No description
Find a file
2024-09-17 14:19:29 +02:00
docs Move over stuff from nixos-servers 2024-09-07 21:59:41 +02:00
modules Change location of dnsmasq image 2024-09-17 14:19:29 +02:00
scripts Move over stuff from nixos-servers 2024-09-07 21:59:41 +02:00
.sops.yaml Init 2024-09-07 12:35:02 +02:00
applyset-deploy.sh Init 2024-09-07 12:35:02 +02:00
deployments.nix Init 2024-09-07 12:35:02 +02:00
flake.lock Replace dnsmasq deployment with NixNG image 2024-09-17 13:22:02 +02:00
flake.nix Move over stuff from nixos-servers 2024-09-07 21:59:41 +02:00
kubenix.nix Move over stuff from nixos-servers 2024-09-07 21:59:41 +02:00
README.md Move over stuff from nixos-servers 2024-09-07 21:59:41 +02:00
secrets.yml Init 2024-09-07 12:35:02 +02:00

Kubernetes deployments

We use Kubenix to write Kubernetes deployments in Nix!

Acknowledgements

  • dns.nix: A Nix DSL for defining DNS zones
  • flake-utils: Handy utilities to develop Nix flakes
  • kubenix: Declare and deploy Kubernetes resources using Nix
  • nixhelm: Nix-digestible Helm charts
  • sops-nix: Sops secret management for Nix

Prerequisites

To deploy to the Kubernetes cluster, first make sure you have an admin account on the cluster. You can generate this using nix run '.#gen-k3s-cert' <username> <servername> ~/.kube, assuming you have SSH access to the master node. This puts a private key, signed certificate and a kubeconfig in the kubeconfig directory

Bootstrapping

We are now ready to deploy to the Kubernetes cluster. Deployments are done through an experimental Kubernetes feature called ApplySets. Each applyset is responsible for a set number of resources within a namespace.

If the cluster has not been initialized yet, we must bootstrap it first. Run these deployments:

  • nix run '.#bootstrap-default-deploy'
  • nix run '.#bootstrap-kube-system-deploy'

Deployment

Now the cluster has been initialized and we can deploy applications. To explore which applications we can deploy, run nix flake show. Then, for each application, run nix run '.#<application>-deploy'. Or, if you're lazy: nix flake show --json | jq -r '.packages."x86_64-linux"|keys[]' | grep -- -deploy | xargs -I{} nix run ".#{}".