API
Talos gRPC API reference.
Table of Contents
Top
common/common.proto
Data
DataResponse
| Field | Type | Label | Description |
|---|
| messages | Data | repeated | |
Empty
| Field | Type | Label | Description |
|---|
| metadata | Metadata | | |
EmptyResponse
| Field | Type | Label | Description |
|---|
| messages | Empty | repeated | |
Error
Common metadata message nested in all reply message types
| Field | Type | Label | Description |
|---|
| hostname | string | | hostname of the server response comes from (injected by proxy) |
| error | string | | error is set if request failed to the upstream (rest of response is undefined) |
| status | google.rpc.Status | | error as gRPC Status |
NetIP
| Field | Type | Label | Description |
|---|
| ip | bytes | | |
NetIPPort
NetIPPrefix
| Field | Type | Label | Description |
|---|
| ip | bytes | | |
| prefix_length | int32 | | |
PEMEncodedCertificateAndKey
PEMEncodedKey
| Field | Type | Label | Description |
|---|
| key | bytes | | |
URL
| Field | Type | Label | Description |
|---|
| full_path | string | | |
Code
| Name | Number | Description |
|---|
| FATAL | 0 | |
| LOCKED | 1 | |
| CANCELED | 2 | |
ContainerDriver
| Name | Number | Description |
|---|
| CONTAINERD | 0 | |
| CRI | 1 | |
File-level Extensions
| Extension | Type | Base | Number | Description |
|---|
| remove_deprecated_enum | string | .google.protobuf.EnumOptions | 93117 | Indicates the Talos version when this deprecated enum will be removed from API. |
| remove_deprecated_enum_value | string | .google.protobuf.EnumValueOptions | 93117 | Indicates the Talos version when this deprecated enum value will be removed from API. |
| remove_deprecated_field | string | .google.protobuf.FieldOptions | 93117 | Indicates the Talos version when this deprecated filed will be removed from API. |
| remove_deprecated_message | string | .google.protobuf.MessageOptions | 93117 | Indicates the Talos version when this deprecated message will be removed from API. |
| remove_deprecated_method | string | .google.protobuf.MethodOptions | 93117 | Indicates the Talos version when this deprecated method will be removed from API. |
| remove_deprecated_service | string | .google.protobuf.ServiceOptions | 93117 | Indicates the Talos version when this deprecated service will be removed from API. |
Top
resource/definitions/cluster/cluster.proto
AffiliateSpec
AffiliateSpec describes Affiliate state.
ConfigSpec
ConfigSpec describes KubeSpan configuration.
| Field | Type | Label | Description |
|---|
| discovery_enabled | bool | | |
| registry_kubernetes_enabled | bool | | |
| registry_service_enabled | bool | | |
| service_endpoint | string | | |
| service_endpoint_insecure | bool | | |
| service_encryption_key | bytes | | |
| service_cluster_id | string | | |
IdentitySpec
IdentitySpec describes status of rendered secrets.
Note: IdentitySpec is persisted on disk in the STATE partition,
so YAML serialization should be kept backwards compatible.
| Field | Type | Label | Description |
|---|
| node_id | string | | |
KubeSpanAffiliateSpec
KubeSpanAffiliateSpec describes additional information specific for the KubeSpan.
MemberSpec
MemberSpec describes Member state.
Top
resource/definitions/cri/cri.proto
SeccompProfileSpec
SeccompProfileSpec represents the SeccompProfile.
Top
resource/definitions/enums/enums.proto
KubespanPeerState
KubespanPeerState is KubeSpan peer current state.
| Name | Number | Description |
|---|
| PEER_STATE_UNKNOWN | 0 | |
| PEER_STATE_UP | 1 | |
| PEER_STATE_DOWN | 2 | |
MachineType
MachineType represents a machine type.
| Name | Number | Description |
|---|
| TYPE_UNKNOWN | 0 | TypeUnknown represents undefined node type, when there is no machine configuration yet. |
| TYPE_INIT | 1 | TypeInit type designates the first control plane node to come up. You can think of it like a bootstrap node. This node will perform the initial steps to bootstrap the cluster – generation of TLS assets, starting of the control plane, etc. |
| TYPE_CONTROL_PLANE | 2 | TypeControlPlane designates the node as a control plane member. This means it will host etcd along with the Kubernetes controlplane components such as API Server, Controller Manager, Scheduler. |
| TYPE_WORKER | 3 | TypeWorker designates the node as a worker node. This means it will be an available compute node for scheduling workloads. |
NethelpersADSelect
NethelpersADSelect is ADSelect.
| Name | Number | Description |
|---|
| AD_SELECT_STABLE | 0 | |
| AD_SELECT_BANDWIDTH | 1 | |
| AD_SELECT_COUNT | 2 | |
NethelpersARPAllTargets
NethelpersARPAllTargets is an ARP targets mode.
| Name | Number | Description |
|---|
| ARP_ALL_TARGETS_ANY | 0 | |
| ARP_ALL_TARGETS_ALL | 1 | |
NethelpersARPValidate
NethelpersARPValidate is an ARP Validation mode.
| Name | Number | Description |
|---|
| ARP_VALIDATE_NONE | 0 | |
| ARP_VALIDATE_ACTIVE | 1 | |
| ARP_VALIDATE_BACKUP | 2 | |
| ARP_VALIDATE_ALL | 3 | |
NethelpersBondMode
NethelpersBondMode is a bond mode.
| Name | Number | Description |
|---|
| BOND_MODE_ROUNDROBIN | 0 | |
| BOND_MODE_ACTIVE_BACKUP | 1 | |
| BOND_MODE_XOR | 2 | |
| BOND_MODE_BROADCAST | 3 | |
| BOND_MODE8023_AD | 4 | |
| BOND_MODE_TLB | 5 | |
| BOND_MODE_ALB | 6 | |
NethelpersBondXmitHashPolicy
NethelpersBondXmitHashPolicy is a bond hash policy.
