TOPF: Open-Sourcing PostFinance's Tool to Migrate and Manage Talos Linux Clusters.
summary
PostFinance built TOPF (Talos Orchestrator by PostFinance), a Go CLI that migrates kubeadm clusters to Talos and manages lifecycle tasks: bootstrapping, Go templating for per-node patches, secrets handling with in-place encryption plus Vault/1Password support, and rolling OS upgrades with parallelism (used on a ~100-node fleet with “5 at once” or percentage flags). It runs in GitLab pipelines, manages 35 production clusters (oldest seven years), shows one-minute bootstraps in live demo, and successfully completed ongoing migrations.
AI-written summary · about
chapters (9)
- 0:00Introduction and background
- 2:35Why PostFinance chose Talos Linux
- 5:26Why we built TOP
- 6:27TOP features and demo setup
- 14:56Live demo of TOP
- 21:36Migration path to Talos
- 23:01Advanced TOP integrations
- 25:10Usage in pipelines and takeaways
- 26:13Q&A session
related talks
28mDay-2’000 - Migration From Kubeadm+Ansible To ClusterAPI+Talos: A Swiss Bank’s Journey
28mTalos Linux: One (Immutable) OS to Rule Them All
25mJourney to Stable Infrastructures with Talos Linux & Cozystack
53mImplementing Kubernetes on with confidence
47mPanel: OpenTofu Power...
26mScaling Flux at BT: A Multi-Cluster Telco Migration Journey
35mKubernetes journey
29mOpenTofu Community Q&A
