protobuf.DurationTimeout for the probe.

<a name="talos.resource.definitions.network.HardwareAddrSpec"></a>

HardwareAddrSpec

HardwareAddrSpec describes spec for the link.

FieldTypeLabelDescription
namestringName defines link name
hardware_addrbytesHardware address

<a name="talos.resource.definitions.network.HostDNSConfigSpec"></a>

HostDNSConfigSpec

HostDNSConfigSpec describes host DNS config.

FieldTypeLabelDescription
enabledbool
listen_addressescommon.NetIPPortrepeated
service_host_dns_addresscommon.NetIP
resolve_member_namesbool
service_host_dns_address_v6common.NetIP

<a name="talos.resource.definitions.network.HostnameSpecSpec"></a>

HostnameSpecSpec

HostnameSpecSpec describes node hostname.

FieldTypeLabelDescription
hostnamestring
domainnamestring
config_layertalos.resource.definitions.enums.NetworkConfigLayer

<a name="talos.resource.definitions.network.HostnameStatusSpec"></a>

HostnameStatusSpec

HostnameStatusSpec describes node hostname.

FieldTypeLabelDescription
hostnamestring
domainnamestring

<a name="talos.resource.definitions.network.LinkAliasSpecSpec"></a>

LinkAliasSpecSpec

LinkAliasSpecSpec describes status of rendered secrets.

FieldTypeLabelDescription
aliasstring

<a name="talos.resource.definitions.network.LinkRefreshSpec"></a>

LinkRefreshSpec

LinkRefreshSpec describes status of rendered secrets.

FieldTypeLabelDescription
generationint64

<a name="talos.resource.definitions.network.LinkSpecSpec"></a>

LinkSpecSpec

LinkSpecSpec describes spec for the link.

FieldTypeLabelDescription
namestringName defines link name
logicalboolLogical describes if the interface should be created on the fly if it doesn't exist.
upboolIf Up is true, bring interface up, otherwise bring interface down.

TODO: make *bool ? | | mtu | uint32 | | Interface MTU (always applies). | | kind | string | | Kind and Type are only required for Logical interfaces. | | type | talos.resource.definitions.enums.NethelpersLinkType | | | | parent_name | string | | ParentName indicates link parent for VLAN interfaces. | | bond_slave | BondSlave | | BondSlave contains bond slave configuration for interfaces enslaved to a bond. | | bridge_slave | BridgeSlave | | BridgeSlave carries bridge slave details for bridged interfaces. | | vlan | VLANSpec | | These structures are present depending on "Kind" for Logical interfaces. | | bond_master | BondMasterSpec | | | | bridge_master | BridgeMasterSpec | | | | wireguard | WireguardSpec | | | | config_layer | talos.resource.definitions.enums.NetworkConfigLayer | | Configuration layer. | | hardware_address | bytes | | Override hardware (MAC) address (if supported). | | multicast | bool | | Multicast indicates whether the multicast flag should be set on the interface to the value. | | vrf_master | VRFMasterSpec | | | | vrf_slave | VRFSlave | | VRFSlave carries VRF slave details for interfaces in a VRF. | | veth | VethSpec | | |

<a name="talos.resource.definitions.network.LinkStatusSpec"></a>

LinkStatusSpec

LinkStatusSpec describes status of rendered secrets.

FieldTypeLabelDescription
indexuint32
typetalos.resource.definitions.enums.NethelpersLinkType
link_indexuint32
flagsuint32
hardware_addrbytes
broadcast_addrbytes
mtuuint32
queue_discstring
master_indexuint32
operational_statetalos.resource.definitions.enums.NethelpersOperationalState
kindstring
slave_kindstring
bus_pathstring
pciidstring
driverstring
driver_versionstring
firmware_versionstring
product_idstring
vendor_idstring
productstring
vendorstring
link_stateboolFields coming from ethtool API.
speed_megabitsint64
porttalos.resource.definitions.enums.NethelpersPort
duplextalos.resource.definitions.enums.NethelpersDuplex
vlanVLANSpecFollowing fields are only populated with respective Kind.
bridge_masterBridgeMasterSpec
bond_masterBondMasterSpec
wireguardWireguardSpec
permanent_addrbytes
aliasstringFields coming from rtnetlink API.
alt_namesstringrepeated
vrf_masterVRFMasterSpec
vethVethSpec

<a name="talos.resource.definitions.network.NameServerSpec"></a>

NameServerSpec

NameServerSpec describes a single DNS nameserver with additional configuration.

FieldTypeLabelDescription
addrcommon.NetIP
protocoltalos.resource.definitions.enums.NethelpersDNSProtocol
tls_server_namestring

<a name="talos.resource.definitions.network.NfTablesAddressMatch"></a>

NfTablesAddressMatch

NfTablesAddressMatch describes the match on the IP address.

FieldTypeLabelDescription
include_subnetscommon.NetIPPrefixrepeated
exclude_subnetscommon.NetIPPrefixrepeated
invertbool

<a name="talos.resource.definitions.network.NfTablesChainSpec"></a>

NfTablesChainSpec

NfTablesChainSpec describes status of rendered secrets.

FieldTypeLabelDescription
typestring
hooktalos.resource.definitions.enums.NethelpersNfTablesChainHook
prioritytalos.resource.definitions.enums.NethelpersNfTablesChainPriority
rulesNfTablesRulerepeated
policytalos.resource.definitions.enums.NethelpersNfTablesVerdict

<a name="talos.resource.definitions.network.NfTablesClampMSS"></a>

NfTablesClampMSS

NfTablesClampMSS describes the TCP MSS clamping operation.

MSS is limited by the MaxMTU so that:

  • IPv4: MSS = MaxMTU - 40
  • IPv6: MSS = MaxMTU - 60.
FieldTypeLabelDescription
mtuuint32

<a name="talos.resource.definitions.network.NfTablesConntrackStateMatch"></a>

NfTablesConntrackStateMatch

NfTablesConntrackStateMatch describes the match on the connection tracking state.

FieldTypeLabelDescription
statestalos.resource.definitions.enums.NethelpersConntrackStaterepeated

<a name="talos.resource.definitions.network.NfTablesICMPTypeMatch"></a>

NfTablesICMPTypeMatch

NfTablesICMPTypeMatch describes the match on the ICMP type.

FieldTypeLabelDescription
typestalos.resource.definitions.enums.NethelpersICMPTyperepeated

<a name="talos.resource.definitions.network.NfTablesIfNameMatch"></a>

NfTablesIfNameMatch

NfTablesIfNameMatch describes the match on the interface name.

FieldTypeLabelDescription
operatortalos.resource.definitions.enums.NethelpersMatchOperator
interface_namesstringrepeated

<a name="talos.resource.definitions.network.NfTablesLayer4Match"></a>

NfTablesLayer4Match

NfTablesLayer4Match describes the match on the transport layer protocol.

