···

       
3
       
 
       
let

     

       
4
       
 
       
  inherit (lib)

     

       
5
       
 
       
    attrNames

     

       
6
       
-
       
    concatMapAttrs

     

       
7
       
 
       
    concatMapStrings

     

       
0
       
 
       

     

       
8
       
 
       
    forEach

     

       
9
       
 
       
    head

     

       
10
       
 
       
    listToAttrs

     

       
11
       
 
       
    mkDefault

     

       
12
       
 
       
    mkOption

     

       
13
       
 
       
    nameValuePair

     

       
14
       
-
       
    optionalAttrs

     

       
15
       
 
       
    optionalString

     

       
16
       
 
       
    range

     

       
17
       
 
       
    toLower

     
···

       
91
       
 
       
        # interfaces, use the IP address corresponding to

     

       
92
       
 
       
        # the first interface (i.e. the first network in its

     

       
93
       
 
       
        # virtualisation.vlans option).

     

       
94
       
-
       
        networking.hosts = concatMapAttrs (

     

       
95
       
-
       
          name: config:

     

       
96
       
 
       
          let

     

       
0
       
 
       

     

       
97
       
 
       
            hostnames =

     

       
98
       
 
       
              optionalString (

     

       
99
       
 
       
                config.networking.domain != null

     

       
100
       
 
       
              ) "${config.networking.hostName}.${config.networking.domain} "

     

       
101
       
 
       
              + "${config.networking.hostName}\n";

     

       
102
       
 
       
          in

     

       
103
       
-
       
          optionalAttrs (config.networking.primaryIPAddress != "") {

     

       
104
       
-
       
            "${config.networking.primaryIPAddress}" = [ hostnames ];

     

       
105
       
-
       
          }

     

       
106
       
-
       
          // optionalAttrs (config.networking.primaryIPv6Address != "") {

     

       
107
       
-
       
            "${config.networking.primaryIPv6Address}" = [ hostnames ];

     

       
108
       
-
       
          }

     

       
109
       
-
       
        ) nodes;

     

       
110
       
 
       


     

       
111
       
 
       
        virtualisation.qemu.options = qemuOptions;

     

       
112
       
 
       
        boot.initrd.services.udev.rules = concatMapStrings (x: x + "\n") udevRules;

     

···

       
3
       
 
       
let

     

       
4
       
 
       
  inherit (lib)

     

       
5
       
 
       
    attrNames

     

       
6
       
+
       
    concatMap

     

       
7
       
 
       
    concatMapStrings

     

       
8
       
+
       
    flip

     

       
9
       
 
       
    forEach

     

       
10
       
 
       
    head

     

       
11
       
 
       
    listToAttrs

     

       
12
       
 
       
    mkDefault

     

       
13
       
 
       
    mkOption

     

       
14
       
 
       
    nameValuePair

     

       
0
       
 
       

     

       
15
       
 
       
    optionalString

     

       
16
       
 
       
    range

     

       
17
       
 
       
    toLower

     
···

       
91
       
 
       
        # interfaces, use the IP address corresponding to

     

       
92
       
 
       
        # the first interface (i.e. the first network in its

     

       
93
       
 
       
        # virtualisation.vlans option).

     

       
94
       
+
       
        networking.extraHosts = flip concatMapStrings (attrNames nodes) (

     

       
95
       
+
       
          m':

     

       
96
       
 
       
          let

     

       
97
       
+
       
            config = nodes.${m'};

     

       
98
       
 
       
            hostnames =

     

       
99
       
 
       
              optionalString (

     

       
100
       
 
       
                config.networking.domain != null

     

       
101
       
 
       
              ) "${config.networking.hostName}.${config.networking.domain} "

     

       
102
       
 
       
              + "${config.networking.hostName}\n";

     

       
103
       
 
       
          in

     

       
104
       
+
       
          optionalString (

     

       
105
       
+
       
            config.networking.primaryIPAddress != ""

     

       
106
       
+
       
          ) "${config.networking.primaryIPAddress} ${hostnames}"

     

       
107
       
+
       
          + optionalString (config.networking.primaryIPv6Address != "") (

     

       
108
       
+
       
            "${config.networking.primaryIPv6Address} ${hostnames}"

     

       
109
       
+
       
          )

     

       
110
       
+
       
        );

     

       
111
       
 
       


     

       
112
       
 
       
        virtualisation.qemu.options = qemuOptions;

     

