Split out k8scontrol oidc patching

Prior to this change, VRRP setup and Dex setup was bundled into the
same k8scontrol-ha function.  However, subclusters will require
Dex *without* VRRP, so this change splits them up, into
a k8scontrol-oidc (used directly by the subcluster) and k8scontrol-ha
(which will inherit from k8scontrol-oidc).

Change-Id: Ib55871353f24be031a7bb1cc4550f0db3ad5aff2
Closes: 182
This commit is contained in:
Matt McEuen 2021-06-18 14:41:34 -05:00
parent 11aa4d45a9
commit 4f05c7b729
9 changed files with 29 additions and 16 deletions

View File

@ -1,25 +1,15 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../../airshipctl/manifests/function/k8scontrol
- dex-ca-cert-secret.yaml
namespace: target-infra
resources:
- ../k8scontrol-oidc
patches:
- target:
group: controlplane.cluster.x-k8s.io
version: v1alpha3
kind: KubeadmControlPlane
path: oidc-apiserver-ca-cert.json
- target:
group: controlplane.cluster.x-k8s.io
version: v1alpha3
kind: KubeadmControlPlane
path: vrrp_keepalived_patch.yaml
- target:
group: controlplane.cluster.x-k8s.io
version: v1alpha3
kind: KubeadmControlPlane
path: oidc-apiserver-extra-args.yaml

View File

@ -1,4 +1,3 @@
resources:
- ../../../../../airshipctl/manifests/function/k8scontrol/replacements
- ../../k8scontrol-oidc/replacements
- networking-ha.yaml
- update-dex.yaml

View File

@ -0,0 +1,19 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../../airshipctl/manifests/function/k8scontrol
- dex-ca-cert-secret.yaml
patches:
- target:
group: controlplane.cluster.x-k8s.io
version: v1alpha3
kind: KubeadmControlPlane
path: oidc-apiserver-ca-cert.json
- target:
group: controlplane.cluster.x-k8s.io
version: v1alpha3
kind: KubeadmControlPlane
path: oidc-apiserver-extra-args.yaml

View File

@ -0,0 +1,3 @@
resources:
- ../../../../../airshipctl/manifests/function/k8scontrol/replacements
- update-dex.yaml

View File

@ -2,6 +2,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../../../airshipctl/manifests/function/k8scontrol
# Switch to this once we want to add Dex back in
#- ../../../function/k8scontrol-oidc
patchesJson6902:
- target: