nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-02-10 14:14:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

nixos/kubernetes: adds argument to mkCert defaulting to kubernetes group

Browse Source
This commit is contained in:
Pedro O. A. Regis 2024-06-21 21:26:08 -03:00
parent 1b1de8b52b
commit a5deaf9e93
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/modules/services/cluster/kubernetes/default.nix
View File

@ -61,13 +61,13 @@ let
etcdEndpoints = ["https://${cfg.masterAddress}:2379"];
mkCert = { name, CN, hosts ? [], fields ? {}, action ? "",
privateKeyOwner ? "kubernetes" }: rec {
privateKeyOwner ? "kubernetes", privateKeyGroup ? "kubernetes" }: rec {
inherit name caCert CN hosts fields action;
cert = secret name;
key = secret "${name}-key";
privateKeyOptions = {
owner = privateKeyOwner;
group = "nogroup";
group = privateKeyGroup;
mode = "0600";
path = key;
};