That's as expected.
10.23.40.1 may be a Talos VIP, which should not be used as an endpoint (as it will be down when K8s or etcd is down, and then you couldn't issue talosctl commands to recover.)
More details: https://www.talos.dev/v1.6/learn-more/talosctl/#endpoints-and-nodes

In your case, just configure talosconfig with the correct endpoints: https://www.talos.dev/v1.6/introduction/prodnotes/#endpoints
or pass them in to the command.

🌐
Medium
medium.com › @pedrotychang › how-i-setup-talos-linux-bc2832ec87cc
How I Setup Talos Linux. My journey to building a secure… | by Pedro Chang | Medium
February 19, 2025 - Then using the IP address that you set/reserved, you use talosctl commands. The following command will output the Machine Config and also name your cluster. talosctl gen config [clusterName] https://10.0.2.15:6443 # k8s endpoint port
🌐
OneUptime
oneuptime.com › home › blog › how to use talosctl gen config effectively
How to Use talosctl gen config Effectively
March 3, 2026 - The talosctl gen config command generates these configurations, including all the TLS certificates, encryption keys, and cluster settings needed to bootstrap a secure Kubernetes cluster.
🌐
OneUptime
oneuptime.com › home › blog › how to generate machine configurations with talosctl gen config
How to Generate Machine Configurations with talosctl gen config
March 3, 2026 - Each time you run gen config, new secrets are generated, meaning your existing nodes will no longer trust the new configurations. ... # First time: generate and save the secrets talosctl gen secrets --output-file secrets.yaml # Subsequent times: use the saved secrets talosctl gen config my-cluster https://192.168.1.100:6443 \ --with-secrets secrets.yaml
🌐
Dan Harris.
danharr.is › posts › generating-a-kubeconfig-on-talos
Generating a kubeconfig on Talos | Dan Harris.
March 6, 2025 - If you have a control plane config file available for your Talos cluster you can follow the steps below to generate yourself a new kubeconfig. First generate the Talos secrets bundle. $ talosctl gen secrets --from-controlplane-config controlplane.yaml
🌐
GitHub
github.com › oneuptime › blog › tree › master › posts › 2026-03-03-generate-machine-configurations-talosctl-gen-config
blog/posts/2026-03-03-generate-machine-configurations-talosctl-gen-config at master · OneUptime/blog
Each time you run gen config, new secrets are generated, meaning your existing nodes will no longer trust the new configurations. ... # First time: generate and save the secrets talosctl gen secrets --output-file secrets.yaml # Subsequent times: use the saved secrets talosctl gen config my-cluster https://192.168.1.100:6443 \ --with-secrets secrets.yaml
Author   OneUptime
🌐
GitHub
github.com › oneuptime › blog › tree › master › posts › 2026-03-03-use-talosctl-gen-config-effectively
blog/posts/2026-03-03-use-talosctl-gen-config-effectively at master · OneUptime/blog
talosconfig - The client configuration for talosctl · secrets.yaml (optional) - The cluster secrets bundle · These files contain everything needed to bring up a Talos Linux cluster from bare machines. ... # Generate configurations for a cluster named "my-cluster" # with the Kubernetes API endpoint at the given URL talosctl gen config my-cluster https://10.0.0.1:6443
Author   OneUptime
🌐
TALOS LINUX
talos.dev › v1.4 › reference › configuration
Configuration | TALOS LINUX
April 18, 2023 - Package v1alpha1 configuration file contains all the options available for configuring a machine. To generate a set of basic configuration files, run: talosctl gen config --version v1alpha1 This will generate a machine config for each node type, ...
🌐
Sidero Documentation
docs.siderolabs.com › talos › v1.7 › reference › cli
talosctl - Sidero Documentation
Generates a set of configuration files for Talos cluster · The cluster endpoint is the URL for the Kubernetes API. If you decide to use a control plane node, common in a single node control plane setup, use port 6443 as this is the port that ...
Find elsewhere
🌐
Linux.com
linux.com › home › contributed › a simple way to install talos linux on any machine, with any...
A Simple Way to Install Talos Linux on Any Machine, with Any Provider - Linux.com
April 28, 2025 - Here’s an example of a config patch containing the necessary values: # node1.yaml machine: install: disk: /dev/sda network: hostname: node1 nameservers: - 1.1.1.1 - 8.8.8.8 interfaces: - interface: eno2np0 addresses: - 10.0.0.131/24 routes: - network: 0.0.0.0/0 gateway: 10.0.0.1 ... talosctl gen secrets talosctl gen config --with-secrets=secrets.yaml --config-patch-control-plane=@node1.yaml <cluster-name> <cluster-endpoint>
🌐
A cup of coffee
a-cup-of.coffee › blog › talos
Talos - An Immutable OS for Kubernetes - A cup of coffee
May 2, 2026 - Further down, we will talk about talhelper which offers a solution to generate a configuration file per machine. # Appliquer la configuration sur les nœuds controlplane # Apply the configuration to control plane nodes talosctl apply-config --insecure -n 192.168.1.85 -e 192.168.1.85 --file controlplane.yaml talosctl apply-config --insecure -n 192.168.1.79 -e 192.168.1.79 --file controlplane.yaml talosctl apply-config --insecure -n 192.168.1.82 -e 192.168.1.82 --file controlplane.yaml # Apply the configuration to worker nodes talosctl apply-config --insecure -n 192.168.1.83 -e 192.168.1.83 --file worker.yaml talosctl apply-config --insecure -n 192.168.1.86 -e 192.168.1.86 --file worker.yaml
🌐
Openebs
openebs.io › talos
Replicated PV Mayastor Installation on Talos | OpenEBS Docs
talosctl gen config talos-k8s-gcp-tutorial https://mytaloscluster:443 --config-patch-control-plane @cp.yaml --config-patch-worker @wp.yaml
🌐
OneUptime
oneuptime.com › home › blog › how to use talosctl gen config with custom patches
How to Use talosctl gen config with Custom Patches
March 3, 2026 - The talosctl gen config command is the starting point for every Talos Linux cluster. It generates the machine configuration files that define how your control plane and worker nodes should be set up.
🌐
Josh Noll
joshrnoll.com › creating-a-kubernetes-cluster-with-talos-linux-on-tailscale
Creating a Kubernetes Cluster With Talos Linux on Tailscale — Josh Noll
February 21, 2025 - With our configs applied, we are ready to bootstrap Kubernetes. This only has to be done once, against the first control plane node! Run the following command (note that we are now specifying the machine’s static IP, and we are not using the —insecure flag!): talosctl bootstrap --nodes 10.0.30.86 --endpoints 10.0.30.86 --talosconfig=./talosconfig
🌐
beyondwatts
beyondwatts.com › posts › setting-up-a-talos-kubernetes-cluster-with-talhelper
beyondwatts | Setting up a Talos kubernetes cluster with talhelper
May 13, 2025 - Before the cluster can form it needs to be bootstrapped - I applied the node configuration to the first node and then bootstrapped the cluster. Again talhelper gives the command we need: talhelper gencommand apply --extra-flags --insecure talosctl apply-config --talosconfig=./clusterconfig/talosconfig --nodes=192.168.1.1 --file=./clusterconfig/home-cluster-cp1.yaml; talhelper gencommand bootstrap talosctl bootstrap --talosconfig=./clusterconfig/talosconfig --nodes=192.168.1.1;
🌐
Budimanjojo
budimanjojo.github.io › talhelper › latest
Talhelper
Currently, to create Talos configuration files using the official talosctl tool your steps are: Run talosctl gen config <cluster-name> <cluster-endpoint> and it will generate controlplane.yaml, worker.yaml, talosconfig in the current working directory.
🌐
DEV Community
dev.to › nabsul › talos-kubernetes-in-five-minutes-1p1h
Talos Kubernetes in Five Minutes - DEV Community
September 28, 2025 - This will create a directory and populate it with an auto-generated cert and some default configuration files. Note the following: --additional-sans ensures that the certificate is valid for the VM's public IP address · Set the TALOSCONFIG environment variable so you don't have to add --talosconfig mydir/talosconfig every time you use talosctl...