talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Commit Graph

  • 11d8b93551 Add an /etc/hosts entry for google's metadata server. nix Tom Alexander 2026-07-14 11:53:29 -04:00
  • 40b8742a80 Add nix pull-through cache secrets. Tom Alexander 2026-07-12 17:58:06 -04:00
  • 32080e0e01 Add chown for nix pull through cache database. Tom Alexander 2026-07-12 17:25:12 -04:00
  • 41668506cd Retire the kubernetes branch now that it is merged into nix. Tom Alexander 2026-07-06 18:28:58 -04:00
  • 63a988d1da Merge branch 'kubernetes' into nix Tom Alexander 2026-07-06 18:23:07 -04:00
  • 7c8d278923 Configure kernel preemption. Tom Alexander 2026-05-30 21:40:12 -04:00
  • 297577471e Update kubernetes packages and update to gateway API 1.5.1. Tom Alexander 2026-05-30 19:35:06 -04:00
  • 345ecfc7cf Add secret for homepage-staging. Tom Alexander 2026-05-03 17:03:04 -04:00
  • 889de9dbf6 Add a secret for the harbor webhooks to flux. Tom Alexander 2026-05-03 16:25:01 -04:00
  • 65c2021473 Update flux and install the image automation controller. Tom Alexander 2026-05-03 14:52:53 -04:00
  • b0f025d340 Add IP addresses to worker certs for the metrics server. Tom Alexander 2026-05-02 20:35:13 -04:00
  • a00115fb4e Delete images after 24 hours of being unused. Tom Alexander 2026-05-02 15:53:35 -04:00
  • 058f0cd59b Set up containerd use harbor.fizz.buzz. Tom Alexander 2026-05-02 12:50:36 -04:00
  • c8c18bde88 Add secrets for archive-box, webhook-bridge, and tekton. Tom Alexander 2026-04-28 17:45:02 -04:00
  • a36016e631 Allow node-to-node communication. Tom Alexander 2026-04-26 12:44:24 -04:00
  • deaea6954e Use numbers for folder order. Tom Alexander 2026-04-26 09:28:31 -04:00
  • c1ec96044e Add harbor secrets. Tom Alexander 2026-04-26 09:11:35 -04:00
  • cdb2994447 Switch to the experimental gateway CRDs for TCPRoute support. Tom Alexander 2026-04-18 19:20:16 -04:00
  • 7416e412df Add oauth2 proxy secrets. Tom Alexander 2026-04-18 17:45:47 -04:00
  • d14d8fe4a4 Add dex secrets. Tom Alexander 2026-04-18 16:22:47 -04:00
  • a4b20c1ead Enable the firewall. Tom Alexander 2026-04-18 15:49:08 -04:00
  • b593fdc8a7 Add gitea secrets. Tom Alexander 2026-04-16 20:33:54 -04:00
  • 8f5f59ee87 Add generation for in-repo secrets. Tom Alexander 2026-03-19 18:16:20 -04:00
  • fc32a42750 Enforce cilium network policies. Tom Alexander 2026-03-16 19:04:56 -04:00
  • 1d3d178fc8 Downgrade to gateway 1.4.1. Tom Alexander 2026-03-15 12:22:26 -04:00
  • e54f272a69 Update packages in kubernetes/keys. Tom Alexander 2026-03-07 20:14:07 -05:00
  • e09e659d91 Fix network for updated nix. Tom Alexander 2026-02-14 12:34:24 -05:00
  • 3cc0fb1d3f Fix proxy auth tls Tom Alexander 2026-01-11 13:03:20 -05:00
  • 92727aa1f7 Generate certificates for the aggregation layer. Tom Alexander 2026-01-09 18:19:34 -05:00
  • 2a319deea0 Add a note for the cilium connectivity test. Tom Alexander 2026-01-09 17:32:28 -05:00
  • d6f089bdb4 Temporarily disable the firewall for debugging. Tom Alexander 2026-01-04 22:27:46 -05:00
  • cce4f98125 Enable gateway support. Tom Alexander 2026-01-04 22:27:00 -05:00
