Enable pre-upgrade job for Longhorn in values.yaml, update MetalLB README for clarity on LoadBalancer IP assignment, and enhance Talos configuration with node IP validation for VIPs. Update cluster build documentation to reflect new application versions and configurations.

talos/talconfig.yaml

@@ -10,10 +10,10 @@
 # After changing schematic/extensions: regenerate configs, upgrade nodes with new installer image, then reboot if needed.
 # Helm must set defaultDataPath to /var/mnt/longhorn (see clusters/noble/apps/longhorn/values.yaml).
 #
-# Image Factory schematic (iscsi-tools + util-linux-tools), nocloud installer:
-#   factory.talos.dev/nocloud-installer/249d9135de54962744e917cfe654117000cba369f9152fbab9d055a00aa3664f:v1.12.6
-# After edits, run talhelper genconfig — `machine.install.image` in out/*.yaml should match this schematic (path may be metal-installer/ etc. on bare metal).
-# Upgrade: talosctl upgrade --image <same-as-machine.install.image-in-out> -n <node-ip>
+# Image Factory schematic (iscsi-tools + util-linux-tools), nocloud installer — pinned per-node via `talosImageURL`
+# (base URL only, no `:tag` — talhelper validates and appends `talosVersion`).
+# After edits: `talhelper genconfig -o out` → `machine.install.image` in out/*.yaml.
+# Cluster upgrade: `talosctl upgrade --image factory.talos.dev/nocloud-installer/249d9135de54962744e917cfe654117000cba369f9152fbab9d055a00aa3664f:v1.12.6 -n <ip> --wait`
 clusterName: noble
 talosVersion: v1.12.6
 endpoint: https://192.168.50.230:6443
@@ -74,6 +74,10 @@ patches:
           name: none
     machine:
       kubelet:
+        # Avoid NodeIPController warnings when VIP / multiple addresses exist; pin to LAN.
+        nodeIP:
+          validSubnets:
+            - 192.168.50.0/24
         extraMounts:
           - destination: /var/mnt/longhorn
             type: bind