talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Generic secrets for ssh keys.

Browse Source
This commit is contained in:
Tom Alexander
2025-12-21 22:41:21 -05:00
parent 71d9f5672a
commit 063fcdbbab
5 changed files with 20 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
nix/kubernetes/keys/package/bootstrap-script/package.nix
View File

@@ -27,15 +27,19 @@ let
echo "Bootstrap finished"
'');
manifests = (
lib.concatMapStringsSep "," lib.escapeShellArg [
./files/manifests/initial_clusterrole.yaml
./files/manifests/cilium.yaml
./files/manifests/coredns.yaml
./files/manifests/flux_namespace.yaml
./files/manifests/flux.yaml
./files/manifests/flux_instance.yaml
"${k8s.k8s-ssh-secrets.kubernetes-deploy-key}/kubernetes-deploy-key.yaml"
]
lib.concatMapStringsSep "," lib.escapeShellArg (
[
./files/manifests/initial_clusterrole.yaml
./files/manifests/cilium.yaml
./files/manifests/coredns.yaml
./files/manifests/flux_namespace.yaml
./files/manifests/flux.yaml
./files/manifests/flux_instance.yaml
]
++ (lib.attrsets.mapAttrsToList (
secret_name: secret_value: "${secret_value}/${secret_name}.yaml"
) k8s.k8s-secrets-generic)
)
);
apply_manifests = "kubectl --kubeconfig=${k8s.client-configs.admin}/admin.kubeconfig apply --server-side --force-conflicts -f ${manifests}";
in