3 Commits (bb77892924363b5eba8f8730395b1ac347e5d48a)

Author	SHA1	Message	Date
q3k	b7e4bd4fa1	nix/cluster-configuration: pin nixpkgs for k8s ... We pin nixpkgs for k8s and also bypass some issues with the new k8s startup sequencing. We also pin the kernel to 5.1. Next step is to also pin nixpkgs for the rest of the system, I think we can do it from within cluster-configuration.nix.	2019-05-14 01:45:48 +02:00
q3k	4232c8b733	nix: bump to new k8s	2019-04-28 17:12:54 +02:00
q3k	73cef11c85	*: rejigger tls certs and more ... This pretty large change does the following: - moves nix from bootstrap.hswaw.net to nix/ - changes clustercfg to use cfssl and moves it to cluster/clustercfg - changes clustercfg to source information about target location of certs from nix - changes clustercfg to push nix config - changes tls certs to have more than one CA - recalculates all TLS certs (it keeps the old serviceaccoutns key, otherwise we end up with invalid serviceaccounts - the cert doesn't match, but who cares, it's not used anyway)	2019-04-07 00:06:23 +02:00