Rename clusters

clusters/k1/default.nix

@@ -0,0 +1,66 @@
+with import <nixpkgs> {};
+let
+  settings = {
+    clusterName = "kube1";
+    master = {
+      name = "k1-0"; address = "10.253.18.109";
+      extraSANs = [ "k1.itpartner.no" ];
+    };
+    workers = [
+      { name = "k1-1"; address = "10.253.18.110"; }
+      { name = "k1-2"; address = "10.253.18.111"; }
+      { name = "k1-3"; address = "10.253.18.108"; }
+      # { name = "k1-4"; address = "10.253.18.107"; }
+    ];
+    cidr = "10.11.0.0/16";
+    initca = ./ca;
+    fileserver = "fs0-0";
+    clusterHosts = ''
+      10.253.18.106 fs0-0 fs0-0.itpartner.no fs0-0.itpartner.intern
+      10.1.2.164    fs0-1 fs0-1.itpartner.no fs0-1.itpartner.intern
+
+      10.253.18.100 k0-0 k0-0.itpartner.no k0-0.itpartner.intern
+      10.253.18.101 k0-1 k0-1.itpartner.no k0-1.itpartner.intern
+      10.253.18.102 k0-2 k0-2.itpartner.no k0-2.itpartner.intern
+
+      10.253.18.109 k1-0 k1-0.itpartner.no k1-0.itpartner.intern
+      10.253.18.110 k1-1 k1-1.itpartner.no k1-1.itpartner.intern
+      10.253.18.111 k1-2 k1-2.itpartner.no k1-2.itpartner.intern
+      10.253.18.108 k1-3 k1-3.itpartner.no k1-3.itpartner.intern
+      10.253.18.107 k0-4 k1-4.itpartner.no k1-4.itpartner.intern
+
+      10.253.18.114 k2-0 k2-0.itpartner.no k2-0.itpartner.intern
+      10.253.18.115 k2-1 k2-1.itpartner.no k2-1.itpartner.intern
+      10.253.18.116 k2-2 k2-2.itpartner.no k2-2.itpartner.intern
+      10.253.18.117 k2-3 k2-3.itpartner.no k2-3.itpartner.intern
+      10.253.18.118 k2-4 k2-4.itpartner.no k2-4.itpartner.intern
+      10.253.18.103 k2-5 k2-5.itpartner.no k2-5.itpartner.intern
+    '';
+    adminAuthorizedKeys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKiAS30ZO+wgfAqDE9Y7VhRunn2QszPHA5voUwo+fGOf jonas"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMWEYtm1u3HiK4q4J5su6iKWfFjLXt9CIlm9Z9BfJYVj jens@itpartner@Jens-HP3"
+      "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCk5EKXxo/KLogjqSxSf/GkQdZ30UxB3wXc5k6Y6RRKQ/5iJ+XyYTbuqYOUp30p54apZzbayU2icahE/upr754lQicQwJtOXW/Iut57VRhSpq4P+mKCIdT58xCUkAZYr8Aja8UjHlYeJgFvp023K/fqmwbapu8R1gh4bzXm7uU1XeJoYfuOb+Cb8NGMn1ICrw2aztA0yVOXZ7tyJd2qyr1+6PuM/Ca2nKN4wLIX2vwyN3vZjR15nkIaHQGlTaJlNk2NEG1YTxsIQ9axDjNtyL80kjUr5M8zxW6s0h3451zr1b21EetP1i+1POIjS9uWXv5iabF+1Qb1GaS4FAYzzpqNY+moLzY7Zqfi05MPsMYkNoZ1Kg5aj0IuZb0OM9i6ZJrFs9nYAGG0uLSUTfrs957f9nokFyILGYg5xY46YN3uQrqfZifvcR0KaEdxEKvnfq0qrNG3uYLR/OYm2yblRcNbWgDoQ1hH7qa9uJM2JrPM07s4sJGkqfAib8Hwz9+l7jMrL6KIGUOA4aX0B1KZaIKKiZa42WlgdbeA17aW3laIqS5mZCkI3pLMYZAxe+A6rQi+V8ZAvDSyOL/Vws3lboXaN5QLu17R8uCY7MkIAvRBiZSpdWNeX3JO5m6zexkxkrFlxyEBf+ott4ATSw+eMYMs8i5xQRqPjgO1cABWkUdGpw== martin.moe.carstens@itpartner.no"
+    ];
+    acme_email = "innovasjon@itpartner.no";
+    grafana_smtp_user = "utvikling";
+    grafana_smtp_password = "S0m3rp0m@de#21!";
+    grafana_ldap_toml = ''
+      verbose_logging = true
+
+      [[servers]]
+      host = "itp-dc1.itpartner.intern"
+      port = 636
+      use_ssl = true
+      start_tls = false
+      ssl_skip_verify = true
+      bind_dn = "gitlab@itpartner.intern"
+      bind_password = "hipp hopp snipp snopp"
+      search_filter = "(&(objectClass=user)(objectClass=person)(|(sAMAccountName=%s)(mail=%s)))"
+      search_base_dns = ["DC=itpartner,DC=intern"]
+    '';
+  };
+in
+  import ../../lib/k8s.nix {
+    inherit pkgs lib settings;
+    here = ./.;
+  }

