# Sidero Documentation - [Talos Linux (1317 pages)](https://docs.siderolabs.com/_llms/talos-linux.txt): Bring up a Kubernetes cluster on Talos Linux and operate it day to day. ## Talos Enterprise Linux ### Overview - [Introducing Talos Enterprise Linux](https://docs.siderolabs.com/talos-enterprise-linux/overview/introducing-talos-enterprise-linux.md): An overview of Talos Enterprise Linux, what it includes, and how to get started. - [Getting Started with Talos Enterprise Linux](https://docs.siderolabs.com/talos-enterprise-linux/overview/getting-started-with-talos-enterprise-linux.md): Log in to Enterprise Image Factory and get your first Talos Enterprise Linux image via the browser wizard or the CLI, or use Omni where enterprise images are delivered automatically. ### Working with Talos Enterprise Linux - [Manage Enterprise Image Factory Credentials](https://docs.siderolabs.com/talos-enterprise-linux/working-with-talos-enterprise-linux/manage-credentials.md): Create, use, rotate, and revoke the API tokens that authenticate requests to Enterprise Image Factory. - [Download Images and Artifacts From Enterprise Image Factory](https://docs.siderolabs.com/talos-enterprise-linux/working-with-talos-enterprise-linux/download-images-and-artifacts.md): How to download Talos Enterprise Linux boot assets, SBOMs, VEX data, and vulnerability scan reports from Enterprise Image Factory. - [Scan Talos Enterprise Linux Images With SBOM and VEX](https://docs.siderolabs.com/talos-enterprise-linux/working-with-talos-enterprise-linux/scan-tel-with-sbom-and-vex.md): How to scan Talos Enterprise Linux images for vulnerabilities using the per-schematic SBOM and Sidero-curated VEX data. - [Verify Enterprise Image Factory Signatures and Attestations](https://docs.siderolabs.com/talos-enterprise-linux/working-with-talos-enterprise-linux/verify-signatures-and-attestations.md): How to verify cosign signatures and build attestations for installer images and downloadable assets from Enterprise Image Factory. - [Use Talos Enterprise Linux with Omni](https://docs.siderolabs.com/talos-enterprise-linux/working-with-talos-enterprise-linux/use-talos-enterprise-linux-with-omni.md): How Omni delivers Talos Enterprise Linux images automatically, and how to access vulnerability reports, SBOMs, and VEX documents for your cluster. - [Migrate Clusters to Talos Enterprise Linux](https://docs.siderolabs.com/talos-enterprise-linux/working-with-talos-enterprise-linux/migrate-clusters.md): How to move existing Talos clusters and machines to Talos Enterprise Linux images through SaaS Omni or talosctl. ### Learn More - [Enterprise Image Factory API Tokens](https://docs.siderolabs.com/talos-enterprise-linux/learn-more/api-tokens.md): How Enterprise Image Factory API tokens work, including scopes, actor profiles, and token lifetimes. ## Talos Omni ### Overview - [Omni Documentation](https://docs.siderolabs.com/omni/overview/what-is-omni.md): Learn how to deploy, manage, and scale Talos Linux clusters with Omni across cloud, on-premises, and edge environments. ### Getting Started - [Install talosctl](https://docs.siderolabs.com/omni/getting-started/how-to-install-talosctl.md): Set up talosctl for managing Talos machines. - [Install and Configure Omnictl](https://docs.siderolabs.com/omni/getting-started/install-and-configure-omnictl.md): Set up omnictl to manage clusters through Omni. - [Getting Started with Omni](https://docs.siderolabs.com/omni/getting-started/getting-started.md): Set up your first Talos cluster with Omni. - [Use Kubectl With Omni](https://docs.siderolabs.com/omni/getting-started/use-kubectl-with-omni.md): Access Omni-managed clusters using kubectl and OIDC. - [Create a Cluster](https://docs.siderolabs.com/omni/getting-started/create-a-cluster.md): Provision a new cluster in Omni using the UI or CLI. - [Omni Support Matrix](https://docs.siderolabs.com/omni/getting-started/support-matrix.md): Supported Talos Linux versions and upgrade policy. - [Talos Version Support Policy](https://docs.siderolabs.com/omni/getting-started/talos-version-support-policy.md): Omni