  • 612158c3e1 Enable hubble. Tom Alexander 2026-01-04 12:13:58 -05:00
  • 1ed3832730 Temporarily drop flux interval to 1 minute during early development. Tom Alexander 2026-01-03 15:00:44 -05:00
  • f3b969642c Install deferred manifests. Tom Alexander 2026-01-03 14:57:26 -05:00
  • 23d9bbb8a1 Add a custom nftables firewall config. Tom Alexander 2026-01-02 23:28:29 -05:00
  • 9e729a8cc6 Enable the firewall. Tom Alexander 2026-01-01 10:21:36 -05:00
  • 3169822726 Fix CoreDNS IPv4 connectivity. Tom Alexander 2025-12-31 20:12:56 -05:00
  • 9b5fbadc44 Increase timeout for coredns cache. Tom Alexander 2025-12-30 21:57:09 -05:00
  • ab1b2a70f3 More changes to try to fix coredns. Tom Alexander 2025-12-29 22:44:04 -05:00
  • 4061d14651 Move the kubelet yaml config into nix. Tom Alexander 2025-12-29 21:54:27 -05:00
  • 361ec69a8b Implement a generic helm templater package. Tom Alexander 2025-12-29 21:41:23 -05:00
  • f545376aec Switch to generating the coredns manifests via nix. Tom Alexander 2025-12-29 21:19:50 -05:00
  • dc80c06ee9 Use CoreDNS for in-cluster DNS requests and caching. Tom Alexander 2025-12-29 21:15:29 -05:00
  • 5d58d550d3 Enable native routing. Tom Alexander 2025-12-29 20:45:01 -05:00
  • 51e027ba67 Build the cilium manifest automatically in nix. Tom Alexander 2025-12-29 19:11:55 -05:00
  • 37efcdb367 Allow pods to directly speak to the public internet on their own public IPv6 addresses. Tom Alexander 2025-12-29 18:35:20 -05:00
  • 01d230bde6 Enable ipv4 and tunnel routing. Tom Alexander 2025-12-29 17:00:23 -05:00
  • 383acd4fd2 Switch to kubernetes ipam mode. Tom Alexander 2025-12-29 15:59:00 -05:00
  • 7df824da6a Fix service cluster ip range. Tom Alexander 2025-12-29 04:58:49 -05:00
  • efbfe865e0 Fix trailing line break in kubernetes encryption config. Tom Alexander 2025-12-27 21:22:06 -05:00
  • 2314bef2ad Move the yaml functions to their own file. Tom Alexander 2025-12-27 21:15:00 -05:00
  • 8e9bd9acc1 Introduce functions to generate yaml. Tom Alexander 2025-12-27 21:03:25 -05:00
  • d924aa3a81 Add missing cidr declarations. Tom Alexander 2025-12-23 06:48:06 -05:00
  • 2bbf44e528 Fix DNS resolution. Tom Alexander 2025-12-22 00:14:17 -05:00
  • c289f46cc5 Apply the git repo to the cluster. Tom Alexander 2025-12-21 23:48:17 -05:00
  • 88b1c36c0d Trust flux's ssh key in the yaml git repo. Tom Alexander 2025-12-21 23:26:15 -05:00
  • dbd82b998d Generic secrets for ssh keys. Tom Alexander 2025-12-21 22:41:21 -05:00
  • 1700c42926 Generic secrets for pgp keys. Tom Alexander 2025-12-21 19:43:43 -05:00
  • 3c20fd49f0 Generate kubernetes secrets for ssh keys. Tom Alexander 2025-12-21 18:45:49 -05:00
  • 903c1c1f41 Install CoreDNS. Tom Alexander 2025-12-21 18:23:27 -05:00
  • 158c622840 Generate pgp keys for sops. Tom Alexander 2025-12-21 14:17:31 -05:00
  • ceb627bb35 Generate ssh keys for flux bootstrap. Tom Alexander 2025-12-21 00:01:57 -05:00
  • a3f1dff351 Move the cluster bootstrap into the keys flake. Tom Alexander 2025-12-20 23:13:51 -05:00
