Cluster Maintenance Guides on Cozystack

Upgrading Cozystack and Post-upgrade Checks

Mon, 01 Jan 0001 00:00:00 +0000

About Cozystack Versions

Cozystack uses a staged release process to ensure stability and flexibility during development.

There are three types of releases:

Alpha, Beta, and Release Candidates (RC) – Preview versions (such as v0.42.0-alpha.1 or v0.42.0-rc.1) used for final testing and validation.
Stable Releases – Regular versions (e.g., v0.42.0) that are feature-complete and thoroughly tested. Such versions usually introduce new features, update dependencies, and may have API changes.
Patch Releases – Bugfix-only updates (e.g., v0.42.1) made after a stable release, based on a dedicated release branch.

It’s highly recommended to install only stable and patch releases in production environments.

Cluster Scaling: Adding and Removing Nodes

Mon, 01 Jan 0001 00:00:00 +0000

How to add a node to a Cozystack cluster

Adding a node is done in a way similar to regular Cozystack installation.

Install Talos on the node, using the Cozystack’s custom-built Talos image.

Generate the configuration for the new node, using the Talm or talosctl guide.

For example, configuring a control plane node:

talm template -e 192.168.123.20 -n 192.168.123.20 -t templates/controlplane.yaml -i > nodes/nodeN.yaml

and for a worker node:

talm template -e 192.168.123.20 -n 192.168.123.20 -t templates/worker.yaml -i > nodes/nodeN.yaml

Apply the generated configuration to the node, using the Talm or talosctl guide. For example:

How to Rotate Certificate Authority

Mon, 01 Jan 0001 00:00:00 +0000

Talos sets up root certificate authorities with a lifetime of 10 years, and all Talos and Kubernetes API certificates are issued by these root CAs. In general, you almost never need to rotate the root CA certificate and key for the Talos API and Kubernetes API.

Rotation of the root CA is only needed:

when you suspect that the private key has been compromised;
when you want to revoke access to the cluster for a leaked talosconfig or kubeconfig;
once in 10 years.

Rotate CA for the Management Kubernetes Cluster:

See: https://www.talos.dev/v1.9/advanced/ca-rotation/#kubernetes-api