| Name | Number | Description |
|---|
| BOND_XMIT_POLICY_LAYER2 | 0 | layer2 |
| BOND_XMIT_POLICY_LAYER34 | 1 | layer3+4 |
| BOND_XMIT_POLICY_LAYER23 | 2 | layer2+3 |
| BOND_XMIT_POLICY_ENCAP23 | 3 | encap2+3 |
| BOND_XMIT_POLICY_ENCAP34 | 4 | encap3+4 |
NethelpersDuplex
NethelpersDuplex wraps ethtool.Duplex for YAML marshaling.
| Name | Number | Description |
|---|
| HALF | 0 | |
| FULL | 1 | |
| UNKNOWN | 255 | |
NethelpersFailOverMAC
NethelpersFailOverMAC is a MAC failover mode.
| Name | Number | Description |
|---|
| FAIL_OVER_MAC_NONE | 0 | |
| FAIL_OVER_MAC_ACTIVE | 1 | |
| FAIL_OVER_MAC_FOLLOW | 2 | |
NethelpersFamily
NethelpersFamily is a network family.
| Name | Number | Description |
|---|
| FAMILY_INET_4 | 0 | |
| FAMILY_INET_6 | 1 | |
NethelpersLACPRate
NethelpersLACPRate is a LACP rate.
| Name | Number | Description |
|---|
| LACP_RATE_SLOW | 0 | |
| LACP_RATE_FAST | 1 | |
NethelpersLinkType
NethelpersLinkType is a link type.
| Name | Number | Description |
|---|
| LINK_NETROM | 0 | |
| LINK_ETHER | 1 | |
| LINK_EETHER | 2 | |
| LINK_AX25 | 3 | |
| LINK_PRONET | 4 | |
| LINK_CHAOS | 5 | |
| LINK_IEE802 | 6 | |
| LINK_ARCNET | 7 | |
| LINK_ATALK | 8 | |
| LINK_DLCI | 15 | |
| LINK_ATM | 19 | |
| LINK_METRICOM | 23 | |
| LINK_IEEE1394 | 24 | |
| LINK_EUI64 | 27 | |
| LINK_INFINIBAND | 32 | |
| LINK_SLIP | 256 | |
| LINK_CSLIP | 257 | |
| LINK_SLIP6 | 258 | |
| LINK_CSLIP6 | 259 | |
| LINK_RSRVD | 260 | |
| LINK_ADAPT | 264 | |
| LINK_ROSE | 270 | |
| LINK_X25 | 271 | |
| LINK_HWX25 | 272 | |
| LINK_CAN | 280 | |
| LINK_PPP | 512 | |
| LINK_CISCO_HDLC | 513 | |
| LINK_LAPB | 516 | |
| LINK_DDCMP | 517 | |
| LINK_RAWHDLC | 518 | |
| LINK_TUNNEL | 768 | |
| LINK_TUNNEL6 | 769 | |
| LINK_FRAD | 770 | |
| LINK_SKIP | 771 | |
| LINK_LOOPBCK | 772 | |
| LINK_LOCALTLK | 773 | |
| LINK_FDDI | 774 | |
| LINK_BIF | 775 | |
| LINK_SIT | 776 | |
| LINK_IPDDP | 777 | |
| LINK_IPGRE | 778 | |
| LINK_PIMREG | 779 | |
| LINK_HIPPI | 780 | |
| LINK_ASH | 781 | |
| LINK_ECONET | 782 | |
| LINK_IRDA | 783 | |
| LINK_FCPP | 784 | |
| LINK_FCAL | 785 | |
| LINK_FCPL | 786 | |
| LINK_FCFABRIC | 787 | |
| LINK_FCFABRIC1 | 788 | |
| LINK_FCFABRIC2 | 789 | |
| LINK_FCFABRIC3 | 790 | |
| LINK_FCFABRIC4 | 791 | |
| LINK_FCFABRIC5 | 792 | |
| LINK_FCFABRIC6 | 793 | |
| LINK_FCFABRIC7 | 794 | |
| LINK_FCFABRIC8 | 795 | |
| LINK_FCFABRIC9 | 796 | |
| LINK_FCFABRIC10 | 797 | |
| LINK_FCFABRIC11 | 798 | |
| LINK_FCFABRIC12 | 799 | |
| LINK_IEE802_TR | 800 | |
| LINK_IEE80211 | 801 | |
| LINK_IEE80211_PRISM | 802 | |
| LINK_IEE80211_RADIOTAP | 803 | |
| LINK_IEE8021154 | 804 | |
| LINK_IEE8021154_MONITOR | 805 | |
| LINK_PHONET | 820 | |
| LINK_PHONETPIPE | 821 | |
| LINK_CAIF | 822 | |
| LINK_IP6_GRE | 823 | |
| LINK_NETLINK | 824 | |
| LINK6_LOWPAN | 825 | |
| LINK_VOID | 65535 | |
| LINK_NONE | 65534 | |
NethelpersOperationalState
NethelpersOperationalState wraps rtnetlink.OperationalState for YAML marshaling.
| Name | Number | Description |
|---|
| OPER_STATE_UNKNOWN | 0 | |
| OPER_STATE_NOT_PRESENT | 1 | |
| OPER_STATE_DOWN | 2 | |
| OPER_STATE_LOWER_LAYER_DOWN | 3 | |
| OPER_STATE_TESTING | 4 | |
| OPER_STATE_DORMANT | 5 | |
| OPER_STATE_UP | 6 | |
NethelpersPort
NethelpersPort wraps ethtool.Port for YAML marshaling.
| Name | Number | Description |
|---|
| TWISTED_PAIR | 0 | |
| AUI | 1 | |
| MII | 2 | |
| FIBRE | 3 | |
| BNC | 4 | |
| DIRECT_ATTACH | 5 | |
| NONE | 239 | |
| OTHER | 255 | |
NethelpersPrimaryReselect
NethelpersPrimaryReselect is an ARP targets mode.
| Name | Number | Description |
|---|
| PRIMARY_RESELECT_ALWAYS | 0 | |
| PRIMARY_RESELECT_BETTER | 1 | |
| PRIMARY_RESELECT_FAILURE | 2 | |
NethelpersRouteProtocol
NethelpersRouteProtocol is a routing protocol.
