메뉴
Talos Linux v1.12 immutable K8s OS. This skill should be used when bootstrapping clusters, patching machine config, networking, upgrades, etcd maintenance, talosctl debugging, or platform installs.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | talos |
| description | Talos Linux v1.12 immutable K8s OS. This skill should be used when bootstrapping clusters, patching machine config, networking, upgrades, etcd maintenance, talosctl debugging, or platform installs. |
Talos is an immutable, API-driven Linux distribution purpose-built for Kubernetes. No SSH, no shell,
no package manager. All management via talosctl API. Machine config is a single YAML file
containing one or more documents separated by ---.
| Task | Command |
|---|---|
| Install talosctl | brew install siderolabs/tap/talosctl |
| Generate secrets | talosctl gen secrets -o secrets.yaml |
| Generate config | talosctl gen config <name> <endpoint> --with-secrets secrets.yaml |
| Apply config | talosctl apply-config -n <ip> -f config.yaml --insecure |
| Bootstrap cluster | talosctl bootstrap -n <cp-ip> -e <cp-ip> |
| Get kubeconfig | talosctl kubeconfig -n <cp-ip> |
| Upgrade Talos | talosctl upgrade -n <ip> --image ghcr.io/siderolabs/installer:v1.12.x |
| Upgrade K8s | talosctl upgrade-k8s -n <cp-ip> --to 1.x.y |
| Check health | talosctl health |
| View dashboard | talosctl dashboard |
| Patch config | talosctl patch mc -n <ip> --patch @patch.yaml |
| etcd snapshot | talosctl etcd snapshot db.snapshot |
| Reset node | talosctl reset -n <ip> |
| View logs | talosctl logs <service> -n <ip> |
| Kernel logs | talosctl dmesg -n <ip> |
Config = multi-document YAML. Primary document is v1alpha1 with machine: and cluster: sections.
Additional documents for networking (LinkConfig, VLANConfig, BondConfig, etc.), storage (VolumeConfig,
UserVolumeConfig), firewall (NetworkRuleConfig), and extensions (ExtensionServiceConfig).
Key config operations:
talosctl gen config with --config-patch flagsmachine: partial YAML merged with base)auto, no-reboot, reboot, staged, trytalosctl edit mc -n <ip>See references/machine-config.md for full v1alpha1 schema, patching rules, and examples.
gen secrets) - store permanentlygen config + --config-patch)apply-config --insecure)talosctl bootstrap)See references/getting-started.md for complete bootstrap procedures (single-node and production HA).
talosctl upgrade --image <installer> - A/B image, auto-rollback on boot failuretalosctl upgrade-k8s --to <version> - handles all components automaticallyetcd snapshot, restore with bootstrap --recover-fromSee references/upgrades-maintenance.md for full procedures, rollback, and disaster recovery.
Talos uses config documents for network setup. No network config = DHCP on primary interface.
Key topics: static IPs, VLANs, bonds, bridges, DNS resolvers, corporate proxies, KubeSpan (WireGuard mesh), ingress firewall, multihoming (etcd/kubelet subnet selection).
See references/networking.md for all network config document types and YAML examples.
Talos disk: EFI + META + STATE + EPHEMERAL partitions. Supports LUKS2 encryption (nodeID, TPM, KMS keys). User volumes for workload storage. CSI drivers: Rook-Ceph, Longhorn, local-path-provisioner.
See references/storage.md for disk management, encryption, user volumes, and Rook-Ceph setup.
Common addons on Talos: Cilium/Calico (CNI), MetalLB (LoadBalancer), Traefik (Gateway API), metrics-server, KubePrism (in-cluster HA endpoint). Deploy via Helm, extraManifests, or inlineManifests.
See references/kubernetes-addons.md for deployment procedures and config patches.
Diagnostic workflow: talosctl health → talosctl services → talosctl logs <svc> →
talosctl dmesg → talosctl get <resource> → talosctl dashboard.
See references/troubleshooting.md for common issues, diagnostic commands, and recovery procedures.
| File | Topics |
|---|---|
references/getting-started.md | Bootstrap, quickstart, production notes, system requirements |
references/machine-config.md | v1alpha1 schema, patching, apply modes, config generation |
references/networking.md | Static IP, VLAN, bond, bridge, DNS, proxy, KubeSpan, firewall |
references/upgrades-maintenance.md | Talos/K8s upgrades, etcd ops, disaster recovery, scaling |
references/troubleshooting.md | Diagnostics, common issues, talosctl commands, logging |
references/storage.md | Disk management, encryption, user volumes, Rook-Ceph, CSI |
references/kubernetes-addons.md | Cilium, Calico, MetalLB, Traefik, metrics-server, KubePrism |
references/installation-platforms.md | Bare metal, Proxmox, KVM, VMware, Docker, air-gapped |
references/security.md | Certificates, CA rotation, SecureBoot, SELinux, image verification |
references/architecture.md | Components, control plane, controllers/resources, philosophy |
references/extensions-customization.md | Extensions, kernel modules, containerd, registry mirrors, tuning |
Official docs: https://docs.siderolabs.com/talos/v1.12/
Reviews code comments across languages before a PR opens. Use when finishing a development branch, before merging, or when a pr create was blocked pending comment review.
Create, promote, categorize, and validate skills for the kettleofskills marketplace. Use when syncing dotfiles skills into the marketplace, adding skills, assigning categories, or preparing a release.
Docker builds, Compose, and Docker-in-Docker for CI. Use when writing Dockerfiles, optimizing build times, multi-stage builds, BuildKit cache mounts, docker-compose.yml, or CI/CD pipelines (GitHub/GitLab/Forgejo Actions) — including docker-in-docker (dind) runners, rootless dind, bind-mount-vs-build-context confusion, and "mkdir <path>: permission denied" mount failures. Covers layer ordering, dependency caching, .dockerignore, multi-stage, BuildKit, Compose, and dind mount patterns.
Create or update Claude skills. Use for new skills, skill references, skill scripts, optimizing existing skills, extending Claude's capabilities.
Build Go terminal UIs (TUIs) and CLIs with charmbracelet — Bubble Tea runtime, Lip Gloss styling, Bubbles components, Glamour markdown, Harmonica animation, BubbleZone mouse. For any bubbletea TUI.
Bun SQL-first ORM for Go (uptrace/bun). Use for PostgreSQL/SQLite setup, bun.BaseModel struct tags, query builder CRUD, relations, migrations, fixtures, hooks, transactions, and soft deletes.