implement k8s

flake.nix

@@ -39,6 +39,7 @@
           ./security/security.nix
           ./disko/uefi-nosecure.nix
           ./users/users.nix
+          ./kubernetes/kubernetes.nix
           {
             config.boot = {
               loader = {

kubernetes/kubernetes.nix

@@ -0,0 +1,30 @@
+{ config, pkgs, ... }:
+let
+  kubeMasterIP = "10.105.6.198";
+  kubeMasterHostname = "api.kube";
+  kubeMasterAPIServerPort = 6443;
+in
+{
+  networking.extraHosts = "${kubeMasterIP} ${kubeMasterHostname}";
+
+  environment.systemPackages = with pkgs; [
+    kompose
+    kubectl
+    kubernetes
+  ];
+
+  services.kubernetes = {
+    roles = ["master" "node"];
+    masterAddress = kubeMasterHostname;
+    apiserverAddress = "https://${kubeMasterHostname}:${toString kubeMasterAPIServerPort}";
+    easyCerts = true;
+    apiserver = {
+      securePort = kubeMasterAPIServerPort;
+      advertiseAddress = kubeMasterIP;
+    };
+
+    addons.dns.enable = true;
+
+    kubelet.extraOpts = "--fail-swap-on=false";
+  };
+}