FieldTypeLabelDescription
protocoltalos.resource.definitions.enums.NethelpersProtocol
match_source_portNfTablesPortMatch
match_destination_portNfTablesPortMatch
match_icmp_typeNfTablesICMPTypeMatch

<a name="talos.resource.definitions.network.NfTablesLimitMatch"></a>

NfTablesLimitMatch

NfTablesLimitMatch describes the match on the packet rate.

FieldTypeLabelDescription
packet_rate_per_seconduint64

<a name="talos.resource.definitions.network.NfTablesMark"></a>

NfTablesMark

NfTablesMark encodes packet mark match/update operation.

When used as a match computes the following condition: (mark & mask) ^ xor == value

When used as an update computes the following operation: mark = (mark & mask) ^ xor.

FieldTypeLabelDescription
maskuint32
xoruint32
valueuint32

<a name="talos.resource.definitions.network.NfTablesPortMatch"></a>

NfTablesPortMatch

NfTablesPortMatch describes the match on the transport layer port.

FieldTypeLabelDescription
rangesPortRangerepeated

<a name="talos.resource.definitions.network.NfTablesRule"></a>

NfTablesRule

NfTablesRule describes a single rule in the nftables chain.

FieldTypeLabelDescription
match_o_if_nameNfTablesIfNameMatch
verdicttalos.resource.definitions.enums.NethelpersNfTablesVerdict
match_markNfTablesMark
set_markNfTablesMark
match_source_addressNfTablesAddressMatch
match_destination_addressNfTablesAddressMatch
match_layer4NfTablesLayer4Match
match_i_if_nameNfTablesIfNameMatch
clamp_mssNfTablesClampMSS
match_limitNfTablesLimitMatch
match_conntrack_stateNfTablesConntrackStateMatch
anon_counterbool

<a name="talos.resource.definitions.network.NodeAddressFilterSpec"></a>

NodeAddressFilterSpec

NodeAddressFilterSpec describes a filter for NodeAddresses.

FieldTypeLabelDescription
include_subnetscommon.NetIPPrefixrepeatedAddress is skipped if it doesn't match any of the includeSubnets (if includeSubnets is not empty).
exclude_subnetscommon.NetIPPrefixrepeatedAddress is skipped if it matches any of the excludeSubnets.

<a name="talos.resource.definitions.network.NodeAddressSortAlgorithmSpec"></a>

NodeAddressSortAlgorithmSpec

NodeAddressSortAlgorithmSpec describes a filter for NodeAddresses.

FieldTypeLabelDescription
algorithmtalos.resource.definitions.enums.NethelpersAddressSortAlgorithm

<a name="talos.resource.definitions.network.NodeAddressSpec"></a>

NodeAddressSpec

NodeAddressSpec describes a set of node addresses.

FieldTypeLabelDescription
addressescommon.NetIPPrefixrepeated
sort_algorithmtalos.resource.definitions.enums.NethelpersAddressSortAlgorithm

<a name="talos.resource.definitions.network.OperatorSpecSpec"></a>

OperatorSpecSpec

OperatorSpecSpec describes operator specification.

FieldTypeLabelDescription
operatortalos.resource.definitions.enums.NetworkOperator
link_namestring
require_upbool
dhcp4DHCP4OperatorSpec
dhcp6DHCP6OperatorSpec
vipVIPOperatorSpec
config_layertalos.resource.definitions.enums.NetworkConfigLayer

<a name="talos.resource.definitions.network.PlatformConfigSpec"></a>

PlatformConfigSpec

PlatformConfigSpec describes platform network configuration.

This structure is marshaled to STATE partition to persist cached network configuration across reboots.

FieldTypeLabelDescription
addressesAddressSpecSpecrepeated
linksLinkSpecSpecrepeated
routesRouteSpecSpecrepeated
hostnamesHostnameSpecSpecrepeated
resolversResolverSpecSpecrepeated
time_serversTimeServerSpecSpecrepeated
operatorsOperatorSpecSpecrepeated
external_ipscommon.NetIPrepeated
probesProbeSpecSpecrepeated
metadatatalos.resource.definitions.runtime.PlatformMetadataSpec

<a name="talos.resource.definitions.network.PortRange"></a>

PortRange

PortRange describes a range of ports.

Range is [lo, hi].

FieldTypeLabelDescription
louint32
hiuint32

<a name="talos.resource.definitions.network.ProbeSpecSpec"></a>

ProbeSpecSpec

ProbeSpecSpec describes the Probe.

FieldTypeLabelDescription
intervalgoogle.protobuf.DurationInterval between the probes.
failure_thresholdint64FailureThreshold is the number of consecutive failures for the probe to be considered failed after having succeeded.
tcpTCPProbeSpecTCP is the TCP probe spec. One of TCP or HTTP must be specified.
config_layertalos.resource.definitions.enums.NetworkConfigLayerConfiguration layer.
httpHTTPProbeSpecHTTP is the HTTP probe spec. One of TCP or HTTP must be specified.

<a name="talos.resource.definitions.network.ProbeStatusSpec"></a>

ProbeStatusSpec

ProbeStatusSpec describes the Probe.

FieldTypeLabelDescription
successboolSuccess of the check.
last_errorstringLast error of the probe.

<a name="talos.resource.definitions.network.ResolverSpecSpec"></a>

ResolverSpecSpec

ResolverSpecSpec describes DNS resolvers.

FieldTypeLabelDescription
dns_serverscommon.NetIPrepeatedDNSServers is a flat list of DNS server IP addresses.

Deprecated: This field is deprecated in favor of NameServers which contain more information. | | config_layer | talos.resource.definitions.enums.NetworkConfigLayer | | | | search_domains | string | repeated | | | name_servers | NameServerSpec | repeated | NameServers is a list of DNS servers with additional configuration. | | search_domains_overridden | bool | | SearchDomainsOverridden indicates that SearchDomains was explicitly set on the machine configuration layer and must override (rather than merge with) search domains from previous layers. This is a separate field because protobuf cannot distinguish an empty slice from an unset one, and an empty override is used to clear DHCP/platform search domains. |

<a name="talos.resource.definitions.network.ResolverStatusSpec"></a>

ResolverStatusSpec

ResolverStatusSpec describes DNS resolvers.

FieldTypeLabelDescription
dns_serverscommon.NetIPrepeatedDNSServers is a flat list of DNS server IP addresses.

Deprecated: This field is deprecated in favor of NameServers which contain more information. | | search_domains | string | repeated | | | name_servers | NameServerSpec | repeated | NameServers is a list of DNS servers with additional configuration. |

<a name="talos.resource.definitions.network.RouteNextHop"></a>

RouteNextHop

RouteNextHop describes a single next-hop of a (possibly multipath) route.

A next-hop gateway may be in a different address family than the route destination (e.g. an IPv4 prefix reachable via an IPv6 link-local next-hop, RFC 8950).

FieldTypeLabelDescription
gatewaycommon.NetIP
out_link_namestring
weightuint32

<a name="talos.resource.definitions.network.RouteSpecSpec"></a>

RouteSpecSpec

RouteSpecSpec describes the route.