clusters/k1/k1-0.nix

@@ -0,0 +1,21 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [ ];
+
+  boot.initrd.availableKernelModules = [ "ata_piix" "mptspi" "floppy" "sd_mod" "sr_mod" ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/2e7ba83d-014f-4ef5-a1ce-fc9e34ce7b83";
+      fsType = "ext4";
+    };
+
+  swapDevices = [ ];
+
+  nix.maxJobs = lib.mkDefault 1;
+}

clusters/k1/k1-1.nix

@@ -0,0 +1,21 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [ ];
+
+  boot.initrd.availableKernelModules = [ "ata_piix" "mptspi" "floppy" "sd_mod" "sr_mod" ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/70b9d730-9cb6-48e2-8e00-fa78c8feefdf";
+      fsType = "ext4";
+    };
+
+  swapDevices = [ ];
+
+  nix.maxJobs = lib.mkDefault 1;
+}

clusters/k1/k1-2.nix

@@ -0,0 +1,21 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [ ];
+
+  boot.initrd.availableKernelModules = [ "ata_piix" "mptspi" "floppy" "sd_mod" "sr_mod" ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/83bb471d-1db7-4c0b-b8aa-8111730a1ea9";
+      fsType = "ext4";
+    };
+
+  swapDevices = [ ];
+
+  nix.maxJobs = lib.mkDefault 1;
+}

clusters/k1/k1-3.nix

@@ -0,0 +1,21 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [ ];
+
+  boot.initrd.availableKernelModules = [ "ata_piix" "mptspi" "floppy" "sd_mod" "sr_mod" ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/67441b95-19f2-484d-b57b-3f4b2a55f3cc";
+      fsType = "ext4";
+    };
+
+  swapDevices = [ ];
+
+  nix.maxJobs = lib.mkDefault 1;
+}

clusters/k1/k1-4.nix

@@ -0,0 +1,21 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [ ];
+
+  boot.initrd.availableKernelModules = [ "ata_piix" "mptspi" "floppy" "sd_mod" "sr_mod" ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/241cdf57-a2b5-482d-a522-01725badc859";
+      fsType = "ext4";
+    };
+
+  swapDevices = [ ];
+
+  nix.maxJobs = lib.mkDefault 1;
+}

clusters/k1/registry-auth-secret.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+data:
+  .dockerconfigjson: eyJhdXRocyI6eyJodHRwczovL3JlZ2lzdHJ5Lml0cGFydG5lci5ubyI6eyJ1c2VybmFtZSI6ImpvbmFzIiwicGFzc3dvcmQiOiJTRldwLVk0bkVfdXpNZFJxeHp6SyIsImF1dGgiOiJhbTl1WVhNNlUwWlhjQzFaTkc1RlgzVjZUV1JTY1hoNmVrcz0ifX19
+kind: Secret
+metadata:
+  name: registry-auth
+type: kubernetes.io/dockerconfigjson