name: l0-infrastructure
description: Manages Talos Linux and Terraform infrastructure layer (L0). Use for terraform operations, talos cluster management, node provisioning, Cilium CNI configuration, cluster bootstrap, or infrastructure troubleshooting. Covers Proxmox provider and cluster lifecycle.
allowed-tools: Read, Glob, Grep, Bash(talosctl:, terraform:, kubectl:get,describe)

L0 Infrastructure Management

Manages the foundational infrastructure layer: Terraform + Talos Linux + Cilium CNI.

Layer Boundaries

L0 Owns:
- Terraform infrastructure provisioning
- Talos Linux cluster lifecycle
- Cilium CNI (deployed via Talos inline manifests)
- Node management and upgrades

L0 Does NOT Own:
- LoadBalancer (L1 - MetalLB)
- DNS automation (L1 - external-dns)
- GitOps (L2 - Argo CD)

Key Directories

l0_infrastructure/
├── terraform/providers/proxmox/  # Active provider
├── talos/configs/                # Machine configurations
├── docs/adr/                     # Architecture decisions
└── scripts/validation/           # Validation scripts

Common Operations

Read-Only (Auto-Execute)

# Cluster status
talosctl --nodes 192.168.100.51 health
talosctl --nodes 192.168.100.51 version

# Terraform state
cd l0_infrastructure/terraform/providers/proxmox
terraform show
terraform state list

# Node info
kubectl get nodes -o wide
kubectl describe node <node-name>

Write Operations (Require Approval)

# Terraform apply
terraform plan
terraform apply

# Talos upgrades
talosctl upgrade --nodes <node> --image ghcr.io/siderolabs/installer:v1.11.5

# Config changes
talosctl apply-config --nodes <node> --file machineconfig.yaml

Memory Files

• meta/memory/architecture-decisions.md - ADRs including Talos choice
• meta/memory/current-state.md - Current cluster info

Reference Documentation

• reference/talos-commands.md - Talos CLI reference
• reference/terraform-patterns.md - Terraform patterns used

Validation

Run scripts/validate-cluster.sh for infrastructure health check.

Provider: Proxmox

Current active provider. Configuration at:
l0_infrastructure/terraform/providers/proxmox/

Key files:
- main.tf - Main configuration
- variables.tf - Input variables
- terraform.tfvars - Variable values (contains secrets)