FieldTypeLabelDescription
familytalos.resource.definitions.enums.NethelpersFamily
destinationcommon.NetIPPrefix
sourcecommon.NetIP
gatewaycommon.NetIP
out_link_namestring
tabletalos.resource.definitions.enums.NethelpersRoutingTable
priorityuint32
scopetalos.resource.definitions.enums.NethelpersScope
typetalos.resource.definitions.enums.NethelpersRouteType
flagsuint32
protocoltalos.resource.definitions.enums.NethelpersRouteProtocol
config_layertalos.resource.definitions.enums.NetworkConfigLayer
mtuuint32
next_hopsRouteNextHoprepeatedNextHops, when non-empty, describes a multipath (ECMP) route. The top-level Gateway and OutLinkName are left unset in that case, mirroring the kernel's RTA_GATEWAY vs RTA_MULTIPATH split.

<a name="talos.resource.definitions.network.RouteStatusSpec"></a>

RouteStatusSpec

RouteStatusSpec describes status of rendered secrets.

FieldTypeLabelDescription
familytalos.resource.definitions.enums.NethelpersFamily
destinationcommon.NetIPPrefix
sourcecommon.NetIP
gatewaycommon.NetIP
out_link_indexuint32
out_link_namestring
tabletalos.resource.definitions.enums.NethelpersRoutingTable
priorityuint32
scopetalos.resource.definitions.enums.NethelpersScope
typetalos.resource.definitions.enums.NethelpersRouteType
flagsuint32
protocoltalos.resource.definitions.enums.NethelpersRouteProtocol
mtuuint32
next_hopsRouteNextHoprepeatedNextHops is populated for multipath (ECMP) routes; the top-level Gateway/OutLink stay unset then.

<a name="talos.resource.definitions.network.RoutingRuleSpecSpec"></a>

RoutingRuleSpecSpec

RoutingRuleSpecSpec describes the routing rule.

FieldTypeLabelDescription
familytalos.resource.definitions.enums.NethelpersFamily
srccommon.NetIPPrefix
dstcommon.NetIPPrefix
tabletalos.resource.definitions.enums.NethelpersRoutingTable
priorityuint32
actiontalos.resource.definitions.enums.NethelpersRoutingRuleAction
iif_namestring
oif_namestring
fw_markuint32
fw_maskuint32
config_layertalos.resource.definitions.enums.NetworkConfigLayer

<a name="talos.resource.definitions.network.RoutingRuleStatusSpec"></a>

RoutingRuleStatusSpec

RoutingRuleStatusSpec describes the observed routing rule state.

FieldTypeLabelDescription
familytalos.resource.definitions.enums.NethelpersFamily
srccommon.NetIPPrefix
dstcommon.NetIPPrefix
tabletalos.resource.definitions.enums.NethelpersRoutingTable
priorityuint32
actiontalos.resource.definitions.enums.NethelpersRoutingRuleAction
iif_namestring
oif_namestring
fw_markuint32
fw_maskuint32

<a name="talos.resource.definitions.network.STPSpec"></a>

STPSpec

STPSpec describes Spanning Tree Protocol (STP) settings of a bridge.

FieldTypeLabelDescription
enabledbool

<a name="talos.resource.definitions.network.StaticHostSpec"></a>

StaticHostSpec

StaticHostSpec describes addresses for a static host name.

FieldTypeLabelDescription
addressescommon.NetIPrepeated

<a name="talos.resource.definitions.network.StatusSpec"></a>

StatusSpec

StatusSpec describes network state.

FieldTypeLabelDescription
address_readybool
connectivity_readybool
hostname_readybool
etc_files_readybool

<a name="talos.resource.definitions.network.TCPProbeSpec"></a>

TCPProbeSpec

TCPProbeSpec describes the TCP Probe.

FieldTypeLabelDescription
endpointstringEndpoint to probe: host:port.
timeoutgoogle.protobuf.DurationTimeout for the probe.

<a name="talos.resource.definitions.network.TimeServerSpecSpec"></a>

TimeServerSpecSpec

TimeServerSpecSpec describes NTP servers.

FieldTypeLabelDescription
ntp_serversstringrepeated
config_layertalos.resource.definitions.enums.NetworkConfigLayer
use_ntsbool

<a name="talos.resource.definitions.network.TimeServerStatusSpec"></a>

TimeServerStatusSpec

TimeServerStatusSpec describes NTP servers.

FieldTypeLabelDescription
ntp_serversstringrepeated
use_ntsbool

<a name="talos.resource.definitions.network.VIPEquinixMetalSpec"></a>

VIPEquinixMetalSpec

VIPEquinixMetalSpec describes virtual (elastic) IP settings for Equinix Metal.

FieldTypeLabelDescription
project_idstring
device_idstring
api_tokenstring

<a name="talos.resource.definitions.network.VIPHCloudSpec"></a>

VIPHCloudSpec

VIPHCloudSpec describes virtual (elastic) IP settings for Hetzner Cloud.

FieldTypeLabelDescription
device_idint64
network_idint64
api_tokenstring

<a name="talos.resource.definitions.network.VIPOperatorSpec"></a>

VIPOperatorSpec

VIPOperatorSpec describes virtual IP operator options.

FieldTypeLabelDescription
ipcommon.NetIP
gratuitous_arpbool
equinix_metalVIPEquinixMetalSpec
h_cloudVIPHCloudSpec

<a name="talos.resource.definitions.network.VLANSpec"></a>

VLANSpec

VLANSpec describes VLAN settings if Kind == "vlan".

FieldTypeLabelDescription
viduint32VID is the vlan ID.
protocoltalos.resource.definitions.enums.NethelpersVLANProtocolProtocol is the vlan protocol.

<a name="talos.resource.definitions.network.VRFMasterSpec"></a>

VRFMasterSpec

VRFMasterSpec describes vrf settings if Kind == "vrf".

FieldTypeLabelDescription
tabletalos.resource.definitions.enums.NethelpersRoutingTable

<a name="talos.resource.definitions.network.VRFSlave"></a>

VRFSlave

VRFSlave contains the name of the master vrf for an interface

FieldTypeLabelDescription
master_namestring

<a name="talos.resource.definitions.network.VethSpec"></a>

VethSpec

VethSpec identifies the expected peer of a veth endpoint.

FieldTypeLabelDescription
peer_namestring

<a name="talos.resource.definitions.network.WireguardPeer"></a>

WireguardPeer

WireguardPeer describes a single peer.

FieldTypeLabelDescription
public_keystring
preshared_keystring
endpointstring
persistent_keepalive_intervalgoogle.protobuf.Duration
allowed_ipscommon.NetIPPrefixrepeated

<a name="talos.resource.definitions.network.WireguardSpec"></a>

WireguardSpec

WireguardSpec describes Wireguard settings if Kind == "wireguard".

