From 4cd0de01097f5374e924d710b4a7aea4acd0f576 Mon Sep 17 00:00:00 2001
From: Greg Hellings <greg.hellings@gmail.com>
Date: Tue, 20 May 2025 22:51:22 -0500
Subject: [PATCH] Isaiah gets new kubernetes runner

---
 hosts/isaiah/default.nix                |  11 +++++++----
 secrets/gitlab/kubernetes-k3s-local.age | Bin 0 -> 2512 bytes
 secrets/secrets.nix                     |   6 +++---
 3 files changed, 10 insertions(+), 7 deletions(-)
 create mode 100644 secrets/gitlab/kubernetes-k3s-local.age

diff --git a/hosts/isaiah/default.nix b/hosts/isaiah/default.nix
index e2dca92..472c8dc 100644
--- a/hosts/isaiah/default.nix
+++ b/hosts/isaiah/default.nix
@@ -1,5 +1,5 @@
 {
-  #config,
+  config,
   lib,
   top,
   ...
@@ -11,7 +11,7 @@
   ];
 
   age.secrets = {
-    runner-qemu.file = ../../secrets/gitlab/isaiah-qemu-runner-reg.age;
+    runner-reg.file = ../../secrets/gitlab/kubernetes-k3s-local.age;
   };
 
