How to create a jointoken declaratively

[navaneeth-dev]

I am deploying Omni via Flatcar & iPxe with Matchbox.

Everything works but I need to solve this last step of automating the kernel params jointoken.

"talos.events.sink=[fdae:41e4:649b:9303::1]:8091",
"talos.logging.kernel=tcp://[fdae:41e4:649b:9303::1]:8092",
"siderolink.api=<your siderolink.api value>"

I want to know if we can hardcode a jointoken at boot time?

Like for the omni container:
OMNI_JOIN_TOKEN=xxxxxxyyyyyzzz docker run omni

So I can reuse that token in my matchbox ipxe config.

Neither do I see a way to curl and get it via the API, nor do I see a documented way to docker exec and get it.

I need a headless way without browser popup.

[Unix4ever]

I think you might be able to achieve that with using these two flags:

    --create-initial-service-account \
    --initial-service-account-key-path=<key path>

It will make Omni create a service account when it starts and then you will be able to use this service account to get the join tokens from the Omni instance with omnictl get jointoken -oyaml.

We don't have docs for that, but you can see an example here: https://github.com/siderolabs/omni-infra-provider-kubevirt/blob/b379dab3c230102edb979f4e4ffa141866e4e51e/hack/test/integration.sh#L178