FieldTypeLabelDescription
private_keystringPrivateKey is used to configure the link, present only in the LinkSpec.
public_keystringPublicKey is only used in LinkStatus to show the link status.
listen_portint64
firewall_markint64
peersWireguardPeerrepeated
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/perf/perf.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/perf/perf.proto

<a name="talos.resource.definitions.perf.CPUSpec"></a>

CPUSpec

CPUSpec represents the last CPU stats snapshot.

FieldTypeLabelDescription
cpuCPUStatrepeated
cpu_totalCPUStat
irq_totaluint64
context_switchesuint64
process_createduint64
process_runninguint64
process_blockeduint64
soft_irq_totaluint64

<a name="talos.resource.definitions.perf.CPUStat"></a>

CPUStat

CPUStat represents a single cpu stat.

FieldTypeLabelDescription
userdouble
nicedouble
systemdouble
idledouble
iowaitdouble
irqdouble
soft_irqdouble
stealdouble
guestdouble
guest_nicedouble

<a name="talos.resource.definitions.perf.MemorySpec"></a>

MemorySpec

MemorySpec represents the last Memory stats snapshot.

FieldTypeLabelDescription
mem_totaluint64
mem_useduint64
mem_availableuint64
buffersuint64
cacheduint64
swap_cacheduint64
activeuint64
inactiveuint64
active_anonuint64
inactive_anonuint64
active_fileuint64
inactive_fileuint64
unevictableuint64
mlockeduint64
swap_totaluint64
swap_freeuint64
dirtyuint64
writebackuint64
anon_pagesuint64
mappeduint64
shmemuint64
slabuint64
s_reclaimableuint64
s_unreclaimuint64
kernel_stackuint64
page_tablesuint64
nf_sunstableuint64
bounceuint64
writeback_tmpuint64
commit_limituint64
committed_asuint64
vmalloc_totaluint64
vmalloc_useduint64
vmalloc_chunkuint64
hardware_corrupteduint64
anon_huge_pagesuint64
shmem_huge_pagesuint64
shmem_pmd_mappeduint64
cma_totaluint64
cma_freeuint64
huge_pages_totaluint64
huge_pages_freeuint64
huge_pages_rsvduint64
huge_pages_surpuint64
hugepagesizeuint64
direct_map4kuint64
direct_map2muint64
direct_map1guint64
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/secrets/secrets.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/secrets/secrets.proto

<a name="talos.resource.definitions.secrets.APICertsSpec"></a>

APICertsSpec

APICertsSpec describes etcd certs secrets.

FieldTypeLabelDescription
clientcommon.PEMEncodedCertificateAndKey
servercommon.PEMEncodedCertificateAndKey
accepted_c_ascommon.PEMEncodedCertificaterepeated
skip_verifying_client_certboolSkip verifying client certificate, to be used only with the maintenance mode operations.

<a name="talos.resource.definitions.secrets.CertSANSpec"></a>

CertSANSpec

CertSANSpec describes fields of the cert SANs.

FieldTypeLabelDescription
i_pscommon.NetIPrepeated
dns_namesstringrepeated
fqdnstring

<a name="talos.resource.definitions.secrets.EncryptionSaltSpec"></a>

EncryptionSaltSpec

EncryptionSaltSpec describes the salt.

FieldTypeLabelDescription
disk_saltbytes

<a name="talos.resource.definitions.secrets.EtcdCertsSpec"></a>

EtcdCertsSpec

EtcdCertsSpec describes etcd certs secrets.

FieldTypeLabelDescription
etcdcommon.PEMEncodedCertificateAndKey
etcd_peercommon.PEMEncodedCertificateAndKey
etcd_admincommon.PEMEncodedCertificateAndKey
etcd_api_servercommon.PEMEncodedCertificateAndKey

<a name="talos.resource.definitions.secrets.EtcdRootSpec"></a>

EtcdRootSpec

EtcdRootSpec describes etcd CA secrets.

FieldTypeLabelDescription
etcd_cacommon.PEMEncodedCertificateAndKey

<a name="talos.resource.definitions.secrets.KubeletSpec"></a>

KubeletSpec

KubeletSpec describes root Kubernetes secrets.

FieldTypeLabelDescription
endpointcommon.URL
bootstrap_token_idstring
bootstrap_token_secretstring
accepted_c_ascommon.PEMEncodedCertificaterepeated
endpoint_tls_server_namestringEndpointTLSServerName, when non-empty, is propagated to the generated kubelet kubeconfig as clusters[0].cluster.tls-server-name, overriding the SNI/hostname the kubelet uses while still dialing Endpoint as the TCP destination.

<a name="talos.resource.definitions.secrets.KubernetesCertsSpec"></a>

KubernetesCertsSpec

KubernetesCertsSpec describes generated Kubernetes certificates.

FieldTypeLabelDescription
scheduler_kubeconfigstring
controller_manager_kubeconfigstring
localhost_admin_kubeconfigstringAdmin-level kubeconfig with access through the localhost endpoint and cluster endpoints.
admin_kubeconfigstring

<a name="talos.resource.definitions.secrets.KubernetesDynamicCertsSpec"></a>

KubernetesDynamicCertsSpec

KubernetesDynamicCertsSpec describes generated KubernetesCerts certificates.

FieldTypeLabelDescription
api_servercommon.PEMEncodedCertificateAndKey
api_server_kubelet_clientcommon.PEMEncodedCertificateAndKey
front_proxycommon.PEMEncodedCertificateAndKey

<a name="talos.resource.definitions.secrets.KubernetesRootSpec"></a>

KubernetesRootSpec

KubernetesRootSpec describes root Kubernetes secrets.

FieldTypeLabelDescription
namestring
endpointcommon.URL
local_endpointcommon.URL
cert_sa_nsstringrepeated
dns_domainstring
issuing_cacommon.PEMEncodedCertificateAndKey
service_accountcommon.PEMEncodedKeyServiceAccount is the issuing service account key.
aggregator_cacommon.PEMEncodedCertificateAndKey
aescbc_encryption_secretstring
bootstrap_token_idstring
bootstrap_token_secretstring
secretbox_encryption_secretstring
api_server_ipscommon.NetIPrepeated
accepted_c_ascommon.PEMEncodedCertificaterepeated
etcd_encryption_configgoogle.protobuf.Struct
accepted_aggregator_c_ascommon.PEMEncodedCertificaterepeated
service_account_accepted_keyscommon.PEMEncodedKeyrepeatedServiceAccountAcceptedKeys are the accepted service account keys.

It already contains the public version of the issuing key. | | issuer_url | string | | IssuerURL is the URL of the service account issuer. | | accepted_issuers | string | repeated | AcceptedIssuers are the accepted service account issuers.

It doesn't contain the issuerURL. | | api_audiences | string | repeated | APIAudiences are the accepted service account audiences. |

<a name="talos.resource.definitions.secrets.MaintenanceRootSpec"></a>

MaintenanceRootSpec

MaintenanceRootSpec describes maintenance service CA.

