Integrate gcp provider (capg) with airshipctl
* add documentation for gcp provider (capg)
* add manifests for gcp provider (capg)
* add cluster templates for control plane and workers
* add site definition to use gcp provider (capg) with
control plane and workers
Zuul Gate Scripts: https://review.opendev.org/#/c/749165/
Change-Id: I3ea07fcafe49fc2698d9d961222550c45b40cd66
This commit is contained in:
Rishabh Kumar Jain
parent
cb8be36fdb
commit
219b29f1a6
@ -34,6 +34,7 @@ Welcome to airshipctl's Documentation!
|
||||
Commands <cli/airshipctl>
|
||||
providers/cluster_api_docker
|
||||
providers/cluster_api_openstack
|
||||
providers/cluster_api_gcp
|
||||
|
||||
.. toctree::
|
||||
:caption: Airship Project Documentation
|
||||
|
||||
786
docs/source/providers/cluster_api_gcp.md
Executable file
786
docs/source/providers/cluster_api_gcp.md
Executable file
@ -0,0 +1,786 @@
|
||||
# Airshipctl and Cluster API GCP Integration
|
||||
|
||||
## Overview
|
||||
Airshipctl and cluster api gcp integration facilitates usage of `airshipctl` to
|
||||
create cluster api management and workload clusters using `gcp as infrastructure
|
||||
provider`.
|
||||
|
||||
|
||||
|
||||
## Workflow
|
||||
A simple workflow that can be tested, involves the following
|
||||
operations:
|
||||
|
||||
**Initialize the management cluster with cluster api and gcp provider
|
||||
components**
|
||||
|
||||
> airshipctl phase run clusterctl-init-ephemeral
|
||||
|
||||
**Create a workload cluster, with control plane and worker nodes**
|
||||
|
||||
> airshipctl phase run controlplane-target
|
||||
|
||||
> airshipctl phase run workers-target
|
||||
|
||||
## GCP Prerequisites
|
||||
|
||||
### Create Service Account
|
||||
To create and manager clusters, this infrastructure providers uses a service
|
||||
account to authenticate with GCP's APIs. From your cloud console, follow [these
|
||||
instructions](https://cloud.google.com/iam/docs/creating-managing-service-accounts#creating)
|
||||
to create a new service account with Editor permissions. Afterwards, generate a
|
||||
JSON Key and store it somewhere safe. Use cloud shell to install ansible,
|
||||
packer, and build the CAPI compliant vm image.
|
||||
|
||||
### Build Cluster API Compliant VM Image
|
||||
|
||||
#### Install Ansible
|
||||
Start by launching cloud shell.
|
||||
|
||||
$ export GCP_PROJECT_ID=<project-id>
|
||||
|
||||
$ export GOOGLE_APPLICATION_CREDENTIALS=</path/to/serviceaccount-key.json>
|
||||
|
||||
$ sudo apt-get update
|
||||
|
||||
$ sudo apt-get install ansible -y
|
||||
|
||||
#### Install Packer
|
||||
|
||||
$ mkdir packer
|
||||
|
||||
$ cd packer
|
||||
|
||||
$ wget https://releases.hashicorp.com/packer/1.6.0/packer_1.6.0_linux_amd64.zip
|
||||
|
||||
$ unzip packer_1.6.0_linux_amd64.zip
|
||||
|
||||
$ sudo mv packer /usr/local/bin/
|
||||
|
||||
#### Build GCP Compliant CAPI-Ubuntu Image
|
||||
|
||||
$ git clone https://sigs.k8s.io/image-builder.git
|
||||
|
||||
$ cd image-builder/images/capi/
|
||||
|
||||
$ make build-gce-default
|
||||
|
||||
$ gcloud compute images list --project ${GCP_PROJECT_ID} --no-standard-images
|
||||
|
||||
```
|
||||
NAME PROJECT FAMILY DEPRECATED STATUS
|
||||
cluster-api-ubuntu-1804-v1-16-14-1599066516 virtual-anchor-281401 capi-ubuntu-1804-k8s-v1-16 READY
|
||||
```
|
||||
|
||||
### Create Cloud NAT Router
|
||||
|
||||
Kubernetes nodes, to communicate with the control plane, pull container images
|
||||
from registried (e.g. gcr.io or dockerhub) need to have NAT access or a public
|
||||
ip. By default, the provider creates Machines without a public IP.
|
||||
|
||||
To make sure your cluster can communicate with the outside world, and the load
|
||||
balancer, you can create a Cloud NAT in the region you'd like your Kubernetes
|
||||
cluster to live in by following [these
|
||||
instructions](https://cloud.google.com/nat/docs/using-nat#specify_ip_addresses_for_nat).
|
||||
|
||||
For reference, use the below images. You can create 2 cloud NAT routers for
|
||||
region us-west1 and us-east1
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Other Common Pre-requisites
|
||||
These prerequistes are required on the VM that will be used to create workload
|
||||
cluster on gcp
|
||||
|
||||
* Install [Docker](https://www.docker.com/)
|
||||
* Install [Kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/)
|
||||
* Install [Kind](https://kind.sigs.k8s.io/)
|
||||
* Install
|
||||
[Kustomize](https://kubernetes-sigs.github.io/kustomize/installation/binaries/)
|
||||
* Install [Airshipctl](https://docs.airshipit.org/airshipctl/developers.html)
|
||||
|
||||
Also, check [Software Version Information](#Software-Version-Information),
|
||||
[Special Instructions](#Special-Instructions) and [Virtual Machine
|
||||
Specification](#Virtual-Machine-Specification)
|
||||
|
||||
## Getting Started
|
||||
|
||||
Kind will be used to setup a kubernetes cluster, that will be later transformed
|
||||
into a management cluster using airshipctl. The kind kubernetes cluster will be
|
||||
initialized with cluster API and Cluster API gcp provider components.
|
||||
|
||||
$ export KIND_EXPERIMENTAL_DOCKER_NETWORK=bridge
|
||||
|
||||
$ kind create cluster --name capi-gcp
|
||||
```
|
||||
Creating cluster "capi-gcp" ...
|
||||
WARNING: Overriding docker network due to KIND_EXPERIMENTAL_DOCKER_NETWORK
|
||||
WARNING: Here be dragons! This is not supported currently.
|
||||
✓ Ensuring node image (kindest/node:v1.18.2) 🖼
|
||||
✓ Preparing nodes 📦
|
||||
✓ Writing configuration 📜
|
||||
✓ Starting control-plane 🕹️
|
||||
✓ Installing CNI 🔌
|
||||
✓ Installing StorageClass 💾
|
||||
Set kubectl context to "kind-capi-gcp"
|
||||
You can now use your cluster with:
|
||||
|
||||
kubectl cluster-info --context kind-capi-gcp
|
||||
```
|
||||
|
||||
$ kubectl get pods -A
|
||||
|
||||
```
|
||||
NAMESPACE NAME READY STATUS RESTARTS AGE
|
||||
kube-system coredns-66bff467f8-kmg7c 1/1 Running 0 82s
|
||||
kube-system coredns-66bff467f8-lg8qc 1/1 Running 0 82s
|
||||
kube-system etcd-capi-gcp-control-plane 1/1 Running 0 91s
|
||||
kube-system kindnet-dzp8v 1/1 Running 0 82s
|
||||
kube-system kube-apiserver-capi-gcp-control-plane 1/1 Running 0 91s
|
||||
kube-system kube-controller-manager-capi-gcp-control-plane 1/1 Running 0 90s
|
||||
kube-system kube-proxy-zvdh8 1/1 Running 0 82s
|
||||
kube-system kube-scheduler-capi-gcp-control-plane 1/1 Running 0 83s
|
||||
local-path-storage local-path-provisioner-bd4bb6b75-6drnt 1/1 Running 0 82s
|
||||
```
|
||||
|
||||
## Create airshipctl configuration files
|
||||
|
||||
$ mkdir ~/.airship
|
||||
|
||||
$ airshipctl config init
|
||||
|
||||
Run the below command to configure gcp manifest, and add it to airship config
|
||||
|
||||
```
|
||||
$ airshipctl config set-manifest gcp_manifest --repo primary \
|
||||
--url https://opendev.org/airship/airshipctl --branch master \
|
||||
--primary --sub-path manifests/site/gcp-test-site --target-path /tmp/airship
|
||||
```
|
||||
|
||||
$ airshipctl config set-context kind-capi-gcp --manifest gcp_manifest
|
||||
|
||||
```
|
||||
Context "kind-capi-gcp" modified.
|
||||
```
|
||||
$ cp ~/.kube/config ~/.airship/kubeconfig
|
||||
|
||||
$ airshipctl config get-context
|
||||
|
||||
```
|
||||
Context: kind-capi-gcp
|
||||
contextKubeconf: kind-capi-gcp_target
|
||||
manifest: gcp_manifest
|
||||
|
||||
LocationOfOrigin: /home/rishabh/.airship/kubeconfig
|
||||
cluster: kind-capi-gcp_target
|
||||
user: kind-capi-gcp
|
||||
```
|
||||
$ airshipctl config use-context kind-capi-gcp
|
||||
|
||||
```
|
||||
Manifest "gcp_manifest" created.
|
||||
```
|
||||
|
||||
$ airshipctl document pull --debug
|
||||
|
||||
```
|
||||
[airshipctl] 2020/08/12 14:07:13 Reading current context manifest information from /home/rishabh/.airship/config
|
||||
[airshipctl] 2020/08/12 14:07:13 Downloading primary repository airshipctl from https://review.opendev.org/airship/airshipctl into /tmp/airship
|
||||
[airshipctl] 2020/08/12 14:07:13 Attempting to download the repository airshipctl
|
||||
[airshipctl] 2020/08/12 14:07:13 Attempting to clone the repository airshipctl from https://review.opendev.org/airship/airshipctl
|
||||
[airshipctl] 2020/08/12 14:07:23 Attempting to checkout the repository airshipctl from branch refs/heads/master
|
||||
```
|
||||
$ airshipctl config set-manifest gcp_manifest --target-path /tmp/airship/airshipctl
|
||||
|
||||
## Configure gcp site variables
|
||||
|
||||
`configure project_id`
|
||||
|
||||
$ cat /tmp/airship/airshipctl/manifests/site/gcp-test-site/target/controlplane/project_name.json
|
||||
|
||||
```
|
||||
[
|
||||
{ "op": "replace","path": "/spec/project","value": "<project_id>"}
|
||||
]
|
||||
```
|
||||
|
||||
Include gcp variables in clusterctl.yaml
|
||||
|
||||
The original values for the below variables are as follows:
|
||||
```
|
||||
GCP_CONTROL_PLANE_MACHINE_TYPE="n1-standard-4"
|
||||
GCP_NODE_MACHINE_TYPE="n1-standard-4"
|
||||
GCP_REGION="us-west1"
|
||||
GCP_NETWORK_NAME="default"
|
||||
|
||||
GCP_PROJECT="<your_project_id>"
|
||||
GCP_CREDENTIALS="$( cat ~/</path/to/serviceaccount-key.json>)"
|
||||
```
|
||||
|
||||
Edit `airshipctl/manifests/site/gcp-test-site/shared/clusterctl/clusterctl.yaml`
|
||||
to include gcp variables and their values in base64 encoded format. Use
|
||||
https://www.base64decode.org/ if required.
|
||||
|
||||
To get the GCP_CREDENTIALS in base64 format, use the below command.
|
||||
|
||||
$ export GCP_B64ENCODED_CREDENTIALS=$( cat ~/</path/to/serviceaccount-key.json> | base64 | tr -d '\n' )
|
||||
|
||||
$ echo $GCP_B64ENCODED_CREDENTIALS
|
||||
|
||||
The below shown `clusterctl.yaml`, has encoded the values for all variables except
|
||||
GCP_PROJECT and GCP_CREDENTIALS. You can use the base64 encoded values for
|
||||
GCP_PROJECT and GCP_CREDENTIALS based on your project.
|
||||
|
||||
The other remaining variables in the `clusterctl.yaml` are base64 encoded.