| Name | Number | Description |
|---|
| PROTOCOL_UNSPEC | 0 | |
| PROTOCOL_REDIRECT | 1 | |
| PROTOCOL_KERNEL | 2 | |
| PROTOCOL_BOOT | 3 | |
| PROTOCOL_STATIC | 4 | |
| PROTOCOL_RA | 9 | |
| PROTOCOL_MRT | 10 | |
| PROTOCOL_ZEBRA | 11 | |
| PROTOCOL_BIRD | 12 | |
| PROTOCOL_DNROUTED | 13 | |
| PROTOCOL_XORP | 14 | |
| PROTOCOL_NTK | 15 | |
| PROTOCOL_DHCP | 16 | |
| PROTOCOL_MRTD | 17 | |
| PROTOCOL_KEEPALIVED | 18 | |
| PROTOCOL_BABEL | 42 | |
| PROTOCOL_OPENR | 99 | |
| PROTOCOL_BGP | 186 | |
| PROTOCOL_ISIS | 187 | |
| PROTOCOL_OSPF | 188 | |
| PROTOCOL_RIP | 189 | |
| PROTOCOL_EIGRP | 192 | |
NethelpersRouteType
NethelpersRouteType is a route type.
| Name | Number | Description |
|---|
| TYPE_UNSPEC | 0 | |
| TYPE_UNICAST | 1 | |
| TYPE_LOCAL | 2 | |
| TYPE_BROADCAST | 3 | |
| TYPE_ANYCAST | 4 | |
| TYPE_MULTICAST | 5 | |
| TYPE_BLACKHOLE | 6 | |
| TYPE_UNREACHABLE | 7 | |
| TYPE_PROHIBIT | 8 | |
| TYPE_THROW | 9 | |
| TYPE_NAT | 10 | |
| TYPE_X_RESOLVE | 11 | |
NethelpersRoutingTable
NethelpersRoutingTable is a routing table ID.
| Name | Number | Description |
|---|
| TABLE_UNSPEC | 0 | |
| TABLE_DEFAULT | 253 | |
| TABLE_MAIN | 254 | |
| TABLE_LOCAL | 255 | |
NethelpersScope is an address scope.
| Name | Number | Description |
|---|
| SCOPE_GLOBAL | 0 | |
| SCOPE_SITE | 200 | |
| SCOPE_LINK | 253 | |
| SCOPE_HOST | 254 | |
| SCOPE_NOWHERE | 255 | |
NethelpersVLANProtocol
NethelpersVLANProtocol is a VLAN protocol.
| Name | Number | Description |
|---|
| VLAN_PROTOCOL8021_Q | 0 | |
| VLAN_PROTOCOL8021_AD | 1 | |
NetworkConfigLayer
NetworkConfigLayer describes network configuration layers, with lowest priority first.
| Name | Number | Description |
|---|
| CONFIG_DEFAULT | 0 | |
| CONFIG_CMDLINE | 1 | |
| CONFIG_PLATFORM | 2 | |
| CONFIG_OPERATOR | 3 | |
| CONFIG_MACHINE_CONFIGURATION | 4 | |
NetworkOperator
NetworkOperator enumerates Talos network operators.
| Name | Number | Description |
|---|
| OPERATOR_DHCP_4 | 0 | |
| OPERATOR_DHCP_6 | 1 | |
| OPERATOR_VIP | 2 | |
RuntimeMachineStage
RuntimeMachineStage describes the stage of the machine boot/run process.
| Name | Number | Description |
|---|
| MACHINE_STAGE_UNKNOWN | 0 | |
| MACHINE_STAGE_BOOTING | 1 | |
| MACHINE_STAGE_INSTALLING | 2 | |
| MACHINE_STAGE_MAINTENANCE | 3 | |
| MACHINE_STAGE_RUNNING | 4 | |
| MACHINE_STAGE_REBOOTING | 5 | |
| MACHINE_STAGE_SHUTTING_DOWN | 6 | |
| MACHINE_STAGE_RESETTING | 7 | |
| MACHINE_STAGE_UPGRADING | 8 | |
Top
resource/definitions/etcd/etcd.proto
ConfigSpec
ConfigSpec describes (some) configuration settings of etcd.
MemberSpec
MemberSpec holds information about an etcd member.
| Field | Type | Label | Description |
|---|
| member_id | string | | |
PKIStatusSpec
PKIStatusSpec describes status of rendered secrets.
SpecSpec
SpecSpec describes (some) Specuration settings of etcd.
Top
resource/definitions/extensions/extensions.proto
Compatibility
Compatibility describes extension compatibility.
Constraint
Constraint describes compatibility constraint.
| Field | Type | Label | Description |
|---|
| version | string | | |
Layer
Layer defines overlay mount layer.
Metadata describes base extension metadata.
Top
resource/definitions/files/files.proto
EtcFileSpecSpec
EtcFileSpecSpec describes status of rendered secrets.
EtcFileStatusSpec
EtcFileStatusSpec describes status of rendered secrets.
| Field | Type | Label | Description |
|---|
| spec_version | string | | |
Top
resource/definitions/hardware/hardware.proto
MemoryModuleSpec
MemoryModuleSpec represents a single Memory.
ProcessorSpec
ProcessorSpec represents a single processor.
SystemInformationSpec represents the system information obtained from smbios.
Top
resource/definitions/k8s/k8s.proto
APIServerConfigSpec
APIServerConfigSpec is configuration for kube-apiserver.
APIServerConfigSpec.EnvironmentVariablesEntry
AdmissionControlConfigSpec
AdmissionControlConfigSpec is configuration for kube-apiserver.
AdmissionPluginSpec
AdmissionPluginSpec is a single admission plugin configuration Admission Control plugins.
AuditPolicyConfigSpec
AuditPolicyConfigSpec is audit policy configuration for kube-apiserver.
BootstrapManifestsConfigSpec
BootstrapManifestsConfigSpec is configuration for bootstrap manifests.
ConfigStatusSpec
ConfigStatusSpec describes status of rendered secrets.
ControllerManagerConfigSpec
ControllerManagerConfigSpec is configuration for kube-controller-manager.
ControllerManagerConfigSpec.EnvironmentVariablesEntry
EndpointSpec
EndpointSpec describes status of rendered secrets.
ExtraManifest defines a single extra manifest to download.
ExtraManifestsConfigSpec is configuration for extra bootstrap manifests.
ExtraVolume is a configuration of extra volume.
