523 Commits

Author SHA1 Message Date
Tom Alexander
f62e36b5af
Enable ipv4 and tunnel routing. 2026-02-06 11:28:42 -05:00
Tom Alexander
6d38265412
Switch to kubernetes ipam mode. 2026-02-06 11:28:42 -05:00
Tom Alexander
626f74ed2b
Fix service cluster ip range.
Kubernetes only allows a /112 for service ip range.
2026-02-06 11:28:42 -05:00
Tom Alexander
e364c6bafd
Fix trailing line break in kubernetes encryption config. 2026-02-06 11:28:42 -05:00
Tom Alexander
e9a8f78342
Move the yaml functions to their own file. 2026-02-06 11:28:42 -05:00
Tom Alexander
2c5acd15df
Introduce functions to generate yaml.
The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.
2026-02-06 11:28:42 -05:00
Tom Alexander
dcfbc0864e
Add missing cidr declarations. 2026-02-06 11:28:41 -05:00
Tom Alexander
f34e393803
Fix DNS resolution. 2026-02-06 11:28:41 -05:00
Tom Alexander
645c71ce33
Apply the git repo to the cluster. 2026-02-06 11:28:41 -05:00
Tom Alexander
4e0a42b143
Trust flux's ssh key in the yaml git repo. 2026-02-06 11:28:41 -05:00
Tom Alexander
8c70d4e829
Generic secrets for ssh keys. 2026-02-06 11:28:41 -05:00
Tom Alexander
df4260a35a
Generic secrets for pgp keys. 2026-02-06 11:28:41 -05:00
Tom Alexander
32fda29efe
Generate kubernetes secrets for ssh keys. 2026-02-06 11:28:41 -05:00
Tom Alexander
ffbd1b56c8
Install CoreDNS. 2026-02-06 11:28:41 -05:00
Tom Alexander
3affee9007
Generate pgp keys for sops. 2026-02-06 11:28:40 -05:00
Tom Alexander
144b39dfdd
Generate ssh keys for flux bootstrap. 2026-02-06 11:28:40 -05:00
Tom Alexander
d97edf0add
Move the cluster bootstrap into the keys flake.
Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.
2026-02-06 11:28:40 -05:00
Tom Alexander
c9450ff9fa
Set up flux. 2026-02-06 11:28:40 -05:00
Tom Alexander
1753b5b4a6
Add a bootstrap role. 2026-02-06 11:28:40 -05:00
Tom Alexander
38b2b9ebf4
Add a bootstrap role to load manifests into the cluster. 2026-02-06 11:28:40 -05:00
Tom Alexander
8e58c3ffbd
Fix launching of containers. 2026-02-06 11:28:40 -05:00
Tom Alexander
d9c290f8b1
Create a debugging role. 2026-02-06 11:28:39 -05:00
Tom Alexander
95f0a891ac
Some networking fixes. 2026-02-06 11:28:39 -05:00
Tom Alexander
816e72eac7
Add cilium bootstrap. 2026-02-06 11:28:39 -05:00
Tom Alexander
1da6250301
Installing the cni plugins. 2026-02-06 11:28:39 -05:00
Tom Alexander
c61da527f2
Add kube-proxy. 2026-02-06 11:28:39 -05:00
Tom Alexander
0463d2cbd1
Add kubelet. 2026-02-06 11:28:39 -05:00
Tom Alexander
fa24540bb3
Add worker nodes. 2026-02-06 11:28:39 -05:00
Tom Alexander
3b96f8d26c
Add kube-scheduler. 2026-02-06 11:28:38 -05:00
Tom Alexander
6483b20b89
Add kube-controller-manager. 2026-02-06 11:28:38 -05:00
Tom Alexander
65cd71f0c6
Fix launching kube-apiserver. 2026-02-06 11:28:38 -05:00
Tom Alexander
f8b8005ab2
Move the encryption config into a package. 2026-02-06 11:28:38 -05:00
Tom Alexander
5d660cced8
Switch to generating certs with openssl. 2026-02-06 11:28:38 -05:00
Tom Alexander
d093c9185a
Add controller proxy certs. 2026-02-06 11:28:38 -05:00
Tom Alexander
1cd5ba2c5c
Add requestheader-client-ca. 2026-02-06 11:28:38 -05:00
Tom Alexander
626055e063
Add service account. 2026-02-06 11:28:37 -05:00
Tom Alexander
342a5e338c
Install kubernetes. 2026-02-06 11:28:37 -05:00
Tom Alexander
f4a2f57062
Add additional controllers. 2026-02-06 11:28:37 -05:00
Tom Alexander
9443348634
update, fixup ca9742f721eea9e7a19073706e4d80a1f8417838 2026-02-06 11:28:37 -05:00
Tom Alexander
2b29530047
Add configs for a new kubernetes cluster on NixOS. 2026-02-06 08:53:23 -05:00
Tom Alexander
c3bcc549a5
Set up hydra as a remote build machine. 2026-02-06 08:53:23 -05:00
Tom Alexander
c153b0f631
Add keep-alive to ssh connections. 2026-02-05 21:39:29 -05:00
Tom Alexander
945b7214bf
Add some nix settings. 2026-02-05 21:39:29 -05:00
Tom Alexander
e106a9fad1
Add nftables-mode to emacs. 2026-01-01 22:00:14 -05:00
Tom Alexander
70f3ae6894
Add a nix-flake-repl script. 2026-01-01 11:01:13 -05:00
Tom Alexander
d883dda34c
Remove old TODO. 2025-12-27 20:45:20 -05:00
Tom Alexander
05a0459e5a
Add toml2nix. 2025-12-16 18:43:37 -05:00
Tom Alexander
641c21c77f
Add C/C++ debugging to personal vscode. 2025-12-13 23:15:59 -05:00
Tom Alexander
88634655d0
Fix firmware updating now that my UEFI system partition is mounted at /efi 2025-12-13 23:15:33 -05:00
Tom Alexander
0bd5931013
Fix the self repl script. 2025-12-10 21:35:50 -05:00