From 6103dfe0f11b9c9cc2760c62d4425d692e8c7358 Mon Sep 17 00:00:00 2001
From: Kat Inskip <kat@inskip.me>
Date: Sun, 21 Jan 2024 12:30:53 -0800
Subject: [PATCH] feat(kuwubernetes): provide dex secrets as prep for dex
 install

---
 k8s/system/coredns/kustomization.yaml |  2 +-
 nixos/k8s.nix                         |  5 +++++
 systems/kuwubernetes/nixos.nix        | 29 +++++++++++++++++++++++----
 systems/kuwubernetes/secrets.yaml     | 11 ++++++++--
 4 files changed, 40 insertions(+), 7 deletions(-)

diff --git a/k8s/system/coredns/kustomization.yaml b/k8s/system/coredns/kustomization.yaml
index 1f43d0d7..0b082ba2 100644
--- a/k8s/system/coredns/kustomization.yaml
+++ b/k8s/system/coredns/kustomization.yaml
@@ -1,4 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- application.yaml
+- application.yaml
\ No newline at end of file
diff --git a/nixos/k8s.nix b/nixos/k8s.nix
index ce20994c..9e11ff80 100644
--- a/nixos/k8s.nix
+++ b/nixos/k8s.nix
@@ -41,6 +41,11 @@ in {
       advertiseAddress = kubeMasterIP;
       extraOpts = escapeShellArgs [
         "--service-node-port-range=1-65535"
+        "--oidc-issuer-url=https://dex.gensokyo.zone:32000"
+        "--oidc-client-id=kuwubernetes"
+        "--oidc-ca-file=/etc/dex-ssl/ca.pem"
+        "--oidc-username-claim=email"
+        "--oidc-groups-claim=groups"
       ];
       allowPrivileged = true;
     };
diff --git a/systems/kuwubernetes/nixos.nix b/systems/kuwubernetes/nixos.nix
index c445fbe8..caf20dbb 100644
--- a/systems/kuwubernetes/nixos.nix
+++ b/systems/kuwubernetes/nixos.nix
@@ -4,7 +4,18 @@
   lib,
   modulesPath,
   ...
-}: {
+}: let
+  inherit (lib.attrsets) genAttrs nameValuePair;
+  inherit (builtins) listToAttrs;
+  dexFiles = [
+    "ca-key.pem"
+    "ca.pem"
+    "ca.srl"
+    "csr.pem"
+    "key.pem"
+    "req.cnf"
+  ];
+in {
   imports = with meta; [
     (modulesPath + "/profiles/qemu-guest.nix")
     nixos.sops
@@ -35,9 +46,19 @@
 
   networking.interfaces.ens18.useDHCP = true;
 
-  sops.secrets.cloudflare_kubernetes_tunnel = {
-    owner = config.services.cloudflared.user;
-  };
+  sops.secrets = let
+    dexCommon = {
+      owner = "kubernetes";
+    };
+  in
+    {
+      cloudflare_kubernetes_tunnel = {
+        owner = config.services.cloudflared.user;
+      };
+    }
+    // (genAttrs (map (name: "dex-${name}") dexFiles) (_: dexCommon));
+
+  environment.etc = listToAttrs (map (name: nameValuePair "dex-ssl/${name}" {source = config.sops.secrets."dex-${name}".path;}) dexFiles);
 
