261
edits
Changes
m
no edit summary
The frontend networks, uses DHCP with [[Infrastructure:Shellshock]], while the backend network is statically routed.
The blades have completely ephemeral disks -- the k3s node passwords and join tokens are shipped via agenix, targeting an ssh host key that is sealed by TPM1.2 and kept in the netboot image.
You can spy their config here [https://github.com/vtluug/construct/blob/main/hosts/bastille/blade.nix]