KubeletConfigSpec
KubeletConfigSpec holds the source of kubelet configuration.
KubeletSpecSpec
KubeletSpecSpec holds the source of kubelet configuration.
ManifestSpec
ManifestSpec holds the Kubernetes resources spec.
ManifestStatusSpec
ManifestStatusSpec describes manifest application status.
| Field | Type | Label | Description |
|---|
| manifests_applied | string | repeated | |
NodeIPConfigSpec
NodeIPConfigSpec holds the Node IP specification.
| Field | Type | Label | Description |
|---|
| valid_subnets | string | repeated | |
| exclude_subnets | string | repeated | |
NodeIPSpec
NodeIPSpec holds the Node IP specification.
NodeLabelSpecSpec
NodeLabelSpecSpec represents a label that’s attached to a Talos node.
NodenameSpec
NodenameSpec describes Kubernetes nodename.
| Field | Type | Label | Description |
|---|
| nodename | string | | |
| hostname_version | string | | |
SchedulerConfigSpec
SchedulerConfigSpec is configuration for kube-scheduler.
SchedulerConfigSpec.EnvironmentVariablesEntry
SecretsStatusSpec
SecretsStatusSpec describes status of rendered secrets.
SingleManifest
SingleManifest is a single manifest.
StaticPodServerStatusSpec
StaticPodServerStatusSpec describes static pod spec, it contains marshaled *v1.Pod spec.
| Field | Type | Label | Description |
|---|
| url | string | | |
StaticPodSpec
StaticPodSpec describes static pod spec, it contains marshaled *v1.Pod spec.
StaticPodStatusSpec
StaticPodStatusSpec describes kubelet static pod status.
Top
resource/definitions/kubeaccess/kubeaccess.proto
ConfigSpec
ConfigSpec describes KubeSpan configuration..
| Field | Type | Label | Description |
|---|
| enabled | bool | | |
| allowed_api_roles | string | repeated | |
| allowed_kubernetes_namespaces | string | repeated | |
Top
resource/definitions/kubespan/kubespan.proto
ConfigSpec
ConfigSpec describes KubeSpan configuration..
EndpointSpec
EndpointSpec describes Endpoint state.
IdentitySpec
IdentitySpec describes KubeSpan keys and address.
Note: IdentitySpec is persisted on disk in the STATE partition,
so YAML serialization should be kept backwards compatible.
PeerSpecSpec
PeerSpecSpec describes PeerSpec state.
PeerStatusSpec
PeerStatusSpec describes PeerStatus state.
Top
resource/definitions/network/network.proto
AddressSpecSpec
AddressSpecSpec describes status of rendered secrets.
AddressStatusSpec
AddressStatusSpec describes status of rendered secrets.
BondMasterSpec
BondMasterSpec describes bond settings if Kind == “bond”.
BondSlave
BondSlave contains a bond’s master name and slave index.
| Field | Type | Label | Description |
|---|
| master_name | string | | |
| slave_index | int64 | | |
BridgeMasterSpec
BridgeMasterSpec describes bridge settings if Kind == “bridge”.
| Field | Type | Label | Description |
|---|
| stp | STPSpec | | |
BridgeSlave
BridgeSlave contains a bond’s master name and slave index.
| Field | Type | Label | Description |
|---|
| master_name | string | | |
DHCP4OperatorSpec
DHCP4OperatorSpec describes DHCP4 operator options.
| Field | Type | Label | Description |
|---|
| route_metric | uint32 | | |
| skip_hostname_request | bool | | |
DHCP6OperatorSpec
DHCP6OperatorSpec describes DHCP6 operator options.
HardwareAddrSpec
HardwareAddrSpec describes spec for the link.
HostnameSpecSpec
HostnameSpecSpec describes node nostname.
HostnameStatusSpec
HostnameStatusSpec describes node nostname.
LinkRefreshSpec
LinkRefreshSpec describes status of rendered secrets.
| Field | Type | Label | Description |
|---|
| generation | int64 | | |
LinkSpecSpec
LinkSpecSpec describes spec for the link.
LinkStatusSpec
LinkStatusSpec describes status of rendered secrets.
NodeAddressFilterSpec
NodeAddressFilterSpec describes a filter for NodeAddresses.
NodeAddressSpec
NodeAddressSpec describes a set of node addresses.
OperatorSpecSpec
OperatorSpecSpec describes DNS resolvers.
ResolverSpecSpec
ResolverSpecSpec describes DNS resolvers.
ResolverStatusSpec
ResolverStatusSpec describes DNS resolvers.
RouteSpecSpec
RouteSpecSpec describes the route.
RouteStatusSpec
RouteStatusSpec describes status of rendered secrets.
STPSpec
STPSpec describes Spanning Tree Protocol (STP) settings of a bridge.
| Field | Type | Label | Description |
|---|
| enabled | bool | | |
StatusSpec
StatusSpec describes network state.
| Field | Type | Label | Description |
|---|
| address_ready | bool | | |
| connectivity_ready | bool | | |
| hostname_ready | bool | | |
| etc_files_ready | bool | | |
TimeServerSpecSpec
TimeServerSpecSpec describes NTP servers.
TimeServerStatusSpec
TimeServerStatusSpec describes NTP servers.
| Field | Type | Label | Description |
|---|
| ntp_servers | string | repeated | |
VIPEquinixMetalSpec describes virtual (elastic) IP settings for Equinix Metal.
VIPHCloudSpec
VIPHCloudSpec describes virtual (elastic) IP settings for Hetzner Cloud.
VIPOperatorSpec
VIPOperatorSpec describes virtual IP operator options.
VLANSpec
VLANSpec describes VLAN settings if Kind == “vlan”.
WireguardPeer
WireguardPeer describes a single peer.
WireguardSpec
WireguardSpec describes Wireguard settings if Kind == “wireguard”.
Top
resource/definitions/perf/perf.proto
CPUSpec
CPUSpec represents the last CPU stats snapshot.
CPUStat
CPUStat represents a single cpu stat.
MemorySpec
MemorySpec represents the last Memory stats snapshot.
Top
resource/definitions/proto/proto.proto
Mount
Mount specifies a mount for a container.
