56 Commits

Author	SHA1	Message	Date
Tom Alexander	2e19d68ba5	Temporarily disable the firewall for debugging.	2026-02-21 15:11:14 -05:00
Tom Alexander	9830e34a45	Enable gateway support.	2026-02-21 15:11:14 -05:00
Tom Alexander	20007079df	Enable hubble.	2026-02-21 15:11:14 -05:00
Tom Alexander	657d5a5e55	Temporarily drop flux interval to 1 minute during early development. ... This is to reduce waiting time.	2026-02-21 15:11:14 -05:00
Tom Alexander	31dd69cfcb	Install deferred manifests.	2026-02-21 15:11:14 -05:00
Tom Alexander	a4353e438e	Add a custom nftables firewall config.	2026-02-21 15:11:13 -05:00
Tom Alexander	1902e132a7	Enable the firewall. ... Now that we have networking working, I can enable the firewall and confirm nothing breaks.	2026-02-21 15:11:13 -05:00
Tom Alexander	da9b91a47c	Fix CoreDNS IPv4 connectivity.	2026-02-21 15:11:13 -05:00
Tom Alexander	b9d916fdc7	Increase timeout for coredns cache.	2026-02-21 15:11:13 -05:00
Tom Alexander	7f6f8352c0	More changes to try to fix coredns.	2026-02-21 15:11:13 -05:00
Tom Alexander	8e043ba48a	Move the kubelet yaml config into nix.	2026-02-21 15:11:13 -05:00
Tom Alexander	218aaf97c6	Implement a generic helm templater package.	2026-02-21 15:11:12 -05:00
Tom Alexander	35a1b8c227	Switch to generating the coredns manifests via nix.	2026-02-21 15:11:12 -05:00
Tom Alexander	e3c61fe4db	Use CoreDNS for in-cluster DNS requests and caching.	2026-02-21 15:11:12 -05:00
Tom Alexander	9314691e7e	Enable native routing.	2026-02-21 15:11:12 -05:00
Tom Alexander	740e3a17e5	Build the cilium manifest automatically in nix.	2026-02-21 15:11:12 -05:00
Tom Alexander	5c4ac7ea59	Allow pods to directly speak to the public internet on their own public IPv6 addresses.	2026-02-21 15:11:12 -05:00
Tom Alexander	323e2fff83	Enable ipv4 and tunnel routing.	2026-02-21 15:11:12 -05:00
Tom Alexander	f5286bd10e	Switch to kubernetes ipam mode.	2026-02-21 15:11:11 -05:00
Tom Alexander	87429a2953	Fix service cluster ip range. ... Kubernetes only allows a /112 for service ip range.	2026-02-21 15:11:11 -05:00
Tom Alexander	a32eb663b1	Fix trailing line break in kubernetes encryption config.	2026-02-21 15:11:11 -05:00
Tom Alexander	bd7c86a10e	Move the yaml functions to their own file.	2026-02-21 15:11:11 -05:00
Tom Alexander	a99477797c	Introduce functions to generate yaml. ... The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.	2026-02-21 15:11:11 -05:00
Tom Alexander	b5f9a7c812	Add missing cidr declarations.	2026-02-21 15:11:11 -05:00
Tom Alexander	f0e6b30c98	Fix DNS resolution.	2026-02-21 15:11:10 -05:00
Tom Alexander	70c10aba40	Apply the git repo to the cluster.	2026-02-21 15:11:10 -05:00
Tom Alexander	32b27fba36	Trust flux's ssh key in the yaml git repo.	2026-02-21 15:11:10 -05:00
Tom Alexander	90a97f4e74	Generic secrets for ssh keys.	2026-02-21 15:11:10 -05:00
Tom Alexander	21ee9a631c	Generic secrets for pgp keys.	2026-02-21 15:11:10 -05:00
Tom Alexander	9529f4b805	Generate kubernetes secrets for ssh keys.	2026-02-21 15:11:10 -05:00
Tom Alexander	f3e7d56b66	Install CoreDNS.	2026-02-21 15:11:09 -05:00
Tom Alexander	5593a1fccd	Generate pgp keys for sops.	2026-02-21 15:11:09 -05:00
Tom Alexander	ff04f8d951	Generate ssh keys for flux bootstrap.	2026-02-21 15:11:09 -05:00
Tom Alexander	50ba6f7c87	Move the cluster bootstrap into the keys flake. ... Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.	2026-02-21 15:11:09 -05:00
Tom Alexander	2f1075c20c	Set up flux.	2026-02-21 15:11:09 -05:00
Tom Alexander	41a9bc263c	Add a bootstrap role.	2026-02-21 15:11:09 -05:00
Tom Alexander	8ca78b023e	Add a bootstrap role to load manifests into the cluster.	2026-02-21 15:11:09 -05:00
Tom Alexander	118c63a90d	Fix launching of containers.	2026-02-21 15:11:08 -05:00
Tom Alexander	05f7f18e93	Create a debugging role.	2026-02-21 15:11:08 -05:00
Tom Alexander	2d49aff563	Some networking fixes.	2026-02-21 15:11:08 -05:00
Tom Alexander	ac9fa195ae	Add cilium bootstrap.	2026-02-21 15:11:08 -05:00
Tom Alexander	af7ec0414e	Installing the cni plugins.	2026-02-21 15:11:08 -05:00
Tom Alexander	fbfa3dc5dc	Add kube-proxy.	2026-02-21 15:11:08 -05:00
Tom Alexander	2ac0bfe5f8	Add kubelet.	2026-02-21 15:11:07 -05:00
Tom Alexander	fb0d592a84	Add worker nodes.	2026-02-21 15:11:07 -05:00
Tom Alexander	13f3237359	Add kube-scheduler.	2026-02-21 15:11:07 -05:00
Tom Alexander	7365efd97f	Add kube-controller-manager.	2026-02-21 15:11:07 -05:00
Tom Alexander	8c59a1216f	Fix launching kube-apiserver.	2026-02-21 15:11:07 -05:00
Tom Alexander	cd86934dde	Move the encryption config into a package.	2026-02-21 15:11:07 -05:00
Tom Alexander	f1346a52ce	Switch to generating certs with openssl.	2026-02-21 15:11:07 -05:00