talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity
1,282 Commits 8 Branches 0 Tags
37efcdb367a1b927fe727c1ba7b76b7c988682fb
Commit Graph

1282 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tom Alexander
37efcdb367 Allow pods to directly speak to the public internet on their own public IPv6 addresses. 2026-07-06 18:12:08 -04:00
Tom Alexander
01d230bde6 Enable ipv4 and tunnel routing. 2026-07-06 18:12:08 -04:00
Tom Alexander
383acd4fd2 Switch to kubernetes ipam mode. 2026-07-06 18:12:08 -04:00
Tom Alexander
7df824da6a Fix service cluster ip range. 
Kubernetes only allows a /112 for service ip range.
 2026-07-06 18:12:08 -04:00
Tom Alexander
efbfe865e0 Fix trailing line break in kubernetes encryption config. 2026-07-06 18:12:08 -04:00
Tom Alexander
2314bef2ad Move the yaml functions to their own file. 2026-07-06 18:12:08 -04:00
Tom Alexander
8e9bd9acc1 Introduce functions to generate yaml. 
The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.
 2026-07-06 18:12:08 -04:00
Tom Alexander
d924aa3a81 Add missing cidr declarations. 2026-07-06 18:12:07 -04:00
Tom Alexander
2bbf44e528 Fix DNS resolution. 2026-07-06 18:12:07 -04:00
Tom Alexander
c289f46cc5 Apply the git repo to the cluster. 2026-07-06 18:12:07 -04:00
Tom Alexander
88b1c36c0d Trust flux's ssh key in the yaml git repo. 2026-07-06 18:12:07 -04:00
Tom Alexander
dbd82b998d Generic secrets for ssh keys. 2026-07-06 18:12:07 -04:00
Tom Alexander
1700c42926 Generic secrets for pgp keys. 2026-07-06 18:12:07 -04:00
Tom Alexander
3c20fd49f0 Generate kubernetes secrets for ssh keys. 2026-07-06 18:12:06 -04:00
Tom Alexander
903c1c1f41 Install CoreDNS. 2026-07-06 18:12:06 -04:00
Tom Alexander
158c622840 Generate pgp keys for sops. 2026-07-06 18:12:06 -04:00
Tom Alexander
ceb627bb35 Generate ssh keys for flux bootstrap. 2026-07-06 18:12:06 -04:00
Tom Alexander
a3f1dff351 Move the cluster bootstrap into the keys flake. 
Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.
 2026-07-06 18:12:06 -04:00
Tom Alexander
46c8f5e0ce Set up flux. 2026-07-06 18:12:06 -04:00
Tom Alexander
3760bca64b Add a bootstrap role. 2026-07-06 18:12:05 -04:00
Tom Alexander
3396a4f482 Add a bootstrap role to load manifests into the cluster. 2026-07-06 18:12:05 -04:00
Tom Alexander
773db6e567 Fix launching of containers. 2026-07-06 18:12:05 -04:00
Tom Alexander
6010867796 Create a debugging role. 2026-07-06 18:12:05 -04:00
Tom Alexander
e9db45fb61 Some networking fixes. 2026-07-06 18:12:05 -04:00
Tom Alexander
10cb394dde Add cilium bootstrap. 2026-07-06 18:12:05 -04:00
Tom Alexander
14787d6730 Installing the cni plugins. 2026-07-06 18:12:05 -04:00
Tom Alexander
19b2da0d40 Add kube-proxy. 2026-07-06 18:12:04 -04:00
Tom Alexander
95ec23126a Add kubelet. 2026-07-06 18:12:04 -04:00
Tom Alexander
6897915455 Add worker nodes. 2026-07-06 18:12:04 -04:00
Tom Alexander
868b9b9889 Add kube-scheduler. 2026-07-06 18:12:04 -04:00
Tom Alexander
d0439a6d2f Add kube-controller-manager. 2026-07-06 18:12:04 -04:00
Tom Alexander
fd15dc5bef Fix launching kube-apiserver. 2026-07-06 18:12:04 -04:00
Tom Alexander
380ac011f1 Move the encryption config into a package. 2026-07-06 18:12:03 -04:00
Tom Alexander
f4891f345e Switch to generating certs with openssl. 2026-07-06 18:12:03 -04:00
Tom Alexander
f8ad309c0b Add controller proxy certs. 2026-07-06 18:12:03 -04:00
Tom Alexander
6c07157f21 Add requestheader-client-ca. 2026-07-06 18:12:03 -04:00
Tom Alexander
6aa87faecb Add service account. 2026-07-06 18:12:03 -04:00
Tom Alexander
732e2cd296 Install kubernetes. 2026-07-06 18:12:03 -04:00
Tom Alexander
ac07941b8e Add additional controllers. 2026-07-06 18:12:02 -04:00
Tom Alexander
fa59f17df5 Add configs for a new kubernetes cluster on NixOS. 2026-07-06 18:12:00 -04:00
Tom Alexander
c7e7b2b06c Fix ending video recording sessions. 2026-07-05 17:29:53 -04:00
Tom Alexander
c0b3cd0fd3 Switch to flake-based build on nix-builder for nightly rust. 2026-07-05 16:15:33 -04:00
Tom Alexander
ef21e0125e Disable the nixbsd build due to onetbb test bugs. 
This can be re-enabled after I have a flake building nixbsd so I can specify overlays.
 2026-06-23 15:08:44 -04:00
Tom Alexander
e30a2ddb9e Disable oneTBB tests. 
oneTBB tests hang forever on machines with only one CPU core. Since my NixOS builder is a virtual machine with only one core, I am disabling the tests.

ref: https://github.com/uxlfoundation/oneTBB/issues/1557
 2026-06-21 22:14:14 -04:00
Tom Alexander
53b3717b6c Fix branch for family disks target in nix_builder. 2026-06-18 17:11:02 -04:00
Tom Alexander
0cf4139392 Fix launching shikane. 
This was failing because the latest version of shikane opens the config file as read+write.
 2026-06-18 10:38:23 -04:00
Tom Alexander
6094fee196 Enable the thunderbolt service. 2026-06-17 13:08:11 -04:00
Tom Alexander
9e4c079258 Update packages. 2026-06-13 22:05:23 -04:00
Tom Alexander
3ab7a6e460 Update packages. 2026-06-13 22:05:23 -04:00
Tom Alexander
49f75408ae Move kernel config to its own role. 2026-06-13 22:05:23 -04:00