support policy for Talos Linux versions, end-of-support timelines, and upgrade requirements. ### Self Hosted - [Options for Running Omni](https://docs.siderolabs.com/omni/self-hosted/options-for-running-omni.md): Learn about the options for running Omni, from fully managed hosted to self-hosted configurations, and choose the right setup for your environment. - [Omni On-Prem Hardware Requirements](https://docs.siderolabs.com/omni/self-hosted/omni-on-prem-hardware-requirements.md): CPU, memory, disk, and network requirements for running Omni in on-prem environments. - [Run Omni On-Prem](https://docs.siderolabs.com/omni/self-hosted/run-omni-on-prem.md): Deploy a self-hosted Omni instance on any internet-connected Linux host - [Production vs. Non-Production Use Under the Business Source License](https://docs.siderolabs.com/omni/self-hosted/production-vs-non-production.md): Interpretive guidance from Sidero Labs on applying the Business Source License's production and non-production distinction to common Omni deployment patterns. - [Omni Configuration Examples](https://docs.siderolabs.com/omni/self-hosted/omni-configuration-example.md): Annotated configuration file examples for self-hosted Omni deployments, organized by section. - [Enable Workload Proxy](https://docs.siderolabs.com/omni/self-hosted/enable-workload-proxy.md): Configure the workload proxy feature for a self-hosted Omni instance. - [Run An etcd Cluster On-Prem](https://docs.siderolabs.com/omni/self-hosted/run-an-etcd-cluster.md): Deploy a 3-node etcd cluster secured with mTLS, for use as Omni's external datastore - [Run Omni on Kubernetes](https://docs.siderolabs.com/omni/self-hosted/run-omni-on-k8s.md): Run Omni on your Kubernetes infrastructure - [Run Omni Air-Gapped](https://docs.siderolabs.com/omni/self-hosted/run-omni-airgapped.md): Set up the full Sidero stack in a fully offline environment - [Run Image Factory On-Prem](https://docs.siderolabs.com/omni/self-hosted/run-image-factory-on-prem.md): Run Image Factory on-prem to generate Talos images locally - [Configure Keycloak for Omni](https://docs.siderolabs.com/omni/self-hosted/configure-keycloak-for-omni.md): Steps to integrate Keycloak with Omni using SAML authentication. - [Expose Omni with Nginx (HTTPS)](https://docs.siderolabs.com/omni/self-hosted/expose-omni-with-nginx-https.md): Configure Nginx as an HTTPS reverse proxy for on-premises Omni deployments. - [Back Up Omni Database](https://docs.siderolabs.com/omni/self-hosted/back-up-omni-db.md): Learn how to create etcd snapshots to protect data in self-hosted Omni deployments. - [Omni On-Prem etcd Data Recovery](https://docs.siderolabs.com/omni/self-hosted/restore-omni-database.md): Recover etcd data from a self-hosted Omni instance that's running without a host-mounted etcd volume, before the container gets recreated. - [Upgrade Omni](https://docs.siderolabs.com/omni/self-hosted/upgrading-omni.md): Prepare, validate, and apply a new Omni release without risking data integrity. ### Infrastructure and Extensions - [Infrastructure Providers](https://docs.siderolabs.com/omni/infrastructure-and-extensions/infrastructure-providers.md): Connect compute resources to Omni for automated lifecycle management. - [Write an Infrastructure Provider](https://docs.siderolabs.com/omni/infrastructure-and-extensions/writing-infrastructure-providers.md): Create a custom infrastructure provider to dynamically provision machines in Omni. - [Machine Registration](https://docs.siderolabs.com/omni/infrastructure-and-extensions/machine-registration.md): Connect nodes to Omni using SideroLink and WireGuard for secure remote management. - [Install Talos Linux Extensions](https://docs.siderolabs.com/omni/infrastructure-and-extensions/install-talos-linux-extensions.md): Add and manage Talos Linux system extensions in Omni. - [Modify Kernel Arguments](https://docs.siderolabs.com/omni/infrastructure-and-extensions/modify-kernel-arguments.md): Add or update additional Talos kernel arguments through