machine_setup/nix/kubernetes/keys/package/k8s-keys/package.nix

{
  k8s,
  runCommand,
  symlinkJoin,
  ...
}:
let
  scripts = runCommand "scripts" { } ''
    mkdir $out
    cp ${k8s.deploy_script} $out/deploy_script
    cp ${k8s.bootstrap_script} $out/bootstrap_script
  '';
in
symlinkJoin {
  name = "k8s-keys";
  paths = [
    scripts
    k8s.encryption_config
  ]
  ++ (builtins.attrValues k8s.ca)
  ++ (builtins.attrValues k8s.keys)
  ++ (builtins.attrValues k8s.client-configs)
  ++ (builtins.attrValues k8s.ssh-keys)
  ++ (builtins.attrValues k8s.pgp-keys)
  ++ (builtins.attrValues k8s.k8s-secrets-generic);
}
Add configs for a new kubernetes cluster on NixOS. 2025-11-30 14:32:36 -05:00			`{`
			`k8s,`
Apply the git repo to the cluster. 2025-12-21 23:48:17 -05:00			`runCommand,`
Add configs for a new kubernetes cluster on NixOS. 2025-11-30 14:32:36 -05:00			`symlinkJoin,`
			`...`
			`}:`
Apply the git repo to the cluster. 2025-12-21 23:48:17 -05:00			`let`
			`scripts = runCommand "scripts" { } ''`
			`mkdir $out`
			`cp ${k8s.deploy_script} $out/deploy_script`
			`cp ${k8s.bootstrap_script} $out/bootstrap_script`
			`'';`
			`in`
Add configs for a new kubernetes cluster on NixOS. 2025-11-30 14:32:36 -05:00			`symlinkJoin {`
			`name = "k8s-keys";`
			`paths = [`
Apply the git repo to the cluster. 2025-12-21 23:48:17 -05:00			`scripts`
Move the encryption config into a package. 2025-12-14 20:28:48 -05:00			`k8s.encryption_config`
Switch to generating certs with openssl. 2025-12-14 18:24:24 -05:00			`]`
Generate certificates for the aggregation layer. 2026-01-09 18:19:34 -05:00			`++ (builtins.attrValues k8s.ca)`
Switch to generating certs with openssl. 2025-12-14 18:24:24 -05:00			`++ (builtins.attrValues k8s.keys)`
Generate ssh keys for flux bootstrap. 2025-12-21 00:01:57 -05:00			`++ (builtins.attrValues k8s.client-configs)`
Generate pgp keys for sops. 2025-12-21 14:17:31 -05:00			`++ (builtins.attrValues k8s.ssh-keys)`
Generate kubernetes secrets for ssh keys. 2025-12-21 18:45:49 -05:00			`++ (builtins.attrValues k8s.pgp-keys)`
Generic secrets for pgp keys. 2025-12-21 19:43:43 -05:00			`++ (builtins.attrValues k8s.k8s-secrets-generic);`
Add configs for a new kubernetes cluster on NixOS. 2025-11-30 14:32:36 -05:00			`}`