initial commit

config/default/kustomization.yaml

@@ -0,0 +1,6 @@
+bases:
+- ../rbac
+- ../manager
+
+patchesStrategicMerge:
+- manager_credentials_patch.yaml

config/default/manager_credentials_patch.yaml

@@ -0,0 +1,26 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pve-cloud-controller-manager
+  namespace: kube-system
+spec:
+  template:
+    spec:
+      containers:
+      - name: manager
+        env:
+        - name: PVE_API
+          valueFrom:
+            secretKeyRef:
+              key: api
+              name: pvecloud
+        - name: PVE_USER
+          valueFrom:
+            secretKeyRef:
+              key: user
+              name: pvecloud
+        - name: PVE_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              key: password
+              name: pvecloud

config/kustomization.yaml

@@ -0,0 +1,2 @@
+bases:
+- default

config/manager/kustomization.yaml

@@ -0,0 +1,6 @@
+resources:
+- manager.yaml
+
+patchesStrategicMerge:
+- manager_image_patch.yaml
+- manager_pull_policy.yaml

config/manager/manager.yaml

@@ -0,0 +1,48 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pve-cloud-controller-manager
+  namespace: kube-system
+  labels:
+    app: pve-cloud-controller-manager
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: pve-cloud-controller-manager
+  template:
+    metadata:
+      labels:
+        app: pve-cloud-controller-manager
+      annotations:
+        scheduler.alpha.kubernetes.io/critical-pod: ''
+    spec:
+      dnsPolicy: Default
+      serviceAccountName: cloud-controller-manager
+      tolerations:
+      - key: "node.cloudprovider.kubernetes.io/uninitialized"
+        value: "true"
+        effect: "NoSchedule"
+      - key: "CriticalAddonsOnly"
+        operator: "Exists"
+      - key: "node-role.kubernetes.io/master"
+        effect: NoSchedule
+      - key: "node.kubernetes.io/not-ready"
+        effect: "NoSchedule"
+      containers:
+      - args:
+        - --cloud-provider=pve
+        - --leader-elect=false
+        - --allow-untagged-cloud
+        image: controller:latest
+        imagePullPolicy: Always
+        name: manager
+        resources:
+          requests:
+            cpu: 100m
+            memory: 50Mi
+        env:
+        - name: NODE_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: spec.nodeName

config/manager/manager_image_patch.yaml

@@ -0,0 +1,11 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pve-cloud-controller-manager
+  namespace: kube-system
+spec:
+  template:
+    spec:
+      containers:
+      - image: reg.k8s.giftfish.de/library/pve-cloud-controller-manager-amd64:dev
+        name: manager

config/manager/manager_pull_policy.yaml

@@ -0,0 +1,11 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pve-cloud-controller-manager
+  namespace: kube-system
+spec:
+  template:
+    spec:
+      containers:
+      - name: manager
+        imagePullPolicy: Always

config/rbac/kustomization.yaml

@@ -0,0 +1,3 @@
+resources:
+- serviceaccount.yaml
+- role_binding.yaml

config/rbac/role_binding.yaml

@@ -0,0 +1,12 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: system:cloud-controller-manager
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: cloud-controller-manager
+  namespace: kube-system

config/rbac/serviceaccount.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cloud-controller-manager
+  namespace: kube-system