Omni. ### Omni Cluster Setup - [Create a Kubeconfig for a Kubernetes Service Account](https://docs.siderolabs.com/omni/omni-cluster-setup/create-a-kubeconfig-for-a-service-account.md): Generate a kubeconfig for a Kubernetes Service Account using omnictl for secure, token-based cluster access. - [Create a Machine Class](https://docs.siderolabs.com/omni/omni-cluster-setup/create-a-machine-class.md): Define a reusable group of machines based on labels and conditions for automated cluster allocation. - [How configuration works in Omni](https://docs.siderolabs.com/omni/omni-cluster-setup/how-configuration-works-in-omni.md): A conceptual overview of how Omni builds the configuration that runs on each Talos machine, what sources contribute, what you can change and how, and what happens when things silently fail. - [Introduction to Cluster Templates](https://docs.siderolabs.com/omni/omni-cluster-setup/cluster-template.md): Use declarative templates to create, scale, and manage Omni clusters over time. - [Create a Patch for Cluster Machines](https://docs.siderolabs.com/omni/omni-cluster-setup/create-a-patch-for-cluster-machines.md): Apply configuration changes to machines within a cluster. - [Create an Omni Service Account](https://docs.siderolabs.com/omni/omni-cluster-setup/create-an-omni-service-account.md): Generate token-based credentials for programmatic access to Omni. - [Set Initial Machine Labels](https://docs.siderolabs.com/omni/omni-cluster-setup/how-to-set-initial-machine-labels.md): Set machine labels at boot time and understand labels derived from platform metadata for automated grouping and selection in Omni. - [Setting Up the Bare-Metal Infrastructure Provider](https://docs.siderolabs.com/omni/omni-cluster-setup/setting-up-the-bare-metal-infrastructure-provider.md): Deploy and configure the Bare-Metal Infrastructure Provider to provision and manage physical machines with Omni. - [Omni Firewall and Egress Requirements](https://docs.siderolabs.com/omni/omni-cluster-setup/omni-firewall-egress-requirement.md): Network access required for Omni on-prem and SaaS deployments. #### Register machines with Omni - [Overview](https://docs.siderolabs.com/omni/omni-cluster-setup/registering-machines/register-machines-with-omni.md): Learn how to register machines with Omni across different platforms using Talos installation media. - [Register a Bare Metal Machine (ISO)](https://docs.siderolabs.com/omni/omni-cluster-setup/registering-machines/register-a-bare-metal-machine-iso.md): Provision a bare metal server in Omni by booting from a Talos ISO image. - [Register a Bare Metal Machine (PXE/iPXE)](https://docs.siderolabs.com/omni/omni-cluster-setup/registering-machines/register-a-bare-metal-machine-pxe-ipxe.md): Connect a bare metal server to Omni by PXE or iPXE booting Talos Linux. - [Register an AWS EC2 Instance](https://docs.siderolabs.com/omni/omni-cluster-setup/registering-machines/how-to-register-an-aws-ec2-instance.md): Launch AWS EC2 instances and register them with Omni. - [Register an Azure Instance](https://docs.siderolabs.com/omni/omni-cluster-setup/registering-machines/register-an-azure-instance.md): Provision an Azure VM in Omni using a custom Talos image. - [Register a GCP Instance](https://docs.siderolabs.com/omni/omni-cluster-setup/registering-machines/register-a-gcp-instance.md): Provision a Google Cloud VM in Omni using a custom Talos image. - [Register a Hetzner Server](https://docs.siderolabs.com/omni/omni-cluster-setup/registering-machines/register-a-hetzner-server.md): Provision a Hetzner Cloud server in Omni using a custom Talos image. - [Join machines to Omni](https://docs.siderolabs.com/omni/omni-cluster-setup/registering-machines/join-machines-to-omni.md): Register Talos nodes with Omni for centralized management. ### Cluster Management - [Create a Hybrid Cluster](https://docs.siderolabs.com/omni/cluster-management/create-a-hybrid-cluster.md): Create a hybrid Talos cluster across networks using KubeSpan. - [Sync Kubernetes Manifests](https://docs.siderolabs.com/omni/cluster-management/sync-kubernetes-manifests.md): Deploy