Move the kubelet yaml config into nix.

This commit is contained in:
Tom Alexander
2025-12-29 21:54:27 -05:00
parent a7f2a97125
commit 5ab245b124
4 changed files with 53 additions and 31 deletions

View File

@@ -1,29 +0,0 @@
kind: KubeletConfiguration
apiVersion: kubelet.config.k8s.io/v1beta1
address: "0.0.0.0"
authentication:
anonymous:
enabled: false
webhook:
enabled: true
x509:
clientCAFile: "/.persist/keys/kube/ca.crt"
authorization:
mode: Webhook
cgroupDriver: systemd
containerRuntimeEndpoint: "unix:///var/run/containerd/containerd.sock"
enableServer: true
failSwapOn: false
maxPods: 16
memorySwap:
swapBehavior: NoSwap
port: 10250
resolvConf: "/run/systemd/resolve/resolv.conf"
registerNode: true
runtimeRequestTimeout: "15m"
tlsCertFile: "/.persist/keys/kube/kubelet.crt"
tlsPrivateKeyFile: "/.persist/keys/kube/kubelet.key"
clusterDomain: "cluster.local"
clusterDNS:
- "10.197.0.10"
- "fd00:3e42:e349::10"

View File

@@ -0,0 +1 @@
nameserver 127.0.0.53