       
113
       
 
       
        boot.initrd.services.udev.rules = concatMapStrings (x: x + "\n") udevRules;

     

···

       
365
       
 
       
        keyFile = mkDefault key;

     

       
366
       
 
       
        trustedCaFile = mkDefault caCert;

     

       
367
       
 
       
      };

     

       
368
       
-
       
      networking.hosts = mkIf (config.services.etcd.enable) {

     

       
369
       
-
       
        "127.0.0.1" = [

     

       
370
       
-
       
          "etcd.${top.addons.dns.clusterDomain}"

     

       
371
       
-
       
          "etcd.local"

     

       
372
       
-
       
        ];

     

       
373
       
-
       
      };

     

       
374
       
 
       


     

       
375
       
 
       
      services.flannel = with cfg.certs.flannelClient; {

     

       
376
       
 
       
        kubeconfig = top.lib.mkKubeConfig "flannel" {

     

···

       
365
       
 
       
        keyFile = mkDefault key;

     

       
366
       
 
       
        trustedCaFile = mkDefault caCert;

     

       
367
       
 
       
      };

     

       
368
       
+
       
      networking.extraHosts = mkIf (config.services.etcd.enable) ''

     

       
369
       
+
       
        127.0.0.1 etcd.${top.addons.dns.clusterDomain} etcd.local

     

       
370
       
+
       
      '';

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
371
       
 
       


     

       
372
       
 
       
      services.flannel = with cfg.certs.flannelClient; {

     

       
373
       
 
       
        kubeconfig = top.lib.mkKubeConfig "flannel" {

     

···

       
70
       
 
       
  # Rely on GCP's firewall instead

     

       
71
       
 
       
  networking.firewall.enable = mkDefault false;

     

       
72
       
 
       


     

       
73
       
-
       
  networking.hosts = {

     

       
74
       
-
       
    "169.254.169.254" = [

     

       
75
       
-
       
      "metadata.google.internal"

     

       
76
       
-
       
      "metadata"

     

       
77
       
-
       
    ];

     

       
78
       
-
       
  };

     

       
79
       
 
       


     

       
80
       
 
       
  networking.timeServers = [ "metadata.google.internal" ];

     

       
81
       
 
       


     

···

       
70
       
 
       
  # Rely on GCP's firewall instead

     

       
71
       
 
       
  networking.firewall.enable = mkDefault false;

     

       
72
       
 
       


     

       
73
       
+
       
  # Configure default metadata hostnames

     

       
74
       
+
       
  networking.extraHosts = ''

     

       
75
       
+
       
    169.254.169.254 metadata.google.internal metadata

     

       
76
       
+
       
  '';

     

       
0
       
 
       

     

       
0
       
 
       

     

       
77
       
 
       


     

       
78
       
 
       
  networking.timeServers = [ "metadata.google.internal" ];

     

       
79
       
 
       


     

···

       
1084
       
 
       
          ) config.containers;

     

       
1085
       
 
       


     

       
1086
       
 
       
        # Generate /etc/hosts entries for the containers.

     

       
1087
       
-
       
        networking.hosts = lib.mapAttrs' (name: cfg: {

     

       
1088
       
-
       
          name = head (splitString "/" cfg.localAddress);

     

       
1089
       
-
       
          value = lib.optionals (cfg.localAddress != null) [ "${name}.containers" ];

     

       
1090
       
-
       
        }) config.containers;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
1091
       
 
       


     

       
1092
       
 
       
        networking.dhcpcd.denyInterfaces = [

     

       
1093
       
 
       
          "ve-*"

     

···

       
1084
       
 
       
          ) config.containers;

     

       
1085
       
 
       


     

       
1086
       
 
       
        # Generate /etc/hosts entries for the containers.

     

       
1087
       
+
       
        networking.extraHosts = concatStrings (

     

       
1088
       
+
       
          mapAttrsToList (

     

       
1089
       
+
       
            name: cfg:

     

       
1090
       
+
       
            optionalString (cfg.localAddress != null) ''

     

       
1091
       
+
       
              ${head (splitString "/" cfg.localAddress)} ${name}.containers

     

       
1092
       
+
       
            ''

     

       
1093
       
+
       
          ) config.containers

     

       
1094
       
+
       
        );

     

       
1095
       
 
       


     

       
1096
       
 
       
        networking.dhcpcd.denyInterfaces = [

     

       
1097
       
 
       
          "ve-*"