FieldTypeLabelDescription
cacommon.PEMEncodedCertificateAndKey

<a name="talos.resource.definitions.secrets.OSRootSpec"></a>

OSRootSpec

OSRootSpec describes operating system CA.

FieldTypeLabelDescription
issuing_cacommon.PEMEncodedCertificateAndKey
cert_sani_pscommon.NetIPrepeated
cert_sandns_namesstringrepeated
tokenstring
accepted_c_ascommon.PEMEncodedCertificaterepeated

<a name="talos.resource.definitions.secrets.TrustdCertsSpec"></a>

TrustdCertsSpec

TrustdCertsSpec describes etcd certs secrets.

FieldTypeLabelDescription
servercommon.PEMEncodedCertificateAndKey
accepted_c_ascommon.PEMEncodedCertificaterepeated
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/security/security.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/security/security.proto

<a name="talos.resource.definitions.security.ImageKeylessVerifierSpec"></a>

ImageKeylessVerifierSpec

ImageKeylessVerifierSpec represents a signature verification provider.

FieldTypeLabelDescription
issuerstringIssuer is the OIDC issuer URL.
subjectstringSubject is the expected subject.
subject_regexstringSubjectRegex is a regex pattern for subject matching.

<a name="talos.resource.definitions.security.ImagePublicKeyVerifierSpec"></a>

ImagePublicKeyVerifierSpec

ImagePublicKeyVerifierSpec represents a signature verification provider with static public key.

FieldTypeLabelDescription
certificatestringCertificate is a public certificate in PEM format accepted for image signature verification.

<a name="talos.resource.definitions.security.ImageVerificationRuleSpec"></a>

ImageVerificationRuleSpec

ImageVerificationRuleSpec represents a verification rule.

FieldTypeLabelDescription
image_patternstringImagePattern is the image name pattern.
skipboolSkip is the action for matching images.
denyboolDeny is the action for matching images.
keyless_verifierImageKeylessVerifierSpecKeylessVerifier is the keyless verifier configuration to use.
public_key_verifierImagePublicKeyVerifierSpecPublicKeyVerifier is the public key verifier configuration to use.

<a name="talos.resource.definitions.security.TUFTrustedRootSpec"></a>

TUFTrustedRootSpec

TUFTrustedRootSpec represents a sigstore's TUF trusted root information.

FieldTypeLabelDescription
last_refresh_timegoogle.protobuf.TimestampLastRefreshTime is the last time the trusted root was refreshed.
json_datastringJSONData is the trusted root data in JSON format.
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/siderolink/siderolink.proto"></a>

<p align="right"><a href="#top">Top</a></p>

<a name="talos.resource.definitions.siderolink.ConfigSpec"></a>

ConfigSpec

ConfigSpec describes Siderolink configuration.

FieldTypeLabelDescription
api_endpointstring
hoststring
join_tokenstring
insecurebool
tunnelbool

<a name="talos.resource.definitions.siderolink.StatusSpec"></a>

StatusSpec

StatusSpec describes Siderolink status.

FieldTypeLabelDescription
hoststringHost is the Siderolink target host.
connectedboolConnected is the status of the Siderolink GRPC connection.
link_namestringLinkName is the name of the interface used for the Siderolink tunnel.
grpc_tunnelboolGRPCTunnel is true if the Wireguard-over-GRPC tunnel is being used.

<a name="talos.resource.definitions.siderolink.TunnelSpec"></a>

TunnelSpec

TunnelSpec describes Siderolink GRPC Tunnel configuration.

FieldTypeLabelDescription
api_endpointstringAPIEndpoint is the Siderolink WireGuard over GRPC endpoint.
link_namestringLinkName is the name to use for WireGuard tunnel.
mtuint64MTU is the maximum transmission unit for the tunnel.
node_addresscommon.NetIPPortNodeAddress is the virtual address of our node. It's used to identify our node in the WireGuard GRPC streamer. It's not the address of the actual WireGuard interface.
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/storage/storage.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/storage/storage.proto

<a name="talos.resource.definitions.storage.LVMLogicalVolumeSpecSpec"></a>

LVMLogicalVolumeSpecSpec

LVMLogicalVolumeSpecSpec is the spec for LVMLogicalVolumeSpec resource.

FieldTypeLabelDescription
vg_namestringVGName is the parent volume group name.
namestringName is the logical volume name.
typetalos.resource.definitions.enums.StorageLVMLogicalVolumeTypeType is the LV layout.
size_bytesuint64SizeBytes is the absolute LV size in bytes; used when SizePercentVG is zero.
size_percent_vguint32SizePercentVG, when non-zero, sizes the LV as a percentage of the VG.
mirrorsuint32Mirrors is the mirror count for raid1/raid10 layouts.
stripesuint32Stripes is the stripe count for raid0/raid10 layouts; 0 means "all PVs", resolved by the reconcile controller.

<a name="talos.resource.definitions.storage.LVMLogicalVolumeStatusSpec"></a>

LVMLogicalVolumeStatusSpec

LVMLogicalVolumeStatusSpec mirrors selected lvs columns.

FieldTypeLabelDescription
pathstringPath is the LV path (lv_path), e.g. /dev/vg0/data. Empty for hidden LVs.
dm_pathstringDMPath is the device-mapper path (lv_dm_path), always populated when active.
namestringName is the LV short name (lv_name).
full_namestringFullName is the qualified LV name (lv_full_name), e.g. "vg0/data".
vg_namestringVGName is the parent volume group name (vg_name).
uuidstringUUID is the stable LV identifier (lv_uuid).
layoutstringLayout is the LV layout (lv_layout), e.g. "linear", "raid1", "thin,pool".
rolestringRole is the LV role (lv_role), e.g. "public", "private,thin,pool,data".
permissionsstringPermissions reflects lv_permissions.
allocation_policystringAllocationPolicy reflects lv_allocation_policy.
allocation_lockedstringAllocationLocked is the raw lv_allocation_locked column ("locked" / "").
fixed_minorstringFixedMinor is the raw lv_fixed_minor column ("fixed" / "").
activestringActive is the raw lv_active column ("active" / "" / "unknown").
active_locallystringActiveLocally is the raw lv_active_locally column ("active locally" / "" / "unknown").
active_remotelystringActiveRemotely is the raw lv_active_remotely column ("active remotely" / "" / "unknown").
active_exclusivelystringActiveExclusively is the raw lv_active_exclusively column ("active exclusively" / "" / "unknown").
suspendedstringSuspended is the raw lv_suspended column ("suspended" / "" / "unknown").
device_openstringDeviceOpen is the raw lv_device_open column ("open" / "" / "unknown").
skip_activationstringSkipActivation is the raw lv_skip_activation column ("skip activation" / "").
mergingstringMerging is the raw lv_merging column ("merging" / "").
convertingstringConverting is the raw lv_converting column ("converting" / "").
sizestringSize is the raw lv_size column in bytes.
metadata_sizestringMetadataSize is the raw lv_metadata_size column in bytes ("" when not applicable).
read_aheadstringReadAhead is the raw lv_read_ahead column ("auto" or a byte count).
kernel_majorstringKernelMajor is the raw lv_kernel_major column ("-1" when inactive, otherwise a number).
kernel_minorstringKernelMinor is the raw lv_kernel_minor column ("-1" when inactive, otherwise a number).
originstringOrigin is the LV name this LV is a snapshot/thin clone of (origin); empty otherwise.
origin_sizestringOriginSize is the raw origin_size column in bytes ("" when not applicable).
pool_lvstringPoolLV is the parent thin/cache pool name (pool_lv); empty when not pool-backed.
data_lvstringDataLV is the data sub-LV name (data_lv); empty when not applicable.
metadata_lvstringMetadataLV is the metadata sub-LV name (metadata_lv); empty when not applicable.
move_pvstringMovePV is the source PV of an in-progress pvmove (move_pv); empty otherwise.
convert_lvstringConvertLV is the target LV of an in-progress lvconvert (convert_lv); empty otherwise.
when_fullstringWhenFull reflects lv_when_full ("error" / "queue" / "").
tagsstringrepeatedTags is the list of tags attached to the LV (lv_tags).
pretty_sizestringPrettySize is the human-readable rendering of Size; empty when Size is not a byte count.

