talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Add requestheader-client-ca.

Browse Source
This commit is contained in:
Tom Alexander
2025-12-14 13:44:56 -05:00
parent e8bd0f6416
commit b33bb736e6
8 changed files with 68 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
nix/kubernetes/keys/scope.nix
View File

@@ -151,6 +151,13 @@ makeScope newScope (
group = 10024;
mode = "0600";
}
{
dest_dir = "/vm/${vm_name}/persist/keys/kube";
file = "${self.requestheader-client-ca}/requestheader-client-ca.pem";
owner = 10024;
group = 10024;
mode = "0600";
}
])
)
);
@@ -196,6 +203,9 @@ makeScope newScope (
ca = (callPackage ./package/k8s-ca/package.nix additional_vars);
kubernetes = (callPackage ./package/k8s-kubernetes/package.nix additional_vars);
service_account = (callPackage ./package/k8s-service-account/package.nix additional_vars);
requestheader-client-ca = (
callPackage ./package/k8s-requestheader-client-ca/package.nix additional_vars
);
keys = (callPackage ./package/k8s-keys/package.nix additional_vars);
deploy_script = (writeShellScript "deploy-keys" deploy_script);
}