|
||||
Their original values is as follows:
|
||||
|
||||
```
|
||||
GCP_CONTROL_PLANE_MACHINE_TYPE="n1-standard-4"
|
||||
GCP_NODE_MACHINE_TYPE="n1-standard-4"
|
||||
GCP_REGION="us-west1"
|
||||
GCP_NETWORK_NAME="default"
|
||||
```
|
||||
|
||||
$ cat /tmp/airship/airshipctl/manifests/site/gcp-test-site/shared/clusterctl/clusterctl.yaml
|
||||
|
||||
```
|
||||
apiVersion: airshipit.org/v1alpha1
|
||||
kind: Clusterctl
|
||||
metadata:
|
||||
labels:
|
||||
airshipit.org/deploy-k8s: "false"
|
||||
name: clusterctl-v1
|
||||
init-options:
|
||||
core-provider: "cluster-api:v0.3.3"
|
||||
bootstrap-providers:
|
||||
- "kubeadm:v0.3.3"
|
||||
infrastructure-providers:
|
||||
- "gcp:v0.3.0"
|
||||
control-plane-providers:
|
||||
- "kubeadm:v0.3.3"
|
||||
providers:
|
||||
- name: "gcp"
|
||||
type: "InfrastructureProvider"
|
||||
variable-substitution: true
|
||||
versions:
|
||||
v0.3.0: manifests/function/capg/v0.3.0
|
||||
- name: "kubeadm"
|
||||
type: "BootstrapProvider"
|
||||
versions:
|
||||
v0.3.3: manifests/function/cabpk/v0.3.3
|
||||
- name: "cluster-api"
|
||||
type: "CoreProvider"
|
||||
versions:
|
||||
v0.3.3: manifests/function/capi/v0.3.3
|
||||
- name: "kubeadm"
|
||||
type: "ControlPlaneProvider"
|
||||
versions:
|
||||
v0.3.3: manifests/function/cacpk/v0.3.3
|
||||
additional-vars:
|
||||
GCP_CONTROL_PLANE_MACHINE_TYPE: "bjEtc3RhbmRhcmQtNA=="
|
||||
GCP_NODE_MACHINE_TYPE: "bjEtc3RhbmRhcmQtNA=="
|
||||
GCP_PROJECT: "<B64ENCODED_GCP_PROJECT_ID>"
|
||||
GCP_REGION: "dXMtd2VzdDE="
|
||||
GCP_NETWORK_NAME: "ZGVmYXVsdA=="
|
||||
GCP_B64ENCODED_CREDENTIALS: "<GCP_B64ENCODED_CREDENTIALS>"
|
||||
```
|
||||
|
||||
## Initialize Management Cluster
|
||||
|
||||
$ airshipctl phase run clusterctl-init-ephemeral
|
||||
|
||||
```
|
||||
[airshipctl] 2020/09/02 11:14:15 Verifying that variable GCP_REGION is allowed to be appended
|
||||
[airshipctl] 2020/09/02 11:14:15 Verifying that variable GCP_B64ENCODED_CREDENTIALS is allowed to be appended
|
||||
[airshipctl] 2020/09/02 11:14:15 Verifying that variable GCP_CONTROL_PLANE_MACHINE_TYPE is allowed to be appended
|
||||
[airshipctl] 2020/09/02 11:14:15 Verifying that variable GCP_NETWORK_NAME is allowed to be appended
|
||||
[airshipctl] 2020/09/02 11:14:15 Verifying that variable GCP_NODE_MACHINE_TYPE is allowed to be appended
|
||||
.
|
||||
.
|
||||
.
|
||||
Patching Secret="capg-manager-bootstrap-credentials" Namespace="capg-system"
|
||||
Creating Service="capg-controller-manager-metrics-service" Namespace="capg-system"
|
||||
Creating Deployment="capg-controller-manager" Namespace="capg-system"
|
||||
Creating inventory entry Provider="infrastructure-gcp" Version="v0.3.0" TargetNamespace="capg-system"
|
||||
```
|
||||
|
||||
$ kubectl get pods -A
|
||||
```
|
||||
NAMESPACE NAME READY STATUS RESTARTS AGE
|
||||
capg-system capg-controller-manager-b8655ddb4-swwzk 2/2 Running 0 54s
|
||||
capi-kubeadm-bootstrap-system capi-kubeadm-bootstrap-controller-manager-66c6b6857b-22hg4 2/2 Running 0 73s
|
||||
capi-kubeadm-control-plane-system capi-kubeadm-control-plane-controller-manager-688f7ccc56-7g676 2/2 Running 0 65s
|
||||
capi-system capi-controller-manager-549c757797-6vscq 2/2 Running 0 84s
|
||||
capi-webhook-system capg-controller-manager-d5f85c48d-74gj6 2/2 Running 0 61s
|
||||
capi-webhook-system capi-controller-manager-5f8fc485bb-stflj 2/2 Running 0 88s
|
||||
capi-webhook-system capi-kubeadm-bootstrap-controller-manager-6b645d9d4c-2crk7 2/2 Running 0 81s
|
||||
capi-webhook-system capi-kubeadm-control-plane-controller-manager-65dbd6f999-cghmx 2/2 Running 0 70s
|
||||
cert-manager cert-manager-77d8f4d85f-cqp7m 1/1 Running 0 115s
|
||||
cert-manager cert-manager-cainjector-75f88c9f56-qh9m8 1/1 Running 0 115s
|
||||
cert-manager cert-manager-webhook-56669d7fcb-6zddl 1/1 Running 0 115s
|
||||
kube-system coredns-66bff467f8-kmg7c 1/1 Running 0 3m55s
|
||||
kube-system coredns-66bff467f8-lg8qc 1/1 Running 0 3m55s
|
||||
kube-system etcd-capi-gcp-control-plane 1/1 Running 0 4m4s
|
||||
kube-system kindnet-dzp8v 1/1 Running 0 3m55s
|
||||
kube-system kube-apiserver-capi-gcp-control-plane 1/1 Running 0 4m4s
|
||||
kube-system kube-controller-manager-capi-gcp-control-plane 1/1 Running 0 4m3s
|
||||
kube-system kube-proxy-zvdh8 1/1 Running 0 3m55s
|
||||
kube-system kube-scheduler-capi-gcp-control-plane 1/1 Running 0 3m56s
|
||||
local-path-storage local-path-provisioner-bd4bb6b75-6drnt 1/1 Running 0 3m55s
|
||||
```
|
||||
|
||||
## Create control plane and worker nodes
|
||||
|
||||
$ airshipctl phase run controlplane-target --debug
|
||||
```
|
||||
[airshipctl] 2020/09/02 11:21:08 building bundle from kustomize path /tmp/airship/airshipctl/manifests/site/gcp-test-site/target/controlplane
|
||||
[airshipctl] 2020/09/02 11:21:08 Applying bundle, inventory id: kind-capi-gcp-target-controlplane
|
||||
[airshipctl] 2020/09/02 11:21:08 Inventory Object config Map not found, auto generating Invetory object
|
||||
[airshipctl] 2020/09/02 11:21:08 Injecting Invetory Object: {"apiVersion":"v1","kind":"ConfigMap","metadata":{"creationTimestamp":null,"labels":{"cli-utils.sigs.k8s.io/inventory-id":"kind-capi-gcp-target-controlplane"},"name":"airshipit-kind-capi-gcp-target-controlplane","namespace":"airshipit"}}{nsfx:false,beh:unspecified} into bundle
|
||||
[airshipctl] 2020/09/02 11:21:08 Making sure that inventory object namespace airshipit exists
|
||||
configmap/airshipit-kind-capi-gcp-target-controlplane-5ab3466f created
|
||||
cluster.cluster.x-k8s.io/gtc created
|
||||
kubeadmcontrolplane.controlplane.cluster.x-k8s.io/gtc-control-plane created
|
||||
gcpcluster.infrastructure.cluster.x-k8s.io/gtc created
|
||||
gcpmachinetemplate.infrastructure.cluster.x-k8s.io/gtc-control-plane created
|
||||
5 resource(s) applied. 5 created, 0 unchanged, 0 configured
|
||||
kubeadmcontrolplane.controlplane.cluster.x-k8s.io/gtc-control-plane is NotFound: Resource not found
|
||||
gcpcluster.infrastructure.cluster.x-k8s.io/gtc is NotFound: Resource not found
|
||||
gcpmachinetemplate.infrastructure.cluster.x-k8s.io/gtc-control-plane is NotFound: Resource not found
|
||||
configmap/airshipit-kind-capi-gcp-target-controlplane-5ab3466f is NotFound: Resource not found
|
||||
cluster.cluster.x-k8s.io/gtc is NotFound: Resource not found
|
||||
configmap/airshipit-kind-capi-gcp-target-controlplane-5ab3466f is Current: Resource is always ready
|
||||
cluster.cluster.x-k8s.io/gtc is Current: Resource is current
|
||||
kubeadmcontrolplane.controlplane.cluster.x-k8s.io/gtc-control-plane is Current: Resource is current
|
||||
gcpcluster.infrastructure.cluster.x-k8s.io/gtc is Current: Resource is current
|
||||
gcpmachinetemplate.infrastructure.cluster.x-k8s.io/gtc-control-plane is Current: Resource is current
|
||||
all resources has reached the Current status
|
||||
```
|
||||
$ airshipctl phase run workers-target --debug
|
||||
```
|
||||
[airshipctl] 2020/09/02 11:21:20 building bundle from kustomize path /tmp/airship/airshipctl/manifests/site/gcp-test-site/target/workers
|
||||
[airshipctl] 2020/09/02 11:21:20 Applying bundle, inventory id: kind-capi-gcp-target-workers
|
||||
[airshipctl] 2020/09/02 11:21:20 Inventory Object config Map not found, auto generating Invetory object
|
||||
[airshipctl] 2020/09/02 11:21:20 Injecting Invetory Object: {"apiVersion":"v1","kind":"ConfigMap","metadata":{"creationTimestamp":null,"labels":{"cli-utils.sigs.k8s.io/inventory-id":"kind-capi-gcp-target-workers"},"name":"airshipit-kind-capi-gcp-target-workers","namespace":"airshipit"}}{nsfx:false,beh:unspecified} into bundle
|
||||
[airshipctl] 2020/09/02 11:21:20 Making sure that inventory object namespace airshipit exists
|
||||
configmap/airshipit-kind-capi-gcp-target-workers-1a36e40a created
|
||||
kubeadmconfigtemplate.bootstrap.cluster.x-k8s.io/gtc-md-0 created
|
||||
machinedeployment.cluster.x-k8s.io/gtc-md-0 created
|
||||
gcpmachinetemplate.infrastructure.cluster.x-k8s.io/gtc-md-0 created
|
||||
4 resource(s) applied. 4 created, 0 unchanged, 0 configured
|
||||
configmap/airshipit-kind-capi-gcp-target-workers-1a36e40a is NotFound: Resource not found
|
||||
kubeadmconfigtemplate.bootstrap.cluster.x-k8s.io/gtc-md-0 is NotFound: Resource not found
|
||||
machinedeployment.cluster.x-k8s.io/gtc-md-0 is NotFound: Resource not found
|
||||
gcpmachinetemplate.infrastructure.cluster.x-k8s.io/gtc-md-0 is NotFound: Resource not found
|
||||
configmap/airshipit-kind-capi-gcp-target-workers-1a36e40a is Current: Resource is always ready
|
||||
kubeadmconfigtemplate.bootstrap.cluster.x-k8s.io/gtc-md-0 is Current: Resource is current
|
||||
machinedeployment.cluster.x-k8s.io/gtc-md-0 is Current: Resource is current
|
||||
gcpmachinetemplate.infrastructure.cluster.x-k8s.io/gtc-md-0 is Current: Resource is current
|
||||
```
|
||||
|
||||
$ kubectl get pods -A
|
||||
```
|
||||
NAMESPACE NAME READY STATUS RESTARTS AGE
|
||||
capg-system capg-controller-manager-b8655ddb4-swwzk 2/2 Running 0 6m9s
|
||||
capi-kubeadm-bootstrap-system capi-kubeadm-bootstrap-controller-manager-66c6b6857b-22hg4 2/2 Running 0 6m28s
|
||||
capi-kubeadm-control-plane-system capi-kubeadm-control-plane-controller-manager-688f7ccc56-7g676 2/2 Running 0 6m20s
|
||||
capi-system capi-controller-manager-549c757797-6vscq 2/2 Running 0 6m39s
|
||||
capi-webhook-system capg-controller-manager-d5f85c48d-74gj6 2/2 Running 0 6m16s
|
||||
capi-webhook-system capi-controller-manager-5f8fc485bb-stflj 2/2 Running 0 6m43s
|
||||
capi-webhook-system capi-kubeadm-bootstrap-controller-manager-6b645d9d4c-2crk7 2/2 Running 0 6m36s
|
||||
capi-webhook-system capi-kubeadm-control-plane-controller-manager-65dbd6f999-cghmx 2/2 Running 0 6m25s
|
||||
cert-manager cert-manager-77d8f4d85f-cqp7m 1/1 Running 0 7m10s
|
||||
cert-manager cert-manager-cainjector-75f88c9f56-qh9m8 1/1 Running 0 7m10s
|
||||
cert-manager cert-manager-webhook-56669d7fcb-6zddl 1/1 Running 0 7m10s
|
||||
kube-system coredns-66bff467f8-kmg7c 1/1 Running 0 9m10s
|
||||
kube-system coredns-66bff467f8-lg8qc 1/1 Running 0 9m10s
|
||||
kube-system etcd-capi-gcp-control-plane 1/1 Running 0 9m19s
|
||||
kube-system kindnet-dzp8v 1/1 Running 0 9m10s
|
||||
kube-system kube-apiserver-capi-gcp-control-plane 1/1 Running 0 9m19s
|
||||
kube-system kube-controller-manager-capi-gcp-control-plane 1/1 Running 0 9m18s
|
||||
kube-system kube-proxy-zvdh8 1/1 Running 0 9m10s
|
||||
kube-system kube-scheduler-capi-gcp-control-plane 1/1 Running 0 9m11s
|
||||
local-path-storage local-path-provisioner-bd4bb6b75-6drnt 1/1 Running 0 9m10s
|
||||
```
|
||||
|
||||
To check logs run the below command
|
||||
|
||||
$ kubectl logs capg-controller-manager-b8655ddb4-swwzk -n capg-system --all-containers=true -f
|
||||
|
||||
```
|
||||
I0902 18:15:30.884391 1 main.go:213] Generating self signed cert as no cert is provided
|
||||
I0902 18:15:35.135060 1 main.go:243] Starting TCP socket on 0.0.0.0:8443
|
||||
I0902 18:15:35.175185 1 main.go:250] Listening securely on 0.0.0.0:8443
|
||||
I0902 18:15:51.111202 1 listener.go:44] controller-runtime/metrics "msg"="metrics server is starting to listen" "addr"="127.0.0.1:8080"
|
||||
I0902 18:15:51.113054 1 main.go:205] setup "msg"="starting manager"
|
||||
I0902 18:15:51.113917 1 leaderelection.go:242] attempting to acquire leader lease capg-system/controller-leader-election-capg...