<a name="talos.resource.definitions.storage.LVMPhysicalVolumeSpecSpec"></a>

LVMPhysicalVolumeSpecSpec

LVMPhysicalVolumeSpecSpec is the spec for LVMPhysicalVolumeSpec resource.

FieldTypeLabelDescription
devicestringDevice is the block-device path to initialize as a PV.
vg_namestringVGName is the target volume group name.

<a name="talos.resource.definitions.storage.LVMPhysicalVolumeStatusSpec"></a>

LVMPhysicalVolumeStatusSpec

LVMPhysicalVolumeStatusSpec mirrors selected pvs columns. Raw strings preserve LVM sentinel values.

FieldTypeLabelDescription
devicestringDevice is the block-device path backing the PV (pv_name).
vg_namestringVGName is the parent volume group name; empty if the PV is not in a VG.
uuidstringUUID is the stable PV identifier written to the PV label (pv_uuid).
formatstringFormat is the on-disk metadata format (pv_fmt), e.g. "lvm2".
allocatablestringAllocatable is the raw pv_allocatable column ("allocatable" / "").
exportedstringExported is the raw pv_exported column ("exported" / "").
missingstringMissing is the raw pv_missing column ("missing" / "").
in_usestringInUse is the raw pv_in_use column ("used" / "").
sizestringSize is the raw pv_size column in bytes.
device_sizestringDeviceSize is the raw dev_size column in bytes.
freestringFree is the raw pv_free column in bytes.
usedstringUsed is the raw pv_used column in bytes.
pe_countstringPECount is the raw pv_pe_count column.
pe_alloc_countstringPEAllocCount is the raw pv_pe_alloc_count column.
majorstringMajor is the raw pv_major column ("-1" for orphan PVs, otherwise the kernel major).
minorstringMinor is the raw pv_minor column ("-1" for orphan PVs, otherwise the kernel minor).
tagsstringrepeatedTags is the list of tags attached to the PV (pv_tags).
pretty_sizestringPrettySize is the human-readable rendering of Size.
pretty_device_sizestringPrettyDeviceSize is the human-readable rendering of DeviceSize.
pretty_freestringPrettyFree is the human-readable rendering of Free.

<a name="talos.resource.definitions.storage.LVMRefreshRequestSpec"></a>

LVMRefreshRequestSpec

LVMRefreshRequestSpec is the spec for LVMRefreshRequest.

FieldTypeLabelDescription
requestint64

<a name="talos.resource.definitions.storage.LVMValidationErrorSpec"></a>

LVMValidationErrorSpec

LVMValidationErrorSpec is the spec for LVMValidationError resource.

FieldTypeLabelDescription
vg_namestringVGName is the volume group the error relates to.
messagestringMessage describes the validation error.

<a name="talos.resource.definitions.storage.LVMVolumeGroupSpecSpec"></a>

LVMVolumeGroupSpecSpec

LVMVolumeGroupSpecSpec is the spec for LVMVolumeGroupSpec resource.

FieldTypeLabelDescription
namestringName is the volume group name.
physical_volumesstringrepeatedPhysicalVolumes is the list of PV device paths.

<a name="talos.resource.definitions.storage.LVMVolumeGroupStatusSpec"></a>

LVMVolumeGroupStatusSpec

LVMVolumeGroupStatusSpec mirrors selected vgs columns. Raw strings preserve LVM sentinel values.

FieldTypeLabelDescription
namestringName is the volume group name (vg_name).
uuidstringUUID is the stable VG identifier (vg_uuid).
formatstringFormat is the on-disk metadata format (vg_fmt), e.g. "lvm2".
permissionsstringPermissions reflects vg_permissions ("writeable" / "read-only" / "unknown" / "").
extendablestringExtendable is the raw vg_extendable column ("extendable" / "").
exportedstringExported is the raw vg_exported column ("exported" / "").
partialstringPartial is the raw vg_partial column ("partial" / "").
allocation_policystringAllocationPolicy reflects vg_allocation_policy.
clusteredstringClustered is the raw vg_clustered column ("clustered" / "").
sharedstringShared is the raw vg_shared column ("shared" / "").
sizestringSize is the raw vg_size column in bytes.
freestringFree is the raw vg_free column in bytes.
extent_sizestringExtentSize is the raw vg_extent_size column in bytes.
extent_countstringExtentCount is the raw vg_extent_count column.
free_extent_countstringFreeExtentCount is the raw vg_free_count column.
max_lvstringMaxLV is the raw max_lv column; "0" means no limit.
max_pvstringMaxPV is the raw max_pv column; "0" means no limit.
lv_countstringLVCount is the raw lv_count column.
pv_countstringPVCount is the raw pv_count column.
snap_countstringSnapCount is the raw snap_count column.
missing_pv_countstringMissingPVCount is the raw vg_missing_pv_count column.
seq_nostringSeqNo is the raw vg_seqno column.
lock_typestringLockType is the raw vg_lock_type column.
system_idstringSystemID is the system_id stamped into VG metadata (vg_systemid).
tagsstringrepeatedTags is the list of tags attached to the VG (vg_tags).
pretty_sizestringPrettySize is the human-readable rendering of Size.
pretty_freestringPrettyFree is the human-readable rendering of Free.

<a name="talos.resource.definitions.storage.MDArraySpecSpec"></a>

MDArraySpecSpec

MDArraySpecSpec is the spec for MDArraySpec resource.

FieldTypeLabelDescription
leveltalos.resource.definitions.enums.StorageMDLevelLevel is the RAID level.
volume_selectorgoogle.api.expr.v1alpha1.CheckedExprVolumeSelector matches the member volumes of the array.
metadatatalos.resource.definitions.enums.StorageMDMetadataMetadata is the on-disk MD metadata format.

