technofab/kubenix
1
0
Fork 0
mirror of https://github.com/TECHNOFAB11/kubenix.git synced 2025-12-12 08:00:06 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

enhance nix-shell and add CI

Browse source
This commit is contained in:
GTrunSec 2021-05-13 01:18:12 -07:00 • committed by David Arnold
parent ffaa63af55
commit c3fa598922
7 changed files with 99 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

32
modules/testing/runtime/nixos-k8s.nix
View file

@ -1,7 +1,6 @@
# nixos-k8s implements nixos kubernetes testing runtime
{
nixosPath
{ nixosPath
, config
, pkgs
, lib
@ -16,12 +15,12 @@ let
kubeconfig = "/etc/${config.services.kubernetes.pki.etcClusterAdminKubeconfig}";
# how we differ from the standard configuration of mkKubernetesBaseTest
extraConfiguration = { config, pkgs, lib, nodes, ...}: {
extraConfiguration = { config, pkgs, lib, nodes, ... }: {
virtualisation.memorySize = mkDefault 2048;
networking = {
nameservers = ["10.0.0.254"];
nameservers = [ "10.0.0.254" ];
firewall = {
trustedInterfaces = ["docker0" "cni0"];
trustedInterfaces = [ "docker0" "cni0" ];
};
};
services.kubernetes = {
@ -45,16 +44,17 @@ let
}];
};
}];
};
systemd.extraConfig = "DefaultLimitNOFILE=1048576";
systemd.services.copy-certs = {
description = "Share k8s certificates with host";
script = "cp -rf /var/lib/kubernetes/secrets /tmp/xchg/";
after = [ "kubernetes.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
};
systemd.extraConfig = "DefaultLimitNOFILE=1048576";
systemd.services.copy-certs = {
description = "Share k8s certificates with host";
script = "cp -rf /var/lib/kubernetes/secrets /tmp/xchg/";
after = [ "kubernetes.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
};
};
};
};
@ -70,7 +70,7 @@ let
inherit (config) name;
test = script;
};
in
{