I changed bhyverc to use pci slot 10 for network, so update the network interface.

nix/configuration/configuration.nix

@@ -273,6 +273,7 @@ in
             }
           );
         })
+        (disableTests "ada") # test failing with http url is not idempotent.
       ];
 
     # This option defines the first version of NixOS you have installed on this particular machine,

nix/configuration/flake.lock

@@ -185,11 +185,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1788531059,
-        "narHash": "sha256-hLD4l3QOGBQhkVp3mQ2lJ/YbEi99qUgKapb40KovZ88=",
+        "lastModified": 1788752844,
+        "narHash": "sha256-VaWGJ6+cIYN2erfSecbRV+4ljI185Ty2wUrXyvQbgOw=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "801bef6abd86b91e51083066b83fb354a11fc640",
+        "rev": "dc5d91f840324650bac8c379428c7037a416959a",
         "type": "github"
       },
       "original": {

nix/configuration/hosts/hydra/default.nix

@@ -20,7 +20,7 @@
   config = {
     networking =
       let
-        interface = "enp0s2";
+        interface = "enp0s10";
       in
       {
         # Generate with `head -c4 /dev/urandom | od -A none -t x4`

nix/kubernetes/flake.lock

@@ -164,11 +164,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1784120854,
-        "narHash": "sha256-KesHgItiZPgGX740axSiQLcIQ8D24MDqNpkKYWIek8k=",
+        "lastModified": 1788752844,
+        "narHash": "sha256-VaWGJ6+cIYN2erfSecbRV+4ljI185Ty2wUrXyvQbgOw=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "753cc8a3a87467296ddd1fa93f0cc3e81120ee46",
+        "rev": "dc5d91f840324650bac8c379428c7037a416959a",
         "type": "github"
       },
       "original": {

nix/kubernetes/hosts/controller0/default.nix

@@ -20,7 +20,7 @@
   config = {
     networking =
       let
-        interface = "enp0s2";
+        interface = "enp0s10";
       in
       {
         # Generate with `head -c4 /dev/urandom | od -A none -t x4`

nix/kubernetes/hosts/controller1/default.nix

@@ -20,7 +20,7 @@
   config = {
     networking =
       let
-        interface = "enp0s2";
+        interface = "enp0s10";
       in
       {
         # Generate with `head -c4 /dev/urandom | od -A none -t x4`

nix/kubernetes/hosts/controller2/default.nix

@@ -20,7 +20,7 @@
   config = {
     networking =
       let
-        interface = "enp0s2";
+        interface = "enp0s10";
       in
       {
         # Generate with `head -c4 /dev/urandom | od -A none -t x4`

nix/kubernetes/hosts/worker0/default.nix

@@ -20,7 +20,7 @@
   config = {
     networking =
       let
-        interface = "enp0s2";
+        interface = "enp0s10";
       in
       {
         # Generate with `head -c4 /dev/urandom | od -A none -t x4`

nix/kubernetes/hosts/worker1/default.nix

@@ -20,7 +20,7 @@
   config = {
     networking =
       let
-        interface = "enp0s2";
+        interface = "enp0s10";
       in
       {
         # Generate with `head -c4 /dev/urandom | od -A none -t x4`

nix/kubernetes/hosts/worker2/default.nix

@@ -20,7 +20,7 @@
   config = {
     networking =
       let
-        interface = "enp0s2";
+        interface = "enp0s10";
       in
       {
         # Generate with `head -c4 /dev/urandom | od -A none -t x4`

nix/kubernetes/keys/package/mrmanager-repo-secrets/package.nix

@@ -134,6 +134,18 @@ let
           "nix-pull-through-cache" = {
             "CACHE_GET_TOKEN" = (builtins.readFile "${./secrets/nix-pull-through-cache/auth/CACHE_GET_TOKEN}");
           };
+          "registry-credentials" =
+            (generate_docker_secret {
+              username = builtins.readFile "${./secrets/flux-system/registry-credentials/username}";
+              password = builtins.readFile "${./secrets/flux-system/registry-credentials/password}";
+              email = builtins.readFile "${./secrets/flux-system/registry-credentials/email}";
+              address = builtins.readFile "${./secrets/flux-system/registry-credentials/address}";
+            })
+            // {
+              # "__annotations" = {
+              #   "tekton.dev/docker-0" = "https://harbor.fizz.buzz";
+              # };
+            };
         };
       };
   encrypted_secrets = (

nix/kubernetes/roles/kubernetes/default.nix

@@ -21,7 +21,7 @@
     assertions = [
       {
         # Kubernetes should only upgrade 1 minor version at a time, so this assert is here to prevent unwittingly jumping versions.
-        assertion = lib.hasPrefix "1.36." pkgs.kubernetes.version;
+        assertion = lib.hasPrefix "1.37." pkgs.kubernetes.version;
         message = "Unexpected Kubernetes package version: ${pkgs.kubernetes.version}";
       }
     ];