|
||||
I0902 18:15:51.114691 1 internal.go:356] controller-runtime/manager "msg"="starting metrics server" "path"="/metrics"
|
||||
I0902 18:15:51.142032 1 leaderelection.go:252] successfully acquired lease capg-system/controller-leader-election-capg
|
||||
I0902 18:15:51.145165 1 controller.go:164] controller-runtime/controller "msg"="Starting EventSource" "c
|
||||
```
|
||||
|
||||
$ kubectl get machines
|
||||
```
|
||||
NAME PROVIDERID PHASE
|
||||
gtc-control-plane-cxcd4 gce://virtual-anchor-281401/us-west1-a/gtc-control-plane-vmplz Running
|
||||
gtc-md-0-6cf7474cff-zpbxv gce://virtual-anchor-281401/us-west1-a/gtc-md-0-7mccx Running
|
||||
```
|
||||
|
||||
$ kubectl --namespace=default get secret/gtc-kubeconfig -o jsonpath={.data.value} | base64 --decode > ./gtc.kubeconfig
|
||||
|
||||
$ kubectl get pods -A --kubeconfig ~/gtc.kubeconfig
|
||||
|
||||
```
|
||||
NAMESPACE NAME READY STATUS RESTARTS AGE
|
||||
kube-system calico-kube-controllers-6d4fbb6df9-8lf4f 1/1 Running 0 5m18s
|
||||
kube-system calico-node-6lmqw 1/1 Running 0 73s
|
||||
kube-system calico-node-qtgzj 1/1 Running 1 5m18s
|
||||
kube-system coredns-5644d7b6d9-dqd75 1/1 Running 0 5m18s
|
||||
kube-system coredns-5644d7b6d9-ls2q9 1/1 Running 0 5m18s
|
||||
kube-system etcd-gtc-control-plane-vmplz 1/1 Running 0 4m53s
|
||||
kube-system kube-apiserver-gtc-control-plane-vmplz 1/1 Running 0 4m42s
|
||||
kube-system kube-controller-manager-gtc-control-plane-vmplz 1/1 Running 0 4m59s
|
||||
kube-system kube-proxy-6hk8c 1/1 Running 0 5m18s
|
||||
kube-system kube-proxy-b8mqw 1/1 Running 0 73s
|
||||
kube-system kube-scheduler-gtc-control-plane-vmplz 1/1 Running 0 4m47s
|
||||
```
|
||||
|
||||
Now, the control plane and worker node are created on google cloud.
|
||||
|
||||
## Tear Down Clusters
|
||||
|
||||
If you would like to delete the cluster run the below commands. This will delete
|
||||
the control plane, workers, machine health check and all other resources
|
||||
associated with the cluster on gcp.
|
||||
|
||||
$ airshipctl phase render controlplane -k Cluster
|
||||
|
||||
```
|
||||
---
|
||||
apiVersion: cluster.x-k8s.io/v1alpha3
|
||||
kind: Cluster
|
||||
metadata:
|
||||
name: gtc
|
||||
namespace: default
|
||||
spec:
|
||||
clusterNetwork:
|
||||
pods:
|
||||
cidrBlocks:
|
||||
- 192.168.0.0/16
|
||||
controlPlaneRef:
|
||||
apiVersion: controlplane.cluster.x-k8s.io/v1alpha3
|
||||
kind: KubeadmControlPlane
|
||||
name: gtc-control-plane
|
||||
infrastructureRef:
|
||||
apiVersion: infrastructure.cluster.x-k8s.io/v1alpha3
|
||||
kind: GCPCluster
|
||||
name: gtc
|
||||
...
|
||||
```
|
||||
|
||||
$ airshipctl phase render controlplane -k Cluster | kubectl delete -f -
|
||||
|
||||
```
|
||||
cluster.cluster.x-k8s.io "gtc" deleted
|
||||
```
|
||||
|
||||
$ kind delete cluster --name capi-gcp
|
||||
```
|
||||
Deleting cluster "capi-gcp" ...
|
||||
```
|
||||
|
||||
## Reference
|
||||
|
||||
### Provider Manifests
|
||||
|
||||
Provider Configuration is referenced from https://github.com/kubernetes-sigs/cluster-api-provider-gcp/tree/master/config
|
||||
Cluster API does not support gcp provider out of the box. Therefore, the metadata infromation is added using files in
|
||||
airshipctl/manifests/function/capg/data
|
||||
|
||||
$ tree airshipctl/manifests/function/capg
|
||||
|
||||
```
|
||||
airshipctl/manifests/function/capg
|
||||
└── v0.3.0
|
||||
├── certmanager
|
||||
│ ├── certificate.yaml
|
||||
│ ├── kustomization.yaml
|
||||
│ └── kustomizeconfig.yaml
|
||||
├── crd
|
||||
│ ├── bases
|
||||
│ │ ├── infrastructure.cluster.x-k8s.io_gcpclusters.yaml
|
||||
│ │ ├── infrastructure.cluster.x-k8s.io_gcpmachines.yaml
|
||||
│ │ └── infrastructure.cluster.x-k8s.io_gcpmachinetemplates.yaml
|
||||
│ ├── kustomization.yaml
|
||||
│ ├── kustomizeconfig.yaml
|
||||
│ └── patches
|
||||
│ ├── cainjection_in_gcpclusters.yaml
|
||||
│ ├── cainjection_in_gcpmachines.yaml
|
||||
│ ├── cainjection_in_gcpmachinetemplates.yaml
|
||||
│ ├── webhook_in_gcpclusters.yaml
|
||||
│ ├── webhook_in_gcpmachines.yaml
|
||||
│ └── webhook_in_gcpmachinetemplates.yaml
|
||||
├── data
|
||||
│ ├── capg-resources.yaml
|
||||
│ ├── kustomization.yaml
|
||||
│ └── metadata.yaml
|
||||
├── default
|
||||
│ ├── credentials.yaml
|
||||
│ ├── kustomization.yaml
|
||||
│ ├── manager_credentials_patch.yaml
|
||||
│ ├── manager_prometheus_metrics_patch.yaml
|
||||
│ ├── manager_role_aggregation_patch.yaml
|
||||
│ └── namespace.yaml
|
||||
├── kustomization.yaml
|
||||
├── manager
|
||||
│ ├── kustomization.yaml
|
||||
│ ├── manager_auth_proxy_patch.yaml
|
||||
│ ├── manager_image_patch.yaml
|
||||
│ ├── manager_pull_policy.yaml
|
||||
│ └── manager.yaml
|
||||
├── patch_crd_webhook_namespace.yaml
|
||||
├── rbac
|
||||
│ ├── auth_proxy_role_binding.yaml
|
||||
│ ├── auth_proxy_role.yaml
|
||||
│ ├── auth_proxy_service.yaml
|
||||
│ ├── kustomization.yaml
|
||||
│ ├── leader_election_role_binding.yaml
|
||||
│ ├── leader_election_role.yaml
|
||||
│ ├── role_binding.yaml
|
||||
│ └── role.yaml
|
||||
└── webhook
|
||||
├── kustomization.yaml
|
||||
├── kustomizeconfig.yaml
|
||||
├── manager_webhook_patch.yaml
|
||||
├── manifests.yaml
|
||||
├── service.yaml
|
||||
└── webhookcainjection_patch.yaml
|
||||
```
|
||||
|
||||
#### CAPG Specific Variables
|
||||
|
||||
capg-resources.yaml consists of `gcp provider specific` variables required to
|
||||
initialize the management cluster. The values for these variables can be
|
||||
exported before running `airshipctl phase run clusterctl-init-ephemeral` or they can be defined
|
||||
explicitly in clusterctl.yaml
|
||||
|
||||
$ cat airshipctl/manifests/function/capg/v0.3.0/data/capg-resources.yaml
|
||||
|
||||
```
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: manager-bootstrap-credentials
|
||||
namespace: system
|
||||
type: Opaque
|
||||
data:
|
||||
GCP_CONTROL_PLANE_MACHINE_TYPE: ${GCP_CONTROL_PLANE_MACHINE_TYPE}
|
||||
GCP_NODE_MACHINE_TYPE: ${GCP_NODE_MACHINE_TYPE}
|
||||
GCP_PROJECT: ${GCP_PROJECT}
|
||||
GCP_REGION: ${GCP_REGION}
|
||||
GCP_NETWORK_NAME: ${GCP_NETWORK_NAME}
|
||||
GCP_B64ENCODED_CREDENTIALS: ${GCP_B64ENCODED_CREDENTIALS}
|
||||
|
||||
```
|
||||
|
||||
### Cluster Templates
|
||||
manifests/function/k8scontrol-capg contains cluster.yaml, controlplane.yaml templates referenced from
|
||||
[cluster-template](https://github.com/kubernetes-sigs/cluster-api-provider-gcp/blob/master/templates/cluster-template.yaml)
|
||||
|
||||
| Template Name | CRDs |
|
||||
| ----------------- | ---- |
|
||||
| cluster.yaml | Cluster, GCPCluster |
|
||||
| controlplane.yaml | KubeadmControlPlane, GCPMachineTemplate |
|
||||
|
||||
$ tree airshipctl/manifests/function/k8scontrol-capg
|
||||
|
||||
```
|
||||
airshipctl/manifests/function/k8scontrol-capg
|
||||
├── cluster.yaml
|
||||
├── controlplane.yaml
|
||||
└── kustomization.yaml
|
||||
```
|
||||
|
||||
airshipctl/manifests/function/workers-capg contains workers.yaml referenced from
|
||||
[cluster-template](https://github.com/kubernetes-sigs/cluster-api-provider-gcp/blob/master/templates/cluster-template.yaml)
|
||||
|
||||
| Template Name | CRDs |
|
||||
| ----------------- | ---- |
|
||||
| workers.yaml | GCPMachineTemplate, MachineDeployment, KubeadmConfigTemplate |
|
||||
|
||||
$ tree airshipctl/manifests/function/workers-capg
|
||||
```
|
||||
airshipctl/manifests/function/workers-capg
|
||||
├── kustomization.yaml
|
||||
└── workers.yaml
|
||||
```
|
||||
### Test Site Manifests
|
||||
|
||||
#### gcp-test-site/shared
|
||||
airshipctl phase run clusterctl-init-ephemeral uses
|
||||
airshipctl/manifests/site/gcp-test-site/shared/clusterctl to initialize
|
||||
management cluster with defined provider components and version.
