Skip to content

Commands

Press : to open the command palette.

Command Alias Result
:nodes :no Open the node explorer.
:services :svc Open Talos services.
:contexts :ctx Select another discovered context.
:events :ev Open the machine event view.
:etcd :et Open etcd membership and status; with --enable-writes, snapshot/membership maintenance actions live here. See Etcd operations.
:overview :ov Cluster-wide health summary. See Health.
:problems Drillable list of everything currently unhealthy. See Health.
:healthcheck :hc Stream the server-side cluster health check; accepts an optional wait timeout (e.g. :healthcheck 5m, default 60s). See Cluster health check.
:resources :res Generic Talos resource browser. :resources <Kind> (e.g. :resources MachineStatus) jumps straight to that kind’s instances. See Resource browser.

Unknown commands produce a notice and do not execute a shell command. The palette has no arbitrary execution path.

These open from a selected row in :nodes rather than through the command palette:

Key Result
Enter / d Open node detail.
p Open processes. See Processes, disks, and network.
k Open disks (with --enable-writes, W there wipes a single device). See Processes, disks, and network.
n Open network interfaces, addresses, and routes.
e Stream the node’s kernel log (dmesg). See Node diagnostics.
s Open the node’s network sockets (netstat). See Node diagnostics.
m Open the node’s filesystem mounts. See Node diagnostics.
f Open the node’s memory usage. See Node diagnostics.
space Mark/unmark the selected node for a bulk action. Requires --enable-writes.
R Reboot the marked node(s) (or the selected node if none are marked), behind a confirm prompt. Requires --enable-writes.
X Shut down the marked node(s) (or the selected node if none are marked), behind a confirm prompt. Requires --enable-writes.
B Roll back the marked node(s) (or the selected node if none are marked) to the previous Talos OS install, behind a confirm prompt. Requires --enable-writes.
U Upgrade the selected node to a specified Talos OS image, behind a prompt prefilled from the running node’s schematic/current version and a confirm step. Shows lifecycle progress when supported; requires --enable-writes.
W Reset/wipe the marked node(s) (or the selected node if none are marked), behind a preview overlay, a typed confirmation token, and a confirm step. Requires --enable-writes. See Nodes.

Each of these views supports r to refresh (reconnect for dmesg) and Esc/q to return to :nodes.

space, R, X, B, W, and U are inert unless t9s was started with --enable-writes (or T9S_ENABLE_WRITES); see Security.

These act on the selected row in :disks (opened with k from :nodes):

Key Result
Enter / d Open disk detail.
W Wipe the selected block device, behind a typed device-path prompt and a confirm step. The system disk and read-only devices are refused. Requires --enable-writes. See Processes, disks, and network.

W is inert unless t9s was started with --enable-writes (or T9S_ENABLE_WRITES); see Security.

These act on the selected row in :etcd:

Key Result
s Snapshot the selected member’s etcd to a local file, behind a path prompt. Requires --enable-writes. See Etcd operations.
R Remove the selected member by ID (forced), behind a confirm prompt. Snapshots first, then refuses if it would drop etcd below quorum. Requires --enable-writes.
L Make the selected member leave the cluster gracefully, behind a confirm prompt. Snapshots first, then refuses if it would drop etcd below quorum. Requires --enable-writes.
d Defragment the selected member’s etcd data directory, behind a confirm prompt. Requires --enable-writes.
A Disarm the selected member’s active etcd alarms, behind a confirm prompt. Requires --enable-writes.
F Make the selected member forfeit leadership so another member can take over, behind a confirm prompt. Quorum-neutral; no snapshot. Requires --enable-writes.

s, R, L, d, A, and F are inert unless t9s was started with --enable-writes (or T9S_ENABLE_WRITES); see Security.

These act on the selected row in :services:

Key Result
S Start the selected service, behind a confirm prompt. Requires --enable-writes.
T Stop the selected service, behind a confirm prompt. Requires --enable-writes.
R Restart the selected service, behind a confirm prompt. Requires --enable-writes.

S, T, and R are inert unless t9s was started with --enable-writes (or T9S_ENABLE_WRITES); see Security.