   boot = {
@@ -80,9 +80,12 @@
       settings = {
         concurrent = 5;
       };
-      services =
-        {
+      services = {
+        kubernetes = {
+          authenticationTokenConfigFile = config.age.secrets.runner-reg.path;
+          executor = "shell";
         };
+      };
     };
     k3s.clusterInit = true; # This is the first node in the cluster
     openssh = {
diff --git a/secrets/gitlab/kubernetes-k3s-local.age b/secrets/gitlab/kubernetes-k3s-local.age
new file mode 100644
index 0000000000000000000000000000000000000000..b52ad17556e778a02aae255c55d697a63d84e04d
GIT binary patch
literal 2512
zcmZXUY3v*Y8OFsDHB0@#^`(KbLM5f+zjN)(>>AMQ?9A@$9J_Pu?CvaAcXnszK6Yky
z=b!>DF<R01Mdc_dM}U671d$Z1VnI;iMM4CE7s3}!6*&y87K_w={x@&(e*NWn-sgFz
zrm<lJv$%*-I}CP*u?eo>%Ep(fNn&jna|FZSMisBErcPE}@m+TqYiLWFnq?AdLx_xV
zsy^jgZc$1)u^5*r=NXP#h83<oKqWA%PgNR7i7{5wjB!&wyLH^)7;!1abd(`((i<e3
zX<<S8gRI&Cmq4aTpeLh)fl(%)G;bLzi{nZzwc}D6mt1{>^p&JTSI~$k#A)1cbqnhS
zYGdRX$Qp38Y@*cjhVOTSK40RJV$;pdG{5hQ3$yCw{Y4qCTcx;w1f}2yp1#am%XudN
zQGs1kfT+_(s;Z@5uQXyAs)J?f!2(6NE{us}5;PM;o9A-jFS-Ql^6kcK$_?wAX&P(G
zdR8UrJhu>WLbX#WQ<Y)6;I)xVCyQCCfLQLi5<XQIG1~Nm3QZDaU7r~!>CA)Wk}77r
znmY@yKleBSP5gDgQ!vJu4u|e$+EhcD<7Tzj3I+>YTCuIkq>~bLSxXDvWa?QkEeE|i
zlTCbTU1E91*DCG^4C-}|l7cph>eIduFJ<0XagG>HVU_n90y-IX?HWvIn`wD34Z>y>
z(g3pNbwZRF4v~m;gj`xp3OP)3f`mvRE)mbg$8mQtFe?_X=?k$3TZt69o;B%1X*;(d
z5~S(5Gox0$SvW7EMAJv-IN6k}1#DJ1Wzm|?oEikIMToXoS6D3@60fx9(=qIHk$J0}
zjVU82NulEUM1Q&F$<;t+l{sGn<dJVvQ8N@<5#|76xieN~BtM1Dy1uCaWIdY_QdKjT
zS%VJ71g?x(Q;`G4h{)+YYbad^rP;adj+&Bb)C03t0ZJV(ff~SeBv;2U6{J^K42G7h
zQ)ae+iD9k2A_o-CYUgCKt_CAasxExNUBejc<J<_XxBEmG2@1w$9^>)dyrsaNm%B31
z!?I>&O1ml04F?DnTN)U$rB2&5bimCmgF}{u;W~zpqswO3F*j?2z)`}PRU+oBd5;G*
zj*Q1aJaMs_nmA5C(Q9B`4%W^Z96AlLpqa2@v1kp@h$SF(Ma@}Yw6CN~5LLnzf)#_a
z$&J~-&Gndox|?Y|55$UQ)uCpbr|S5E?xuFs)0%af89Guw7)}60Z|eeXlr1=q$ULhc
z%ZbqMB|OauBLXU;A-QzgGSitv)Q~gaHlhY@7&7{ZKgY?=oHtuiHH5@AlTtRrB(}a*
z6N{dUEqGK617N)h4Fd{6fr1<#k;6(~o6DA%u3GL0Xv7{6xV<#aO$3Pug7*z;fyGF6
zwx{N#wpm-+XFx`(>fK?EORaI=3{a<8Yw)WKYgsjNma?&+jTF3G^2=obicP4(xuT4%
z!J0EkkxqNj6DW>Ii~3q6z$VIKv8Hi`pmqDWch23~QMq17)%Fl&J9I6AO2lf7P>ltM
zF4&i7WHql(CarwN)FF^bvqY^|7GhG!Wl^B&Op~YiP|lE*A~;JMk1&j$E>xV=2l%j$
zbKz!f?p$1#QgsTpij0v2PR?xDXfwuW0un=WrZs(&&<1!%u@Rb#m3FRGj0nhVK1!Xb
zE2}CHcoCOGFfs~CMOH>i*ego`UAmd>&o<M-z#m6uRbrQ=Xx3(47q`^2L%^x0%U!GN
z*fwbgc3;nvk`YDxY-8s`z5@rtqK1qLQ1ejTopP8HQYvT)Vz&$8jdtG<*>vnnn`y1U
zq9C(M=XUM{DFp}P&Ju$KPRJWc#t&B|JMT#Yel<x6JB6A0xLXnW5J!@2Q|~2V3I|~p
zrLnaXan_uzyg3;eQjW`(uR`8ApQ~m>h}x{u91|~v4xcu$IUd_|OQXg(>(@(7pVz_y
zqxD5cu8lI+Z&o@a;l&oWve%tKFwGNj>YLr}L|gmqXqYiQQzuJCS+7Bxu54^<Q~?%3
z2STYK5f11*RmNBi<~(k&UTZ0w)&Vf1iXM^K{*10XV?78ydE)8&jT1MXf7M?<knyAE
zUD??F`fEMtE%wO9-#`4s?A|?FZz_)+`Q+!%J7ZrlJ`Ub}d2-k3(a9vg=36gUUO159
zSot2vEuJ{JP5$7upXKD~;J=;i?|Z-d__v?_+?fLhgT2=utlYT&`U~HuE`H$5{(UcB
z_RtnPc=U(6-|*g!Z{Jf@o_pb^yPjZ<{_lnz7e5$2d(qQ>YivDnxc%J|cf385-uphv
zo!Ecd(Z4Xq9yxZiyZZt2&9@F;_lW+dQ!j=m|J>bor?}<KcSY{o={=9_eDKi8YoEWe
zb?f=er=GmwjT86%q50_1YZ&MC$4(sE*4}w_Lxh^&d-iJIdx!k+wdvRII=J_(XLjxQ
z$8r0qj}KkS|LB(&9JtNedH5SYdG{-S{Fij$uXntn?GMkqjUW8?OE2EeUH5FwI`lAU
zf9(qGrJM8juAT1t=+a;9zx(J9cAwhz%1ygpy=8lL6}Hvd|M=c7eD<y*_AmB;|NM+Q
z<X-*GN5QT$ry=WLZ?AF?-tm}vxpDDFr{6eq`0-O;yz`cC9>0Ivmfu{qeP`vmi+0xz
z9oT#Fg5y6w?LIHvy8V0-zUIaMJalUH`k~){`N$pj>^UynJNdx*>Qm1J4;w$O+(*e<
ZE_o+@XzQ6vZjrCjoqf+k%VPr&`aj#VczXZ<

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 9c6174d..7c41616 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -83,6 +83,7 @@ in
 
   "dendrite.age".publicKeys = everyone;
   "dendrite_key.age".publicKeys = everyone;
+
   "gitlab/secret.age".publicKeys = everyone;
   "gitlab/otp.age".publicKeys = everyone;
   "gitlab/db.age".publicKeys = everyone;
@@ -92,9 +93,8 @@ in
   "gitlab/key.age".publicKeys = everyone;
   "gitlab/cert.age".publicKeys = everyone;
   "gitlab/nixos-qemu-shell.age".publicKeys = everyone;
-  "gitlab/isaiah-qemu-runner-reg.age".publicKeys = everyone;
-  "gitlab/isaiah-vbox-runner-reg.age".publicKeys = everyone;
-  "gitlab/isaiah-shell-runner-reg.age".publicKeys = everyone;
+  "gitlab/nixos-vbox-shell.age".publicKeys = everyone;
+  "gitlab/kubernetes-k3s-local.age".publicKeys = everyone;
   "gitlab/linode-deployer-runner-reg.age".publicKeys = everyone;
 
   "acme_password.age".publicKeys = everyone;