Tom Alexander
|
24f4a8c2d9
|
Tweak the containerd garbage collect threshold on kubelets.
Pods were getting evicted due to disk pressure, so this causes garbage collection to trigger sooner.
|
2026-07-18 13:59:56 -04:00 |
|
Tom Alexander
|
7c8d278923
|
Configure kernel preemption.
|
2026-07-06 18:12:15 -04:00 |
|
Tom Alexander
|
297577471e
|
Update kubernetes packages and update to gateway API 1.5.1.
|
2026-07-06 18:12:15 -04:00 |
|
Tom Alexander
|
a00115fb4e
|
Delete images after 24 hours of being unused.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
058f0cd59b
|
Set up containerd use harbor.fizz.buzz.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
c8c18bde88
|
Add secrets for archive-box, webhook-bridge, and tekton.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
a36016e631
|
Allow node-to-node communication.
|
2026-07-06 18:12:13 -04:00 |
|
Tom Alexander
|
a4b20c1ead
|
Enable the firewall.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
e09e659d91
|
Fix network for updated nix.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
92727aa1f7
|
Generate certificates for the aggregation layer.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
d6f089bdb4
|
Temporarily disable the firewall for debugging.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
612158c3e1
|
Enable hubble.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
23d9bbb8a1
|
Add a custom nftables firewall config.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
9e729a8cc6
|
Enable the firewall.
Now that we have networking working, I can enable the firewall and confirm nothing breaks.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
ab1b2a70f3
|
More changes to try to fix coredns.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
4061d14651
|
Move the kubelet yaml config into nix.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
dc80c06ee9
|
Use CoreDNS for in-cluster DNS requests and caching.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
51e027ba67
|
Build the cilium manifest automatically in nix.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
37efcdb367
|
Allow pods to directly speak to the public internet on their own public IPv6 addresses.
|
2026-07-06 18:12:08 -04:00 |
|
Tom Alexander
|
01d230bde6
|
Enable ipv4 and tunnel routing.
|
2026-07-06 18:12:08 -04:00 |
|
Tom Alexander
|
7df824da6a
|
Fix service cluster ip range.
Kubernetes only allows a /112 for service ip range.
|
2026-07-06 18:12:08 -04:00 |
|
Tom Alexander
|
d924aa3a81
|
Add missing cidr declarations.
|
2026-07-06 18:12:07 -04:00 |
|
Tom Alexander
|
2bbf44e528
|
Fix DNS resolution.
|
2026-07-06 18:12:07 -04:00 |
|
Tom Alexander
|
903c1c1f41
|
Install CoreDNS.
|
2026-07-06 18:12:06 -04:00 |
|
Tom Alexander
|
a3f1dff351
|
Move the cluster bootstrap into the keys flake.
Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.
|
2026-07-06 18:12:06 -04:00 |
|
Tom Alexander
|
46c8f5e0ce
|
Set up flux.
|
2026-07-06 18:12:06 -04:00 |
|
Tom Alexander
|
3760bca64b
|
Add a bootstrap role.
|
2026-07-06 18:12:05 -04:00 |
|
Tom Alexander
|
3396a4f482
|
Add a bootstrap role to load manifests into the cluster.
|
2026-07-06 18:12:05 -04:00 |
|
Tom Alexander
|
773db6e567
|
Fix launching of containers.
|
2026-07-06 18:12:05 -04:00 |
|
Tom Alexander
|
6010867796
|
Create a debugging role.
|
2026-07-06 18:12:05 -04:00 |
|
Tom Alexander
|
e9db45fb61
|
Some networking fixes.
|
2026-07-06 18:12:05 -04:00 |
|
Tom Alexander
|
10cb394dde
|
Add cilium bootstrap.
|
2026-07-06 18:12:05 -04:00 |
|
Tom Alexander
|
14787d6730
|
Installing the cni plugins.
|
2026-07-06 18:12:05 -04:00 |
|
Tom Alexander
|
19b2da0d40
|
Add kube-proxy.
|
2026-07-06 18:12:04 -04:00 |
|
Tom Alexander
|
95ec23126a
|
Add kubelet.
|
2026-07-06 18:12:04 -04:00 |
|
Tom Alexander
|
6897915455
|
Add worker nodes.
|
2026-07-06 18:12:04 -04:00 |
|
Tom Alexander
|
868b9b9889
|
Add kube-scheduler.
|
2026-07-06 18:12:04 -04:00 |
|
Tom Alexander
|
d0439a6d2f
|
Add kube-controller-manager.
|
2026-07-06 18:12:04 -04:00 |
|
Tom Alexander
|
fd15dc5bef
|
Fix launching kube-apiserver.
|
2026-07-06 18:12:04 -04:00 |
|
Tom Alexander
|
380ac011f1
|
Move the encryption config into a package.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
f8ad309c0b
|
Add controller proxy certs.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
6c07157f21
|
Add requestheader-client-ca.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
6aa87faecb
|
Add service account.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
732e2cd296
|
Install kubernetes.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
ac07941b8e
|
Add additional controllers.
|
2026-07-06 18:12:02 -04:00 |
|
Tom Alexander
|
fa59f17df5
|
Add configs for a new kubernetes cluster on NixOS.
|
2026-07-06 18:12:00 -04:00 |
|