3 Commits

Author	SHA1	Message	Date
Johan Thomsen	466beb0214	nixos/kubernetes: let flannel use kubernetes as storage backend ... + isolate etcd on the master node by letting it listen only on loopback + enabling kubelet on master and taint master with NoSchedule The reason for the latter is that flannel requires all nodes to be "registered" in the cluster in order to setup the cluster network. This means that the kubelet is needed even at nodes on which we don't plan to schedule anything.	2019-02-20 21:08:56 +01:00
Johan Thomsen	6334796370	nixos/kubernetes: use the certmgr-selfsigned variant	2019-02-20 21:08:54 +01:00
Johan Thomsen	e2380e79e1	nixos/kubernetes: major module refactor ... - All kubernetes components have been seperated into different files - All TLS-enabled ports have been deprecated and disabled by default - EasyCert option added to support automatic cluster PKI-bootstrap - RBAC has been enforced for all cluster components by default - NixOS kubernetes test cases make use of easyCerts to setup PKI	2019-02-20 21:08:01 +01:00