Top
resource/definitions/runtime/runtime.proto
KernelModuleSpecSpec
KernelModuleSpecSpec describes Linux kernel module to load.
KernelParamSpecSpec
KernelParamSpecSpec describes status of the defined sysctls.
| Field | Type | Label | Description |
|---|
| value | string | | |
| ignore_errors | bool | | |
KernelParamStatusSpec
KernelParamStatusSpec describes status of the defined sysctls.
MachineStatusSpec
MachineStatusSpec describes status of the defined sysctls.
MachineStatusStatus
MachineStatusStatus describes machine current status at the stage.
MountStatusSpec
MountStatusSpec describes status of the defined sysctls.
PlatformMetadataSpec describes platform metadata properties.
UnmetCondition
UnmetCondition is a failure which prevents machine from being ready at the stage.
Top
resource/definitions/secrets/secrets.proto
APICertsSpec
APICertsSpec describes etcd certs secrets.
CertSANSpec
CertSANSpec describes fields of the cert SANs.
EtcdCertsSpec
EtcdCertsSpec describes etcd certs secrets.
EtcdRootSpec
EtcdRootSpec describes etcd CA secrets.
KubeletSpec
KubeletSpec describes root Kubernetes secrets.
KubernetesCertsSpec
KubernetesCertsSpec describes generated Kubernetes certificates.
KubernetesRootSpec
KubernetesRootSpec describes root Kubernetes secrets.
OSRootSpec
OSRootSpec describes operating system CA.
TrustdCertsSpec
TrustdCertsSpec describes etcd certs secrets.
Top
resource/definitions/time/time.proto
StatusSpec
StatusSpec describes time sync state.
Top
resource/definitions/v1alpha1/v1alpha1.proto
ServiceSpec
ServiceSpec describe service state.
Top
inspect/inspect.proto
ControllerDependencyEdge
ControllerRuntimeDependenciesResponse
ControllerRuntimeDependency
The ControllerRuntimeDependency message contains the graph of controller-resource dependencies.
DependencyEdgeType
| Name | Number | Description |
|---|
| OUTPUT_EXCLUSIVE | 0 | |
| OUTPUT_SHARED | 3 | |
| INPUT_STRONG | 1 | |
| INPUT_WEAK | 2 | |
| INPUT_DESTROY_READY | 4 | |
InspectService
The inspect service definition.
InspectService provides auxiliary API to inspect OS internals.
Top
machine/machine.proto
AddressEvent
AddressEvent reports node endpoints aggregated from k8s.Endpoints and network.Hostname.
| Field | Type | Label | Description |
|---|
| hostname | string | | |
| addresses | string | repeated | |
ApplyConfiguration
ApplyConfigurationResponse describes the response to a configuration request.
ApplyConfigurationRequest
rpc applyConfiguration
ApplyConfiguration describes a request to assert a new configuration upon a
node.
ApplyConfigurationResponse
BPFInstruction
Bootstrap
The bootstrap message containing the bootstrap status.
BootstrapRequest
rpc Bootstrap
| Field | Type | Label | Description |
|---|
| recover_etcd | bool | | Enable etcd recovery from the snapshot. |
Snapshot should be uploaded before this call via EtcdRecover RPC. |
| recover_skip_hash_check | bool | | Skip hash check on the snapshot (etcd).
Enable this when recovering from data directory copy to skip integrity check. |
BootstrapResponse
| Field | Type | Label | Description |
|---|
| messages | Bootstrap | repeated | |
CNIConfig
CPUInfo
CPUInfoResponse
| Field | Type | Label | Description |
|---|
| messages | CPUsInfo | repeated | |
CPUStat
CPUsInfo
ClusterConfig
ClusterNetworkConfig
ConfigLoadErrorEvent
ConfigLoadErrorEvent is reported when the config loading has failed.
| Field | Type | Label | Description |
|---|
| error | string | | |
ConfigValidationErrorEvent
ConfigValidationErrorEvent is reported when config validation has failed.
| Field | Type | Label | Description |
|---|
| error | string | | |
Container
The messages message containing the requested containers.
ContainerInfo
The messages message containing the requested containers.
ContainersRequest
ContainersResponse
| Field | Type | Label | Description |
|---|
| messages | Container | repeated | |
ControlPlaneConfig
| Field | Type | Label | Description |
|---|
| endpoint | string | | |
CopyRequest
CopyRequest describes a request to copy data out of Talos node
Copy produces .tar.gz archive which is streamed back to the caller
| Field | Type | Label | Description |
|---|
| root_path | string | | Root path to start copying data out, it might be either a file or directory |
DHCPOptionsConfig
| Field | Type | Label | Description |
|---|
| route_metric | uint32 | | |
DiskStat
DiskStats
DiskStatsResponse
| Field | Type | Label | Description |
|---|
| messages | DiskStats | repeated | |
DiskUsageInfo
DiskUsageInfo describes a file or directory’s information for du command
| Field | Type | Label | Description |
|---|
| metadata | common.Metadata | | |
| name | string | | Name is the name (including prefixed path) of the file or directory |
| size | int64 | | Size indicates the number of bytes contained within the file |
| error | string | | Error describes any error encountered while trying to read the file information. |
| relative_name | string | | RelativeName is the name of the file or directory relative to the RootPath |
DiskUsageRequest
DiskUsageRequest describes a request to list disk usage of directories and regular files
| Field | Type | Label | Description |
|---|
| recursion_depth | int32 | | RecursionDepth indicates how many levels of subdirectories should be recursed. The default (0) indicates that no limit should be enforced. |
| all | bool | | All write sizes for all files, not just directories. |
| threshold | int64 | | Threshold exclude entries smaller than SIZE if positive, or entries greater than SIZE if negative. |
| paths | string | repeated | DiskUsagePaths is the list of directories to calculate disk usage for. |
DmesgRequest
dmesg
| Field | Type | Label | Description |
|---|
| follow | bool | | |
| tail | bool | | |
EtcdForfeitLeadership
EtcdForfeitLeadershipRequest
EtcdForfeitLeadershipResponse
EtcdLeaveCluster
EtcdLeaveClusterRequest
EtcdLeaveClusterResponse
EtcdMember
EtcdMember describes a single etcd member.