|
||||
|
||||
$ tree airshipctl/manifests/site/gcp-test-site/shared
|
||||
```
|
||||
airshipctl/manifests/site/gcp-test-site/shared
|
||||
└── clusterctl
|
||||
├── clusterctl.yaml
|
||||
└── kustomization.yaml
|
||||
```
|
||||
|
||||
#### gcp-test-site/target
|
||||
There are 3 phases currently available in gcp-test-site/target
|
||||
|
||||
|Phase Name | Purpose |
|
||||
|-----------|---------|
|
||||
| controlplane | Patches templates in manifests/function/k8scontrol-capg |
|
||||
| workers | Patches template in manifests/function/workers-capg | |
|
||||
| initinfra | Simply calls `gcp-test-site/shared/clusterctl` |
|
||||
|
||||
Note: `airshipctl phase run clusterctl-init-ephemeral` initializes all the provider components
|
||||
including the gcp infrastructure provider component.
|
||||
|
||||
#### Patch Merge Strategy
|
||||
|
||||
Json patches are applied on templates in `manifests/function/k8scontrol-capg`
|
||||
from `airshipctl/manifests/site/gcp-test-site/target/controlplane` when
|
||||
`airshipctl phase run controlplane-target` is executed
|
||||
|
||||
Json patches are applied on templates in `manifests/function/workers-capg` from
|
||||
`airshipctl/manifests/site/gcp-test-site/target/workers` when `airshipctl phase
|
||||
run workers-target` is executed.
|
||||
|
||||
| Patch Name | Purpose |
|
||||
| ------------------------------- | ------------------------------------------------------------------ |
|
||||
| controlplane/machine_count.json | patches control plane machine count in template function/k8scontrol-capg |
|
||||
| controlplane/machine_type.json | patches control plane machine type in template function/k8scontrol-capg |
|
||||
| controlplane/network_name.json | patches control plane network name in template function/k8scontrol-capg |
|
||||
| controlplane/project_name.json | patches project id template function/k8scontrol-capg |
|
||||
| controlplane/region_name.json | patches region name in template function/k8scontrol-capg |
|
||||
| workers/machine_count.json | patches worker machine count in template function/workers-capg |
|
||||
| workers/machine_type.json | patches worker machine type in template function/workers-capg |
|
||||
| workers/failure_domain.json | patches failure_domain in template function/workers-capg |
|
||||
|
||||
$ tree airshipctl/manifests/site/gcp-test-site/target/
|
||||
|
||||
```
|
||||
airshipctl/manifests/site/gcp-test-site/target/
|
||||
├── controlplane
|
||||
│ ├── kustomization.yaml
|
||||
│ ├── machine_count.json
|
||||
│ ├── machine_type.json
|
||||
│ ├── network_name.json
|
||||
│ ├── project_name.json
|
||||
│ └── region_name.json
|
||||
├── initinfra
|
||||
│ └── kustomization.yaml
|
||||
└── workers
|
||||
├── failure_domain.json
|
||||
├── kustomization.yaml
|
||||
├── machine_count.json
|
||||
└── machine_type.json
|
||||
|
||||
3 directories, 11 files
|
||||
|
||||
```
|
||||
### Software Version Information
|
||||
|
||||
All the instructions provided in the document have been tested using the
|
||||
software and version, provided in this section.
|
||||
|
||||
#### Virtual Machine Specification
|
||||
|
||||
All the instructions in the document were perfomed on a Oracle Virtual Box(6.1)
|
||||
VM running Ubuntu 18.04.4 LTS (Bionic Beaver) with 16G of memory and 4 VCPUs
|
||||
|
||||
#### Docker
|
||||
|
||||
$ docker version
|
||||
|
||||
```
|
||||
Client: Docker Engine - Community
|
||||
Version: 19.03.9
|
||||
API version: 1.40
|
||||
Go version: go1.13.10
|
||||
Git commit: 9d988398e7
|
||||
Built: Fri May 15 00:25:18 2020
|
||||
OS/Arch: linux/amd64
|
||||
Experimental: false
|
||||
|
||||
Server: Docker Engine - Community
|
||||
Engine:
|
||||
Version: 19.03.9
|
||||
API version: 1.40 (minimum version 1.12)
|
||||
Go version: go1.13.10
|
||||
Git commit: 9d988398e7
|
||||
Built: Fri May 15 00:23:50 2020
|
||||
OS/Arch: linux/amd64
|
||||
Experimental: false
|
||||
containerd:
|
||||
Version: 1.2.13
|
||||
GitCommit: 7ad184331fa3e55e52b890ea95e65ba581ae3429
|
||||
runc:
|
||||
Version: 1.0.0-rc10
|
||||
GitCommit: dc9208a3303feef5b3839f4323d9beb36df0a9dd
|
||||
docker-init:
|
||||
Version: 0.18.0
|
||||
GitCommit: fec3683
|
||||
```
|
||||
|
||||
#### Kind
|
||||
|
||||
$ kind version
|
||||
|
||||
```
|
||||
kind v0.8.1 go1.14.2 linux/amd64
|
||||
```
|
||||
|
||||
#### Kubectl
|
||||
|
||||
$ kubectl version
|
||||
|
||||
```
|
||||
Client Version: version.Info{Major:"1", Minor:"17", GitVersion:"v1.17.4", GitCommit:"8d8aa39598534325ad77120c120a22b3a990b5ea", GitTreeState:"clean", BuildDate:"2020-03-12T21:03:42Z", GoVersion:"go1.13.8", Compiler:"gc", Platform:"linux/amd64"}
|
||||
Server Version: version.Info{Major:"1", Minor:"17", GitVersion:"v1.17.0", GitCommit:"70132b0f130acc0bed193d9ba59dd186f0e634cf", GitTreeState:"clean", BuildDate:"2020-01-14T00:09:19Z", GoVersion:"go1.13.4", Compiler:"gc", Platform:"linux/amd64"}
|
||||
```
|
||||
|
||||
#### Go
|
||||
|
||||
$ go version
|
||||
|
||||
```
|
||||
go version go1.14.1 linux/amd64
|
||||
```
|
||||
|
||||
#### Kustomize
|
||||
|
||||
$ kustomize version
|
||||
|
||||
```
|
||||
{Version:kustomize/v3.8.0 GitCommit:6a50372dd5686df22750b0c729adaf369fbf193c BuildDate:2020-07-05T14:08:42Z GoOs:linux GoArch:amd64}
|
||||
```
|
||||
|
||||
#### OS
|
||||
|
||||
$ cat /etc/os-release
|
||||
|
||||
```
|
||||
NAME="Ubuntu"
|
||||
VERSION="18.04.4 LTS (Bionic Beaver)"
|
||||
ID=ubuntu
|
||||
ID_LIKE=debian
|
||||
PRETTY_NAME="Ubuntu 18.04.4 LTS"
|
||||
VERSION_ID="18.04"
|
||||
HOME_URL="https://www.ubuntu.com/"
|
||||
SUPPORT_URL="https://help.ubuntu.com/"
|
||||
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
|
||||
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
|
||||
VERSION_CODENAME=bionic
|
||||
UBUNTU_CODENAME=bionic
|
||||
```
|
||||
24
manifests/function/capg/v0.3.0/certmanager/certificate.yaml
Normal file
24
manifests/function/capg/v0.3.0/certmanager/certificate.yaml
Normal file
@ -0,0 +1,24 @@
|
||||
# The following manifests contain a self-signed issuer CR and a certificate CR.
|
||||
# More document can be found at https://docs.cert-manager.io
|
||||
apiVersion: cert-manager.io/v1alpha2
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: selfsigned-issuer
|
||||
namespace: system
|
||||
spec:
|
||||
selfSigned: {}
|
||||
---
|
||||
apiVersion: cert-manager.io/v1alpha2
|
||||
kind: Certificate
|
||||
metadata:
|
||||
name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml
|
||||
namespace: system
|
||||
spec:
|
||||
# $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize
|
||||
dnsNames:
|
||||
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc
|
||||
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc.cluster.local
|
||||
issuerRef:
|
||||
kind: Issuer
|
||||
name: selfsigned-issuer
|
||||
secretName: $(SERVICE_NAME)-cert # this secret will not be prefixed, since it's not managed by kustomize
|
||||
@ -0,0 +1,7 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- certificate.yaml
|
||||
|
||||
configurations:
|
||||
- kustomizeconfig.yaml
|
||||
@ -0,0 +1,19 @@
|
||||
# This configuration is for teaching kustomize how to update name ref and var substitution
|
||||
nameReference:
|
||||
- kind: Issuer
|
||||
group: cert-manager.io
|
||||
fieldSpecs:
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/issuerRef/name
|
||||
|
||||
varReference:
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/commonName
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/dnsNames
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/secretName
|
||||
@ -0,0 +1,236 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.2.6
|
||||
creationTimestamp: null
|
||||
name: gcpclusters.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
names:
|
||||
categories:
|
||||
- cluster-api
|
||||
kind: GCPCluster
|
||||
listKind: GCPClusterList
|
||||
plural: gcpclusters
|
||||
singular: gcpcluster
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- additionalPrinterColumns:
|
||||
- description: Cluster to which this GCPCluster belongs
|
||||
jsonPath: .metadata.labels.cluster\.x-k8s\.io/cluster-name
|
||||
name: Cluster
|
||||
type: string
|
||||
- description: Cluster infrastructure is ready for GCE instances
|
||||
jsonPath: .status.ready
|
||||
name: Ready
|
||||
type: string
|
||||
- description: GCP network the cluster is using
|
||||
jsonPath: .spec.network.name
|
||||
name: Network
|
||||
type: string
|
||||
- description: API Endpoint
|
||||
jsonPath: .status.apiEndpoints[0]
|
||||
name: Endpoint
|
||||
priority: 1
|
||||
type: string
|
||||
name: v1alpha3
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: GCPCluster is the Schema for the gcpclusters API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: GCPClusterSpec defines the desired state of GCPCluster
|
||||
properties:
|
||||
additionalLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: AdditionalLabels is an optional set of tags to add to
|
||||
GCP resources managed by the GCP provider, in addition to the ones
|
||||
added by default.
|
||||
type: object
|
||||
controlPlaneEndpoint:
|
||||
description: ControlPlaneEndpoint represents the endpoint used to
|
||||
communicate with the control plane.
|
||||
properties:
|
||||
host:
|
||||
description: The hostname on which the API server is serving.
|
||||
type: string
|
||||
port:
|
||||
description: The port on which the API server is serving.
|
||||
format: int32
|
||||
type: integer
|
||||
required:
|
||||
- host
|
||||
- port
|
||||
type: object
|
||||
network:
|
||||
description: NetworkSpec encapsulates all things related to GCP network.
|
||||
properties:
|
||||
autoCreateSubnetworks:
|
||||
description: "AutoCreateSubnetworks: When set to true, the VPC
|
||||
network is created in \"auto\" mode. When set to false, the
|
||||
VPC network is created in \"custom\" mode. \n An auto mode VPC
|
||||
network starts with one subnet per region. Each subnet has a
|
||||
predetermined range as described in Auto mode VPC network IP
|
||||
ranges. \n Defaults to true."
|
||||
type: boolean
|
||||
loadBalancerBackendPort:
|
||||
description: Allow for configuration of load balancer backend
|
||||
(useful for changing apiserver port)
|
||||
format: int32
|
||||
type: integer
|
||||
name:
|
||||
description: Name is the name of the network to be used.
