feat: use v0.9.4 metal-ccm instead of deleted branch

Author: vknabel

capi-lab/metal-ccm.yaml

@@ -20,105 +20,105 @@ kind: ClusterRole
 metadata:
   name: cloud-controller-manager
 rules:
-- apiGroups:
-    - ""
-  resources:
-    - events
-  verbs:
-    - create
-    - patch
-    - update
-- apiGroups:
-    - ""
-  resources:
-    - nodes
-  verbs:
-    - "*"
-- apiGroups:
-    - ""
-  resources:
-    - nodes/status
-  verbs:
-    - patch
-- apiGroups:
-    - ""
-  resources:
-    - services
-    - services/status
-    - endpoints
-  verbs:
-    - get
-    - list
-    - patch
-    - update
-    - watch
-- apiGroups:
-    - ""
-  resources:
-    - serviceaccounts
-    - serviceaccounts/token
-  verbs:
-    - create
-    - get
-    - list
-    - watch
-- apiGroups:
-    - ""
-  resources:
-    - secrets
-    - configmaps
-  verbs:
-    - get
-    - list
-    - watch
-    - update
-    - create
-    - patch
-    - delete
-- apiGroups:
-    - coordination.k8s.io
-  resources:
-    - leases
-  verbs:
-    - get
-    - create
-    - update
-- apiGroups:
-    - metallb.io
-  resources:
-    - bgppeers
-  verbs:
-    - create
-    - delete
-    - get
-    - list
-    - patch
-    - update
-    - watch
-- apiGroups:
-  - metallb.io
-  resources:
-    - ipaddresspools
-  verbs:
-    - create
-    - delete
-    - get
-    - list
-    - patch
-    - update
-    - watch
-- apiGroups:
-    - metallb.io
-  resources:
-    - bgpadvertisements
-  verbs:
-    - create
-    - delete
-    - get
-    - list
-    - patch
-    - update
-    - watch
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - create
+      - patch
+      - update
+  - apiGroups:
+      - ""
+    resources:
+      - nodes
+    verbs:
+      - "*"
+  - apiGroups:
+      - ""
+    resources:
+      - nodes/status
+    verbs:
+      - patch
+  - apiGroups:
+      - ""
+    resources:
+      - services
+      - services/status
+      - endpoints
+    verbs:
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - serviceaccounts
+      - serviceaccounts/token
+    verbs:
+      - create
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+      - configmaps
+    verbs:
+      - get
+      - list
+      - watch
+      - update
+      - create
+      - patch
+      - delete
+  - apiGroups:
+      - coordination.k8s.io
+    resources:
+      - leases
+    verbs:
+      - get
+      - create
+      - update
+  - apiGroups:
+      - metallb.io
+    resources:
+      - bgppeers
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - metallb.io
+    resources:
+      - ipaddresspools
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - metallb.io
+    resources:
+      - bgpadvertisements
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -129,9 +129,9 @@ roleRef:
   kind: ClusterRole
   name: cloud-controller-manager
 subjects:
-- kind: ServiceAccount
-  name: cloud-controller-manager
-  namespace: kube-system
+  - kind: ServiceAccount
+    name: cloud-controller-manager
+    namespace: kube-system
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -153,78 +153,78 @@ spec:
         app: cloud-controller-manager
     spec:
       containers:
-      - command:
-        - ./metal-cloud-controller-manager
-        - --cluster-cidr=10.240.0.0/12
-        - --cluster-name=
-        - --concurrent-service-syncs=10
-        - --leader-elect=true
-        - --secure-port=10258
-        - --use-service-account-credentials
-        - --v=2
-        env:
-        - name: METAL_API_URL
-          valueFrom:
-            secretKeyRef:
-              key: api-url
-              name: cloud-controller-manager
-        - name: METAL_AUTH_HMAC
-          valueFrom:
-            secretKeyRef:
-              key: api-hmac
-              name: cloud-controller-manager
-        - name: METAL_AUTH_HMAC_AUTH_TYPE
-          valueFrom:
-            secretKeyRef:
-              key: api-hmac-auth-type
-              name: cloud-controller-manager
-        - name: METAL_PROJECT_ID
-          value: 00000000-0000-0000-0000-000000000001
-        - name: METAL_PARTITION_ID
