Tom Alexander
f981e119e5
Switch to the experimental gateway CRDs for TCPRoute support.
2026-04-26 12:45:07 -04:00
Tom Alexander
b2afa60b9a
Add oauth2 proxy secrets.
2026-04-26 12:45:07 -04:00
Tom Alexander
aacf5c65e5
Add dex secrets.
2026-04-26 12:45:07 -04:00
Tom Alexander
a5e70c5d4e
Enable the firewall.
2026-04-26 12:45:07 -04:00
Tom Alexander
01f2927bd4
Add gitea secrets.
2026-04-26 12:45:07 -04:00
Tom Alexander
c386f5b297
Add generation for in-repo secrets.
2026-04-26 12:45:06 -04:00
Tom Alexander
7ae1a0b36e
Enforce cilium network policies.
2026-04-26 12:45:06 -04:00
Tom Alexander
a1d9414248
Downgrade to gateway 1.4.1.
...
1.5 came out recently, so no gateway providers support it.
2026-04-26 12:45:06 -04:00
Tom Alexander
552a827f77
Update packages in kubernetes/keys.
2026-04-26 12:45:06 -04:00
Tom Alexander
f21dd0616b
Fix network for updated nix.
2026-04-26 12:45:06 -04:00
Tom Alexander
11ef1f4893
Fix proxy auth tls
2026-04-26 12:45:05 -04:00
Tom Alexander
e43d7d2a96
Generate certificates for the aggregation layer.
2026-04-26 12:45:05 -04:00
Tom Alexander
fa99555467
Add a note for the cilium connectivity test.
2026-04-26 12:45:05 -04:00
Tom Alexander
97882ab559
Temporarily disable the firewall for debugging.
2026-04-26 12:45:05 -04:00
Tom Alexander
3b0e8b46ba
Enable gateway support.
2026-04-26 12:45:05 -04:00
Tom Alexander
8020f804db
Enable hubble.
2026-04-26 12:45:05 -04:00
Tom Alexander
02dbdb79bc
Temporarily drop flux interval to 1 minute during early development.
...
This is to reduce waiting time.
2026-04-26 12:45:04 -04:00
Tom Alexander
55ed3e3d33
Install deferred manifests.
2026-04-26 12:45:04 -04:00
Tom Alexander
2674b4350b
Add a custom nftables firewall config.
2026-04-26 12:45:04 -04:00
Tom Alexander
a8f1f69570
Enable the firewall.
...
Now that we have networking working, I can enable the firewall and confirm nothing breaks.
2026-04-26 12:45:04 -04:00
Tom Alexander
e26c83e2ad
Fix CoreDNS IPv4 connectivity.
2026-04-26 12:45:04 -04:00
Tom Alexander
81c53afb15
Increase timeout for coredns cache.
2026-04-26 12:45:04 -04:00
Tom Alexander
c9c94d31a7
More changes to try to fix coredns.
2026-04-26 12:45:04 -04:00
Tom Alexander
5ab245b124
Move the kubelet yaml config into nix.
2026-04-26 12:45:03 -04:00
Tom Alexander
a7f2a97125
Implement a generic helm templater package.
2026-04-26 12:45:03 -04:00
Tom Alexander
f5e80ee3bd
Switch to generating the coredns manifests via nix.
2026-04-26 12:45:03 -04:00
Tom Alexander
2b7ab9764c
Use CoreDNS for in-cluster DNS requests and caching.
2026-04-26 12:45:03 -04:00
Tom Alexander
3423dc0f38
Enable native routing.
2026-04-26 12:45:03 -04:00
Tom Alexander
be85d828b9
Build the cilium manifest automatically in nix.
2026-04-26 12:45:03 -04:00
Tom Alexander
332bab09e3
Allow pods to directly speak to the public internet on their own public IPv6 addresses.
2026-04-26 12:45:02 -04:00
Tom Alexander
98a5029ccf
Enable ipv4 and tunnel routing.
2026-04-26 12:45:02 -04:00
Tom Alexander
ed5d463741
Switch to kubernetes ipam mode.
2026-04-26 12:45:02 -04:00
Tom Alexander
0c7733d418
Fix service cluster ip range.
...
Kubernetes only allows a /112 for service ip range.
2026-04-26 12:45:02 -04:00
Tom Alexander
1699977503
Fix trailing line break in kubernetes encryption config.
2026-04-26 12:45:02 -04:00
Tom Alexander
20ecabb7fc
Move the yaml functions to their own file.
2026-04-26 12:45:02 -04:00
Tom Alexander
a56187e817
Introduce functions to generate yaml.
...
The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.
2026-04-26 12:45:01 -04:00
Tom Alexander
a8a0eab820
Add missing cidr declarations.
2026-04-26 12:45:01 -04:00
Tom Alexander
0ad71fc915
Fix DNS resolution.
2026-04-26 12:45:01 -04:00
Tom Alexander
83ea14b0a4
Apply the git repo to the cluster.
2026-04-26 12:45:01 -04:00
Tom Alexander
c3aa678a9b
Trust flux's ssh key in the yaml git repo.
2026-04-26 12:45:01 -04:00
Tom Alexander
fb327e5c76
Generic secrets for ssh keys.
2026-04-26 12:45:01 -04:00
Tom Alexander
6642cedadf
Generic secrets for pgp keys.
2026-04-26 12:45:00 -04:00
Tom Alexander
c005f4faee
Generate kubernetes secrets for ssh keys.
2026-04-26 12:45:00 -04:00
Tom Alexander
f59225d283
Install CoreDNS.
2026-04-26 12:45:00 -04:00
Tom Alexander
74fa3acb41
Generate pgp keys for sops.
2026-04-26 12:45:00 -04:00
Tom Alexander
4934eb2802
Generate ssh keys for flux bootstrap.
2026-04-26 12:45:00 -04:00
Tom Alexander
ae8c3f44e0
Move the cluster bootstrap into the keys flake.
...
Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.
2026-04-26 12:45:00 -04:00
Tom Alexander
e9901cd63a
Set up flux.
2026-04-26 12:44:59 -04:00
Tom Alexander
a113cccb52
Add a bootstrap role.
2026-04-26 12:44:59 -04:00
Tom Alexander
b0fe14adfc
Add a bootstrap role to load manifests into the cluster.
2026-04-26 12:44:59 -04:00