and sync Kubernetes workloads directly from Omni cluster templates using manifest sync. - [Upgrade Omni Clusters](https://docs.siderolabs.com/omni/cluster-management/upgrading-clusters.md): Manage Talos Linux and Kubernetes upgrades in Omni. - [Gate Talos Upgrades with Healthchecks](https://docs.siderolabs.com/omni/cluster-management/gate-talos-upgrades-with-healthchecks.md): Define Kubernetes Job healthchecks in a cluster template to gate Talos Linux upgrades until your workloads report healthy. - [Expose a Workload via Service Proxy](https://docs.siderolabs.com/omni/cluster-management/expose-a-workload-via-service-proxy.md): Expose HTTP services from Omni-managed clusters using workload service proxying. - [Export a Cluster template](https://docs.siderolabs.com/omni/cluster-management/export-a-cluster-template-from-a-cluster-created-in-the-ui.md): Export and manage UI-created clusters with cluster templates. - [Create Etcd Backups](https://docs.siderolabs.com/omni/cluster-management/etcd-backups.md): Configure S3 backup storage, create manual backups, and enable automatic etcd backups for Omni-managed clusters. - [Restore Etcd of a Cluster](https://docs.siderolabs.com/omni/cluster-management/restore-etcd-of-a-cluster-managed-by-cluster-templates.md): Recover a template-managed Omni cluster from an etcd backup. - [Audit Logs](https://docs.siderolabs.com/omni/cluster-management/using-audit-log.md): View, configure, and interpret activity logs in Omni. - [Export Audit Logs](https://docs.siderolabs.com/omni/cluster-management/export-audit-logs.md): Stream the Omni audit log to a log shipper or file with the audit log exporter. - [Monitor Omni With Prometheus](https://docs.siderolabs.com/omni/cluster-management/monitor-omni-with-prometheus.md): Expose the state of clusters, machines, and machine sets as Prometheus metrics with the Omni exporter. - [Import Talos Clusters](https://docs.siderolabs.com/omni/cluster-management/importing-talos-clusters.md): Import an existing Talos cluster into Omni. - [Manage Omni Clusters with Nautik](https://docs.siderolabs.com/omni/cluster-management/manage-omni-cluster-with-nautik.md): Use Nautik to view and manage your Omni-managed Talos Linux clusters from macOS, iPhone, or iPad. - [Wipe a Machine](https://docs.siderolabs.com/omni/cluster-management/wipe-a-machine.md): Reset and remove machines safely in Omni. - [Talos Config Overrides](https://docs.siderolabs.com/omni/cluster-management/talos-config-overrides.md): Understand which Talos config fields are restricted in Omni. - [Override NTP Servers](https://docs.siderolabs.com/omni/cluster-management/override-ntp-servers.md): Override default NTP servers in Talos Linux. - [Support Bundle](https://docs.siderolabs.com/omni/cluster-management/support-bundle.md): Download an encrypted diagnostic bundle for troubleshooting Omni-managed clusters. - [CA Rotation](https://docs.siderolabs.com/omni/cluster-management/ca-rotation.md): How to rotate Talos and Kubernetes API root certificate authorities. - [Terraform and Omni](https://docs.siderolabs.com/omni/cluster-management/terraform-and-omni.md): Understand how the Omni Terraform provider fits into Omni’s reconciliation model. #### Scale your cluster - [Scale a Cluster Up or Down](https://docs.siderolabs.com/omni/cluster-management/scale-your-cluster/scale-a-cluster-up-or-down.md): Add or remove control plane and worker nodes in Omni. - [Autoscale Your Cluster with Cluster AutoScaler](https://docs.siderolabs.com/omni/cluster-management/scale-your-cluster/cluster-autoscaler.md): Configure Cluster Autoscaler for Talos Linux clusters managed by Omni. - [Autoscale Your Cluster with Cluster AutoScaler in AWS](https://docs.siderolabs.com/omni/cluster-management/scale-your-cluster/cluster-autoscaler-aws.md): Configure Cluster Autoscaler for Talos Linux clusters running on AWS using Omni - [Autoscale Your Talos Cluster on AWS with Karpenter](https://docs.siderolabs.com/omni/cluster-management/scale-your-cluster/karpenter.md): Autoscale