Tom Alexander
|
1651cb54dd
|
Allow node-to-node communication.
|
2026-04-26 12:45:08 -04:00 |
|
Tom Alexander
|
a5e70c5d4e
|
Enable the firewall.
|
2026-04-26 12:45:07 -04:00 |
|
Tom Alexander
|
f21dd0616b
|
Fix network for updated nix.
|
2026-04-26 12:45:06 -04:00 |
|
Tom Alexander
|
e43d7d2a96
|
Generate certificates for the aggregation layer.
|
2026-04-26 12:45:05 -04:00 |
|
Tom Alexander
|
97882ab559
|
Temporarily disable the firewall for debugging.
|
2026-04-26 12:45:05 -04:00 |
|
Tom Alexander
|
8020f804db
|
Enable hubble.
|
2026-04-26 12:45:05 -04:00 |
|
Tom Alexander
|
2674b4350b
|
Add a custom nftables firewall config.
|
2026-04-26 12:45:04 -04:00 |
|
Tom Alexander
|
a8f1f69570
|
Enable the firewall.
Now that we have networking working, I can enable the firewall and confirm nothing breaks.
|
2026-04-26 12:45:04 -04:00 |
|
Tom Alexander
|
c9c94d31a7
|
More changes to try to fix coredns.
|
2026-04-26 12:45:04 -04:00 |
|
Tom Alexander
|
5ab245b124
|
Move the kubelet yaml config into nix.
|
2026-04-26 12:45:03 -04:00 |
|
Tom Alexander
|
2b7ab9764c
|
Use CoreDNS for in-cluster DNS requests and caching.
|
2026-04-26 12:45:03 -04:00 |
|
Tom Alexander
|
be85d828b9
|
Build the cilium manifest automatically in nix.
|
2026-04-26 12:45:03 -04:00 |
|
Tom Alexander
|
332bab09e3
|
Allow pods to directly speak to the public internet on their own public IPv6 addresses.
|
2026-04-26 12:45:02 -04:00 |
|
Tom Alexander
|
98a5029ccf
|
Enable ipv4 and tunnel routing.
|
2026-04-26 12:45:02 -04:00 |
|
Tom Alexander
|
0c7733d418
|
Fix service cluster ip range.
Kubernetes only allows a /112 for service ip range.
|
2026-04-26 12:45:02 -04:00 |
|
Tom Alexander
|
a8a0eab820
|
Add missing cidr declarations.
|
2026-04-26 12:45:01 -04:00 |
|
Tom Alexander
|
0ad71fc915
|
Fix DNS resolution.
|
2026-04-26 12:45:01 -04:00 |
|
Tom Alexander
|
f59225d283
|
Install CoreDNS.
|
2026-04-26 12:45:00 -04:00 |
|
Tom Alexander
|
ae8c3f44e0
|
Move the cluster bootstrap into the keys flake.
Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.
|
2026-04-26 12:45:00 -04:00 |
|
Tom Alexander
|
e9901cd63a
|
Set up flux.
|
2026-04-26 12:44:59 -04:00 |
|
Tom Alexander
|
a113cccb52
|
Add a bootstrap role.
|
2026-04-26 12:44:59 -04:00 |
|
Tom Alexander
|
b0fe14adfc
|
Add a bootstrap role to load manifests into the cluster.
|
2026-04-26 12:44:59 -04:00 |
|
Tom Alexander
|
4e05c626e8
|
Fix launching of containers.
|
2026-04-26 12:44:59 -04:00 |
|
Tom Alexander
|
aaa07b8b9f
|
Create a debugging role.
|
2026-04-26 12:44:59 -04:00 |
|
Tom Alexander
|
9608d33557
|
Some networking fixes.
|
2026-04-26 12:44:59 -04:00 |
|
Tom Alexander
|
a5e2eaee80
|
Add cilium bootstrap.
|
2026-04-26 12:44:58 -04:00 |
|
Tom Alexander
|
8a440d144d
|
Installing the cni plugins.
|
2026-04-26 12:44:58 -04:00 |
|
Tom Alexander
|
988a1673b3
|
Add kube-proxy.
|
2026-04-26 12:44:58 -04:00 |
|
Tom Alexander
|
abae26ed17
|
Add kubelet.
|
2026-04-26 12:44:58 -04:00 |
|
Tom Alexander
|
3abffe2869
|
Add worker nodes.
|
2026-04-26 12:44:58 -04:00 |
|
Tom Alexander
|
47f57116d9
|
Add kube-scheduler.
|
2026-04-26 12:44:58 -04:00 |
|
Tom Alexander
|
e3ceee6d46
|
Add kube-controller-manager.
|
2026-04-26 12:44:57 -04:00 |
|
Tom Alexander
|
300328dc4a
|
Fix launching kube-apiserver.
|
2026-04-26 12:44:57 -04:00 |
|
Tom Alexander
|
03efde4674
|
Move the encryption config into a package.
|
2026-04-26 12:44:57 -04:00 |
|
Tom Alexander
|
f2a505131a
|
Add controller proxy certs.
|
2026-04-26 12:44:57 -04:00 |
|
Tom Alexander
|
f18b7d0da9
|
Add requestheader-client-ca.
|
2026-04-26 12:44:57 -04:00 |
|
Tom Alexander
|
51feef1582
|
Add service account.
|
2026-04-26 12:44:56 -04:00 |
|
Tom Alexander
|
41f9847262
|
Install kubernetes.
|
2026-04-26 12:44:56 -04:00 |
|
Tom Alexander
|
75fde32fd9
|
Add additional controllers.
|
2026-04-26 12:44:56 -04:00 |
|
Tom Alexander
|
b16db4325f
|
Add configs for a new kubernetes cluster on NixOS.
|
2026-04-26 12:44:56 -04:00 |
|