Add kubernetes hostnames and ports

This commit is contained in:
Greg Hellings
2025-05-19 22:50:20 -05:00
parent 82f09cc33e
commit afe5ca7752
+16 -1
View File
@@ -18,7 +18,19 @@ in
age.secrets.kubernetesToken.file = ../../secrets/kubernetes/kubernetesToken.age; age.secrets.kubernetesToken.file = ../../secrets/kubernetes/kubernetesToken.age;
networking.firewall = { networking.firewall = {
allowedTCPPorts = [ 6443 ]; allowedTCPPorts =
[
6443
]
++ (
if cfg.agentOnly then
[
2379
2380
]
else
[ ]
);
allowedUDPPorts = [ 8472 ]; allowedUDPPorts = [ 8472 ];
}; };
@@ -31,6 +43,9 @@ in
"--service-cidr=10.221.0.0/16" "--service-cidr=10.221.0.0/16"
"--write-kubeconfig-mode 0640" "--write-kubeconfig-mode 0640"
"--write-kubeconfig-group kubeconfig" "--write-kubeconfig-group kubeconfig"
"--tls-san ${config.networking.hostName}.home"
"--tls-san ${config.networking.hostName}.thehellings.lan"
"--tls-san ${config.networking.hostName}.shire-zebra.ts.net"
]; ];
serverAddr = lib.mkIf (config.networking.hostName != "isaiah") "https://isaiah.home:6443"; serverAddr = lib.mkIf (config.networking.hostName != "isaiah") "https://isaiah.home:6443";
}; };