Skip to content

Instantly share code, notes, and snippets.

@Lillecarl
Created August 29, 2025 11:45
Show Gist options
  • Save Lillecarl/a3f17a26e2a95db0c6d2e87431707a44 to your computer and use it in GitHub Desktop.
Save Lillecarl/a3f17a26e2a95db0c6d2e87431707a44 to your computer and use it in GitHub Desktop.
apiVersion: v1
kind: Pod
metadata:
annotations:
cknix-expr: hello
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"v1","kind":"Pod","metadata":{"annotations":{"cknix-expr":"hello","kubenix/k8s-version":"1.33","kubenix/project-name":"kubenix"},"name":"testpod","namespace":"default"},"spec":{"containers":[{"command":["/nix/var/result/bin/sleep","infinity"],"env":[{"name":"PATH","value":"/nix/var/result/bin"}],"image":"dramforever/scratch:latest","name":"this","volumeMounts":[{"mountPath":"/etc/nix","name":"nix-config","readOnly":true},{"mountPath":"/nix","name":"cknix-volume","readOnly":false}]}],"hostNetwork":true,"volumes":[{"configMap":{"name":"nix-config"},"name":"nix-config"},{"csi":{"driver":"cknix.csi.store","volumeAttributes":{"expr":"let\n pkgs = (import (builtins.fetchTree {\n type = \"github\";\n repo = \"nixpkgs\";\n owner = \"NixOS\";\n ref = \"nixos-unstable\";\n }) {});\nin\n pkgs.buildEnv {\n name = \"testEnv\";\n paths = [\n pkgs.uutils-coreutils-noprefix\n # pkgs.util-linux\n # pkgs.lsd\n # pkgs.fd\n # pkgs.ripgrep\n # pkgs.fish\n # pkgs.lix\n pkgs.lixStatic\n ];\n }\n"}},"name":"cknix-volume"}]}}
kubenix/k8s-version: "1.33"
kubenix/project-name: kubenix
creationTimestamp: "2025-08-29T11:40:57Z"
generation: 1
name: testpod
namespace: default
resourceVersion: "468057"
uid: adbea76e-7b56-42ae-a09a-fbbe975c2d88
spec:
containers:
- command:
- /nix/var/result/bin/sleep
- infinity
env:
- name: PATH
value: /nix/var/result/bin
image: dramforever/scratch:latest
imagePullPolicy: Always
name: this
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /etc/nix
name: nix-config
readOnly: true
- mountPath: /nix
name: cknix-volume
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: kube-api-access-455jj
readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
hostNetwork: true
nodeName: shitbox
preemptionPolicy: PreemptLowerPriority
priority: 0
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
serviceAccount: default
serviceAccountName: default
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoExecute
key: node.kubernetes.io/not-ready
operator: Exists
tolerationSeconds: 300
- effect: NoExecute
key: node.kubernetes.io/unreachable
operator: Exists
tolerationSeconds: 300
volumes:
- configMap:
defaultMode: 420
name: nix-config
name: nix-config
- csi:
driver: cknix.csi.store
volumeAttributes:
expr: |
let
pkgs = (import (builtins.fetchTree {
type = "github";
repo = "nixpkgs";
owner = "NixOS";
ref = "nixos-unstable";
}) {});
in
pkgs.buildEnv {
name = "testEnv";
paths = [
pkgs.uutils-coreutils-noprefix
# pkgs.util-linux
# pkgs.lsd
# pkgs.fd
# pkgs.ripgrep
# pkgs.fish
# pkgs.lix
pkgs.lixStatic
];
}
name: cknix-volume
- name: kube-api-access-455jj
projected:
defaultMode: 420
sources:
- serviceAccountToken:
expirationSeconds: 3607
path: token
- configMap:
items:
- key: ca.crt
path: ca.crt
name: kube-root-ca.crt
- downwardAPI:
items:
- fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
path: namespace
status:
conditions:
- lastProbeTime: null
lastTransitionTime: "2025-08-29T11:41:05Z"
status: "True"
type: PodReadyToStartContainers
- lastProbeTime: null
lastTransitionTime: "2025-08-29T11:40:57Z"
status: "True"
type: Initialized
- lastProbeTime: null
lastTransitionTime: "2025-08-29T11:41:05Z"
status: "True"
type: Ready
- lastProbeTime: null
lastTransitionTime: "2025-08-29T11:41:05Z"
status: "True"
type: ContainersReady
- lastProbeTime: null
lastTransitionTime: "2025-08-29T11:40:57Z"
status: "True"
type: PodScheduled
containerStatuses:
- containerID: containerd://1e7705400d4318b066998b7d6451dbdabe749756f089f265a875998f1f37946b
image: docker.io/dramforever/scratch:latest
imageID: docker.io/dramforever/scratch@sha256:adf10351862ad5351ac2e714e04a0afb020b9df658ac99a07cbf49c0e18f8e43
lastState: {}
name: this
ready: true
resources: {}
restartCount: 0
started: true
state:
running:
startedAt: "2025-08-29T11:41:05Z"
user:
linux:
gid: 0
supplementalGroups:
- 0
uid: 0
volumeMounts:
- mountPath: /etc/nix
name: nix-config
readOnly: true
recursiveReadOnly: Disabled
- mountPath: /nix
name: cknix-volume
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: kube-api-access-455jj
readOnly: true
recursiveReadOnly: Disabled
hostIP: 10.13.39.1
hostIPs:
- ip: 10.13.39.1
- ip: 2001:470:28:f5::2
phase: Running
podIP: 10.13.39.1
podIPs:
- ip: 10.13.39.1
- ip: 2001:470:28:f5::2
qosClass: BestEffort
startTime: "2025-08-29T11:40:57Z"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment