nixpkgs/nixos/modules/services/cluster/kubernetes
vincent.cui 9c870ac78f nixos/kubernetes: fix pki's mkSpec function
The `authority.file.path` field of a cert spec is
[defined as follows]
(https://github.com/cloudflare/certmgr/tree/v3.0.3#pki-specs):

> if this is included, the CA certificate will be saved here.
It follows the same file specification format above. Use this
if you want to save your CA cert to disk.

So certmgr fails, because each certmgr spec (apiserver,
addonManager, ...) wants to manage the file at the `cert.caCert`
location. However, the `authority.file.path` field is not needed
for generating a certificate, as the certificate is generated by
the CA, which is reachable at `authority.remote` (e.g.
https://localhost:8888 with `easyCerts = true`). The
`authority.file.path` field just saves the certificate of the CA
to disk.
2023-12-21 22:08:31 +01:00
..
addons nixos/kubernetes: update coredns 1.7.1 -> 1.10.1 2023-03-14 22:15:43 +10:00
addon-manager.nix
apiserver.nix
controller-manager.nix
default.nix treewide: use mkPackageOption 2023-11-27 01:28:36 +01:00
flannel.nix kubernetes: don't always open flannel fw ports 2023-12-02 10:50:56 +00:00
kubelet.nix nixos: fix typos 2023-05-19 22:31:04 -04:00
pki.nix nixos/kubernetes: fix pki's mkSpec function 2023-12-21 22:08:31 +01:00
proxy.nix
scheduler.nix