| Field | Type | Label | Description |
|---|
| id | uint64 | | member ID. |
| hostname | string | | human-readable name of the member. |
| peer_urls | string | repeated | the list of URLs the member exposes to clients for communication. |
| client_urls | string | repeated | the list of URLs the member exposes to the cluster for communication. |
| is_learner | bool | | learner flag |
EtcdMemberListRequest
| Field | Type | Label | Description |
|---|
| query_local | bool | | |
EtcdMemberListResponse
EtcdMembers
EtcdMembers contains the list of members registered on the host.
| Field | Type | Label | Description |
|---|
| metadata | common.Metadata | | |
| legacy_members | string | repeated | list of member hostnames. |
| members | EtcdMember | repeated | the list of etcd members registered on the node. |
EtcdRecover
EtcdRecoverResponse
EtcdRemoveMember
EtcdRemoveMemberByID
EtcdRemoveMemberByIDRequest
| Field | Type | Label | Description |
|---|
| member_id | uint64 | | |
EtcdRemoveMemberByIDResponse
EtcdRemoveMemberRequest
| Field | Type | Label | Description |
|---|
| member | string | | |
EtcdRemoveMemberResponse
EtcdSnapshotRequest
Event
EventsRequest
FeaturesInfo
FeaturesInfo describes individual Talos features that can be switched on or off.
| Field | Type | Label | Description |
|---|
| rbac | bool | | RBAC is true if role-based access control is enabled. |
FileInfo
FileInfo describes a file or directory’s information
| Field | Type | Label | Description |
|---|
| metadata | common.Metadata | | |
| name | string | | Name is the name (including prefixed path) of the file or directory |
| size | int64 | | Size indicates the number of bytes contained within the file |
| mode | uint32 | | Mode is the bitmap of UNIX mode/permission flags of the file |
| modified | int64 | | Modified indicates the UNIX timestamp at which the file was last modified |
| is_dir | bool | | IsDir indicates that the file is a directory |
| error | string | | Error describes any error encountered while trying to read the file information. |
| link | string | | Link is filled with symlink target |
| relative_name | string | | RelativeName is the name of the file or directory relative to the RootPath |
| uid | uint32 | | Owner uid |
| gid | uint32 | | Owner gid |
GenerateClientConfiguration
| Field | Type | Label | Description |
|---|
| metadata | common.Metadata | | |
| ca | bytes | | PEM-encoded CA certificate. |
| crt | bytes | | PEM-encoded generated client certificate. |
| key | bytes | | PEM-encoded generated client key. |
| talosconfig | bytes | | Client configuration (talosconfig) file content. |
GenerateClientConfigurationRequest
GenerateClientConfigurationResponse
GenerateConfiguration
GenerateConfiguration describes the response to a generate configuration request.
GenerateConfigurationRequest
GenerateConfigurationRequest describes a request to generate a new configuration
on a node.
GenerateConfigurationResponse
Hostname
HostnameResponse
| Field | Type | Label | Description |
|---|
| messages | Hostname | repeated | |
InstallConfig
| Field | Type | Label | Description |
|---|
| install_disk | string | | |
| install_image | string | | |
ListRequest
ListRequest describes a request to list the contents of a directory.
| Field | Type | Label | Description |
|---|
| root | string | | Root indicates the root directory for the list. If not indicated, ‘/’ is presumed. |
| recurse | bool | | Recurse indicates that subdirectories should be recursed. |
| recursion_depth | int32 | | RecursionDepth indicates how many levels of subdirectories should be recursed. The default (0) indicates that no limit should be enforced. |
| types | ListRequest.Type | repeated | Types indicates what file type should be returned. If not indicated, all files will be returned. |
LoadAvg
LoadAvgResponse
| Field | Type | Label | Description |
|---|
| messages | LoadAvg | repeated | |
LogsRequest
rpc logs
The request message containing the process name.
MachineConfig
MachineStatusEvent
MachineStatusEvent reports changes to the MachineStatus resource.
MachineStatusEvent.MachineStatus
MachineStatusEvent.MachineStatus.UnmetCondition
MemInfo
Memory
MemoryResponse
| Field | Type | Label | Description |
|---|
| messages | Memory | repeated | |
MountStat
The messages message containing the requested processes.
Mounts
The messages message containing the requested df stats.
MountsResponse
| Field | Type | Label | Description |
|---|
| messages | Mounts | repeated | |
NetDev
NetworkConfig
NetworkDeviceConfig
NetworkDeviceStats
NetworkDeviceStatsResponse
PacketCaptureRequest
| Field | Type | Label | Description |
|---|
| interface | string | | Interface name to perform packet capture on. |
| promiscuous | bool | | Enable promiscuous mode. |
| snap_len | uint32 | | Snap length in bytes. |
| bpf_filter | BPFInstruction | repeated | BPF filter. |
PhaseEvent
Process
ProcessInfo
ProcessesResponse
rpc processes
| Field | Type | Label | Description |
|---|
| messages | Process | repeated | |
ReadRequest
| Field | Type | Label | Description |
|---|
| path | string | | |
Reboot
The reboot message containing the reboot status.
RebootRequest
rpc reboot
RebootResponse
| Field | Type | Label | Description |
|---|
| messages | Reboot | repeated | |
Reset
The reset message containing the restart status.
ResetPartitionSpec
rpc reset
ResetRequest
| Field | Type | Label | Description |
|---|
| graceful | bool | | Graceful indicates whether node should leave etcd before the upgrade, it also enforces etcd checks before leaving. |
| reboot | bool | | Reboot indicates whether node should reboot or halt after resetting. |
| system_partitions_to_wipe | ResetPartitionSpec | repeated | System_partitions_to_wipe lists specific system disk partitions to be reset (wiped). If system_partitions_to_wipe is empty, all the partitions are erased. |
ResetResponse
| Field | Type | Label | Description |
|---|
| messages | Reset | repeated | |
Restart
RestartEvent
| Field | Type | Label | Description |
|---|
| cmd | int64 | | |
RestartRequest
rpc restart
The request message containing the process to restart.
