563 Commits

Author	SHA1	Message	Date
Tom Alexander	e903515763	Enforce cilium network policies.	2026-03-19 18:17:07 -04:00
Tom Alexander	1e9ce1165d	Downgrade to gateway 1.4.1. ... 1.5 came out recently, so no gateway providers support it.	2026-03-19 18:17:07 -04:00
Tom Alexander	b8ee14752b	Update packages in kubernetes/keys.	2026-03-19 18:17:07 -04:00
Tom Alexander	5f73d2acfd	Fix network for updated nix.	2026-03-19 18:17:07 -04:00
Tom Alexander	568735bd17	Fix proxy auth tls	2026-03-19 18:17:06 -04:00
Tom Alexander	5219362d74	Generate certificates for the aggregation layer.	2026-03-19 18:17:06 -04:00
Tom Alexander	0d9333ad0e	Add a note for the cilium connectivity test.	2026-03-19 18:17:06 -04:00
Tom Alexander	aae5569edb	Temporarily disable the firewall for debugging.	2026-03-19 18:17:06 -04:00
Tom Alexander	b60c18ae56	Enable gateway support.	2026-03-19 18:17:06 -04:00
Tom Alexander	85eff0bf82	Enable hubble.	2026-03-19 18:17:06 -04:00
Tom Alexander	10dd35522d	Temporarily drop flux interval to 1 minute during early development. ... This is to reduce waiting time.	2026-03-19 18:17:05 -04:00
Tom Alexander	4f78df4ebe	Install deferred manifests.	2026-03-19 18:17:05 -04:00
Tom Alexander	812bfd2882	Add a custom nftables firewall config.	2026-03-19 18:17:05 -04:00
Tom Alexander	302694c38a	Enable the firewall. ... Now that we have networking working, I can enable the firewall and confirm nothing breaks.	2026-03-19 18:17:05 -04:00
Tom Alexander	f41ae35232	Fix CoreDNS IPv4 connectivity.	2026-03-19 18:17:05 -04:00
Tom Alexander	a19a445a50	Increase timeout for coredns cache.	2026-03-19 18:17:05 -04:00
Tom Alexander	1e67d8e8d3	More changes to try to fix coredns.	2026-03-19 18:17:05 -04:00
Tom Alexander	63be090147	Move the kubelet yaml config into nix.	2026-03-19 18:17:04 -04:00
Tom Alexander	6830a65470	Implement a generic helm templater package.	2026-03-19 18:17:04 -04:00
Tom Alexander	52b22945ac	Switch to generating the coredns manifests via nix.	2026-03-19 18:17:04 -04:00
Tom Alexander	c87517a434	Use CoreDNS for in-cluster DNS requests and caching.	2026-03-19 18:17:04 -04:00
Tom Alexander	a62806b1de	Enable native routing.	2026-03-19 18:17:04 -04:00
Tom Alexander	865b4b65ac	Build the cilium manifest automatically in nix.	2026-03-19 18:17:04 -04:00
Tom Alexander	e116c1a544	Allow pods to directly speak to the public internet on their own public IPv6 addresses.	2026-03-19 18:17:03 -04:00
Tom Alexander	25abdb0a65	Enable ipv4 and tunnel routing.	2026-03-19 18:17:03 -04:00
Tom Alexander	c7db91e2ba	Switch to kubernetes ipam mode.	2026-03-19 18:17:03 -04:00
Tom Alexander	187c3edc59	Fix service cluster ip range. ... Kubernetes only allows a /112 for service ip range.	2026-03-19 18:17:03 -04:00
Tom Alexander	8e6046ae0c	Fix trailing line break in kubernetes encryption config.	2026-03-19 18:17:03 -04:00
Tom Alexander	1d7ea1bbaa	Move the yaml functions to their own file.	2026-03-19 18:17:03 -04:00
Tom Alexander	97531e2421	Introduce functions to generate yaml. ... The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.	2026-03-19 18:17:03 -04:00
Tom Alexander	7279d91a53	Add missing cidr declarations.	2026-03-19 18:17:02 -04:00
Tom Alexander	9c7bb49130	Fix DNS resolution.	2026-03-19 18:17:02 -04:00
Tom Alexander	291d4fa345	Apply the git repo to the cluster.	2026-03-19 18:17:02 -04:00
Tom Alexander	85649d7b6c	Trust flux's ssh key in the yaml git repo.	2026-03-19 18:17:02 -04:00
Tom Alexander	bf2712331e	Generic secrets for ssh keys.	2026-03-19 18:17:02 -04:00
Tom Alexander	575a355bfc	Generic secrets for pgp keys.	2026-03-19 18:17:02 -04:00
Tom Alexander	593e01cbf9	Generate kubernetes secrets for ssh keys.	2026-03-19 18:17:01 -04:00
Tom Alexander	97d48f1035	Install CoreDNS.	2026-03-19 18:17:01 -04:00
Tom Alexander	2c58f4ee8e	Generate pgp keys for sops.	2026-03-19 18:17:01 -04:00
Tom Alexander	ea62ed81bb	Generate ssh keys for flux bootstrap.	2026-03-19 18:17:01 -04:00
Tom Alexander	15a101793d	Move the cluster bootstrap into the keys flake. ... Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.	2026-03-19 18:17:01 -04:00
Tom Alexander	fe6c66485b	Set up flux.	2026-03-19 18:17:01 -04:00
Tom Alexander	841ea642b4	Add a bootstrap role.	2026-03-19 18:17:01 -04:00
Tom Alexander	5fa5c2521f	Add a bootstrap role to load manifests into the cluster.	2026-03-19 18:17:00 -04:00
Tom Alexander	c8b5d9e431	Fix launching of containers.	2026-03-19 18:17:00 -04:00
Tom Alexander	5c5c31e0e5	Create a debugging role.	2026-03-19 18:17:00 -04:00
Tom Alexander	bd08378f6e	Some networking fixes.	2026-03-19 18:17:00 -04:00
Tom Alexander	9fbec95c5c	Add cilium bootstrap.	2026-03-19 18:17:00 -04:00
Tom Alexander	63aae18173	Installing the cni plugins.	2026-03-19 18:17:00 -04:00
Tom Alexander	37f5564f74	Add kube-proxy.	2026-03-19 18:16:59 -04:00