|
||||
type: string
|
||||
subnets:
|
||||
description: Subnets configuration.
|
||||
items:
|
||||
description: SubnetSpec configures an GCP Subnet.
|
||||
properties:
|
||||
cidrBlock:
|
||||
description: CidrBlock is the range of internal addresses
|
||||
that are owned by this subnetwork. Provide this property
|
||||
when you create the subnetwork. For example, 10.0.0.0/8
|
||||
or 192.168.0.0/16. Ranges must be unique and non-overlapping
|
||||
within a network. Only IPv4 is supported. This field can
|
||||
be set only at resource creation time.
|
||||
type: string
|
||||
description:
|
||||
description: Description is an optional description associated
|
||||
with the resource.
|
||||
type: string
|
||||
name:
|
||||
description: Name defines a unique identifier to reference
|
||||
this resource.
|
||||
type: string
|
||||
privateGoogleAccess:
|
||||
description: PrivateGoogleAccess defines whether VMs in
|
||||
this subnet can access Google services without assigning
|
||||
external IP addresses
|
||||
type: boolean
|
||||
region:
|
||||
description: Region is the name of the region where the
|
||||
Subnetwork resides.
|
||||
type: string
|
||||
routeTableId:
|
||||
description: 'EnableFlowLogs: Whether to enable flow logging
|
||||
for this subnetwork. If this field is not explicitly set,
|
||||
it will not appear in get listings. If not set the default
|
||||
behavior is to disable flow logging.'
|
||||
type: boolean
|
||||
secondaryCidrBlocks:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: SecondaryCidrBlocks defines secondary CIDR
|
||||
ranges, from which secondary IP ranges of a VM may be
|
||||
allocated
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
project:
|
||||
description: Project is the name of the project to deploy the cluster
|
||||
to.
|
||||
type: string
|
||||
region:
|
||||
description: The GCP Region the cluster lives in.
|
||||
type: string
|
||||
required:
|
||||
- project
|
||||
- region
|
||||
type: object
|
||||
status:
|
||||
description: GCPClusterStatus defines the observed state of GCPCluster
|
||||
properties:
|
||||
failureDomains:
|
||||
additionalProperties:
|
||||
description: FailureDomainSpec is the Schema for Cluster API failure
|
||||
domains. It allows controllers to understand how many failure
|
||||
domains a cluster can optionally span across.
|
||||
properties:
|
||||
attributes:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Attributes is a free form map of attributes an
|
||||
infrastructure provider might use or require.
|
||||
type: object
|
||||
controlPlane:
|
||||
description: ControlPlane determines if this failure domain
|
||||
is suitable for use by control plane machines.
|
||||
type: boolean
|
||||
type: object
|
||||
description: FailureDomains is a slice of FailureDomains.
|
||||
type: object
|
||||
network:
|
||||
description: Network encapsulates GCP networking resources.
|
||||
properties:
|
||||
apiServerBackendService:
|
||||
description: APIServerBackendService is the full reference to
|
||||
the backend service created for the API Server.
|
||||
type: string
|
||||
apiServerForwardingRule:
|
||||
description: APIServerForwardingRule is the full reference to
|
||||
the forwarding rule created for the API Server.
|
||||
type: string
|
||||
apiServerHealthCheck:
|
||||
description: APIServerHealthCheck is the full reference to the
|
||||
health check created for the API Server.
|
||||
type: string
|
||||
apiServerInstanceGroups:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: APIServerInstanceGroups is a map from zone to the
|
||||
full reference to the instance groups created for the control
|
||||
plane nodes created in the same zone.
|
||||
type: object
|
||||
apiServerIpAddress:
|
||||
description: APIServerAddress is the IPV4 global address assigned
|
||||
to the load balancer created for the API Server.
|
||||
type: string
|
||||
apiServerTargetProxy:
|
||||
description: APIServerTargetProxy is the full reference to the
|
||||
target proxy created for the API Server.
|
||||
type: string
|
||||
firewallRules:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: FirewallRules is a map from the name of the rule
|
||||
to its full reference.
|
||||
type: object
|
||||
selfLink:
|
||||
description: SelfLink is the link to the Network used for this
|
||||
cluster.
|
||||
type: string
|
||||
type: object
|
||||
ready:
|
||||
description: Bastion Instance `json:"bastion,omitempty"`
|
||||
type: boolean
|
||||
required:
|
||||
- ready
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
@ -0,0 +1,195 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.2.6
|
||||
creationTimestamp: null
|
||||
name: gcpmachines.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
names:
|
||||
categories:
|
||||
- cluster-api
|
||||
kind: GCPMachine
|
||||
listKind: GCPMachineList
|
||||
plural: gcpmachines
|
||||
singular: gcpmachine
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- additionalPrinterColumns:
|
||||
- description: Cluster to which this GCPMachine belongs
|
||||
jsonPath: .metadata.labels.cluster\.x-k8s\.io/cluster-name
|
||||
name: Cluster
|
||||
type: string
|
||||
- description: GCE instance state
|
||||
jsonPath: .status.instanceState
|
||||
name: State
|
||||
type: string
|
||||
- description: Machine ready status
|
||||
jsonPath: .status.ready
|
||||
name: Ready
|
||||
type: string
|
||||
- description: GCE instance ID
|
||||
jsonPath: .spec.providerID
|
||||
name: InstanceID
|
||||
type: string
|
||||
- description: Machine object which owns with this GCPMachine
|
||||
jsonPath: .metadata.ownerReferences[?(@.kind=="Machine")].name
|
||||
name: Machine
|
||||
type: string
|
||||
name: v1alpha3
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: GCPMachine is the Schema for the gcpmachines API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: GCPMachineSpec defines the desired state of GCPMachine
|
||||
properties:
|
||||
additionalLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: AdditionalLabels is an optional set of tags to add to
|
||||
an instance, in addition to the ones added by default by the GCP
|
||||
provider. If both the GCPCluster and the GCPMachine specify the
|
||||
same tag name with different values, the GCPMachine's value takes
|
||||
precedence.
|
||||
type: object
|
||||
additionalNetworkTags:
|
||||
description: AdditionalNetworkTags is a list of network tags that
|
||||
should be applied to the instance. These tags are set in addition
|
||||
to any network tags defined at the cluster level or in the actuator.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
image:
|
||||
description: Image is the full reference to a valid image to be used
|
||||
for this machine. Takes precedence over ImageFamily.
|
||||
type: string
|
||||
imageFamily:
|
||||
description: ImageFamily is the full reference to a valid image family
|
||||
to be used for this machine.
|
||||
type: string
|
||||
instanceType:
|
||||
description: 'InstanceType is the type of instance to create. Example:
|
||||
n1.standard-2'
|
||||
type: string
|
||||
providerID:
|
||||
description: ProviderID is the unique identifier as specified by the
|
||||
cloud provider.
|
||||
type: string
|
||||
publicIP:
|
||||
description: PublicIP specifies whether the instance should get a
|
||||
public IP. Set this to true if you don't have a NAT instances or
|
||||
Cloud Nat setup.
|
||||
type: boolean
|
||||
rootDeviceSize:
|
||||
description: RootDeviceSize is the size of the root volume in GB.
|
||||
Defaults to 30.
|
||||
format: int64
|
||||
type: integer
|
||||
serviceAccounts:
|
||||
description: 'ServiceAccount specifies the service account email and
|
||||
which scopes to assign to the machine. Defaults to: email: "default",
|
||||
scope: []{compute.CloudPlatformScope}'
|
||||
properties:
|
||||
email:
|
||||
description: 'Email: Email address of the service account.'
|
||||
type: string
|
||||
scopes:
|
||||
description: 'Scopes: The list of scopes to be made available
|
||||
for this service account.'
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
type: object
|
||||
subnet:
|
||||
description: Subnet is a reference to the subnetwork to use for this
|
||||
instance. If not specified, the first subnetwork retrieved from
|
||||
the Cluster Region and Network is picked.
|
||||
type: string
|
||||
required:
|
||||
- instanceType
|
||||
type: object
|
||||
status:
|
||||
description: GCPMachineStatus defines the observed state of GCPMachine
|
||||
properties:
|
||||
addresses:
|
||||
description: Addresses contains the GCP instance associated addresses.
|
||||
items:
|
||||
description: NodeAddress contains information for the node's address.
|
||||
properties:
|
||||
address:
|
||||
description: The node address.
|
||||
type: string
|
||||
type:
|
||||
description: Node address type, one of Hostname, ExternalIP
|
||||
or InternalIP.
|
||||
type: string
|
||||
required:
|
||||
- address
|
||||
- type
|
||||
type: object
|
||||
type: array
|
||||
failureMessage:
|
||||
description: "FailureMessage will be set in the event that there is
|
||||
a terminal problem reconciling the Machine and will contain a more
|
||||
verbose string suitable for logging and human consumption. \n This
|
||||
field should not be set for transitive errors that a controller
|
||||
faces that are expected to be fixed automatically over time (like
|
||||
service outages), but instead indicate that something is fundamentally
|
||||
wrong with the Machine's spec or the configuration of the controller,
|
||||
and that manual intervention is required. Examples of terminal errors
|
||||
would be invalid combinations of settings in the spec, values that
|
||||
are unsupported by the controller, or the responsible controller
|
||||
itself being critically misconfigured. \n Any transient errors that
|
||||
occur during the reconciliation of Machines can be added as events
|
||||
to the Machine object and/or logged in the controller's output."
|
||||
type: string
|
||||
failureReason:
|
||||
description: "FailureReason will be set in the event that there is
|
||||
a terminal problem reconciling the Machine and will contain a succinct
|
||||
value suitable for machine interpretation. \n This field should
|
||||
not be set for transitive errors that a controller faces that are
|
||||
expected to be fixed automatically over time (like service outages),
|
||||
but instead indicate that something is fundamentally wrong with
|
||||
the Machine's spec or the configuration of the controller, and that
|
||||
manual intervention is required. Examples of terminal errors would
|
||||
be invalid combinations of settings in the spec, values that are
|
||||
unsupported by the controller, or the responsible controller itself
|
||||
being critically misconfigured. \n Any transient errors that occur
|
||||
during the reconciliation of Machines can be added as events to
|
||||
the Machine object and/or logged in the controller's output."
|
||||
type: string
|
||||
instanceState:
|
||||
description: InstanceStatus is the status of the GCP instance for
|
||||
this machine.
|
||||
type: string
|
||||
ready:
|
||||
description: Ready is true when the provider resource is ready.
|
||||
type: boolean
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
@ -0,0 +1,130 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.2.6
|
||||
creationTimestamp: null
|
||||
name: gcpmachinetemplates.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
names:
|
||||
categories:
|
||||
- cluster-api
|
||||
kind: GCPMachineTemplate
|
||||
listKind: GCPMachineTemplateList
|
||||
plural: gcpmachinetemplates
|
||||
singular: gcpmachinetemplate
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1alpha3
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: GCPMachineTemplate is the Schema for the gcpmachinetemplates
|
||||
API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: GCPMachineTemplateSpec defines the desired state of GCPMachineTemplate
|
||||
properties:
|
||||
template:
|
||||
description: GCPMachineTemplateResource describes the data needed
|
||||
to create am GCPMachine from a template
|
||||
properties:
|
||||
spec:
|
||||
description: Spec is the specification of the desired behavior
|
||||
of the machine.
|
||||
properties:
|
||||
additionalLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: AdditionalLabels is an optional set of tags to
|
||||
add to an instance, in addition to the ones added by default
|
||||
by the GCP provider. If both the GCPCluster and the GCPMachine
|
||||
specify the same tag name with different values, the GCPMachine's
|
||||
value takes precedence.
|
||||
type: object
|
||||
additionalNetworkTags:
|
||||
description: AdditionalNetworkTags is a list of network tags
|
||||
that should be applied to the instance. These tags are set
|
||||
in addition to any network tags defined at the cluster level
|
||||
or in the actuator.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
image:
|
||||
description: Image is the full reference to a valid image
|
||||
to be used for this machine. Takes precedence over ImageFamily.
|
||||
type: string
|
||||
imageFamily:
|
||||
description: ImageFamily is the full reference to a valid
|
||||
image family to be used for this machine.
|
||||
type: string
|
||||
instanceType:
|
||||
description: 'InstanceType is the type of instance to create.
|
||||
Example: n1.standard-2'
|
||||
type: string
|
||||
providerID:
|
||||
description: ProviderID is the unique identifier as specified
|
||||
by the cloud provider.
|
||||
type: string
|
||||
publicIP:
|
||||
description: PublicIP specifies whether the instance should
|
||||
get a public IP. Set this to true if you don't have a NAT
|
||||
instances or Cloud Nat setup.
|
||||
type: boolean
|
||||
rootDeviceSize:
|
||||
description: RootDeviceSize is the size of the root volume
|
||||
in GB. Defaults to 30.
|
||||
format: int64
|
||||
type: integer
|
||||
serviceAccounts:
|
||||
description: 'ServiceAccount specifies the service account
|
||||
email and which scopes to assign to the machine. Defaults
|
||||
to: email: "default", scope: []{compute.CloudPlatformScope}'
|
||||
properties:
|
||||
email:
|
||||
description: 'Email: Email address of the service account.'
|
||||
type: string
|
||||
scopes:
|
||||
description: 'Scopes: The list of scopes to be made available
|
||||
for this service account.'