  • 46c8f5e0ce Set up flux. Tom Alexander 2025-12-20 23:01:19 -05:00
  • 3760bca64b Add a bootstrap role. Tom Alexander 2025-12-20 22:14:28 -05:00
  • 3396a4f482 Add a bootstrap role to load manifests into the cluster. Tom Alexander 2025-12-20 20:49:40 -05:00
  • 773db6e567 Fix launching of containers. Tom Alexander 2025-12-19 22:49:32 -05:00
  • 6010867796 Create a debugging role. Tom Alexander 2025-12-19 21:21:57 -05:00
  • e9db45fb61 Some networking fixes. Tom Alexander 2025-12-18 22:28:03 -05:00
  • 10cb394dde Add cilium bootstrap. Tom Alexander 2025-12-16 21:48:44 -05:00
  • 14787d6730 Installing the cni plugins. Tom Alexander 2025-12-18 00:27:18 -05:00
  • 19b2da0d40 Add kube-proxy. Tom Alexander 2025-12-16 21:07:39 -05:00
  • 95ec23126a Add kubelet. Tom Alexander 2025-12-16 19:31:33 -05:00
  • 6897915455 Add worker nodes. Tom Alexander 2025-12-15 22:32:32 -05:00
  • 868b9b9889 Add kube-scheduler. Tom Alexander 2025-12-15 20:09:46 -05:00
  • d0439a6d2f Add kube-controller-manager. Tom Alexander 2025-12-15 19:47:35 -05:00
  • fd15dc5bef Fix launching kube-apiserver. Tom Alexander 2025-12-14 23:24:23 -05:00
  • 380ac011f1 Move the encryption config into a package. Tom Alexander 2025-12-14 20:28:48 -05:00
  • f4891f345e Switch to generating certs with openssl. Tom Alexander 2025-12-14 18:24:24 -05:00
  • f8ad309c0b Add controller proxy certs. Tom Alexander 2025-12-14 14:48:53 -05:00
  • 6c07157f21 Add requestheader-client-ca. Tom Alexander 2025-12-14 13:44:56 -05:00
  • 6aa87faecb Add service account. Tom Alexander 2025-12-14 13:37:46 -05:00
  • 732e2cd296 Install kubernetes. Tom Alexander 2025-12-08 20:33:41 -05:00
  • ac07941b8e Add additional controllers. Tom Alexander 2025-12-07 15:48:08 -05:00
  • fa59f17df5 Add configs for a new kubernetes cluster on NixOS. Tom Alexander 2025-11-30 14:32:36 -05:00
  • c7e7b2b06c Fix ending video recording sessions. Tom Alexander 2026-07-05 17:29:53 -04:00
  • c0b3cd0fd3 Switch to flake-based build on nix-builder for nightly rust. Tom Alexander 2026-07-05 16:15:33 -04:00
  • ef21e0125e Disable the nixbsd build due to onetbb test bugs. Tom Alexander 2026-06-23 15:08:44 -04:00
  • e30a2ddb9e Disable oneTBB tests. Tom Alexander 2026-06-21 22:14:14 -04:00
  • 53b3717b6c Fix branch for family disks target in nix_builder. Tom Alexander 2026-06-17 15:10:20 -04:00
  • 0cf4139392 Fix launching shikane. Tom Alexander 2026-06-18 10:38:23 -04:00
  • 6094fee196 Enable the thunderbolt service. Tom Alexander 2026-06-17 13:08:11 -04:00
  • 9e4c079258 Update packages. Tom Alexander 2026-06-12 12:09:33 -04:00
  • 3ab7a6e460 Update packages. Tom Alexander 2026-06-02 22:16:08 -04:00
  • 49f75408ae Move kernel config to its own role. Tom Alexander 2026-05-31 02:03:49 -04:00
  • 00806d4963 Fix firewall rules for certificate renewal. main Tom Alexander 2026-05-30 17:02:01 -04:00
  • 0fa170c57e Preserve .vscode-shared. Tom Alexander 2026-05-27 13:24:16 -04:00
  • 3050cece0c Do not force import the root zfs pool. Tom Alexander 2026-05-22 20:38:27 -04:00
  • 6d070ddbb4 Update packages. Tom Alexander 2026-05-21 20:33:04 -04:00