Add configs for a new kubernetes cluster on NixOS.

2025-11-30 14:32:36 -05:00
parent d35cfaacbd
commit b16db4325f
58 changed files with 3221 additions and 0 deletions
--- a/nix/kubernetes/keys/package/k8s-keys/files/ca-config.json
+++ b/nix/kubernetes/keys/package/k8s-keys/files/ca-config.json
@@ -0,0 +1,13 @@
+{
+  "signing": {
+    "default": {
+      "expiry": "8760h"
+    },
+    "profiles": {
+      "kubernetes": {
+        "usages": ["signing", "key encipherment", "server auth", "client auth"],
+        "expiry": "8760h"
+      }
+    }
+  }
+}
--- a/nix/kubernetes/keys/package/k8s-keys/files/kubernetes-csr.json
+++ b/nix/kubernetes/keys/package/k8s-keys/files/kubernetes-csr.json
@@ -0,0 +1,16 @@
+{
+  "CN": "kubernetes",
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "US",
+      "L": "Portland",
+      "O": "Kubernetes",
+      "OU": "Kubernetes The Hard Way",
+      "ST": "Oregon"
+    }
+  ]
+}
--- a/nix/kubernetes/keys/package/k8s-keys/package.nix
+++ b/nix/kubernetes/keys/package/k8s-keys/package.nix
@@ -0,0 +1,12 @@
+{
+  k8s,
+  symlinkJoin,
+  ...
+}:
+symlinkJoin {
+  name = "k8s-keys";
+  paths = [
+    k8s.kubernetes
+    k8s.ca
+  ];
+}