mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-18 03:30:45 +00:00
Code Issues Wiki Activity

Merge pull request #321632 from PedroRegisPOAR/kubernetes-mkCert-drops-nogroup-as-default

Browse source 
nixos/kubernetes: adds argument to mkCert defaulting to kubernetes group
This commit is contained in:
Sarah Brofeldt 2024-07-19 12:49:49 +02:00 committed by GitHub
parent a1740ea605 a5deaf9e93
commit 54fbcf1be8
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
nixos/modules/services/cluster/kubernetes/default.nix
View file

@ -61,13 +61,13 @@ let
etcdEndpoints = ["https://${cfg.masterAddress}:2379"];
mkCert = { name, CN, hosts ? [], fields ? {}, action ? "",
privateKeyOwner ? "kubernetes" }: rec {
privateKeyOwner ? "kubernetes", privateKeyGroup ? "kubernetes" }: rec {
inherit name caCert CN hosts fields action;
cert = secret name;
key = secret "${name}-key";
privateKeyOptions = {
owner = privateKeyOwner;
group = "nogroup";
group = privateKeyGroup;
mode = "0600";
path = key;
};