AppserviceThe private GitOps repository that holds desired state, recovery rules, and operational evidence for the cluster. is the operations repository for a Talos-based Kubernetes cluster. Reconciliation, encrypted secrets, recovery gates, upgrades, and incident evidence live with the desired state instead of in operator memory.
A live migration needs more than a target diagram. Before changing the first node, name the temporary configurations, the checks between them, who controls each handoff, and the point after which rollback stops being cheap.
Two upgrade failures came from persistent node-local state outside Git: malformed UEFI NVRAM and an iSCSI record that poisoned shared parsing. The fix was bounded exceptions, preflight checks, controlled migration and verification.
A release candidate passed every gate and failed on contact with production six minutes later. The gates proved compatibility with the target database state; nothing had proved the transition from the state actually running.
Migrating a Talos cluster from a legacy subnet to its own VLAN while it kept serving. The design was mostly an ordering problem, plus one bootstrap loop: the network controller lives inside the network it manages.
A live rollback fixed a crashlooping workload, but the more interesting part was needing to suspend reconciliation long enough for the fix to become the desired state instead of a temporary lie.