Talos clusters on AWS with Karpenter and Omni. ### Security and Authentication - [Authentication and Authorization](https://docs.siderolabs.com/omni/security-and-authentication/authentication-and-authorization.md): Understand how Omni handles user authentication, identity providers, roles, and automation. - [OIDC login with Tailscale](https://docs.siderolabs.com/omni/security-and-authentication/oidc-login-with-tailscale.md): Enable secure login to Omni over your tailnet with Tailscale's OIDC provider. - [Manage Users in Omni](https://docs.siderolabs.com/omni/security-and-authentication/manage-user-in-omni.md): Add, update, and remove users in Omni. - [Manage Access Policies (ACLs)](https://docs.siderolabs.com/omni/security-and-authentication/how-to-manage-acls.md): Define and apply fine-grained cluster access rules using Omni Access Policies and Kubernetes RBAC. - [Omni KMS Disk Encryption](https://docs.siderolabs.com/omni/security-and-authentication/omni-kms-disk-encryption.md): Enable KMS-backed disk encryption in Talos with keys sealed and lifecycle-managed by Omni. - [Break Glass Emergency Access](https://docs.siderolabs.com/omni/security-and-authentication/break-glass-emergency-access.md): Emergency access mechanism for Talos and Kubernetes when the Omni control plane is unavailable. - [Rotate SideroLink Join Token](https://docs.siderolabs.com/omni/security-and-authentication/rotate-siderolink-join-token.md): Revoke and replace a SideroLink join token to protect new machine registrations and prevent unauthorized connections. - [Revoke Kubernetes Access Tokens](https://docs.siderolabs.com/omni/security-and-authentication/revoke-kubernetes-access-tokens.md): Invalidate issued Kubernetes access tokens, such as a leaked service account kubeconfig, by deleting the signing key that backs them. - [Omni, Talos, and Kubernetes Security](https://docs.siderolabs.com/omni/security-and-authentication/security-model.md): Understand how identity, authorization, and cluster access are enforced in Omni-managed environments. - [Subscribe to Security Advisories](https://docs.siderolabs.com/omni/security-and-authentication/subscribe-to-security-advisories.md): Learn how to subscribe to GitHub security advisories for Omni so you are notified when CVEs are disclosed. #### Using SAML With Omni - [Overview](https://docs.siderolabs.com/omni/security-and-authentication/using-saml-with-omni/overview.md): Learn how Omni integrates with enterprise SAML providers for authentication and identity management. - [Using SAML and ACLs for fine-grained access control](https://docs.siderolabs.com/omni/security-and-authentication/using-saml-with-omni/configure-saml-and-acls.md): Apply fine-grained cluster access control using SAML roles and Omni Access Policies. - [Configure Okta for Omni](https://docs.siderolabs.com/omni/security-and-authentication/using-saml-with-omni/configure-okta-for-omni.md): Configure an Okta SAML application to authenticate users into your Omni instance. - [Auto-assign roles to SAML users](https://docs.siderolabs.com/omni/security-and-authentication/using-saml-with-omni/auto-assign-roles-to-saml-users.md): Automatically assign Omni roles to new SAML users based on their SAML attribute labels. - [Configure Unifi Identity Enterprise for Omni](https://docs.siderolabs.com/omni/security-and-authentication/using-saml-with-omni/configure-unifi-identity-enterprise-for-omni.md): Set up Unifi Identity Enterprise as a SAML identity provider for Omni. - [Configure Workspace ONE Access for Omni](https://docs.siderolabs.com/omni/security-and-authentication/using-saml-with-omni/configure-workspace-one-access-for-omni.md): Set up Workspace ONE Access as a SAML identity provider for Omni. - [Configure Entra ID for Omni](https://docs.siderolabs.com/omni/security-and-authentication/using-saml-with-omni/how-to-configure-entraid-for-omni.md): Set up Microsoft Entra ID (Azure AD) as a SAML identity provider for Omni. - [Configure Oracle Cloud for