40 Commits

Author	SHA1	Message	Date
Tom Alexander	fc473c00da	Fix proxy auth tls	2026-02-21 15:11:15 -05:00
Tom Alexander	85d40613e6	Generate certificates for the aggregation layer.	2026-02-21 15:11:14 -05:00
Tom Alexander	9830e34a45	Enable gateway support.	2026-02-21 15:11:14 -05:00
Tom Alexander	657d5a5e55	Temporarily drop flux interval to 1 minute during early development. ... This is to reduce waiting time.	2026-02-21 15:11:14 -05:00
Tom Alexander	31dd69cfcb	Install deferred manifests.	2026-02-21 15:11:14 -05:00
Tom Alexander	7f6f8352c0	More changes to try to fix coredns.	2026-02-21 15:11:13 -05:00
Tom Alexander	218aaf97c6	Implement a generic helm templater package.	2026-02-21 15:11:12 -05:00
Tom Alexander	35a1b8c227	Switch to generating the coredns manifests via nix.	2026-02-21 15:11:12 -05:00
Tom Alexander	e3c61fe4db	Use CoreDNS for in-cluster DNS requests and caching.	2026-02-21 15:11:12 -05:00
Tom Alexander	9314691e7e	Enable native routing.	2026-02-21 15:11:12 -05:00
Tom Alexander	740e3a17e5	Build the cilium manifest automatically in nix.	2026-02-21 15:11:12 -05:00
Tom Alexander	5c4ac7ea59	Allow pods to directly speak to the public internet on their own public IPv6 addresses.	2026-02-21 15:11:12 -05:00
Tom Alexander	323e2fff83	Enable ipv4 and tunnel routing.	2026-02-21 15:11:12 -05:00
Tom Alexander	f5286bd10e	Switch to kubernetes ipam mode.	2026-02-21 15:11:11 -05:00
Tom Alexander	87429a2953	Fix service cluster ip range. ... Kubernetes only allows a /112 for service ip range.	2026-02-21 15:11:11 -05:00
Tom Alexander	a32eb663b1	Fix trailing line break in kubernetes encryption config.	2026-02-21 15:11:11 -05:00
Tom Alexander	bd7c86a10e	Move the yaml functions to their own file.	2026-02-21 15:11:11 -05:00
Tom Alexander	a99477797c	Introduce functions to generate yaml. ... The toYAML function is just an alias to toJSON which is technically fine since YAML is a superset of JSON, but these new functions will generate actual YAML.	2026-02-21 15:11:11 -05:00
Tom Alexander	b5f9a7c812	Add missing cidr declarations.	2026-02-21 15:11:11 -05:00
Tom Alexander	f0e6b30c98	Fix DNS resolution.	2026-02-21 15:11:10 -05:00
Tom Alexander	70c10aba40	Apply the git repo to the cluster.	2026-02-21 15:11:10 -05:00
Tom Alexander	32b27fba36	Trust flux's ssh key in the yaml git repo.	2026-02-21 15:11:10 -05:00
Tom Alexander	90a97f4e74	Generic secrets for ssh keys.	2026-02-21 15:11:10 -05:00
Tom Alexander	21ee9a631c	Generic secrets for pgp keys.	2026-02-21 15:11:10 -05:00
Tom Alexander	9529f4b805	Generate kubernetes secrets for ssh keys.	2026-02-21 15:11:10 -05:00
Tom Alexander	f3e7d56b66	Install CoreDNS.	2026-02-21 15:11:09 -05:00
Tom Alexander	5593a1fccd	Generate pgp keys for sops.	2026-02-21 15:11:09 -05:00
Tom Alexander	ff04f8d951	Generate ssh keys for flux bootstrap.	2026-02-21 15:11:09 -05:00
Tom Alexander	50ba6f7c87	Move the cluster bootstrap into the keys flake. ... Bootstrapping the cluster needs access to secrets, so I am moving it into the keys flake.	2026-02-21 15:11:09 -05:00
Tom Alexander	fbfa3dc5dc	Add kube-proxy.	2026-02-21 15:11:08 -05:00
Tom Alexander	2ac0bfe5f8	Add kubelet.	2026-02-21 15:11:07 -05:00
Tom Alexander	13f3237359	Add kube-scheduler.	2026-02-21 15:11:07 -05:00
Tom Alexander	7365efd97f	Add kube-controller-manager.	2026-02-21 15:11:07 -05:00
Tom Alexander	8c59a1216f	Fix launching kube-apiserver.	2026-02-21 15:11:07 -05:00
Tom Alexander	cd86934dde	Move the encryption config into a package.	2026-02-21 15:11:07 -05:00
Tom Alexander	f1346a52ce	Switch to generating certs with openssl.	2026-02-21 15:11:07 -05:00
Tom Alexander	f57df2d855	Add controller proxy certs.	2026-02-21 15:11:06 -05:00
Tom Alexander	5f459db540	Add requestheader-client-ca.	2026-02-21 15:11:06 -05:00
Tom Alexander	9956009638	Add service account.	2026-02-21 15:11:06 -05:00
Tom Alexander	4c029aa0b0	Add configs for a new kubernetes cluster on NixOS.	2026-02-21 15:11:06 -05:00