42 Commits

Author	SHA1	Message	Date
Tom Alexander	1e9ce1165d	Downgrade to gateway 1.4.1. ... 1.5 came out recently, so no gateway providers support it.	2026-03-19 18:17:07 -04:00
Tom Alexander	b8ee14752b	Update packages in kubernetes/keys.	2026-03-19 18:17:07 -04:00
Tom Alexander	568735bd17	Fix proxy auth tls	2026-03-19 18:17:06 -04:00
Tom Alexander	5219362d74	Generate certificates for the aggregation layer.	2026-03-19 18:17:06 -04:00
Tom Alexander	b60c18ae56	Enable gateway support.	2026-03-19 18:17:06 -04:00
Tom Alexander	10dd35522d	Temporarily drop flux interval to 1 minute during early development. ... This is to reduce waiting time.	2026-03-19 18:17:05 -04:00
Tom Alexander	4f78df4ebe	Install deferred manifests.	2026-03-19 18:17:05 -04:00
Tom Alexander	1e67d8e8d3	More changes to try to fix coredns.	2026-03-19 18:17:05 -04:00
Tom Alexander	6830a65470	Implement a generic helm templater package.	2026-03-19 18:17:04 -04:00
Tom Alexander	52b22945ac	Switch to generating the coredns manifests via nix.	2026-03-19 18:17:04 -04:00
Tom Alexander	c87517a434	Use CoreDNS for in-cluster DNS requests and caching.	2026-03-19 18:17:04 -04:00
Tom Alexander	a62806b1de	Enable native routing.	2026-03-19 18:17:04 -04:00
Tom Alexander	865b4b65ac	Build the cilium manifest automatically in nix.	2026-03-19 18:17:04 -04:00
Tom Alexander	e116c1a544	Allow pods to directly speak to the public internet on their own public IPv6 addresses.	2026-03-19 18:17:03 -04:00
Tom Alexander	25abdb0a65	Enable ipv4 and tunnel routing.	2026-03-19 18:17:03 -04:00
Tom Alexander	c7db91e2ba	Switch to kubernetes ipam mode.	2026-03-19 18:17:03 -04:00
Tom Alexander	187c3edc59	Fix service cluster ip range. ... Kubernetes only allows a /112 for service ip range.	2026-03-19 18:17:03 -04:00
Tom Alexander	8e6046ae0c	Fix trailing line break in kubernetes encryption config.	2026-03-19 18:17:03 -04:00
Tom Alexander	1d7ea1bbaa	Move the yaml functions to their own file.	2026-03-19 18:17:03 -04:00
Tom Alexander	97531e2421	Introduce functions to generate yaml. ... The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.	2026-03-19 18:17:03 -04:00
Tom Alexander	7279d91a53	Add missing cidr declarations.	2026-03-19 18:17:02 -04:00
Tom Alexander	9c7bb49130	Fix DNS resolution.	2026-03-19 18:17:02 -04:00
Tom Alexander	291d4fa345	Apply the git repo to the cluster.	2026-03-19 18:17:02 -04:00
Tom Alexander	85649d7b6c	Trust flux's ssh key in the yaml git repo.	2026-03-19 18:17:02 -04:00
Tom Alexander	bf2712331e	Generic secrets for ssh keys.	2026-03-19 18:17:02 -04:00
Tom Alexander	575a355bfc	Generic secrets for pgp keys.	2026-03-19 18:17:02 -04:00
Tom Alexander	593e01cbf9	Generate kubernetes secrets for ssh keys.	2026-03-19 18:17:01 -04:00
Tom Alexander	97d48f1035	Install CoreDNS.	2026-03-19 18:17:01 -04:00
Tom Alexander	2c58f4ee8e	Generate pgp keys for sops.	2026-03-19 18:17:01 -04:00
Tom Alexander	ea62ed81bb	Generate ssh keys for flux bootstrap.	2026-03-19 18:17:01 -04:00
Tom Alexander	15a101793d	Move the cluster bootstrap into the keys flake. ... Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.	2026-03-19 18:17:01 -04:00
Tom Alexander	37f5564f74	Add kube-proxy.	2026-03-19 18:16:59 -04:00
Tom Alexander	066c8bbcff	Add kubelet.	2026-03-19 18:16:59 -04:00
Tom Alexander	0ecf8b7f84	Add kube-scheduler.	2026-03-19 18:16:59 -04:00
Tom Alexander	c3ded367e6	Add kube-controller-manager.	2026-03-19 18:16:59 -04:00
Tom Alexander	d2e59e5d0d	Fix launching kube-apiserver.	2026-03-19 18:16:59 -04:00
Tom Alexander	72345e363f	Move the encryption config into a package.	2026-03-19 18:16:58 -04:00
Tom Alexander	2f35f56c72	Switch to generating certs with openssl.	2026-03-19 18:16:58 -04:00
Tom Alexander	2b037dc8ad	Add controller proxy certs.	2026-03-19 18:16:58 -04:00
Tom Alexander	6ffc4c92fd	Add requestheader-client-ca.	2026-03-19 18:16:58 -04:00
Tom Alexander	fcf1200114	Add service account.	2026-03-19 18:16:58 -04:00
Tom Alexander	3f6ec161d3	Add configs for a new kubernetes cluster on NixOS.	2026-03-19 18:16:57 -04:00