Omni](https://docs.siderolabs.com/omni/security-and-authentication/using-saml-with-omni/configure-oracle-cloud-for-omni.md): Set up Oracle Cloud Identity Domains to authenticate users into Omni via SAML. - [Use SAML groups information in Kubernetes](https://docs.siderolabs.com/omni/security-and-authentication/using-saml-with-omni/use-saml-groups-in-kubernetes.md): Reuse SAML group membership from Omni to create Kubernetes RBAC impersonation rules with ACLs. ### Reference - [Build with the Omni API](https://docs.siderolabs.com/omni/reference/build-with-the-omni-api.md): Build integrations and automation workflows with the Omni API and Go client library. - [Access Policies (ACLs)](https://docs.siderolabs.com/omni/reference/acls.md): Reference documentation for defining and validating Access Policies (ACLs) in Omni. - [omnictl CLI](https://docs.siderolabs.com/omni/reference/cli.md): omnictl CLI tool reference. - [Cluster Templates](https://docs.siderolabs.com/omni/reference/cluster-templates.md): Reference guide to the cluster template schema, document types, and supported fields in Omni. - [Omni Configuration](https://docs.siderolabs.com/omni/reference/omni-configuration.md): Complete reference for all Omni configuration options and their corresponding CLI flags. - [Manage Omni Resources with omnictl](https://docs.siderolabs.com/omni/reference/manage-omni-resources-with-omnictl.md): Learn how to inspect, manage, and interact with Omni resources using the omnictl CLI - [Image Factory Configuration](https://docs.siderolabs.com/omni/reference/image-factory-configuration.md): Complete reference for configuring Omni’s Image Factory service ### Troubleshooting and Support - [Troubleshooting](https://docs.siderolabs.com/omni/troubleshooting/troubleshooting.md): Troubleshooting Omni and machines - [FAQs](https://docs.siderolabs.com/omni/troubleshooting/faqs.md): Frequently Asked Questions about Omni. ## Talos Director ### Overview - [What Is Talos Director?](https://docs.siderolabs.com/director/overview/what-is-talos-director.md): An overview of Talos Director, the platform for running and managing virtual machines, Kubernetes clusters, storage, and networking on Talos Linux. ### Compute - [Clusters](https://docs.siderolabs.com/director/compute/clusters.md): View compute cluster health and capacity in the All Clusters view, and manage hosts, virtual machines, storage, scheduling rules, and upgrades from the cluster detail screen. - [Hosts](https://docs.siderolabs.com/director/compute/hosts.md): Add hypervisor hosts, view their health and capacity in the Hosts view, inspect a host's hardware, workloads, services, and logs from the host detail screen, and reboot, power off, or put hosts into maintenance mode. - [Virtual Machines](https://docs.siderolabs.com/director/compute/virtual-machines.md): Find and filter VMs in the Virtual Machines view, create a VM, and operate it from the VM detail screen, including power, console, disks, networking, firewall activity, snapshots, backups, and migration. - [Migrate from VMware](https://docs.siderolabs.com/director/compute/migrate-from-vmware.md): Convert VMware vCenter virtual machines to run on Talos Director, choose how much downtime the cutover takes, and bring NSX firewall rules across. - [Storage Pools](https://docs.siderolabs.com/director/compute/storage-pools.md): Inspect storage pool capacity and health in the Storage Pools view, and drill into a pool's mounts, dependent virtual machines, and contents from the pool detail screen. ### Kubernetes - [Kubernetes Clusters](https://docs.siderolabs.com/director/kubernetes/kubernetes-clusters.md): Monitor fleet health from the Kubernetes dashboard, manage workload clusters in the Kubernetes Clusters view, and operate an individual cluster's nodes, pools, backups, and upgrades from the cluster detail screen. ### Networking - [Virtual Networks](https://docs.siderolabs.com/director/networking/virtual-networks.md): Create and manage the VLAN-backed virtual networks that VM network interfaces attach to, and import networks from Cisco ACI. ### Security - [Security](https://docs.siderolabs.com/director/security/security.md): Micro-segment VM traffic with security groups and firewall policies, test flows with the policy simulator, and review security posture, findings, and compliance across Kubernetes clusters. ## Kubernetes Guides ### Overview - [Kubernetes Guides Overview](https://docs.siderolabs.com/kubernetes-guides/overview/kubernetes-guides-overview.md): Practical guidance for running Kubernetes clusters on top of Talos Linux and Omni. ### CNI - [Flannel CNI](https://docs.siderolabs.com/kubernetes-guides/cni/flannel.md): In this guide you will learn about Flannel CNI on Talos. - [Deploy Calico CNI](https://docs.siderolabs.com/kubernetes-guides/cni/deploy-calico.md): In this guide you will learn how to set up Calico CNI on Talos in two modes: eBPF and NFTables. - [Deploy Cilium CNI](https://docs.siderolabs.com/kubernetes-guides/cni/deploying-cilium.md): Learn how to install Cilium CNI on Talos Linux using one of several supported methods. - [Deploy kube-router CNI](https://docs.siderolabs.com/kubernetes-guides/cni/kube-router.md): In this guide you will learn how to set up kube-router CNI on Talos. - [Deploy Multus CNI](https://docs.siderolabs.com/kubernetes-guides/cni/multus.md): Learn how to install and configure Multus CNI on Talos Linux to attach multiple network interfaces to a pod. ### CSI - [Storage](https://docs.siderolabs.com/kubernetes-guides/csi/storage.md): Setting up storage for a Kubernetes cluster - [Local Storage](https://docs.siderolabs.com/kubernetes-guides/csi/local-storage.md): Using local storage for Kubernetes workloads. - [Ceph Storage Cluster with Rook](https://docs.siderolabs.com/kubernetes-guides/csi/ceph-with-rook.md): Guide on how to create a simple Ceph storage cluster with Rook for Kubernetes - [Dell PowerStore CSI](https://docs.siderolabs.com/kubernetes-guides/csi/dell-powerstore.md): Configure and install the Dell PowerStore CSI driver on a Talos Linux cluster - [Longhorn](https://docs.siderolabs.com/kubernetes-guides/csi/longhorn.md): Configure and install Longhorn distributed block storage on a Talos Linux cluster - [Simplyblock Storage Cluster](https://docs.siderolabs.com/kubernetes-guides/csi/simplyblock-storage.md): Guide on how to install simplyblock's control plane, storage plane, and CSI driver on Talos Linux - [SeaweedFS](https://docs.siderolabs.com/kubernetes-guides/csi/seaweedfs.md): Configure and install SeaweedFS distributed storage on a Talos Linux cluster - [iSCSI Storage with Synology CSI](https://docs.siderolabs.com/kubernetes-guides/csi/synology-csi.md): Automatically provision iSCSI volumes on a Synology NAS with the synology-csi driver. ### Security - [Pod Security](https://docs.siderolabs.com/kubernetes-guides/security/pod-security.md): Enabling Pod Security Admission plugin to configure Pod Security Standards. - [Seccomp Profiles](https://docs.siderolabs.com/kubernetes-guides/security/seccomp-profiles.md): Using custom Seccomp Profiles with Kubernetes workloads. - [User Namespaces](https://docs.siderolabs.com/kubernetes-guides/security/usernamespace.md): Guide on how to configure Talos Cluster to support User Namespaces - [Install the Wiz Kubernetes Connector](https://docs.siderolabs.com/kubernetes-guides/security/wiz-kubernetes-connector.md): In this guide you will learn how to install the Wiz Kubernetes Connector on Talos using Helm. ### Monitoring & Observability - [Deploy the Metrics Server](https://docs.siderolabs.com/kubernetes-guides/monitoring-and-observability/deploy-metrics-server.md): In this guide you will learn how to set up metrics-server. - [Expose the Etcd Metrics Endpoint](https://docs.siderolabs.com/kubernetes-guides/monitoring-and-observability/etcd-metrics.md): Learn how to expose the etcd metrics endpoint. - [Deploy the Datadog Agent](https://docs.siderolabs.com/kubernetes-guides/monitoring-and-observability/deploy-datadog.md): Deploy the Datadog Agent on a Talos Linux Kubernetes cluster using Helm. ### Advanced Guides - [Deploy Traefik as a Gateway