Migration to new setup

kube0/deployment.nix

@@ -3,7 +3,7 @@ let
   certs = pkgs.callPackage ./certs.nix {};
   pki = pkgs.callPackage ../lib/pki.nix {};
   cluster = callPackage ../lib/k8s.nix {
-    masterNode = "10.253.18.100";
+    masterAddress = "10.253.18.100";
     etcdNodes = [ "etcd0" "etcd1" "etcd2" ];
     clusterHosts = ''
           10.253.18.100 k0-0 etcd0 kubernetes
@@ -15,7 +15,7 @@ let
           10.253.18.106 fs0-0 fs0-0.local
           10.1.2.164    fs0-1 fs0-1.local
           10.253.18.100 fs0-2 fs0-2.local
-          10.253.18.100 itp-registry registry.itpartner.no minio.itpartner.no
+          10.253.18.100 itp-registry
           10.253.18.100 nuget.itpartner.no
           10.253.18.109 k1-0
     '';
@@ -35,7 +35,10 @@ let
   };
 in
 {
-  k0-0 = { ... }: {
+  k0-0 = { ... }:
+    let
+      apiserver = pki.toSet certs.apiserver;
+    in {
     require = [ (cluster.apiserver "10.253.18.100" "k0-0" "etcd0") ];
     boot.kernelModules = [
       "dm_snapshot"
@@ -51,11 +54,20 @@ in
       device = "fs0-0:docker-registry";
       fsType = "nfs4";
     };
+    services.dockerRegistry = {
+      enable = true;
+      listenAddress = "0.0.0.0";
+      enableDelete = true;
+      enableGarbageCollect = true;
+      extraConfig = {
+        REGISTRY_HTTP_TLS_CERTIFICATE = "${apiserver.cert}";
+        REGISTRY_HTTP_TLS_KEY = "${apiserver.key}";
+      };
+    };
     environment.systemPackages = [ pkgs.lvm2 ];
     networking.extraHosts = ''
       10.253.18.100 itp-registry itp-registry.local
       10.253.18.100 helm-registry helm-registry.local
-      10.253.18.100 gitlab.itpartner.no registry.itpartner.no minio.itpartner.no
       10.253.18.100 nuget.local
       10.253.18.100 dashboard.k0.local
       10.253.18.100 gitlab.k0.local