<a name="talos.resource.definitions.storage.MDArrayStatusSpec"></a>

MDArrayStatusSpec

MDArrayStatusSpec is the spec for MDArrayStatus resource.

FieldTypeLabelDescription
leveltalos.resource.definitions.enums.StorageMDLevelLevel is the RAID level.
devicestringDevice is the stable by-id device path of the array.
membersstringrepeatedMembers is the list of member device paths.
errorstringError is the last provisioning error, if any.
statustalos.resource.definitions.enums.StorageMDArrayPhaseStatus is the provisioning/sync state of the array.
raid_devicesint64RaidDevices is the observed active RAID device count.
uuidstringUUID is the stable MD array UUID.
namestringName is the metadata-stamped array name.
metadatastringMetadata is the MD metadata format/version.
array_statestringArrayState is the current sysfs array_state value.
sync_actionstringSyncAction is the current sysfs sync_action value.

<a name="talos.resource.definitions.storage.MDRefreshRequestSpec"></a>

MDRefreshRequestSpec

MDRefreshRequestSpec is the spec for MDRefreshRequest.

FieldTypeLabelDescription
requestint64
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/time/time.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/time/time.proto

<a name="talos.resource.definitions.time.AdjtimeStatusSpec"></a>

AdjtimeStatusSpec

AdjtimeStatusSpec describes Linux internal adjtime state.

FieldTypeLabelDescription
offsetgoogle.protobuf.Duration
frequency_adjustment_ratiodouble
max_errorgoogle.protobuf.Duration
est_errorgoogle.protobuf.Duration
statusstring
constantint64
sync_statusbool
statestring

<a name="talos.resource.definitions.time.NTPStatusSpec"></a>

NTPStatusSpec

NTPStatusSpec describes the state of the NTP client.

FieldTypeLabelDescription
spike_detectedboolSpikeDetected indicates that the last time measurement was discarded by the spike filter.

A discarded measurement is not applied to the clock at all, so a filter which keeps rejecting looks exactly like a clock which is never corrected. | | consecutive_spikes | int64 | | ConsecutiveSpikes is the number of time measurements discarded in a row by the spike filter. |

<a name="talos.resource.definitions.time.StatusSpec"></a>

StatusSpec

StatusSpec describes time sync state.

This spec is used as a reconcile trigger by other controllers (most notably the certificate generating ones in the secrets package), so it should only ever carry fields which change rarely: anything which changes on every NTP poll belongs in [NTPStatusSpec] instead.

FieldTypeLabelDescription
syncedboolSynced indicates whether time is in sync.
epochint64Epoch is incremented every time clock jumps more than 15min.
sync_disabledboolSyncDisabled indicates if time sync is disabled.
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/definitions/v1alpha1/v1alpha1.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/definitions/v1alpha1/v1alpha1.proto

<a name="talos.resource.definitions.v1alpha1.ServiceSpec"></a>

ServiceSpec

ServiceSpec describe service state.

FieldTypeLabelDescription
runningbool
healthybool
unknownbool
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="resource/network/device_config.proto"></a>

<p align="right"><a href="#top">Top</a></p>

resource/network/device_config.proto

<a name="resource.network.DeviceConfigSpecSpec"></a>

DeviceConfigSpecSpec

DeviceConfigSpecSpec is the spec for the network.DeviceConfigSpec resource.

FieldTypeLabelDescription
yaml_marshalledbytesContains YAML marshalled device config (as part of the machine config).
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions --> <!-- end services -->

<a name="security/security.proto"></a>

<p align="right"><a href="#top">Top</a></p>

security/security.proto

<a name="securityapi.CertificateRequest"></a>

CertificateRequest

The request message containing the certificate signing request.

FieldTypeLabelDescription
csrbytesCertificate Signing Request in PEM format.

<a name="securityapi.CertificateResponse"></a>

CertificateResponse

The response message containing signed certificate.

FieldTypeLabelDescription
cabytesCertificate of the CA that signed the requested certificate in PEM format.
crtbytesSigned X.509 requested certificate in PEM format.
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions -->

<a name="securityapi.SecurityService"></a>

SecurityService

The security service definition.

Method NameRequest TypeResponse TypeDescription
CertificateCertificateRequestCertificateResponse
<!-- end services -->

<a name="signer/signer.proto"></a>

<p align="right"><a href="#top">Top</a></p>

signer/signer.proto

<a name="signerapi.CertificateResponse"></a>

CertificateResponse

CertificateResponse is returned by GetCertificate.

FieldTypeLabelDescription
cert_pembytesPEM-encoded X.509 certificate.

<a name="signerapi.PublicKeyResponse"></a>

PublicKeyResponse

PublicKeyResponse is returned by GetPublicKey.

FieldTypeLabelDescription
pub_key_pembytesPEM-encoded SubjectPublicKeyInfo (PKIX).

<a name="signerapi.SignRequest"></a>

SignRequest

SignRequest is sent for the Sign RPC.

FieldTypeLabelDescription
digestbytesPrecomputed digest of the data to sign. Length must match hash.
hashHashHash algorithm used to produce digest.
schemeSchemeSignature scheme the signer should produce.

<a name="signerapi.SignResponse"></a>

SignResponse

SignResponse is returned by the Sign RPC.

FieldTypeLabelDescription
signaturebytesRaw signature bytes, modulus-sized.
<!-- end messages -->

<a name="signerapi.Hash"></a>

Hash

Hash identifies the digest algorithm used to produce SignRequest.digest.

NameNumberDescription
HASH_UNSPECIFIED0
HASH_SHA2561
HASH_SHA3842
HASH_SHA5123

<a name="signerapi.Scheme"></a>

Scheme

Scheme identifies the signature algorithm the signer should produce.

NameNumberDescription
SCHEME_UNSPECIFIED0
SCHEME_RSA_PKCS1V151
SCHEME_RSA_PSS2
<!-- end enums --> <!-- end HasExtensions -->

<a name="signerapi.SignerService"></a>

SignerService

SignerService is implemented by an out-of-process SecureBoot/PCR signer.

The Talos imager opens a gRPC client connection to the signer's Unix socket and calls these RPCs to fetch the signing certificate / public key and to sign digests of the artifacts being built.