API](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/deploy-traefik.md): Install Traefik as a Gateway API controller and expose a sample service on Talos. - [Deploy Argo CD](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/deploy-argocd.md): In this guide you will learn how to deploy Argo CD on Talos Linux with kubectl or at bootstrap time, or on Omni-managed clusters using manifest sync. - [Deploy Flux](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/deploy-flux.md): In this guide you will learn how to deploy Flux on Talos Linux with kubectl or at bootstrap time, or on Omni-managed clusters using manifest sync. - [Dynamic Resource Allocation](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/dynamic-resource-allocation.md): Request and share node level resources among Kubernetes pods. - [Device Plugins](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/device-plugins.md): In this guide you will learn how to expose host devices to the Kubernetes pods. - [GCP Workload Identity Federation](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/gcp-workload-identity.md): Guide on how to configure Google Cloud Workload Identity Federation on Talos Linux - [Horizontal Pod Autoscaling](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/hpa.md): Automatically scale pods based on CPU or custom metrics to match workload demand. - [inlineManifests and extraManifests](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/inlinemanifests.md): Learn what inlineManifests and extraManifests are, how they differ, and why they matter. - [KubeRay](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/kuberay.md): Install Ray on Kubernetes. - [Kueue](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/kueue.md): Install Kueue on Kubernetes. - [Node Labels and Node Taints](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/node-labels.md): How to configure and use Kubernetes node labels and taints with Talos. - [Run Spegel Image Mirroring on Talos](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/spegel.md): Use Spegel to enable peer-to-peer container image distribution on Talos Linux clusters - [Support for Third-Party CNI and CSI Components](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/support-for-third-party-cni-and-csi-components.md): How Sidero Labs handles support cases involving third-party container networking and storage components, and what to expect at each support tier. - [Talos API Access From Kubernetes](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/talos-api-access-from-k8s.md): How to access Talos API from within Kubernetes. - [Upgrading Kubernetes](https://docs.siderolabs.com/kubernetes-guides/advanced-guides/upgrading-kubernetes.md): Guide on how to upgrade the Kubernetes cluster from Talos Linux. > The links below point to documentation indexes. Follow each `/_llms/` index recursively until you reach documentation pages. ## Indexes - [Talos Linux (1317 pages)](https://docs.siderolabs.com/_llms/talos-linux.txt): Bring up a Kubernetes cluster on Talos Linux and operate it day to day. - [Talos Linux / v1.14 (281 pages)](https://docs.siderolabs.com/_llms/talos-linux/v1-14.txt): Documentation for Talos Linux / v1.14. - [Talos Linux / v1.13 (223 pages)](https://docs.siderolabs.com/_llms/talos-linux/v1-13.txt): Documentation for Talos Linux / v1.13. - [Talos Linux / v1.12 (206 pages)](https://docs.siderolabs.com/_llms/talos-linux/v1-12.txt): Documentation for Talos Linux / v1.12. - [Talos Linux / v1.11 (171 pages)](https://docs.siderolabs.com/_llms/talos-linux/v1-11.txt): Documentation for Talos Linux / v1.11. - [Talos Linux / v1.10 (151 pages)](https://docs.siderolabs.com/_llms/talos-linux/v1-10.txt): Documentation for Talos Linux / v1.10. - [Talos Linux / v1.9 (145 pages)](https://docs.siderolabs.com/_llms/talos-linux/v1-9.txt): Documentation for Talos Linux / v1.9. - [Talos Linux / v1.8 (140 pages)](https://docs.siderolabs.com/_llms/talos-linux/v1-8.txt): Documentation for Talos Linux / v1.8. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.