-          value: mini-lab
-        # associates service type load balancer ips with this cluster:
-        - name: METAL_CLUSTER_ID
-          value: ${METAL_CLUSTER_ID}
-        - name: METAL_DEFAULT_EXTERNAL_NETWORK_ID
-          value: internet-mini-lab
-        - name: METAL_ADDITIONAL_NETWORKS
-          value: internet-mini-lab,${METAL_NODE_NETWORK_ID}
-        - name: METAL_SSH_PUBLICKEY
-          value: ""
-        image: ghcr.io/metal-stack/metal-ccm:run-with-edit-privileges
-        imagePullPolicy: IfNotPresent
-        livenessProbe:
-          failureThreshold: 2
-          httpGet:
-            path: /healthz
-            port: 10258
-            scheme: HTTPS
-          initialDelaySeconds: 15
-          periodSeconds: 10
-          successThreshold: 1
-          timeoutSeconds: 15
-        name: cloud-controller-manager
-        resources:
-          limits:
-            cpu: 250m
-            memory: 256Mi
-          requests:
-            cpu: 100m
-            memory: 64Mi
+        - command:
+            - ./metal-cloud-controller-manager
+            - --cluster-cidr=10.240.0.0/12
+            - --cluster-name=
+            - --concurrent-service-syncs=10
+            - --leader-elect=true
+            - --secure-port=10258
+            - --use-service-account-credentials
+            - --v=2
+          env:
+            - name: METAL_API_URL
+              valueFrom:
+                secretKeyRef:
+                  key: api-url
+                  name: cloud-controller-manager
+            - name: METAL_AUTH_HMAC
+              valueFrom:
+                secretKeyRef:
+                  key: api-hmac
+                  name: cloud-controller-manager
+            - name: METAL_AUTH_HMAC_AUTH_TYPE
+              valueFrom:
+                secretKeyRef:
+                  key: api-hmac-auth-type
+                  name: cloud-controller-manager
+            - name: METAL_PROJECT_ID
+              value: 00000000-0000-0000-0000-000000000001
+            - name: METAL_PARTITION_ID
+              value: mini-lab
+            # associates service type load balancer ips with this cluster:
+            - name: METAL_CLUSTER_ID
+              value: ${METAL_CLUSTER_ID}
+            - name: METAL_DEFAULT_EXTERNAL_NETWORK_ID
+              value: internet-mini-lab
+            - name: METAL_ADDITIONAL_NETWORKS
+              value: internet-mini-lab,${METAL_NODE_NETWORK_ID}
+            - name: METAL_SSH_PUBLICKEY
+              value: ""
+          image: ghcr.io/metal-stack/metal-ccm:v0.9.4
+          imagePullPolicy: IfNotPresent
+          livenessProbe:
+            failureThreshold: 2
+            httpGet:
+              path: /healthz
+              port: 10258
+              scheme: HTTPS
+            initialDelaySeconds: 15
+            periodSeconds: 10
+            successThreshold: 1
+            timeoutSeconds: 15
+          name: cloud-controller-manager
+          resources:
+            limits:
+              cpu: 250m
+              memory: 256Mi
+            requests:
+              cpu: 100m
+              memory: 64Mi
       nodeSelector:
         node-role.kubernetes.io/control-plane: ""
       hostNetwork: true
       serviceAccountName: cloud-controller-manager
       tolerations:
-      - effect: NoSchedule
-        operator: Exists
-        key: node-role.kubernetes.io/control-plane
-      - effect: NoSchedule
-        key: node.cloudprovider.kubernetes.io/uninitialized
-        value: "true"
+        - effect: NoSchedule
+          operator: Exists
+          key: node-role.kubernetes.io/control-plane
+        - effect: NoSchedule
+          key: node.cloudprovider.kubernetes.io/uninitialized
+          value: "true"
       restartPolicy: Always
       volumes:
-      - name: cloud-controller-manager
-        secret:
-          defaultMode: 420
-          secretName: cloud-controller-manager
+        - name: cloud-controller-manager
+          secret:
+            defaultMode: 420
+            secretName: cloud-controller-manager