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
type: object
|
||||
subnet:
|
||||
description: Subnet is a reference to the subnetwork to use
|
||||
for this instance. If not specified, the first subnetwork
|
||||
retrieved from the Cluster Region and Network is picked.
|
||||
type: string
|
||||
required:
|
||||
- instanceType
|
||||
type: object
|
||||
required:
|
||||
- spec
|
||||
type: object
|
||||
required:
|
||||
- template
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
30
manifests/function/capg/v0.3.0/crd/kustomization.yaml
Normal file
30
manifests/function/capg/v0.3.0/crd/kustomization.yaml
Normal file
@ -0,0 +1,30 @@
|
||||
commonLabels:
|
||||
cluster.x-k8s.io/v1alpha3: v1alpha3
|
||||
|
||||
# This kustomization.yaml is not intended to be run by itself,
|
||||
# since it depends on service name and namespace that are out of this kustomize package.
|
||||
# It should be run by config/default
|
||||
resources:
|
||||
- bases/infrastructure.cluster.x-k8s.io_gcpmachines.yaml
|
||||
- bases/infrastructure.cluster.x-k8s.io_gcpclusters.yaml
|
||||
- bases/infrastructure.cluster.x-k8s.io_gcpmachinetemplates.yaml
|
||||
# +kubebuilder:scaffold:crdkustomizeresource
|
||||
|
||||
#patches:
|
||||
# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix.
|
||||
# patches here are for enabling the conversion webhook for each CRD
|
||||
#- patches/webhook_in_gcpmachines.yaml
|
||||
#- patches/webhook_in_gcpclusters.yaml
|
||||
#- patches/webhook_in_gcpmachinetemplates.yaml
|
||||
# +kubebuilder:scaffold:crdkustomizewebhookpatch
|
||||
|
||||
# [CERTMANAGER] To enable webhook, uncomment all the sections with [CERTMANAGER] prefix.
|
||||
# patches here are for enabling the CA injection for each CRD
|
||||
#- patches/cainjection_in_gcpmachines.yaml
|
||||
#- patches/cainjection_in_gcpclusters.yaml
|
||||
#- patches/cainjection_in_gcpmachinetemplates.yaml
|
||||
# +kubebuilder:scaffold:crdkustomizecainjectionpatch
|
||||
|
||||
# the following config is for teaching kustomize how to do kustomization for CRDs.
|
||||
configurations:
|
||||
- kustomizeconfig.yaml
|
||||
17
manifests/function/capg/v0.3.0/crd/kustomizeconfig.yaml
Normal file
17
manifests/function/capg/v0.3.0/crd/kustomizeconfig.yaml
Normal file
@ -0,0 +1,17 @@
|
||||
# This file is for teaching kustomize how to substitute name and namespace reference in CRD
|
||||
nameReference:
|
||||
- kind: Service
|
||||
version: v1
|
||||
fieldSpecs:
|
||||
- kind: CustomResourceDefinition
|
||||
group: apiextensions.k8s.io
|
||||
path: spec/conversion/webhook/clientConfig/service/name
|
||||
|
||||
namespace:
|
||||
- kind: CustomResourceDefinition
|
||||
group: apiextensions.k8s.io
|
||||
path: spec/conversion/webhook/clientConfig/service/namespace
|
||||
create: false
|
||||
|
||||
varReference:
|
||||
- path: metadata/annotations
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: gcpclusters.infrastructure.cluster.x-k8s.io
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: gcpmachines.infrastructure.cluster.x-k8s.io
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: gcpmachinetemplates.infrastructure.cluster.x-k8s.io
|
||||
@ -0,0 +1,19 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: gcpclusters.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhook:
|
||||
conversionReviewVersions: ["v1", "v1beta1"]
|
||||
clientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,19 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: gcpmachines.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhook:
|
||||
conversionReviewVersions: ["v1", "v1beta1"]
|
||||
clientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,19 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: gcpmachinetemplates.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhook:
|
||||
conversionReviewVersions: ["v1", "v1beta1"]
|
||||
clientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
14
manifests/function/capg/v0.3.0/data/capg-resources.yaml
Normal file
14
manifests/function/capg/v0.3.0/data/capg-resources.yaml
Normal file
@ -0,0 +1,14 @@
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: manager-bootstrap-credentials
|
||||
namespace: system
|
||||
type: Opaque
|
||||
data:
|
||||
GCP_CONTROL_PLANE_MACHINE_TYPE: ${GCP_CONTROL_PLANE_MACHINE_TYPE}
|
||||
GCP_NODE_MACHINE_TYPE: ${GCP_NODE_MACHINE_TYPE}
|
||||
GCP_PROJECT: ${GCP_PROJECT}
|
||||
GCP_REGION: ${GCP_REGION}
|
||||
GCP_NETWORK_NAME: ${GCP_NETWORK_NAME}
|
||||
GCP_B64ENCODED_CREDENTIALS: ${GCP_B64ENCODED_CREDENTIALS}
|
||||
3
manifests/function/capg/v0.3.0/data/kustomization.yaml
Normal file
3
manifests/function/capg/v0.3.0/data/kustomization.yaml
Normal file
@ -0,0 +1,3 @@
|
||||
resources:
|
||||
- metadata.yaml
|
||||
- capg-resources.yaml
|
||||
14
manifests/function/capg/v0.3.0/data/metadata.yaml
Normal file
14
manifests/function/capg/v0.3.0/data/metadata.yaml
Normal file
@ -0,0 +1,14 @@
|
||||
---
|
||||
apiVersion: clusterctl.cluster.x-k8s.io/v1alpha3
|
||||
kind: Metadata
|
||||
metadata:
|
||||
name: repository-metadata
|
||||
labels:
|
||||
airshipit.org/deploy-k8s: "false"
|
||||
releaseSeries:
|
||||
- major: 0
|
||||
minor: 3
|
||||
contract: v1alpha3
|
||||
- major: 0
|
||||
minor: 2
|
||||
contract: v1alpha2
|
||||
8
manifests/function/capg/v0.3.0/default/credentials.yaml
Normal file
8
manifests/function/capg/v0.3.0/default/credentials.yaml
Normal file
@ -0,0 +1,8 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: manager-bootstrap-credentials
|
||||
namespace: system
|
||||
type: Opaque
|
||||
data:
|
||||
credentials.json: ${GCP_B64ENCODED_CREDENTIALS}
|
||||
12
manifests/function/capg/v0.3.0/default/kustomization.yaml
Normal file
12
manifests/function/capg/v0.3.0/default/kustomization.yaml
Normal file
@ -0,0 +1,12 @@
|
||||
namespace: capg-system
|
||||
|
||||
resources:
|
||||
- namespace.yaml
|
||||
- credentials.yaml
|
||||
|
||||
bases:
|
||||
- ../rbac
|
||||
- ../manager
|
||||
|
||||
patchesStrategicMerge:
|
||||
- manager_credentials_patch.yaml
|
||||
@ -0,0 +1,20 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
env:
|
||||
- name: GOOGLE_APPLICATION_CREDENTIALS
|
||||
value: /home/.gcp/credentials.json
|
||||
volumeMounts:
|
||||
- name: credentials
|
||||
mountPath: /home/.gcp
|
||||
volumes:
|
||||
- name: credentials
|
||||
secret:
|
||||
secretName: manager-bootstrap-credentials
|
||||
@ -0,0 +1,19 @@
|
||||
# This patch enables Prometheus scraping for the manager pod.
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
metadata:
|
||||
annotations:
|
||||
prometheus.io/scrape: 'true'
|
||||
spec:
|
||||
containers:
|
||||
# Expose the prometheus metrics on default port
|
||||
- name: manager
|
||||
ports:
|
||||
- containerPort: 8080
|
||||
name: metrics
|
||||
protocol: TCP
|
||||
@ -0,0 +1,15 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: manager-role
|
||||
labels:
|
||||
cluster.x-k8s.io/aggregate-to-manager: "true"
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: manager-rolebinding
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: aggregated-manager-role
|
||||
4
manifests/function/capg/v0.3.0/default/namespace.yaml
Normal file
4
manifests/function/capg/v0.3.0/default/namespace.yaml
Normal file
@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: system
|
||||
31
manifests/function/capg/v0.3.0/kustomization.yaml
Normal file
31
manifests/function/capg/v0.3.0/kustomization.yaml
Normal file
@ -0,0 +1,31 @@
|
||||
namePrefix: capg-
|
||||
|
||||
commonLabels:
|
||||
cluster.x-k8s.io/provider: "infrastructure-gcp"
|
||||
|
||||
bases:
|
||||
- crd
|
||||
- webhook # Disable this if you're not using the webhook functionality.
|
||||
- default
|
||||
- data
|
||||
|
||||
# Enable this when conversion webhooks are implemented
|
||||
#patchesJson6902:
|
||||
#- target:
|
||||
# group: apiextensions.k8s.io
|
||||
# version: v1
|
||||
# kind: CustomResourceDefinition
|
||||
# name: gcpclusters.infrastructure.cluster.x-k8s.io
|
||||
# path: patch_crd_webhook_namespace.yaml
|
||||
#- target:
|
||||
# group: apiextensions.k8s.io
|
||||
# version: v1
|
||||
# kind: CustomResourceDefinition
|
||||
# name: gcpmachines.infrastructure.cluster.x-k8s.io
|
||||
# path: patch_crd_webhook_namespace.yaml
|
||||
#- target:
|
||||
# group: apiextensions.k8s.io
|
||||
# version: v1
|
||||
# kind: CustomResourceDefinition
|
||||
# name: gcpmachinetemplates.infrastructure.cluster.x-k8s.io
|
||||
# path: patch_crd_webhook_namespace.yaml
|
||||
@ -0,0 +1,7 @@
|
||||
resources:
|
||||
- manager.yaml
|
||||
|
||||
patchesStrategicMerge:
|
||||
- manager_image_patch.yaml
|
||||
- manager_pull_policy.yaml
|
||||
- manager_auth_proxy_patch.yaml
|
||||
40
manifests/function/capg/v0.3.0/manager/manager.yaml
Normal file
40
manifests/function/capg/v0.3.0/manager/manager.yaml
Normal file
@ -0,0 +1,40 @@
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
labels:
|
||||
control-plane: capg-controller-manager
|
||||
spec:
|
||||
selector:
|
||||
matchLabels:
|
||||
control-plane: capg-controller-manager
|
||||
replicas: 1
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
control-plane: capg-controller-manager
|
||||
spec:
|
||||
containers:
|
||||
- args:
|
||||
- --enable-leader-election
|
||||
image: controller:latest
|
||||
imagePullPolicy: Always
|
||||
name: manager
|
||||
ports:
|
||||
- containerPort: 9440
|
||||
name: healthz
|
||||
protocol: TCP
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /readyz
|
||||
port: healthz
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: healthz
|
||||
terminationGracePeriodSeconds: 10
|
||||
tolerations:
