Etcd advertisedSubnets

[sergelogvinov]

Bug Report

Description

Etcd advertisedSubnets is the network (filtered ip) which can not exist on the node.
But we use

talos/internal/app/machined/pkg/controllers/etcd/spec.go

Line 97 in e9c7ac1

nodeAddrs, err := safe.ReaderGet[*network.NodeAddress](

NodeAddress (routed) to find the right IP.

Probably we need to use at least nodeIP+platformIP (dnat-ip).
Or check if advertisedSubnets is a single IP use it as is?
What do you think?

Thanks.

Environment

• Talos version: [1.5.x]
• Kubernetes version:
• Platform: azure

[smira]

Yes, probably advertised subnets might come from a more broad range of addresses. Looking for external IP as advertised? It might help if you could describe a scenario.

[sergelogvinov]

Use case - multi cloud setup without kubespan/ipsec/etc (direct connection).

To make p2p connections between etcd, we need to advertise the external (public) IP, which not exist on the node.
Currently I've added the IP alias to the interface...

PS. I did not notice any error messages when Talos did not find the advertised IP too. Probably we need to add error messages at boot time too.

Thanks.