A YubiKey-based example implementation is available at: https://github.com/jaakkonen/talos-secureboot

Conventions:

  • SecureBoot signing requires GetCertificate (the cert is embedded in the PE Authenticode signature so UEFI firmware can verify it). The public key is read from the certificate.
  • PCR signing requires GetPublicKey only (the public RSA key is embedded in the UKI's .pcrpkey section). GetCertificate is unused.
  • Sign always operates on a precomputed digest. The hash and scheme are declared in the request so the helper can route to the correct HSM primitive (RSA-PKCS1v15 / RSA-PSS).
Method NameRequest TypeResponse TypeDescription
GetCertificate.google.protobuf.EmptyCertificateResponseGetCertificate returns the X.509 certificate associated with the signing key, PEM-encoded.
GetPublicKey.google.protobuf.EmptyPublicKeyResponseGetPublicKey returns the public key associated with the signing key, PEM-encoded as a SubjectPublicKeyInfo (PKIX) block.
SignSignRequestSignResponseSign produces a signature over the supplied digest.
<!-- end services -->

<a name="storage/storage.proto"></a>

<p align="right"><a href="#top">Top</a></p>

storage/storage.proto

<a name="storage.BlockDeviceWipe"></a>

BlockDeviceWipe

FieldTypeLabelDescription
metadatacommon.Metadata

<a name="storage.BlockDeviceWipeDescriptor"></a>

BlockDeviceWipeDescriptor

BlockDeviceWipeDescriptor represents a single block device to be wiped.

The device can be either a full disk (e.g. vda) or a partition (vda5). The device should not be used in any of active volumes. The device should not be used as a secondary (e.g. part of LVM).

FieldTypeLabelDescription
devicestringDevice name to wipe (e.g. sda or sda5).

The name should be submitted without /dev/ prefix. | | method | BlockDeviceWipeDescriptor.Method | | Wipe method to use. | | skip_volume_check | bool | | Skip the volume in use check. | | skip_secondary_check | bool | | Skip the secondary disk check (e.g. underlying disk for RAID or LVM). | | drop_partition | bool | | Drop the partition (only applies if the device is a partition). |

<a name="storage.BlockDeviceWipeRequest"></a>

BlockDeviceWipeRequest

FieldTypeLabelDescription
devicesBlockDeviceWipeDescriptorrepeated

<a name="storage.BlockDeviceWipeResponse"></a>

BlockDeviceWipeResponse

FieldTypeLabelDescription
messagesBlockDeviceWiperepeated

<a name="storage.Disk"></a>

Disk

Disk represents a disk.

FieldTypeLabelDescription
sizeuint64Size indicates the disk size in bytes.
modelstringModel idicates the disk model.
device_namestringDeviceName indicates the disk name (e.g. sda).
namestringName as in /sys/block/<dev>/device/name.
serialstringSerial as in /sys/block/<dev>/device/serial.
modaliasstringModalias as in /sys/block/<dev>/device/modalias.
uuidstringUuid as in /sys/block/<dev>/device/uuid.
wwidstringWwid as in /sys/block/<dev>/device/wwid.
typeDisk.DiskTypeType is a type of the disk: nvme, ssd, hdd, sd card.
bus_pathstringBusPath is the bus path of the disk.
system_diskboolSystemDisk indicates that the disk is used as Talos system disk.
subsystemstringSubsystem is the symlink path in the /sys/block/<dev>/subsystem.
readonlyboolReadonly specifies if the disk is read only.

<a name="storage.Disks"></a>

Disks

DisksResponse represents the response of the Disks RPC.

FieldTypeLabelDescription
metadatacommon.Metadata
disksDiskrepeated

<a name="storage.DisksResponse"></a>

DisksResponse

FieldTypeLabelDescription
messagesDisksrepeated
<!-- end messages -->

<a name="storage.BlockDeviceWipeDescriptor.Method"></a>

BlockDeviceWipeDescriptor.Method

NameNumberDescription
FAST0Fast wipe - wipe only filesystem signatures.
ZEROES1Zeroes wipe - wipe by overwriting with zeroes (might be slow depending on the disk size and available hardware features).

<a name="storage.Disk.DiskType"></a>

Disk.DiskType

NameNumberDescription
UNKNOWN0
SSD1
HDD2
NVME3
SD4
CD5
<!-- end enums --> <!-- end HasExtensions -->

<a name="storage.StorageService"></a>

StorageService

StorageService represents the storage service.

Method NameRequest TypeResponse TypeDescription
Disks.google.protobuf.EmptyDisksResponse
BlockDeviceWipeBlockDeviceWipeRequestBlockDeviceWipeResponseBlockDeviceWipe performs a wipe of the blockdevice (partition or disk).

The method doesn't require a reboot, and it can only wipe blockdevices which are not being used as volumes at the moment. Wiping of volumes requires a different API. |

<!-- end services -->

<a name="time/time.proto"></a>

<p align="right"><a href="#top">Top</a></p>

time/time.proto

<a name="time.Time"></a>

Time

FieldTypeLabelDescription
metadatacommon.Metadata
serverstring
localtimegoogle.protobuf.Timestamp
remotetimegoogle.protobuf.Timestamp

<a name="time.TimeRequest"></a>

TimeRequest

The response message containing the ntp server

FieldTypeLabelDescription
serverstring

<a name="time.TimeResponse"></a>

TimeResponse

The response message containing the ntp server, time, and offset

FieldTypeLabelDescription
messagesTimerepeated
<!-- end messages --> <!-- end enums --> <!-- end HasExtensions -->

<a name="time.TimeService"></a>

TimeService

The time service definition.

Method NameRequest TypeResponse TypeDescription
Time.google.protobuf.EmptyTimeResponse
TimeCheckTimeRequestTimeResponse
<!-- end services -->

Scalar Value Types

.proto TypeNotesC++JavaPythonGoC#PHPRuby
<a name="double" /> doubledoubledoublefloatfloat64doublefloatFloat
<a name="float" /> floatfloatfloatfloatfloat32floatfloatFloat
<a name="int32" /> int32Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint32 instead.int32intintint32intintegerBignum or Fixnum (as required)
<a name="int64" /> int64Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint64 instead.int64longint/longint64longinteger/stringBignum
<a name="uint32" /> uint32Uses variable-length encoding.uint32intint/longuint32uintintegerBignum or Fixnum (as required)
<a name="uint64" /> uint64Uses variable-length encoding.uint64longint/longuint64ulonginteger/stringBignum or Fixnum (as required)
<a name="sint32" /> sint32Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int32s.int32intintint32intintegerBignum or Fixnum (as required)
<a name="sint64" /> sint64Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int64s.int64longint/longint64longinteger/stringBignum
<a name="fixed32" /> fixed32Always four bytes. More efficient than uint32 if values are often greater than 2^28.uint32intintuint32uintintegerBignum or Fixnum (as required)
<a name="fixed64" /> fixed64Always eight bytes. More efficient than uint64 if values are often greater than 2^56.uint64longint/longuint64ulonginteger/stringBignum
<a name="sfixed32" /> sfixed32Always four bytes.int32intintint32intintegerBignum or Fixnum (as required)
<a name="sfixed64" /> sfixed64Always eight bytes.int64longint/longint64longinteger/stringBignum
<a name="bool" /> boolboolbooleanbooleanboolboolbooleanTrueClass/FalseClass
<a name="string" /> stringA string must always contain UTF-8 encoded or 7-bit ASCII text.stringStringstr/unicodestringstringstringString (UTF-8)
<a name="bytes" /> bytesMay contain any arbitrary sequence of bytes.stringByteStringstr[]byteByteStringstringString (ASCII-8BIT)