RestartResponse
The messages message containing the restart status.
| Field | Type | Label | Description |
|---|
| messages | Restart | repeated | |
Rollback
RollbackRequest
rpc rollback
RollbackResponse
| Field | Type | Label | Description |
|---|
| messages | Rollback | repeated | |
RouteConfig
SequenceEvent
rpc events
ServiceEvent
ServiceEvents
ServiceHealth
ServiceInfo
ServiceList
rpc servicelist
ServiceListResponse
ServiceRestart
ServiceRestartRequest
| Field | Type | Label | Description |
|---|
| id | string | | |
ServiceRestartResponse
ServiceStart
ServiceStartRequest
rpc servicestart
| Field | Type | Label | Description |
|---|
| id | string | | |
ServiceStartResponse
ServiceStateEvent
ServiceStop
ServiceStopRequest
| Field | Type | Label | Description |
|---|
| id | string | | |
ServiceStopResponse
Shutdown
rpc shutdown
The messages message containing the shutdown status.
ShutdownRequest
| Field | Type | Label | Description |
|---|
| force | bool | | Force indicates whether node should shutdown without first cordening and draining |
ShutdownResponse
| Field | Type | Label | Description |
|---|
| messages | Shutdown | repeated | |
SoftIRQStat
Stat
The messages message containing the requested stat.
Stats
The messages message containing the requested stats.
StatsRequest
The request message containing the containerd namespace.
StatsResponse
| Field | Type | Label | Description |
|---|
| messages | Stats | repeated | |
SystemStat
SystemStatResponse
| Field | Type | Label | Description |
|---|
| messages | SystemStat | repeated | |
TaskEvent
Upgrade
UpgradeRequest
rpc upgrade
UpgradeResponse
| Field | Type | Label | Description |
|---|
| messages | Upgrade | repeated | |
Version
VersionInfo
VersionResponse
| Field | Type | Label | Description |
|---|
| messages | Version | repeated | |
ApplyConfigurationRequest.Mode
| Name | Number | Description |
|---|
| REBOOT | 0 | |
| AUTO | 1 | |
| NO_REBOOT | 2 | |
| STAGED | 3 | |
| TRY | 4 | |
ListRequest.Type
File type.
| Name | Number | Description |
|---|
| REGULAR | 0 | Regular file (not directory, symlink, etc). |
| DIRECTORY | 1 | Directory. |
| SYMLINK | 2 | Symbolic link. |
MachineConfig.MachineType
| Name | Number | Description |
|---|
| TYPE_UNKNOWN | 0 | |
| TYPE_INIT | 1 | |
| TYPE_CONTROL_PLANE | 2 | |
| TYPE_WORKER | 3 | |
MachineStatusEvent.MachineStage
| Name | Number | Description |
|---|
| UNKNOWN | 0 | |
| BOOTING | 1 | |
| INSTALLING | 2 | |
| MAINTENANCE | 3 | |
| RUNNING | 4 | |
| REBOOTING | 5 | |
| SHUTTING_DOWN | 6 | |
| RESETTING | 7 | |
| UPGRADING | 8 | |
PhaseEvent.Action
| Name | Number | Description |
|---|
| START | 0 | |
| STOP | 1 | |
RebootRequest.Mode
| Name | Number | Description |
|---|
| DEFAULT | 0 | |
| POWERCYCLE | 1 | |
SequenceEvent.Action
| Name | Number | Description |
|---|
| NOOP | 0 | |
| START | 1 | |
| STOP | 2 | |
ServiceStateEvent.Action
| Name | Number | Description |
|---|
| INITIALIZED | 0 | |
| PREPARING | 1 | |
| WAITING | 2 | |
| RUNNING | 3 | |
| STOPPING | 4 | |
| FINISHED | 5 | |
| FAILED | 6 | |
| SKIPPED | 7 | |
TaskEvent.Action
| Name | Number | Description |
|---|
| START | 0 | |
| STOP | 1 | |
MachineService
The machine service definition.
Node aborts etcd join sequence and creates single-node etcd cluster.
If recover_etcd argument is specified, etcd is recovered from a snapshot uploaded with EtcdRecover. |
| Containers | ContainersRequest | ContainersResponse | |
| Copy | CopyRequest | .common.Data stream | |
| CPUInfo | .google.protobuf.Empty | CPUInfoResponse | |
| DiskStats | .google.protobuf.Empty | DiskStatsResponse | |
| Dmesg | DmesgRequest | .common.Data stream | |
| Events | EventsRequest | Event stream | |
| EtcdMemberList | EtcdMemberListRequest | EtcdMemberListResponse | |
| EtcdRemoveMember | EtcdRemoveMemberRequest | EtcdRemoveMemberResponse | EtcdRemoveMember removes a member from the etcd cluster by hostname.
Please use EtcdRemoveMemberByID instead. |
| EtcdRemoveMemberByID | EtcdRemoveMemberByIDRequest | EtcdRemoveMemberByIDResponse | EtcdRemoveMemberByID removes a member from the etcd cluster identified by member ID.
This API should be used to remove members which don’t have an associated Talos node anymore. To remove a member with a running Talos node, use EtcdLeaveCluster API on the node to be removed. |
| EtcdLeaveCluster | EtcdLeaveClusterRequest | EtcdLeaveClusterResponse | |
| EtcdForfeitLeadership | EtcdForfeitLeadershipRequest | EtcdForfeitLeadershipResponse | |
| EtcdRecover | .common.Data stream | EtcdRecoverResponse | EtcdRecover method uploads etcd data snapshot created with EtcdSnapshot to the node.
Snapshot can be later used to recover the cluster via Bootstrap method. |
| EtcdSnapshot | EtcdSnapshotRequest | .common.Data stream | EtcdSnapshot method creates etcd data snapshot (backup) from the local etcd instance and streams it back to the client.
