A number of fixes to get things running

terraform/main.tf

@@ -33,6 +33,13 @@ resource "talos_machine_secrets" "cluster" {
   talos_version = var.talos_version
 }
 
+data "talos_client_configuration" "cluster" {
+  cluster_name         = var.cluster_name
+  client_configuration = talos_machine_secrets.cluster.client_configuration
+  endpoints            = [for node in var.nodes : node.ip]
+  nodes                = [for node in var.nodes : node.ip]
+}
+
 data "talos_machine_configuration" "role" {
   for_each = toset(["controlplane", "worker"])
 
@@ -50,6 +57,16 @@ data "talos_machine_configuration" "role" {
           disk = var.install_disk
         }
       }
+      cluster = {
+        network = {
+          cni = {
+            name = "none"
+          }
+        }
+        proxy = {
+          disabled = true
+        }
+      }
     })
   ]
 }

terraform/outputs.tf

@@ -4,12 +4,37 @@ output "kubeconfig" {
   sensitive   = true
 }
 
-output "talos_client_configuration" {
-  description = "Talos client configuration generated for this cluster."
-  value       = talos_machine_secrets.cluster.client_configuration
+output "talosconfig" {
+  description = "Raw talosconfig for use with talosctl."
+  value       = data.talos_client_configuration.cluster.talos_config
   sensitive   = true
 }
 
+output "talos_nodes" {
+  description = "Talos node addresses configured by this module."
+  value       = [for node in var.nodes : node.ip]
+}
+
+output "argocd_namespace" {
+  description = "Namespace containing Argo CD."
+  value       = helm_release.argocd.namespace
+}
+
+output "argocd_server_service" {
+  description = "Internal Argo CD server service address."
+  value       = "argocd-server.${helm_release.argocd.namespace}.svc.cluster.local:443"
+}
+
+output "argocd_cli_port_forward_command" {
+  description = "Command to connect argocd CLI to the internal Argo CD server."
+  value       = "argocd login --port-forward --port-forward-namespace ${helm_release.argocd.namespace} argocd-server"
+}
+
+output "argocd_admin_password_command" {
+  description = "Command to retrieve the initial Argo CD admin password."
+  value       = "kubectl -n ${helm_release.argocd.namespace} get secret argocd-initial-admin-secret -o jsonpath='{.data.password}' | base64 -d"
+}
+
 output "argocd_repository_secret_name" {
   description = "Argo CD repository credential Secret name."
   value       = kubernetes_secret_v1.gitea.metadata[0].name