Tom Alexander
4ee740991b
Switch to the main branch for the k8s manifests.
...
The old cluster has been fully deleted, so we no longer need a separate nix branch.
2026-10-15 19:59:50 -04:00
Tom Alexander
24853ba6a2
Add secret for private images pulled in tekton steps.
2026-09-12 17:26:41 -04:00
Tom Alexander
5dd5f2e4e0
Fix docker credential generation.
2026-07-23 20:08:40 -04:00
Tom Alexander
40b8742a80
Add nix pull-through cache secrets.
2026-07-13 20:35:11 -04:00
Tom Alexander
32080e0e01
Add chown for nix pull through cache database.
2026-07-12 17:25:12 -04:00
Tom Alexander
297577471e
Update kubernetes packages and update to gateway API 1.5.1.
2026-07-06 18:12:15 -04:00
Tom Alexander
345ecfc7cf
Add secret for homepage-staging.
2026-07-06 18:12:14 -04:00
Tom Alexander
889de9dbf6
Add a secret for the harbor webhooks to flux.
2026-07-06 18:12:14 -04:00
Tom Alexander
65c2021473
Update flux and install the image automation controller.
2026-07-06 18:12:14 -04:00
Tom Alexander
b0f025d340
Add IP addresses to worker certs for the metrics server.
2026-07-06 18:12:14 -04:00
Tom Alexander
058f0cd59b
Set up containerd use harbor.fizz.buzz.
2026-07-06 18:12:14 -04:00
Tom Alexander
c8c18bde88
Add secrets for archive-box, webhook-bridge, and tekton.
2026-07-06 18:12:14 -04:00
Tom Alexander
deaea6954e
Use numbers for folder order.
2026-07-06 18:12:13 -04:00
Tom Alexander
c1ec96044e
Add harbor secrets.
2026-07-06 18:12:13 -04:00
Tom Alexander
cdb2994447
Switch to the experimental gateway CRDs for TCPRoute support.
2026-07-06 18:12:13 -04:00
Tom Alexander
7416e412df
Add oauth2 proxy secrets.
2026-07-06 18:12:13 -04:00
Tom Alexander
d14d8fe4a4
Add dex secrets.
2026-07-06 18:12:13 -04:00
Tom Alexander
a4b20c1ead
Enable the firewall.
2026-07-06 18:12:12 -04:00
Tom Alexander
b593fdc8a7
Add gitea secrets.
2026-07-06 18:12:12 -04:00
Tom Alexander
8f5f59ee87
Add generation for in-repo secrets.
2026-07-06 18:12:12 -04:00
Tom Alexander
fc32a42750
Enforce cilium network policies.
2026-07-06 18:12:12 -04:00
Tom Alexander
1d3d178fc8
Downgrade to gateway 1.4.1.
...
1.5 came out recently, so no gateway providers support it.
2026-07-06 18:12:12 -04:00
Tom Alexander
e54f272a69
Update packages in kubernetes/keys.
2026-07-06 18:12:12 -04:00
Tom Alexander
3cc0fb1d3f
Fix proxy auth tls
2026-07-06 18:12:11 -04:00
Tom Alexander
92727aa1f7
Generate certificates for the aggregation layer.
2026-07-06 18:12:11 -04:00
Tom Alexander
d6f089bdb4
Temporarily disable the firewall for debugging.
2026-07-06 18:12:11 -04:00
Tom Alexander
cce4f98125
Enable gateway support.
2026-07-06 18:12:11 -04:00
Tom Alexander
612158c3e1
Enable hubble.
2026-07-06 18:12:11 -04:00
Tom Alexander
1ed3832730
Temporarily drop flux interval to 1 minute during early development.
...
This is to reduce waiting time.
2026-07-06 18:12:10 -04:00
Tom Alexander
f3b969642c
Install deferred manifests.
2026-07-06 18:12:10 -04:00
Tom Alexander
9e729a8cc6
Enable the firewall.
...
Now that we have networking working, I can enable the firewall and confirm nothing breaks.
2026-07-06 18:12:10 -04:00
Tom Alexander
3169822726
Fix CoreDNS IPv4 connectivity.
2026-07-06 18:12:10 -04:00
Tom Alexander
9b5fbadc44
Increase timeout for coredns cache.
2026-07-06 18:12:10 -04:00
Tom Alexander
ab1b2a70f3
More changes to try to fix coredns.
2026-07-06 18:12:10 -04:00
Tom Alexander
4061d14651
Move the kubelet yaml config into nix.
2026-07-06 18:12:09 -04:00
Tom Alexander
361ec69a8b
Implement a generic helm templater package.
2026-07-06 18:12:09 -04:00
Tom Alexander
f545376aec
Switch to generating the coredns manifests via nix.
2026-07-06 18:12:09 -04:00
Tom Alexander
dc80c06ee9
Use CoreDNS for in-cluster DNS requests and caching.
2026-07-06 18:12:09 -04:00
Tom Alexander
5d58d550d3
Enable native routing.
2026-07-06 18:12:09 -04:00
Tom Alexander
51e027ba67
Build the cilium manifest automatically in nix.
2026-07-06 18:12:09 -04:00
Tom Alexander
37efcdb367
Allow pods to directly speak to the public internet on their own public IPv6 addresses.
2026-07-06 18:12:08 -04:00
Tom Alexander
01d230bde6
Enable ipv4 and tunnel routing.
2026-07-06 18:12:08 -04:00
Tom Alexander
383acd4fd2
Switch to kubernetes ipam mode.
2026-07-06 18:12:08 -04:00
Tom Alexander
7df824da6a
Fix service cluster ip range.
...
Kubernetes only allows a /112 for service ip range.
2026-07-06 18:12:08 -04:00
Tom Alexander
efbfe865e0
Fix trailing line break in kubernetes encryption config.
2026-07-06 18:12:08 -04:00
Tom Alexander
2314bef2ad
Move the yaml functions to their own file.
2026-07-06 18:12:08 -04:00
Tom Alexander
8e9bd9acc1
Introduce functions to generate yaml.
...
The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.
2026-07-06 18:12:08 -04:00
Tom Alexander
d924aa3a81
Add missing cidr declarations.
2026-07-06 18:12:07 -04:00
Tom Alexander
2bbf44e528
Fix DNS resolution.
2026-07-06 18:12:07 -04:00
Tom Alexander
c289f46cc5
Apply the git repo to the cluster.
2026-07-06 18:12:07 -04:00
