Tom Alexander
|
fc32a42750
|
Enforce cilium network policies.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
e54f272a69
|
Update packages in kubernetes/keys.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
92727aa1f7
|
Generate certificates for the aggregation layer.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
d6f089bdb4
|
Temporarily disable the firewall for debugging.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
cce4f98125
|
Enable gateway support.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
612158c3e1
|
Enable hubble.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
9e729a8cc6
|
Enable the firewall.
Now that we have networking working, I can enable the firewall and confirm nothing breaks.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
3169822726
|
Fix CoreDNS IPv4 connectivity.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
9b5fbadc44
|
Increase timeout for coredns cache.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
ab1b2a70f3
|
More changes to try to fix coredns.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
4061d14651
|
Move the kubelet yaml config into nix.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
361ec69a8b
|
Implement a generic helm templater package.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
f545376aec
|
Switch to generating the coredns manifests via nix.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
51e027ba67
|
Build the cilium manifest automatically in nix.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
c289f46cc5
|
Apply the git repo to the cluster.
|
2026-07-06 18:12:07 -04:00 |
|
Tom Alexander
|
dbd82b998d
|
Generic secrets for ssh keys.
|
2026-07-06 18:12:07 -04:00 |
|
Tom Alexander
|
1700c42926
|
Generic secrets for pgp keys.
|
2026-07-06 18:12:07 -04:00 |
|
Tom Alexander
|
3c20fd49f0
|
Generate kubernetes secrets for ssh keys.
|
2026-07-06 18:12:06 -04:00 |
|
Tom Alexander
|
158c622840
|
Generate pgp keys for sops.
|
2026-07-06 18:12:06 -04:00 |
|
Tom Alexander
|
ceb627bb35
|
Generate ssh keys for flux bootstrap.
|
2026-07-06 18:12:06 -04:00 |
|
Tom Alexander
|
a3f1dff351
|
Move the cluster bootstrap into the keys flake.
Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.
|
2026-07-06 18:12:06 -04:00 |
|
Tom Alexander
|
19b2da0d40
|
Add kube-proxy.
|
2026-07-06 18:12:04 -04:00 |
|
Tom Alexander
|
95ec23126a
|
Add kubelet.
|
2026-07-06 18:12:04 -04:00 |
|
Tom Alexander
|
868b9b9889
|
Add kube-scheduler.
|
2026-07-06 18:12:04 -04:00 |
|
Tom Alexander
|
380ac011f1
|
Move the encryption config into a package.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
f4891f345e
|
Switch to generating certs with openssl.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
f8ad309c0b
|
Add controller proxy certs.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
6c07157f21
|
Add requestheader-client-ca.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
6aa87faecb
|
Add service account.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
732e2cd296
|
Install kubernetes.
|
2026-07-06 18:12:03 -04:00 |
|
Tom Alexander
|
ac07941b8e
|
Add additional controllers.
|
2026-07-06 18:12:02 -04:00 |
|
Tom Alexander
|
fa59f17df5
|
Add configs for a new kubernetes cluster on NixOS.
|
2026-07-06 18:12:00 -04:00 |
|