From afe5ca7752a75e4dbbb9858f99079f7d36470bf6 Mon Sep 17 00:00:00 2001 From: Greg Hellings Date: Mon, 19 May 2025 22:47:47 -0500 Subject: [PATCH] Add kubernetes hostnames and ports --- modules/nixos/kubernetes.nix | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/modules/nixos/kubernetes.nix b/modules/nixos/kubernetes.nix index 5997ab6..69b83f6 100644 --- a/modules/nixos/kubernetes.nix +++ b/modules/nixos/kubernetes.nix @@ -18,7 +18,19 @@ in age.secrets.kubernetesToken.file = ../../secrets/kubernetes/kubernetesToken.age; networking.firewall = { - allowedTCPPorts = [ 6443 ]; + allowedTCPPorts = + [ + 6443 + ] + ++ ( + if cfg.agentOnly then + [ + 2379 + 2380 + ] + else + [ ] + ); allowedUDPPorts = [ 8472 ]; }; @@ -31,6 +43,9 @@ in "--service-cidr=10.221.0.0/16" "--write-kubeconfig-mode 0640" "--write-kubeconfig-group kubeconfig" + "--tls-san ${config.networking.hostName}.home" + "--tls-san ${config.networking.hostName}.thehellings.lan" + "--tls-san ${config.networking.hostName}.shire-zebra.ts.net" ]; serverAddr = lib.mkIf (config.networking.hostName != "isaiah") "https://isaiah.home:6443"; };