   services.cloudflared = let
     tunnelId = "3dde2376-1dd1-4282-b5a4-aba272594976";
diff --git a/systems/kuwubernetes/secrets.yaml b/systems/kuwubernetes/secrets.yaml
index a171cab0..e4d2ffa9 100644
--- a/systems/kuwubernetes/secrets.yaml
+++ b/systems/kuwubernetes/secrets.yaml
@@ -1,4 +1,11 @@
 cloudflare_kubernetes_tunnel: ENC[AES256_GCM,data:NS5cmvbRsgGs8hrqkEtn4HdTZTfk2k/vG3aNeyCQz6egpEFuJsPcMphnawSsudQLx6mSNYn0Gnw0BRFH/7fQY8gY1A9F5s9TqeOUifOEy3mcLBn/5MuhSdy+An/OGCyuEBqX8vxauQtRHVydvUlV7Vlj6zFnvZRxWnSAUIYkPgyHbVjW3jnscZjqwHaO6bnjf9gHIe1XO3gVYQGEdkToTFQ1zY/2JCMhJHPXkGyCPARS0o5eizg=,iv:meZyBFDXk7LJpj0vGRX69uODlPXPEIkDwGC0GTVM2yk=,tag:UC22HvOGdCp7jZr66VpB2A==,type:str]
+dex-ca-key.pem: ENC[AES256_GCM,data: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,iv:LXQovkWm3XLYacm7f8UNLJnEoksosqreM6PpZ6s+e3M=,tag:8fVVLL9QupbD0JGXDByrCw==,type:str]
+dex-ca.pem: ENC[AES256_GCM,data:iTSM8jv5pJ8SMCjz93WFVVM7RN2qmM+EBlC+H7CBjdYuEvIC2BjQHlX4kdokWa/S53QM9bhRJGN7xxQVq9mhOYuGhPNN+MLJDpUfy+Qx8V7Dj2KQbGHEXDXSesXprMjVlFzDX1GsmuXK3IEJt8Ixs6gwpHvDCUwluaqizu4hlCVwZQuTazJh49OFpuii03NMDi45PkKgAx41ckkzWbDROkyWSD0tZjW3oWaKB4/Mxv2+Wk4cW/BCasHtg+efCBUgpK5s3RFfqC1PaFglz/yOhH1kqpcNGd+akdz/anRlc9xm8HHGrK9Md6nK8dt2iq2d+KPv5BkvlNMES++efnOdStGIDMnkbxWKl50vmPyWFqFVP2bSKUjqtjtaHgqDHaKcZIkUUXjEIGZ8G9A06SObL7rnx2MZg1tZdbqukVwxQAQhO8fv/hrLufxIInjCbEM750zI4tDvupXtTKjsX8UQasRL4k8/BcWli9/t2I7b2ta2t6Sx770AObGN8GFX9LPnostxi8G2OPNPg5MXs4mtStdQJ0TsogkOsPXsexJPrb0Y9R8zNxSTa/dLeFrXjPhqJQg356tUrF4TOBxQWotcdiuJIHi2nDxrZ60dXNC0+Zyz/jFJMxnSQf5pCktEgA9Z/pUMx8aAwM9Wd27J23d1CHuWHcA74+ZV1T2l5zcXEFWqEaSz7P4BR+W8MaaYkeyKfJCNNaw1XxbaCy2Xbn/T8J9PsS6hot5UgVyR9S9tAqnGY3/OLJ86E3tNR64FmkptFIJ4yftxBAUGHiXsP0qxnoeZmcqR9uXSTLt28L5FqjWin/wEJfNaMJVJ/QARskahD8Lg1EWCy7BUQVkTjjDay+D6k9lGW1xnTMPWdgC9iZymJbOCBxQHBPK2Yz8zMd8V0ZOWXWA23j7xcqaABl44H5Y1g+9czOdFF/wSjos1dwYOZlprAT2RpiLo/gM2Vxc6NbuV10fITem0Uo+974+rnWoZ/hy/jKQCK+OfzYU2IjNOtbgTvxigEyC2NjPedljqIS1I1GgtTPnxgFskS40ETHldJLd8/1VCC0q5iqo9+uYEK+tg/HVaLmC6wy/MBzflkdRqcHotNiy6LZzU9hogooq/WbYAi/eJhuhXmZ/o7lyUKdFwgTjpvyHaP0X8RdwsOkV/VrU7hg6VdiQD6rRN+jke/N4rFpH5NHbpNO5pRj3sTsxt7tpoKZQ8isEVQwECur+RJhG5PyK0UuD4V+3ASwNgRrIZdcAbUVQh4umy1nKkoWOl9OczEiyFikwtWXFkqXjFAVAPcP6wZzj5wl9iGtndkPceCbyJtGKkz7Lvfljdxlr876vsMVlfHygSDiovWHhyfSLK9shcjLtxYwNA5lNbry8MhqhWQlsZW7lT9usJLPD8jUPzT/P01eX2wbkUsM3MoEmVChXXLYRbNaT0xcQdAPVxfJWLTvNOVGk1jbWuLvGJbMqjDRkUsthdHO1pl2My,iv:lMFEvN3fLFnQgtnCzAF413kHdZoeRbffxDHhmY3pdWQ=,tag:L/aY2rXhL0l3twoHUI17kg==,type:str]
