machine_setup/nix/kubernetes/keys/package/k8s-keys/package.nix

{
  k8s,
  symlinkJoin,
  ...
}:
symlinkJoin {
  name = "k8s-keys";
  paths = [
    k8s.ca
    k8s.encryption_config
  ]
  ++ (builtins.attrValues k8s.keys)
  ++ (builtins.attrValues k8s.client-configs)
  ++ (builtins.attrValues k8s.ssh-keys)
  ++ (builtins.attrValues k8s.pgp-keys)
  ++ (builtins.attrValues k8s.k8s-ssh-secrets)
  ++ (builtins.attrValues k8s.k8s-secrets-generic);
}
Add configs for a new kubernetes cluster on NixOS. 2025-11-30 14:32:36 -05:00			`{`
			`k8s,`
			`symlinkJoin,`
			`...`
			`}:`
			`symlinkJoin {`
			`name = "k8s-keys";`
			`paths = [`
			`k8s.ca`
Move the encryption config into a package. 2025-12-14 20:28:48 -05:00			`k8s.encryption_config`
Switch to generating certs with openssl. 2025-12-14 18:24:24 -05:00			`]`
			`++ (builtins.attrValues k8s.keys)`
Generate ssh keys for flux bootstrap. 2025-12-21 00:01:57 -05:00			`++ (builtins.attrValues k8s.client-configs)`
Generate pgp keys for sops. 2025-12-21 14:17:31 -05:00			`++ (builtins.attrValues k8s.ssh-keys)`
Generate kubernetes secrets for ssh keys. 2025-12-21 18:45:49 -05:00			`++ (builtins.attrValues k8s.pgp-keys)`
Generic secrets for pgp keys. 2025-12-21 19:43:43 -05:00			`++ (builtins.attrValues k8s.k8s-ssh-secrets)`
			`++ (builtins.attrValues k8s.k8s-secrets-generic);`
Add configs for a new kubernetes cluster on NixOS. 2025-11-30 14:32:36 -05:00			`}`