talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Enable ipv4 and tunnel routing.

Browse Source
This commit is contained in:
Tom Alexander
2025-12-29 17:00:23 -05:00
parent ed5d463741
commit 98a5029ccf
5 changed files with 37 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
nix/kubernetes/roles/kube_apiserver/default.nix
View File

@@ -84,7 +84,7 @@ in
"--tls-cert-file=/.persist/keys/kube/kube-api-server.crt"
"--tls-private-key-file=/.persist/keys/kube/kube-api-server.key"
"--tls-min-version=VersionTLS13"
"--service-cluster-ip-range=fd00:3e42:e349::/112"
"--service-cluster-ip-range=fd00:3e42:e349::/112,10.197.0.0/16"
"--v=2"
# OLD:

4
nix/kubernetes/roles/kube_controller_manager/default.nix
View File

@@ -40,7 +40,7 @@ in
# "--cluster-cidr=10.200.0.0/16"
# "--cluster-cidr=2620:11f:7001:7:ffff:ffff:0ac8:0000/16"
"--allocate-node-cidrs=true"
"--cluster-cidr=fd49:0595:2bba::/48"
"--cluster-cidr=10.200.0.0/16,fd49:0595:2bba::/48"
"--cluster-name=kubernetes"
"--cluster-signing-cert-file=/.persist/keys/kube/ca.crt"
"--cluster-signing-key-file=/.persist/keys/kube/ca.key"
@@ -49,7 +49,7 @@ in
"--service-account-private-key-file=/.persist/keys/kube/service-accounts.key"
# "--service-cluster-ip-range=10.197.0.0/16"
# "--service-cluster-ip-range=2620:11f:7001:7:ffff:ffff:0ac5:0000/16"
"--service-cluster-ip-range=fd00:3e42:e349::/112"
"--service-cluster-ip-range=10.197.0.0/16,fd00:3e42:e349::/112"
"--use-service-account-credentials=true"
"--v=2"
]

4
nix/kubernetes/roles/kube_proxy/default.nix
View File

@@ -33,7 +33,7 @@ in
mode = "iptables";
# clusterCIDR = "10.200.0.0/16";
# clusterCIDR = "2620:11f:7001:7:ffff:ffff:0ac8:0000/16";
clusterCIDR = "fd49:0595:2bba::/48";
clusterCIDR = "10.200.0.0/16,fd49:0595:2bba::/48";
};
description = ''
kubelet-config.yaml
@@ -57,7 +57,7 @@ in
"${pkgs.kubernetes}/bin/kube-proxy"
"--config=${config_file}"
"--nodeport-addresses=primary"
"--cluster-cidr=fd49:0595:2bba::/48"
"--cluster-cidr=10.200.0.0/16,fd49:0595:2bba::/48"
]
);
Restart = "on-failure";