Tom Alexander
81c53afb15
Increase timeout for coredns cache.
2026-04-26 12:45:04 -04:00
Tom Alexander
c9c94d31a7
More changes to try to fix coredns.
2026-04-26 12:45:04 -04:00
Tom Alexander
5ab245b124
Move the kubelet yaml config into nix.
2026-04-26 12:45:03 -04:00
Tom Alexander
a7f2a97125
Implement a generic helm templater package.
2026-04-26 12:45:03 -04:00
Tom Alexander
f5e80ee3bd
Switch to generating the coredns manifests via nix.
2026-04-26 12:45:03 -04:00
Tom Alexander
2b7ab9764c
Use CoreDNS for in-cluster DNS requests and caching.
2026-04-26 12:45:03 -04:00
Tom Alexander
3423dc0f38
Enable native routing.
2026-04-26 12:45:03 -04:00
Tom Alexander
be85d828b9
Build the cilium manifest automatically in nix.
2026-04-26 12:45:03 -04:00
Tom Alexander
332bab09e3
Allow pods to directly speak to the public internet on their own public IPv6 addresses.
2026-04-26 12:45:02 -04:00
Tom Alexander
98a5029ccf
Enable ipv4 and tunnel routing.
2026-04-26 12:45:02 -04:00
Tom Alexander
ed5d463741
Switch to kubernetes ipam mode.
2026-04-26 12:45:02 -04:00
Tom Alexander
0c7733d418
Fix service cluster ip range.
...
Kubernetes only allows a /112 for service ip range.
2026-04-26 12:45:02 -04:00
Tom Alexander
1699977503
Fix trailing line break in kubernetes encryption config.
2026-04-26 12:45:02 -04:00
Tom Alexander
20ecabb7fc
Move the yaml functions to their own file.
2026-04-26 12:45:02 -04:00
Tom Alexander
a56187e817
Introduce functions to generate yaml.
...
The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.
2026-04-26 12:45:01 -04:00
Tom Alexander
a8a0eab820
Add missing cidr declarations.
2026-04-26 12:45:01 -04:00
Tom Alexander
0ad71fc915
Fix DNS resolution.
2026-04-26 12:45:01 -04:00
Tom Alexander
83ea14b0a4
Apply the git repo to the cluster.
2026-04-26 12:45:01 -04:00
Tom Alexander
c3aa678a9b
Trust flux's ssh key in the yaml git repo.
2026-04-26 12:45:01 -04:00
Tom Alexander
fb327e5c76
Generic secrets for ssh keys.
2026-04-26 12:45:01 -04:00
Tom Alexander
6642cedadf
Generic secrets for pgp keys.
2026-04-26 12:45:00 -04:00
Tom Alexander
c005f4faee
Generate kubernetes secrets for ssh keys.
2026-04-26 12:45:00 -04:00
Tom Alexander
f59225d283
Install CoreDNS.
2026-04-26 12:45:00 -04:00
Tom Alexander
74fa3acb41
Generate pgp keys for sops.
2026-04-26 12:45:00 -04:00
Tom Alexander
4934eb2802
Generate ssh keys for flux bootstrap.
2026-04-26 12:45:00 -04:00
Tom Alexander
ae8c3f44e0
Move the cluster bootstrap into the keys flake.
...
Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.
2026-04-26 12:45:00 -04:00
Tom Alexander
988a1673b3
Add kube-proxy.
2026-04-26 12:44:58 -04:00
Tom Alexander
abae26ed17
Add kubelet.
2026-04-26 12:44:58 -04:00
Tom Alexander
47f57116d9
Add kube-scheduler.
2026-04-26 12:44:58 -04:00
Tom Alexander
e3ceee6d46
Add kube-controller-manager.
2026-04-26 12:44:57 -04:00
Tom Alexander
300328dc4a
Fix launching kube-apiserver.
2026-04-26 12:44:57 -04:00
Tom Alexander
03efde4674
Move the encryption config into a package.
2026-04-26 12:44:57 -04:00
Tom Alexander
45312dd91f
Switch to generating certs with openssl.
2026-04-26 12:44:57 -04:00
Tom Alexander
f2a505131a
Add controller proxy certs.
2026-04-26 12:44:57 -04:00
Tom Alexander
f18b7d0da9
Add requestheader-client-ca.
2026-04-26 12:44:57 -04:00
Tom Alexander
51feef1582
Add service account.
2026-04-26 12:44:56 -04:00
Tom Alexander
41f9847262
Install kubernetes.
2026-04-26 12:44:56 -04:00
Tom Alexander
75fde32fd9
Add additional controllers.
2026-04-26 12:44:56 -04:00
Tom Alexander
b16db4325f
Add configs for a new kubernetes cluster on NixOS.
2026-04-26 12:44:56 -04:00
