Tom Alexander
efbfe865e0
Fix trailing line break in kubernetes encryption config.
2026-07-06 18:12:08 -04:00
Tom Alexander
2314bef2ad
Move the yaml functions to their own file.
2026-07-06 18:12:08 -04:00
Tom Alexander
8e9bd9acc1
Introduce functions to generate yaml.
...
The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.
2026-07-06 18:12:08 -04:00
Tom Alexander
d924aa3a81
Add missing cidr declarations.
2026-07-06 18:12:07 -04:00
Tom Alexander
2bbf44e528
Fix DNS resolution.
2026-07-06 18:12:07 -04:00
Tom Alexander
c289f46cc5
Apply the git repo to the cluster.
2026-07-06 18:12:07 -04:00
Tom Alexander
88b1c36c0d
Trust flux's ssh key in the yaml git repo.
2026-07-06 18:12:07 -04:00
Tom Alexander
dbd82b998d
Generic secrets for ssh keys.
2026-07-06 18:12:07 -04:00
Tom Alexander
1700c42926
Generic secrets for pgp keys.
2026-07-06 18:12:07 -04:00
Tom Alexander
3c20fd49f0
Generate kubernetes secrets for ssh keys.
2026-07-06 18:12:06 -04:00
Tom Alexander
903c1c1f41
Install CoreDNS.
2026-07-06 18:12:06 -04:00
Tom Alexander
158c622840
Generate pgp keys for sops.
2026-07-06 18:12:06 -04:00
Tom Alexander
ceb627bb35
Generate ssh keys for flux bootstrap.
2026-07-06 18:12:06 -04:00
Tom Alexander
a3f1dff351
Move the cluster bootstrap into the keys flake.
...
Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.
2026-07-06 18:12:06 -04:00
Tom Alexander
46c8f5e0ce
Set up flux.
2026-07-06 18:12:06 -04:00
Tom Alexander
3760bca64b
Add a bootstrap role.
2026-07-06 18:12:05 -04:00
Tom Alexander
3396a4f482
Add a bootstrap role to load manifests into the cluster.
2026-07-06 18:12:05 -04:00
Tom Alexander
773db6e567
Fix launching of containers.
2026-07-06 18:12:05 -04:00
Tom Alexander
6010867796
Create a debugging role.
2026-07-06 18:12:05 -04:00
Tom Alexander
e9db45fb61
Some networking fixes.
2026-07-06 18:12:05 -04:00
Tom Alexander
10cb394dde
Add cilium bootstrap.
2026-07-06 18:12:05 -04:00
Tom Alexander
14787d6730
Installing the cni plugins.
2026-07-06 18:12:05 -04:00
Tom Alexander
19b2da0d40
Add kube-proxy.
2026-07-06 18:12:04 -04:00
Tom Alexander
95ec23126a
Add kubelet.
2026-07-06 18:12:04 -04:00
Tom Alexander
6897915455
Add worker nodes.
2026-07-06 18:12:04 -04:00
Tom Alexander
868b9b9889
Add kube-scheduler.
2026-07-06 18:12:04 -04:00
Tom Alexander
d0439a6d2f
Add kube-controller-manager.
2026-07-06 18:12:04 -04:00
Tom Alexander
fd15dc5bef
Fix launching kube-apiserver.
2026-07-06 18:12:04 -04:00
Tom Alexander
380ac011f1
Move the encryption config into a package.
2026-07-06 18:12:03 -04:00
Tom Alexander
f4891f345e
Switch to generating certs with openssl.
2026-07-06 18:12:03 -04:00
Tom Alexander
f8ad309c0b
Add controller proxy certs.
2026-07-06 18:12:03 -04:00
Tom Alexander
6c07157f21
Add requestheader-client-ca.
2026-07-06 18:12:03 -04:00
Tom Alexander
6aa87faecb
Add service account.
2026-07-06 18:12:03 -04:00
Tom Alexander
732e2cd296
Install kubernetes.
2026-07-06 18:12:03 -04:00
Tom Alexander
ac07941b8e
Add additional controllers.
2026-07-06 18:12:02 -04:00
Tom Alexander
fa59f17df5
Add configs for a new kubernetes cluster on NixOS.
2026-07-06 18:12:00 -04:00
