x4A6F has quit [Ping timeout: 250 seconds]
x4A6F has joined #nixos-kubernetes
johanot has joined #nixos-kubernetes
ixxie has joined #nixos-kubernetes
<ixxie> johanot: sorry to repeat the same questions, but I will try this week or next to try and replicate a simple version of your addon system. If I recall correctly, the basics is just making a nixos module, which calls kubectl apply -f when the systemd service begins and kubectl delete -f when it stops?
<ixxie> If it is not too much trouble maybe you could fish out one obfuscated example I could build on?
ixxie has quit [Ping timeout: 240 seconds]
ixxie has joined #nixos-kubernetes
drakonis1 has joined #nixos-kubernetes
<ixxie> johanot: I just installed dex-oidc as a NixOS system package but I guess the better way would be to run it as a Kubernetes deployment.... is that how you did it?
<johanot> yes.. We run it as a k8s deployment
<ixxie> in that case I will defer back to my previous questions ^^
<ixxie> even a very very barebones example would help enormously, because then I could protoype stuff (which is my only goal for the foreseeable future)
andi- has joined #nixos-kubernetes
<johanot> ixxie: So basically we have this yaml-file in our repo: https://gist.github.com/johanot/9b204ac781d51f53091d294c0be54472
<johanot> including secrets, which I've replaced with SECRET in the gist
<johanot> We then have a nix expression that maps over every yaml/json file in a specific directory and creates individual systemd-units for each of them.
<ixxie> johanot: any chance to see an example of that sort of Nix file? even just a dummy?
<srhb> Wow, I notice I haven't been keeping up here
<srhb> colemickens: I was at the company johanot works at now :)
<ixxie> (btw johanot/srhb - in harranguing you with questions I have been assuming that you have no time for other FOSS projects, but will be happy to be corrected and pitch you what we are doing)
<srhb> It's called DBC A/S and deals with library infrastructure and data for the Danish libraries
<srhb> I indeed have very little time for OSS currently, but I will try to improve that situation in mid-term future :)
<srhb> So many half-baked projects in ~/src :-P
<ixxie> srhb: yeah I figured as much
<ixxie> I am thinking along the lines of kubepkgs
<ixxie> if you catch my drift
<srhb> Definitely
<ixxie> we are working on a front-end for that sort of thing
<srhb> Oh?
<ixxie> the thinking is if you have a kubernixos cluster, kubepkgs, dex and a web GUI we could have a sort of Social Operating System
<srhb> SOS? :-P
<johanot> ixxie: No secrets here.. Just pretty messy code :) -> https://gist.github.com/johanot/2de1390a04e7c357bde6dc0abcaec5b8
<ixxie> i.e. just install arbitrary web apps on a community cloud
<ixxie> thanks a bunch johanot! really appreciated
<johanot> srhb: you're pretty good at name-crafting! Will SOS be "Plug'n'Pipe" compatible then? :P
<srhb> Clearly!
<srhb> btw I don't recognize that dex yaml
<srhb> Didn't I make a dex fork for you?
<ixxie> johanot: plug'n'pipe?
<srhb> Or was that something else...
<johanot> srhb: Dex is (still not) forked
<srhb> Oh.
<srhb> I forget. I think it was some of the stuff I panic-hacked together during my last days. xD
<johanot> we haven't touched that yaml nor the "addon-manager" code for a looong time. it could definitely use a bruchup :P
<srhb> Yeah, no doubt...
<srhb> The yaml doesn't look horrible though. I mean, I guess it does what it's supposed to. :D
<johanot> srhb: Sure.. But ideally I want to convert it to Nix-attrs and use toJSON :P
<srhb> Right right.
<ixxie> johanot: I don't suppose I can just reuse that addon.nix though right?
<johanot> ixxie: meeh.. there are a bunch of dependencies. Not really something I feel comfortable recommending as-is.
<ixxie> okay yeah
<ixxie> I am also in anycase not a fan of the all-manifests-in-one-bag approach
<ixxie> I was thinking to make some library for this and have manifest.nix with the source repos
<ixxie> this way a kubepkgs could still be assembled with some nixified manifests and references to dependent manifests could be specified locally
<ixxie> if that makes sense
<ixxie> johanot: still curious about the 'plug'n'pipe' thing xD
<srhb> ixxie: That was me commenting on some k8s "best practices" the other day
<srhb> Which were basically just curl gist.github.com/k8s... | sudo sh
<srhb> And I think it was actualy pipe 'n pray
<ixxie> lol
<ixxie> johanot: anyway I meant not so much as a recommendation for production, but more with regards to licensing if I reuse some code fragments
x4A6F is now known as Ox4A6F
<srhb> Supposedly DBC open sources everything... :-)
<ixxie> heh
<ixxie> anyway, thanks a bunch johanot
<ixxie> will digest this stuff
<ixxie> have a good one
ixxie has quit [Remote host closed the connection]
<johanot> sry. was off to dinner.. Don't know if you read the logs ixxie, but if you do... No licensing concerns. Just far-from-best-practise code. :)
johanot has quit [Quit: WeeChat 2.2]
drakonis1 has quit [Quit: WeeChat 2.2]