deploy k3s
This commit is contained in:
parent
6de74d3927
commit
79e7eeff96
5 changed files with 32 additions and 60 deletions
|
@ -1,39 +1,15 @@
|
|||
# Edit this configuration file to define what should be installed on
|
||||
# your system. Help is available in the configuration.nix(5) man page
|
||||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||||
|
||||
{ config, pkgs, hosts, ... }:
|
||||
let
|
||||
kubeMasterIP = config.deployment.targetHost; # TODO: set more reliably
|
||||
kubeMasterHostname =
|
||||
"${config.networking.hostName}.${config.networking.domain}";
|
||||
kubeMasterAPIServerPort = 6443;
|
||||
in {
|
||||
# resolve master hostname always
|
||||
networking.extraHosts = "${kubeMasterIP} ${kubeMasterHostname}";
|
||||
|
||||
{ config, pkgs, hosts, ... }: {
|
||||
# packages for administration tasks
|
||||
environment.systemPackages = with pkgs; [ kompose kubectl kubernetes k9s ];
|
||||
environment.systemPackages = with pkgs; [ kompose kubectl k9s k3s ];
|
||||
|
||||
# Kubernetes itself
|
||||
services.kubernetes = {
|
||||
roles = [ "master" "node" ];
|
||||
masterAddress = kubeMasterHostname;
|
||||
apiserverAddress =
|
||||
"https://${kubeMasterHostname}:${toString kubeMasterAPIServerPort}";
|
||||
easyCerts = true;
|
||||
apiserver = {
|
||||
securePort = kubeMasterAPIServerPort;
|
||||
advertiseAddress = kubeMasterIP;
|
||||
};
|
||||
|
||||
# use coredns
|
||||
addons.dns.enable = true;
|
||||
|
||||
# needed if you use swap
|
||||
kubelet.extraOpts = "--fail-swap-on=false";
|
||||
services.k3s = {
|
||||
enable = true;
|
||||
role = "server";
|
||||
extraFlags = toString [
|
||||
# "--kubelet-arg=v=4" # Optionally add additional args to k3s
|
||||
"--cluster-cidr 10.24.0.0/16"
|
||||
];
|
||||
};
|
||||
|
||||
# This value determines the NixOS release from which the default
|
||||
# settings for stateful data, like file locations and database versions
|
||||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||||
|
@ -42,5 +18,5 @@ in {
|
|||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||||
system.stateVersion = "23.05"; # Did you read the comment?
|
||||
|
||||
networking.firewall.allowedTCPPorts = [ ];
|
||||
networking.firewall.enable = false;
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue