mirror of
https://github.com/siderolabs/discovery-service.git
synced 2025-03-14 09:55:08 +00:00
b2e2079088
I somehow assumes AES block size is equal to key size (32 bytes), but that is not the fact. AES block size is always 16 bytes, so for IPv6 endpoints (and longer endpoints in general) we have to encrypt every block. Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
Talos Discovery Service (for KubeSpan)
Discovery Service provides cluster membership and KubeSpan peer information for Talos clusters.
Overview
Discovery Service provides centralized service for Talos nodes to exchange information about nodes of the cluster.
Talos runs "official" instance of the service, and anyone can run their own instance on-prem or in the cloud.
Discovery service doesn't store any data, all data is ephemeral and is kept only in memory. Node information is expired (if not updated) after 30 minutes. Discovery service doesn't see actual node information, it only stores and updates encrypted blobs. Discovery data should be submitted encrypted by the client, and service doesn't have the encryption key.