This method is available only on control plane nodes (which run etcd). |
| GenerateConfiguration | GenerateConfigurationRequest | GenerateConfigurationResponse | |
| Hostname | .google.protobuf.Empty | HostnameResponse | |
| Kubeconfig | .google.protobuf.Empty | .common.Data stream | |
| List | ListRequest | FileInfo stream | |
| DiskUsage | DiskUsageRequest | DiskUsageInfo stream | |
| LoadAvg | .google.protobuf.Empty | LoadAvgResponse | |
| Logs | LogsRequest | .common.Data stream | |
| Memory | .google.protobuf.Empty | MemoryResponse | |
| Mounts | .google.protobuf.Empty | MountsResponse | |
| NetworkDeviceStats | .google.protobuf.Empty | NetworkDeviceStatsResponse | |
| Processes | .google.protobuf.Empty | ProcessesResponse | |
| Read | ReadRequest | .common.Data stream | |
| Reboot | RebootRequest | RebootResponse | |
| Restart | RestartRequest | RestartResponse | |
| Rollback | RollbackRequest | RollbackResponse | |
| Reset | ResetRequest | ResetResponse | |
| ServiceList | .google.protobuf.Empty | ServiceListResponse | |
| ServiceRestart | ServiceRestartRequest | ServiceRestartResponse | |
| ServiceStart | ServiceStartRequest | ServiceStartResponse | |
| ServiceStop | ServiceStopRequest | ServiceStopResponse | |
| Shutdown | ShutdownRequest | ShutdownResponse | |
| Stats | StatsRequest | StatsResponse | |
| SystemStat | .google.protobuf.Empty | SystemStatResponse | |
| Upgrade | UpgradeRequest | UpgradeResponse | |
| Version | .google.protobuf.Empty | VersionResponse | |
| GenerateClientConfiguration | GenerateClientConfigurationRequest | GenerateClientConfigurationResponse | GenerateClientConfiguration generates talosctl client configuration (talosconfig). |
| PacketCapture | PacketCaptureRequest | .common.Data stream | PacketCapture performs packet capture and streams back pcap file. |
Top
resource/resource.proto
Get
The GetResponse message contains the Resource returned.
GetRequest
rpc Get
GetResponse
| Field | Type | Label | Description |
|---|
| messages | Get | repeated | |
ListRequest
rpc List
The ListResponse message contains the Resource returned.
ListResponse
Metadata.AnnotationsEntry
Metadata.LabelsEntry
Resource
Spec
| Field | Type | Label | Description |
|---|
| yaml | bytes | | |
WatchRequest
rpc Watch
The WatchResponse message contains the Resource returned.
WatchResponse
EventType
| Name | Number | Description |
|---|
| CREATED | 0 | |
| UPDATED | 1 | |
| DESTROYED | 2 | |
ResourceService
The resource service definition.
ResourceService provides user-facing API for the Talos resources.
Top
security/security.proto
CertificateRequest
The request message containing the certificate signing request.
| Field | Type | Label | Description |
|---|
| csr | bytes | | Certificate Signing Request in PEM format. |
CertificateResponse
The response message containing signed certificate.
| Field | Type | Label | Description |
|---|
| ca | bytes | | Certificate of the CA that signed the requested certificate in PEM format. |
| crt | bytes | | Signed X.509 requested certificate in PEM format. |
SecurityService
The security service definition.
Top
storage/storage.proto
Disk
Disk represents a disk.
| Field | Type | Label | Description |
|---|
| size | uint64 | | Size indicates the disk size in bytes. |
| model | string | | Model idicates the disk model. |
| device_name | string | | DeviceName indicates the disk name (e.g. sda). |
| name | string | | Name as in /sys/block/<dev>/device/name. |
| serial | string | | Serial as in /sys/block/<dev>/device/serial. |
| modalias | string | | Modalias as in /sys/block/<dev>/device/modalias. |
| uuid | string | | Uuid as in /sys/block/<dev>/device/uuid. |
| wwid | string | | Wwid as in /sys/block/<dev>/device/wwid. |
| type | Disk.DiskType | | Type is a type of the disk: nvme, ssd, hdd, sd card. |
| bus_path | string | | BusPath is the bus path of the disk. |
Disks
DisksResponse represents the response of the Disks RPC.
DisksResponse
| Field | Type | Label | Description |
|---|
| messages | Disks | repeated | |
Disk.DiskType
| Name | Number | Description |
|---|
| UNKNOWN | 0 | |
| SSD | 1 | |
| HDD | 2 | |
| NVME | 3 | |
| SD | 4 | |
StorageService
StorageService represents the storage service.
Top
time/time.proto
Time
TimeRequest
The response message containing the ntp server
| Field | Type | Label | Description |
|---|
| server | string | | |
TimeResponse
The response message containing the ntp server, time, and offset
| Field | Type | Label | Description |
|---|
| messages | Time | repeated | |
TimeService
The time service definition.
Scalar Value Types
| .proto Type | Notes | C++ | Java | Python | Go | C# | PHP | Ruby |
|---|
| double | | double | double | float | float64 | double | float | Float |
| float | | float | float | float | float32 | float | float | Float |
| int32 | Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint32 instead. | int32 | int | int | int32 | int | integer | Bignum or Fixnum (as required) |
| int64 | Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint64 instead. | int64 | long | int/long | int64 | long | integer/string | Bignum |
| uint32 | Uses variable-length encoding. | uint32 | int | int/long | uint32 | uint | integer | Bignum or Fixnum (as required) |
| uint64 | Uses variable-length encoding. | uint64 | long | int/long | uint64 | ulong | integer/string | Bignum or Fixnum (as required) |
| sint32 | Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int32s. | int32 | int | int | int32 | int | integer | Bignum or Fixnum (as required) |
| sint64 | Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int64s. | int64 | long | int/long | int64 | long | integer/string | Bignum |
| fixed32 | Always four bytes. More efficient than uint32 if values are often greater than 2^28. | uint32 | int | int | uint32 | uint | integer | Bignum or Fixnum (as required) |
| fixed64 | Always eight bytes. More efficient than uint64 if values are often greater than 2^56. | uint64 | long | int/long | uint64 | ulong | integer/string | Bignum |
| sfixed32 | Always four bytes. | int32 | int | int | int32 | int | integer | Bignum or Fixnum (as required) |
| sfixed64 | Always eight bytes. | int64 | long | int/long | int64 | long | integer/string | Bignum |
| bool | | bool | boolean | boolean | bool | bool | boolean | TrueClass/FalseClass |
| string | A string must always contain UTF-8 encoded or 7-bit ASCII text. | string | String | str/unicode | string | string | string | String (UTF-8) |
| bytes | May contain any arbitrary sequence of bytes. | string | ByteString | str | []byte | ByteString | string | String (ASCII-8BIT) |