+dex-ca.srl: ENC[AES256_GCM,data:iRB6aEgJ8m1svY+QPEudxx0rCqpmvauRmukQ6Ndf1RMgRY9/KBDNb2Q=,iv:+qt3utBJveJE2Zqc3NT86ivmqumskofdVoLOr7vQO/8=,tag:T4Sr6JAT4iaqw7nTNZ6Hfw==,type:str]
+dex-cert.pem: ENC[AES256_GCM,data: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,iv:h25vf0mzSqfC5REA5LUTiNJXS49T6dxluDkKK+zkN3c=,tag:tgg+/5MntMtp0+PHbJWJhQ==,type:str]
+dex-csr.pem: ENC[AES256_GCM,data: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,iv:KV8Lcmg0z25NjTHQMNcFH6qNPndF60ewgI5ZMjrc53I=,tag:CNMQRIss5TEehcsMuRO4Ag==,type:str]
+dex-key.pem: ENC[AES256_GCM,data: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,iv:lLhGAhSMSwLQlZKYCiGtsp4ZfvnOH1VEggvolFKQopw=,tag:9sdj+M/W1/jJK8X/RPfXYA==,type:str]
+dex-req.cnf: ENC[AES256_GCM,data:lHtTkNLYyiqNTSq5CLX/1xj5S5FqKnZizpYNipuGzfE8XWmZm/GcL2Lp3pECyLvy4u45H7eUBzbuJKlmBrzvMET7iQkfCHkJHZdNfqwvcwkBRJcWOOnTT97FxQAyMD0FmgRf30NJU9My6G+n0DdlcQomwpCrjs9tLjr7lcHedvgoW6/asYzQoUNUnFmQHd0ZyEcEfwD+uk5IVtd+3CqZmDa5ALOeLxW0YvOi2IePRg5JIwQJmv3CPBP4e8wzzFcBMjFsICTJktUptZ8TdV1V/bmTpqt4iBWIVW9uuVUCJSAYWUpD0pvoEtr4LF2LsSvM7xsr/7wuVW0siCU48WSZArvw4zYCbymOfwoqOg==,iv:+1hgdHTiwL0CswZCXlM1llOllmkpWFB5V7sP/4en1Cw=,tag:KN47L+cIJK0OO4yq3gX1Ig==,type:str]
 sops:
     shamir_threshold: 1
     kms: []
@@ -15,8 +22,8 @@ sops:
             RTRBYXk4SnlJZmlCdi8zdWYwaXovTm8K4zVxkTFOE17W3AaWcM2rptIT553AWMln
             tsvfek5fraxh1RGjE06/Lsl1xMH9HtA3tyxGgbNm19P4TuQMJQRl7Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-01-18T18:05:07Z"
-    mac: ENC[AES256_GCM,data:1gKnsj3JWwoE2N19VDCsCr7tYwpuG1T6kMGTcTzIKhozPaicEhcYfH4FwcDaMEF93B9zYnPG7JIxINI0HcpAnSTgZVUEg6X76J97vbrEmCTxb34KnTv+Ngd9Ncs09yugXsHA8EE1u73MsqMy7bEcOvcnI1qZutsllT0+5nbIIsI=,iv:5jPHDi2lleQxDLS2A4rL+FWP1ijplAtxGV/YT/jFnCs=,tag:sXKAIfsEu0MM2X54psexjQ==,type:str]
+    lastmodified: "2024-01-21T20:03:17Z"
+    mac: ENC[AES256_GCM,data:xjKoZTF1FiRk4FUokEElL5bxH2bE/y0aghvUzAG/SRw+oWqRjq33KXy3ENH68i2NIAL2kHAhz/P+3bYMlncVRPVG0dC4g5v6whLBHxk4V8i+uxpOXVTLkwxZoee0iI4+YBMt1/voVnfWoCwPa8Zm4LRl1LtfJp7ebg3DY9h+5Jw=,iv:eKP1X1clZ5C9jxNQ8XlLVaNFispbu8ZAl534L5RQRx4=,tag:z/qqX3UY4iDCS9TXI1XSJg==,type:str]
     pgp:
         - created_at: "2024-01-18T17:50:14Z"
           enc: |-