33 Commits

Author	SHA1	Message	Date
Tom Alexander	b7310a03b8	Switch to generating the coredns manifests via nix.	2026-02-06 11:28:43 -05:00
Tom Alexander	77c40726ff	Use CoreDNS for in-cluster DNS requests and caching.	2026-02-06 11:28:43 -05:00
Tom Alexander	710603e20b	Enable native routing.	2026-02-06 11:28:43 -05:00
Tom Alexander	96112bd40a	Build the cilium manifest automatically in nix.	2026-02-06 11:28:43 -05:00
Tom Alexander	6551fee05b	Allow pods to directly speak to the public internet on their own public IPv6 addresses.	2026-02-06 11:28:42 -05:00
Tom Alexander	f62e36b5af	Enable ipv4 and tunnel routing.	2026-02-06 11:28:42 -05:00
Tom Alexander	6d38265412	Switch to kubernetes ipam mode.	2026-02-06 11:28:42 -05:00
Tom Alexander	626f74ed2b	Fix service cluster ip range. ... Kubernetes only allows a /112 for service ip range.	2026-02-06 11:28:42 -05:00
Tom Alexander	e364c6bafd	Fix trailing line break in kubernetes encryption config.	2026-02-06 11:28:42 -05:00
Tom Alexander	e9a8f78342	Move the yaml functions to their own file.	2026-02-06 11:28:42 -05:00
Tom Alexander	2c5acd15df	Introduce functions to generate yaml. ... The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.	2026-02-06 11:28:42 -05:00
Tom Alexander	dcfbc0864e	Add missing cidr declarations.	2026-02-06 11:28:41 -05:00
Tom Alexander	f34e393803	Fix DNS resolution.	2026-02-06 11:28:41 -05:00
Tom Alexander	645c71ce33	Apply the git repo to the cluster.	2026-02-06 11:28:41 -05:00
Tom Alexander	4e0a42b143	Trust flux's ssh key in the yaml git repo.	2026-02-06 11:28:41 -05:00
Tom Alexander	8c70d4e829	Generic secrets for ssh keys.	2026-02-06 11:28:41 -05:00
Tom Alexander	df4260a35a	Generic secrets for pgp keys.	2026-02-06 11:28:41 -05:00
Tom Alexander	32fda29efe	Generate kubernetes secrets for ssh keys.	2026-02-06 11:28:41 -05:00
Tom Alexander	ffbd1b56c8	Install CoreDNS.	2026-02-06 11:28:41 -05:00
Tom Alexander	3affee9007	Generate pgp keys for sops.	2026-02-06 11:28:40 -05:00
Tom Alexander	144b39dfdd	Generate ssh keys for flux bootstrap.	2026-02-06 11:28:40 -05:00
Tom Alexander	d97edf0add	Move the cluster bootstrap into the keys flake. ... Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.	2026-02-06 11:28:40 -05:00
Tom Alexander	c61da527f2	Add kube-proxy.	2026-02-06 11:28:39 -05:00
Tom Alexander	0463d2cbd1	Add kubelet.	2026-02-06 11:28:39 -05:00
Tom Alexander	3b96f8d26c	Add kube-scheduler.	2026-02-06 11:28:38 -05:00
Tom Alexander	6483b20b89	Add kube-controller-manager.	2026-02-06 11:28:38 -05:00
Tom Alexander	65cd71f0c6	Fix launching kube-apiserver.	2026-02-06 11:28:38 -05:00
Tom Alexander	f8b8005ab2	Move the encryption config into a package.	2026-02-06 11:28:38 -05:00
Tom Alexander	5d660cced8	Switch to generating certs with openssl.	2026-02-06 11:28:38 -05:00
Tom Alexander	d093c9185a	Add controller proxy certs.	2026-02-06 11:28:38 -05:00
Tom Alexander	1cd5ba2c5c	Add requestheader-client-ca.	2026-02-06 11:28:38 -05:00
Tom Alexander	626055e063	Add service account.	2026-02-06 11:28:37 -05:00
Tom Alexander	2b29530047	Add configs for a new kubernetes cluster on NixOS.	2026-02-06 08:53:23 -05:00