Skip to content

[Concept] : Add Intel NUC worker nodes to existing Talos KBVE cluster #5624

@Fudster

Description

@Fudster

Add Intel NUC worker nodes to existing Talos Linux cluster

Overview

We have an existing Talos Linux control plane running on Hetzner and want to add Intel NUCs as worker nodes with Wireguard networking for secure communication.

Hardware Status

  • Intel NUCs: ✅ Available
  • PSUs: 🛒 Need to purchase
  • RAM: 🛒 Need to purchase (8GB per NUC)
  • SSDs: 🛒 Need to purchase

Current Infrastructure

  • Control Plane: ✅ Running on Hetzner (single Talos node with Longhorn)
  • Wireguard Config: ❌ Need to configure in machine configs

Proposed Implementation

I think we should approach this in the following way:

Phase 1: Hardware Preparation

  • Purchase compatible PSUs for our Intel NUC models
  • Purchase 8GB RAM per NUC
  • Purchase SSDs (recommend 256GB+ per NUC)
  • Assemble and test all NUC units

Phase 2: Create Wireguard Network Configuration

  • Generate cluster configs with Wireguard networking:
    talosctl cluster create --wireguard-cidr 10.1.0.0/24
  • This automatically generates Wireguard network configuration for each node

Phase 3: Extract Configuration Files

  • Extract the generated configuration files:
    talosctl get mc v1alpha1 -o jsonpath='{.spec}' -n 10.5.0.2 > controlplane.yaml
    talosctl get mc v1alpha1 -o jsonpath='{.spec}' -n 10.5.0.3 > worker.yaml

Phase 4: Talos Linux Installation on NUCs

  • Create Talos Linux ISO/image
  • Create bootable USB drives
  • Boot each NUC from USB and install Talos Linux to SSD

Phase 5: Join NUCs to Cluster

  • Apply worker configuration to each NUC:
    talosctl apply-config --insecure --nodes [NUC_IP] --file worker.yaml
  • Verify each NUC joins the cluster successfully
  • Test Wireguard connectivity:
    wg show
  • Add additional nodes using the scaling procedure:
    talosctl apply-config --insecure --nodes [NODE_IP] --file worker.yaml
  • Verify Wireguard mesh connectivity between all nodes
  • Test cluster functionality and networking

Questions/Decisions Needed

  • How many NUC worker nodes are we adding?
  • Do we need any specific hardware requirements based on workload?
  • What's the Wireguard CIDR already configured on the Hetzner control plane?

Technical Considerations

  • Existing Hetzner control plane should have Wireguard configuration
  • NUC workers will connect to Hetzner control plane via Wireguard
  • Each NUC will get assigned an IP in the existing Wireguard network range
  • 8GB RAM per NUC should be sufficient for most worker node workloads

Resources


Metadata

Metadata

Labels

0Neutral LevelenhancementNew feature or request

Type

No type

Projects

Status

Theory

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions