36 lines
641 B
Nix
36 lines
641 B
Nix
|
# unpackPhase
|
||
|
|
# patchPhase
|
||
|
|
# configurePhase
|
||
|
|
# buildPhase
|
||
|
|
# checkPhase
|
||
|
|
# installPhase
|
||
|
|
# fixupPhase
|
||
|
|
# installCheckPhase
|
||
|
|
# distPhase
|
||
|
|
{
|
||
|
|
stdenv,
|
||
|
|
sqlite,
|
||
|
|
cfssl,
|
||
|
|
k8s,
|
||
|
|
all_hostnames,
|
||
|
|
...
|
||
|
|
}:
|
||
|
|
stdenv.mkDerivation (finalAttrs: {
|
||
|
|
name = "k8s-service-account";
|
||
|
|
nativeBuildInputs = [ cfssl ];
|
||
|
|
buildInputs = [ ];
|
||
|
|
|
||
|
|
unpackPhase = "true";
|
||
|
|
|
||
|
|
installPhase = ''
|
||
|
|
mkdir -p "$out"
|
||
|
|
cd "$out"
|
||
|
|
cfssl gencert \
|
||
|
|
-ca=${k8s.ca}/ca.pem \
|
||
|
|
-ca-key=${k8s.ca}/ca-key.pem \
|
||
|
|
-config=${./files/ca-config.json} \
|
||
|
|
-profile=kubernetes \
|
||
|
|
${./files/service-account-csr.json} | cfssljson -bare service-account
|
||
|
|
'';
|
||
|
|
})
|