Emergency Talos Access #120

Open
opened 2026-02-23 16:48:07 +00:00 by mrtz · 0 comments
Owner

In case the certs ever expire.

  1. Use ArgoCD you can lay down a debug pod on a control plane node (see https://kubernetes.io/docs/tasks/debug/debug cluster/kubectl-node-debug/)
  2. exec into it and grab the machine config from /host/system/state/config.yaml
  3. Use talosctl gen secrets --from-controlplane-config <your-control-plane-machine-config.yaml> to get secrets.yaml
  4. talosctl gen config --with-secrets secrets.yaml --output-types talosconfig to get your talosconfig
In case the certs ever expire. 1. Use ArgoCD you can lay down a debug pod on a control plane node (see https://kubernetes.io/docs/tasks/debug/debug cluster/kubectl-node-debug/) 2. exec into it and grab the machine config from /host/system/state/config.yaml 3. Use talosctl gen secrets --from-controlplane-config <your-control-plane-machine-config.yaml> to get secrets.yaml 4. talosctl gen config --with-secrets secrets.yaml --output-types talosconfig to get your talosconfig
mrtz added the Kind/Bug label 2026-02-23 16:48:07 +00:00
mrtz added Kind/Documentation and removed Kind/Bug labels 2026-05-31 08:15:45 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: platform/manifests#120