Add kube-scheduler.

2025-12-15 20:09:46 -05:00
parent efa1e3247a
commit 5c58e30709
10 changed files with 95 additions and 73 deletions
--- a/nix/kubernetes/roles/kube_apiserver/default.nix
+++ b/nix/kubernetes/roles/kube_apiserver/default.nix
@@ -131,7 +131,17 @@ in
        );
        Restart = "on-failure";
        RestartSec = 5;
+        LimitNOFILE = 65536;
+        User = "kubernetes";
      };
    };
+
+    networking.firewall.allowedTCPPorts = [
+      6443
+    ];
+
+    systemd.tmpfiles.rules = [
+      "f /var/log/audit.log 0600 kubernetes kubernetes - -"
+    ];
  };
 }