|
||||
- effect: NoSchedule
|
||||
key: node-role.kubernetes.io/master
|
||||
@ -0,0 +1,25 @@
|
||||
# This patch inject a sidecar container which is a HTTP proxy for the controller manager,
|
||||
# it performs RBAC authorization against the Kubernetes API using SubjectAccessReviews.
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: kube-rbac-proxy
|
||||
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.4.1
|
||||
args:
|
||||
- "--secure-listen-address=0.0.0.0:8443"
|
||||
- "--upstream=http://127.0.0.1:8080/"
|
||||
- "--logtostderr=true"
|
||||
- "--v=10"
|
||||
ports:
|
||||
- containerPort: 8443
|
||||
name: https
|
||||
- name: manager
|
||||
args:
|
||||
- "--metrics-addr=127.0.0.1:8080"
|
||||
- "--enable-leader-election"
|
||||
@ -0,0 +1,12 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
# Change the value of image field below to your controller image URL
|
||||
- image: gcr.io/k8s-staging-cluster-api-gcp/cluster-api-gcp-controller:master
|
||||
name: manager
|
||||
@ -0,0 +1,11 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
imagePullPolicy: Always
|
||||
@ -0,0 +1,3 @@
|
||||
- op: replace
|
||||
path: "/spec/conversion/webhook/clientConfig/service/namespace"
|
||||
value: capi-webhook-system
|
||||
13
manifests/function/capg/v0.3.0/rbac/auth_proxy_role.yaml
Normal file
13
manifests/function/capg/v0.3.0/rbac/auth_proxy_role.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: proxy-role
|
||||
rules:
|
||||
- apiGroups: ["authentication.k8s.io"]
|
||||
resources:
|
||||
- tokenreviews
|
||||
verbs: ["create"]
|
||||
- apiGroups: ["authorization.k8s.io"]
|
||||
resources:
|
||||
- subjectaccessreviews
|
||||
verbs: ["create"]
|
||||
@ -0,0 +1,12 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: proxy-rolebinding
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: proxy-role
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: default
|
||||
namespace: system
|
||||
18
manifests/function/capg/v0.3.0/rbac/auth_proxy_service.yaml
Normal file
18
manifests/function/capg/v0.3.0/rbac/auth_proxy_service.yaml
Normal file
@ -0,0 +1,18 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
annotations:
|
||||
prometheus.io/port: "8443"
|
||||
prometheus.io/scheme: https
|
||||
prometheus.io/scrape: "true"
|
||||
labels:
|
||||
control-plane: capg-controller-manager
|
||||
name: controller-manager-metrics-service
|
||||
namespace: system
|
||||
spec:
|
||||
ports:
|
||||
- name: https
|
||||
port: 8443
|
||||
targetPort: https
|
||||
selector:
|
||||
control-plane: capg-controller-manager
|
||||
10
manifests/function/capg/v0.3.0/rbac/kustomization.yaml
Normal file
10
manifests/function/capg/v0.3.0/rbac/kustomization.yaml
Normal file
@ -0,0 +1,10 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- role.yaml
|
||||
- role_binding.yaml
|
||||
- leader_election_role.yaml
|
||||
- leader_election_role_binding.yaml
|
||||
- auth_proxy_service.yaml
|
||||
- auth_proxy_role.yaml
|
||||
- auth_proxy_role_binding.yaml
|
||||
@ -0,0 +1,26 @@
|
||||
# permissions to do leader election.
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
metadata:
|
||||
name: leader-election-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- configmaps
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- create
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- configmaps/status
|
||||
verbs:
|
||||
- get
|
||||
- update
|
||||
- patch
|
||||
@ -0,0 +1,12 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
name: leader-election-rolebinding
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
name: leader-election-role
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: default
|
||||
namespace: system
|
||||
85
manifests/function/capg/v0.3.0/rbac/role.yaml
Normal file
85
manifests/function/capg/v0.3.0/rbac/role.yaml
Normal file
@ -0,0 +1,85 @@
|
||||
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
creationTimestamp: null
|
||||
name: manager-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- events
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- secrets
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- cluster.x-k8s.io
|
||||
resources:
|
||||
- clusters
|
||||
- clusters/status
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- cluster.x-k8s.io
|
||||
resources:
|
||||
- machines
|
||||
- machines/status
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- infrastructure.cluster.x-k8s.io
|
||||
resources:
|
||||
- gcpclusters
|
||||
verbs:
|
||||
- create
|
||||
- delete
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- infrastructure.cluster.x-k8s.io
|
||||
resources:
|
||||
- gcpclusters/status
|
||||
verbs:
|
||||
- get
|
||||
- patch
|
||||
- update
|
||||
- apiGroups:
|
||||
- infrastructure.cluster.x-k8s.io
|
||||
resources:
|
||||
- gcpmachines
|
||||
verbs:
|
||||
- create
|
||||
- delete
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- infrastructure.cluster.x-k8s.io
|
||||
resources:
|
||||
- gcpmachines/status
|
||||
verbs:
|
||||
- get
|
||||
- patch
|
||||
- update
|
||||
12
manifests/function/capg/v0.3.0/rbac/role_binding.yaml
Normal file
12
manifests/function/capg/v0.3.0/rbac/role_binding.yaml
Normal file
@ -0,0 +1,12 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: manager-rolebinding
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: manager-role
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: default
|
||||
namespace: system
|
||||
42
manifests/function/capg/v0.3.0/webhook/kustomization.yaml
Normal file
42
manifests/function/capg/v0.3.0/webhook/kustomization.yaml
Normal file
@ -0,0 +1,42 @@
|
||||
namespace: capi-webhook-system
|
||||
|
||||
resources:
|
||||
- manifests.yaml
|
||||
- service.yaml
|
||||
- ../certmanager
|
||||
- ../manager
|
||||
|
||||
configurations:
|
||||
- kustomizeconfig.yaml
|
||||
|
||||
patchesStrategicMerge:
|
||||
- manager_webhook_patch.yaml
|
||||
- webhookcainjection_patch.yaml # Disable this value if you don't have any defaulting or validation webhook. If you don't know, you can check if the manifests.yaml file in the same directory has any contents.
|
||||
|
||||
vars:
|
||||
- name: CERTIFICATE_NAMESPACE # namespace of the certificate CR
|
||||
objref:
|
||||
kind: Certificate
|
||||
group: cert-manager.io
|
||||
version: v1alpha2
|
||||
name: serving-cert # this name should match the one in certificate.yaml
|
||||
fieldref:
|
||||
fieldpath: metadata.namespace
|
||||
- name: CERTIFICATE_NAME
|
||||
objref:
|
||||
kind: Certificate
|
||||
group: cert-manager.io
|
||||
version: v1alpha2
|
||||
name: serving-cert # this name should match the one in certificate.yaml
|
||||
- name: SERVICE_NAMESPACE # namespace of the service
|
||||
objref:
|
||||
kind: Service
|
||||
version: v1
|
||||
name: webhook-service
|
||||
fieldref:
|
||||
fieldpath: metadata.namespace
|
||||
- name: SERVICE_NAME
|
||||
objref:
|
||||
kind: Service
|
||||
version: v1
|
||||
name: webhook-service
|
||||
27
manifests/function/capg/v0.3.0/webhook/kustomizeconfig.yaml
Normal file
27
manifests/function/capg/v0.3.0/webhook/kustomizeconfig.yaml
Normal file
@ -0,0 +1,27 @@
|
||||
# the following config is for teaching kustomize where to look at when substituting vars.
|
||||
# It requires kustomize v2.1.0 or newer to work properly.
|
||||
nameReference:
|
||||
- kind: Service
|
||||
version: v1
|
||||
fieldSpecs:
|
||||
- kind: MutatingWebhookConfiguration
|
||||
group: admissionregistration.k8s.io
|
||||
path: webhooks/clientConfig/service/name
|
||||
- kind: ValidatingWebhookConfiguration
|
||||
group: admissionregistration.k8s.io
|
||||
path: webhooks/clientConfig/service/name
|
||||
|
||||
namespace:
|
||||
- kind: MutatingWebhookConfiguration
|
||||
group: admissionregistration.k8s.io
|
||||
path: webhooks/clientConfig/service/namespace
|
||||
create: true
|
||||
- kind: ValidatingWebhookConfiguration
|
||||
group: admissionregistration.k8s.io
|
||||
path: webhooks/clientConfig/service/namespace
|
||||
create: true
|
||||
|
||||
varReference:
|
||||
- path: metadata/annotations
|
||||
- kind: Deployment
|
||||
path: spec/template/spec/volumes/secret/secretName
|
||||
@ -0,0 +1,26 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
args:
|
||||
- "--metrics-addr=127.0.0.1:8080"
|
||||
- "--webhook-port=9443"
|
||||
ports:
|
||||
- containerPort: 9443
|
||||
name: webhook-server
|
||||
protocol: TCP
|
||||
volumeMounts:
|
||||
- mountPath: /tmp/k8s-webhook-server/serving-certs
|
||||
name: cert
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: cert
|
||||
secret:
|
||||
defaultMode: 420
|
||||
secretName: $(SERVICE_NAME)-cert
|
||||
46
manifests/function/capg/v0.3.0/webhook/manifests.yaml
Normal file
46
manifests/function/capg/v0.3.0/webhook/manifests.yaml
Normal file
@ -0,0 +1,46 @@
|
||||
|
||||
---
|
||||
apiVersion: admissionregistration.k8s.io/v1beta1
|
||||
kind: ValidatingWebhookConfiguration
|
||||
metadata:
|
||||
creationTimestamp: null
|
||||
name: validating-webhook-configuration
|
||||
webhooks:
|
||||
- clientConfig:
|
||||
caBundle: Cg==
|
||||
service:
|
||||
name: webhook-service
|
||||
namespace: system
|
||||
path: /validate-infrastructure-cluster-x-k8s-io-v1alpha3-gcpmachine
|
||||
failurePolicy: Fail
|
||||
matchPolicy: Equivalent
|
||||
name: validation.gcpmachine.infrastructure.cluster.x-k8s.io
|
||||
rules:
|
||||
- apiGroups:
|
||||
- infrastructure.cluster.x-k8s.io
|
||||
apiVersions:
|
||||
- v1alpha3
|
||||
operations:
|
||||
- CREATE
|
||||
- UPDATE
|
||||
resources:
|
||||
- gcpmachines
|
||||
- clientConfig:
|
||||
caBundle: Cg==
|
||||
service:
|
||||
name: webhook-service
|
||||
namespace: system
|
||||
path: /validate-infrastructure-cluster-x-k8s-io-v1alpha3-gcpmachinetemplate
|
||||
failurePolicy: Fail
|
||||
matchPolicy: Equivalent
|
||||
name: validation.gcpmachinetemplate.infrastructure.x-k8s.io
|
||||
rules:
|
||||
- apiGroups:
|
||||
- infrastructure.cluster.x-k8s.io
|
||||
apiVersions:
|
||||
- v1alpha3
|
||||
operations:
|
||||
- CREATE
|
||||
- UPDATE
|
||||
resources:
|
||||
- gcpmachinetemplates
|
||||
9
manifests/function/capg/v0.3.0/webhook/service.yaml
Normal file
9
manifests/function/capg/v0.3.0/webhook/service.yaml
Normal file
@ -0,0 +1,9 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: webhook-service
|
||||
namespace: system
|
||||
spec:
|
||||
ports:
