Commit Graph

17 Commits

Author SHA1 Message Date
Tom Alexander
c8c18bde88 Add secrets for archive-box, webhook-bridge, and tekton. 2026-07-06 18:12:14 -04:00
Tom Alexander
a4b20c1ead Enable the firewall. 2026-07-06 18:12:12 -04:00
Tom Alexander
8f5f59ee87 Add generation for in-repo secrets. 2026-07-06 18:12:12 -04:00
Tom Alexander
92727aa1f7 Generate certificates for the aggregation layer. 2026-07-06 18:12:11 -04:00
Tom Alexander
2a319deea0 Add a note for the cilium connectivity test. 2026-07-06 18:12:11 -04:00
Tom Alexander
f3b969642c Install deferred manifests. 2026-07-06 18:12:10 -04:00
Tom Alexander
9e729a8cc6 Enable the firewall.
Now that we have networking working, I can enable the firewall and confirm nothing breaks.
2026-07-06 18:12:10 -04:00
Tom Alexander
51e027ba67 Build the cilium manifest automatically in nix. 2026-07-06 18:12:09 -04:00
Tom Alexander
37efcdb367 Allow pods to directly speak to the public internet on their own public IPv6 addresses. 2026-07-06 18:12:08 -04:00
Tom Alexander
01d230bde6 Enable ipv4 and tunnel routing. 2026-07-06 18:12:08 -04:00
Tom Alexander
383acd4fd2 Switch to kubernetes ipam mode. 2026-07-06 18:12:08 -04:00
Tom Alexander
3c20fd49f0 Generate kubernetes secrets for ssh keys. 2026-07-06 18:12:06 -04:00
Tom Alexander
46c8f5e0ce Set up flux. 2026-07-06 18:12:06 -04:00
Tom Alexander
e9db45fb61 Some networking fixes. 2026-07-06 18:12:05 -04:00
Tom Alexander
10cb394dde Add cilium bootstrap. 2026-07-06 18:12:05 -04:00
Tom Alexander
19b2da0d40 Add kube-proxy. 2026-07-06 18:12:04 -04:00
Tom Alexander
fa59f17df5 Add configs for a new kubernetes cluster on NixOS. 2026-07-06 18:12:00 -04:00