Add kubelet.

2025-12-16 19:31:33 -05:00
parent 19971d2463
commit 27f4a78221
7 changed files with 214 additions and 16 deletions
--- a/nix/kubernetes/roles/kubelet/default.nix
+++ b/nix/kubernetes/roles/kubelet/default.nix
@@ -0,0 +1,101 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+let
+  # shellCommand = cmd: (lib.concatMapStringsSep " " lib.strings.escapeShellArg cmd);
+  shellCommand = cmd: (builtins.concatStringsSep " " cmd);
+  settingsFormat = pkgs.formats.yaml { };
+  config_file = settingsFormat.generate "kubelet-config.yaml" config.me.kubelet.settings;
+in
+{
+  imports = [ ];
+
+  options.me = {
+    kubelet.enable = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      example = true;
+      description = "Whether we want to install kubelet.";
+    };
+
+    kubelet.settings = lib.mkOption {
+      type = settingsFormat.type;
+      default = {
+        kind = "KubeletConfiguration";
+        apiVersion = "kubelet.config.k8s.io/v1beta1";
+        address = "0.0.0.0";
+        authentication = {
+          anonymous = {
+            enabled = false;
+          };
+          webhook = {
+            enabled = true;
+          };
+          x509 = {
+            clientCAFile = "/var/lib/kubelet/ca.crt";
+          };
+        };
+        authorization = {
+          mode = "Webhook";
+        };
+        cgroupDriver = "systemd";
+        containerRuntimeEndpoint = "unix:///var/run/containerd/containerd.sock";
+        enableServer = true;
+        failSwapOn = false;
+        maxPods = 16;
+        memorySwap = {
+          swapBehavior = "NoSwap";
+        };
+        port = 10250;
+        resolvConf = "/etc/resolv.conf";
+        registerNode = true;
+        runtimeRequestTimeout = "15m";
+        tlsCertFile = "/var/lib/kubelet/kubelet.crt";
+        tlsPrivateKeyFile = "/var/lib/kubelet/kubelet.key";
+      };
+      description = ''
+        kubelet-config.yaml
+      '';
+    };
+  };
+
+  config = lib.mkIf config.me.kubelet.enable {
+    systemd.services.kubelet = {
+      enable = true;
+      description = "Kubernetes Kubelet";
+      documentation = [ "https://github.com/kubernetes/kubernetes" ];
+      wantedBy = [ "kubernetes.target" ];
+      after = [ "containerd.service" ];
+      requires = [ "containerd.service" ];
+      # path = with pkgs; [
+      #   zfs
+      # ];
+      unitConfig.DefaultDependencies = "no";
+      serviceConfig = {
+        ExecStart = (
+          shellCommand [
+            "${pkgs.kubernetes}/bin/kubelet"
+            # "--config=${config_file}"
+            "--config=${./files/kubelet-config.yaml}"
+            "--kubeconfig=/.persist/keys/kube/kubeconfig"
+            "--v=2"
+          ]
+        );
+        Restart = "on-failure";
+        RestartSec = 5;
+        # ConfigurationDirectory = "kubernetes";
+        # CPUAccounting = "true";
+        # IPAccounting = "true";
+        # KillMode = "process";
+        # MemoryAccounting = "true";
+        # StartLimitInterval = 0;
+        # RuntimeDirectory = "kubelet";
+        # StateDirectory = "kubelet";
+      };
+    };
+  };
+}