nixos/kubernetes: major module refactor

Browse Source

- All kubernetes components have been seperated into different files
- All TLS-enabled ports have been deprecated and disabled by default
- EasyCert option added to support automatic cluster PKI-bootstrap
- RBAC has been enforced for all cluster components by default
- NixOS kubernetes test cases make use of easyCerts to setup PKI

...

This commit is contained in:

Johan Thomsen

2019-02-20 21:08:01 +01:00

committed by Franz Pletz

parent 5a4c8092c0

commit e2380e79e1

18 changed files with 1900 additions and 1327 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

nixos/modules/services/cluster/kubernetes/default.nix

+104 -1023

File diff suppressed because it is too large Load Diff