14 Commits

Author SHA1 Message Date
Tom Alexander
5219362d74
Generate certificates for the aggregation layer. 2026-03-19 18:17:06 -04:00
Tom Alexander
0d9333ad0e
Add a note for the cilium connectivity test. 2026-03-19 18:17:06 -04:00
Tom Alexander
4f78df4ebe
Install deferred manifests. 2026-03-19 18:17:05 -04:00
Tom Alexander
302694c38a
Enable the firewall.
Now that we have networking working, I can enable the firewall and confirm nothing breaks.
2026-03-19 18:17:05 -04:00
Tom Alexander
865b4b65ac
Build the cilium manifest automatically in nix. 2026-03-19 18:17:04 -04:00
Tom Alexander
e116c1a544
Allow pods to directly speak to the public internet on their own public IPv6 addresses. 2026-03-19 18:17:03 -04:00
Tom Alexander
25abdb0a65
Enable ipv4 and tunnel routing. 2026-03-19 18:17:03 -04:00
Tom Alexander
c7db91e2ba
Switch to kubernetes ipam mode. 2026-03-19 18:17:03 -04:00
Tom Alexander
593e01cbf9
Generate kubernetes secrets for ssh keys. 2026-03-19 18:17:01 -04:00
Tom Alexander
fe6c66485b
Set up flux. 2026-03-19 18:17:01 -04:00
Tom Alexander
bd08378f6e
Some networking fixes. 2026-03-19 18:17:00 -04:00
Tom Alexander
9fbec95c5c
Add cilium bootstrap. 2026-03-19 18:17:00 -04:00
Tom Alexander
37f5564f74
Add kube-proxy. 2026-03-19 18:16:59 -04:00
Tom Alexander
3f6ec161d3
Add configs for a new kubernetes cluster on NixOS. 2026-03-19 18:16:57 -04:00