|
||||
- port: 443
|
||||
targetPort: webhook-server
|
||||
@ -0,0 +1,16 @@
|
||||
# This patch add annotation to admission webhook config and
|
||||
# the variables $(CERTIFICATE_NAMESPACE) and $(CERTIFICATE_NAME) will be substituted by kustomize.
|
||||
# uncomment the following lines to enable mutating webhook
|
||||
#apiVersion: admissionregistration.k8s.io/v1beta1
|
||||
#kind: MutatingWebhookConfiguration
|
||||
#metadata:
|
||||
# name: mutating-webhook-configuration
|
||||
# annotations:
|
||||
# cert-manager.k8s.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
---
|
||||
apiVersion: admissionregistration.k8s.io/v1beta1
|
||||
kind: ValidatingWebhookConfiguration
|
||||
metadata:
|
||||
name: validating-webhook-configuration
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
29
manifests/function/k8scontrol-capg/cluster.yaml
Normal file
29
manifests/function/k8scontrol-capg/cluster.yaml
Normal file
@ -0,0 +1,29 @@
|
||||
---
|
||||
apiVersion: cluster.x-k8s.io/v1alpha3
|
||||
kind: Cluster
|
||||
metadata:
|
||||
name: "gtc"
|
||||
namespace: default
|
||||
spec:
|
||||
clusterNetwork:
|
||||
pods:
|
||||
cidrBlocks: ["192.168.0.0/16"]
|
||||
infrastructureRef:
|
||||
apiVersion: infrastructure.cluster.x-k8s.io/v1alpha3
|
||||
kind: GCPCluster
|
||||
name: "gtc"
|
||||
controlPlaneRef:
|
||||
kind: KubeadmControlPlane
|
||||
apiVersion: controlplane.cluster.x-k8s.io/v1alpha3
|
||||
name: "gtc-control-plane"
|
||||
---
|
||||
apiVersion: infrastructure.cluster.x-k8s.io/v1alpha3
|
||||
kind: GCPCluster
|
||||
metadata:
|
||||
name: "gtc"
|
||||
namespace: default
|
||||
spec:
|
||||
project: "${GCP_PROJECT}"
|
||||
region: "${GCP_REGION}"
|
||||
network:
|
||||
name: "${GCP_NETWORK_NAME}"
|
||||
44
manifests/function/k8scontrol-capg/controlplane.yaml
Normal file
44
manifests/function/k8scontrol-capg/controlplane.yaml
Normal file
@ -0,0 +1,44 @@
|
||||
kind: KubeadmControlPlane
|
||||
apiVersion: controlplane.cluster.x-k8s.io/v1alpha3
|
||||
metadata:
|
||||
name: "gtc-control-plane"
|
||||
namespace: default
|
||||
spec:
|
||||
replicas: "${CONTROL_PLANE_MACHINE_COUNT}"
|
||||
infrastructureTemplate:
|
||||
kind: GCPMachineTemplate
|
||||
apiVersion: infrastructure.cluster.x-k8s.io/v1alpha3
|
||||
name: "gtc-control-plane"
|
||||
kubeadmConfigSpec:
|
||||
initConfiguration:
|
||||
nodeRegistration:
|
||||
name: '{{ ds.meta_data.local_hostname.split(".")[0] }}'
|
||||
kubeletExtraArgs:
|
||||
cloud-provider: gce
|
||||
clusterConfiguration:
|
||||
apiServer:
|
||||
timeoutForControlPlane: 20m
|
||||
extraArgs:
|
||||
cloud-provider: gce
|
||||
controllerManager:
|
||||
extraArgs:
|
||||
cloud-provider: gce
|
||||
allocate-node-cidrs: "false"
|
||||
joinConfiguration:
|
||||
nodeRegistration:
|
||||
name: '{{ ds.meta_data.local_hostname.split(".")[0] }}'
|
||||
kubeletExtraArgs:
|
||||
cloud-provider: gce
|
||||
postKubeadmCommands:
|
||||
- sudo kubectl --kubeconfig /etc/kubernetes/admin.conf apply -f https://docs.projectcalico.org/v3.15/manifests/calico.yaml
|
||||
version: "v1.16.14"
|
||||
---
|
||||
kind: GCPMachineTemplate
|
||||
apiVersion: infrastructure.cluster.x-k8s.io/v1alpha3
|
||||
metadata:
|
||||
name: "gtc-control-plane"
|
||||
namespace: default
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
instanceType: "${GCP_CONTROL_PLANE_MACHINE_TYPE}"
|
||||
5
manifests/function/k8scontrol-capg/kustomization.yaml
Executable file
5
manifests/function/k8scontrol-capg/kustomization.yaml
Executable file
@ -0,0 +1,5 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- cluster.yaml
|
||||
- controlplane.yaml
|
||||
4
manifests/function/workers-capg/kustomization.yaml
Executable file
4
manifests/function/workers-capg/kustomization.yaml
Executable file
@ -0,0 +1,4 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- workers.yaml
|
||||
48
manifests/function/workers-capg/workers.yaml
Normal file
48
manifests/function/workers-capg/workers.yaml
Normal file
@ -0,0 +1,48 @@
|
||||
apiVersion: cluster.x-k8s.io/v1alpha3
|
||||
kind: MachineDeployment
|
||||
metadata:
|
||||
name: "gtc-md-0"
|
||||
namespace: default
|
||||
spec:
|
||||
clusterName: "gtc"
|
||||
replicas: "${WORKER_MACHINE_COUNT}"
|
||||
selector:
|
||||
matchLabels:
|
||||
template:
|
||||
spec:
|
||||
clusterName: "gtc"
|
||||
failureDomain: "${GCP_REGION}"
|
||||
version: "v1.16.14"
|
||||
bootstrap:
|
||||
configRef:
|
||||
name: "gtc-md-0"
|
||||
apiVersion: bootstrap.cluster.x-k8s.io/v1alpha3
|
||||
kind: KubeadmConfigTemplate
|
||||
infrastructureRef:
|
||||
name: "gtc-md-0"
|
||||
apiVersion: infrastructure.cluster.x-k8s.io/v1alpha3
|
||||
kind: GCPMachineTemplate
|
||||
---
|
||||
apiVersion: infrastructure.cluster.x-k8s.io/v1alpha3
|
||||
kind: GCPMachineTemplate
|
||||
metadata:
|
||||
name: "gtc-md-0"
|
||||
namespace: default
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
instanceType: "${GCP_NODE_MACHINE_TYPE}"
|
||||
---
|
||||
apiVersion: bootstrap.cluster.x-k8s.io/v1alpha3
|
||||
kind: KubeadmConfigTemplate
|
||||
metadata:
|
||||
name: "gtc-md-0"
|
||||
namespace: default
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
joinConfiguration:
|
||||
nodeRegistration:
|
||||
name: '{{ ds.meta_data.local_hostname.split(".")[0] }}'
|
||||
kubeletExtraArgs:
|
||||
cloud-provider: gce
|
||||
39
manifests/site/gcp-test-site/shared/clusterctl/clusterctl.yaml
Executable file
39
manifests/site/gcp-test-site/shared/clusterctl/clusterctl.yaml
Executable file
@ -0,0 +1,39 @@
|
||||
apiVersion: airshipit.org/v1alpha1
|
||||
kind: Clusterctl
|
||||
metadata:
|
||||
labels:
|
||||
airshipit.org/deploy-k8s: "false"
|
||||
name: clusterctl-v1
|
||||
init-options:
|
||||
core-provider: "cluster-api:v0.3.3"
|
||||
bootstrap-providers:
|
||||
- "kubeadm:v0.3.3"
|
||||
infrastructure-providers:
|
||||
- "gcp:v0.3.0"
|
||||
control-plane-providers:
|
||||
- "kubeadm:v0.3.3"
|
||||
providers:
|
||||
- name: "gcp"
|
||||
type: "InfrastructureProvider"
|
||||
variable-substitution: true
|
||||
versions:
|
||||
v0.3.0: manifests/function/capg/v0.3.0
|
||||
- name: "kubeadm"
|
||||
type: "BootstrapProvider"
|
||||
versions:
|
||||
v0.3.3: manifests/function/cabpk/v0.3.3
|
||||
- name: "cluster-api"
|
||||
type: "CoreProvider"
|
||||
versions:
|
||||
v0.3.3: manifests/function/capi/v0.3.3
|
||||
- name: "kubeadm"
|
||||
type: "ControlPlaneProvider"
|
||||
versions:
|
||||
v0.3.3: manifests/function/cacpk/v0.3.3
|
||||
additional-vars:
|
||||
GCP_CONTROL_PLANE_MACHINE_TYPE: "YmFzZTY0X2VuY29kZWRfdmFsdWU="
|
||||
GCP_NODE_MACHINE_TYPE: "YmFzZTY0X2VuY29kZWRfdmFsdWU="
|
||||
GCP_PROJECT: "YmFzZTY0X2VuY29kZWRfdmFsdWU="
|
||||
GCP_REGION: "YmFzZTY0X2VuY29kZWRfdmFsdWU="
|
||||
GCP_NETWORK_NAME: "YmFzZTY0X2VuY29kZWRfdmFsdWU="
|
||||
GCP_B64ENCODED_CREDENTIALS: "YmFzZTY0X2VuY29kZWRfdmFsdWU="
|
||||
2
manifests/site/gcp-test-site/shared/clusterctl/kustomization.yaml
Executable file
2
manifests/site/gcp-test-site/shared/clusterctl/kustomization.yaml
Executable file
@ -0,0 +1,2 @@
|
||||
resources:
|
||||
- clusterctl.yaml
|
||||
43
manifests/site/gcp-test-site/target/controlplane/kustomization.yaml
Executable file
43
manifests/site/gcp-test-site/target/controlplane/kustomization.yaml
Executable file
@ -0,0 +1,43 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- ../../../../function/k8scontrol-capg
|
||||
|
||||
patchesJson6902:
|
||||
|
||||
- target:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
version: v1alpha3
|
||||
kind: GCPCluster
|
||||
name: "gtc"
|
||||
path: project_name.json
|
||||
|
||||
- target:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
version: v1alpha3
|
||||
kind: GCPCluster
|
||||
name: "gtc"
|
||||
path: region_name.json
|
||||
|
||||
- target:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
version: v1alpha3
|
||||
kind: GCPCluster
|
||||
name: "gtc"
|
||||
path: network_name.json
|
||||
|
||||
- target:
|
||||
group: controlplane.cluster.x-k8s.io
|
||||
version: v1alpha3
|
||||
kind: KubeadmControlPlane
|
||||
name: "gtc-control-plane"
|
||||
path: machine_count.json
|
||||
|
||||
|
||||
- target:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
version: v1alpha3
|
||||
kind: GCPMachineTemplate
|
||||
name: "gtc-control-plane"
|
||||
path: machine_type.json
|
||||
|
||||
@ -0,0 +1,3 @@
|
||||
[
|
||||
{ "op": "replace","path": "/spec/replicas","value": 1 }
|
||||
]
|
||||
@ -0,0 +1,3 @@
|
||||
[
|
||||
{ "op": "replace","path": "/spec/template/spec/instanceType","value": "n1-standard-4" }
|
||||
]
|
||||
@ -0,0 +1,3 @@
|
||||
[
|
||||
{ "op": "replace","path": "/spec/network/name","value": "default" }
|
||||
]
|
||||
@ -0,0 +1,3 @@
|
||||
[
|
||||
{ "op": "replace","path": "/spec/project","value": "<project_id>"}
|
||||
]
|
||||
@ -0,0 +1,3 @@
|
||||
[
|
||||
{ "op": "replace","path": "/spec/region","value": "us-west1" }
|
||||
]
|
||||
@ -0,0 +1,4 @@
|
||||
resources:
|
||||
- ../../shared/clusterctl
|
||||
commonLabels:
|
||||
airshipit.org/stage: initinfra
|
||||
@ -0,0 +1,3 @@
|
||||
[
|
||||
{ "op": "replace","path": "/spec/template/spec/failureDomain","value": "us-west1-a" }
|
||||
]
|
||||
28
manifests/site/gcp-test-site/target/workers/kustomization.yaml
Executable file
28
manifests/site/gcp-test-site/target/workers/kustomization.yaml
Executable file
@ -0,0 +1,28 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- ../../../../function/workers-capg
|
||||
|
||||
patchesJson6902:
|
||||
|
||||
# Worker
|
||||
- target:
|
||||
group: cluster.x-k8s.io
|
||||
version: v1alpha3
|
||||
kind: MachineDeployment
|
||||
name: "gtc-md-0"
|
||||
path: failure_domain.json
|
||||
|
||||
- target:
|
||||
group: cluster.x-k8s.io
|
||||
version: v1alpha3
|
||||
kind: MachineDeployment
|
||||
name: "gtc-md-0"
|
||||
path: machine_count.json
|
||||
|
||||
- target:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
version: v1alpha3
|
||||
kind: GCPMachineTemplate
|
||||
name: "gtc-md-0"
|
||||
path: machine_type.json
|
||||
@ -0,0 +1,3 @@
|
||||
[
|
||||
{ "op": "replace","path": "/spec/replicas","value": 1 }
|
||||
]
|
||||
@ -0,0 +1,3 @@
|
||||
[
|
||||
{ "op": "replace","path": "/spec/template/spec/instanceType","value": "n1-standard-4" }
|
||||
]
|
||||
Loading…
Reference in New Issue
Block a user