Merge pull request #10 from rsmitty/master

chore: move bootstrap provider to our minimized controller template

Author: rsmitty

.drone.yml

@@ -1,59 +1,68 @@
+---
+kind: secret
+name: kubeconfig
+
+get:
+  path: buildx
+  name: kubeconfig
+
 ---
 kind: pipeline
 name: default
 
-workspace:
-  base: /go
-  path: src/github.com/talos-systems/cluster-api-bootstrap-provider-talos
-
 services:
   - name: docker
     image: docker:19.03-dind
     entrypoint:
-    - dockerd
+      - dockerd
     command:
-    - --dns=8.8.8.8
-    - --dns=8.8.4.4
-    - --mtu=1440
-    - --log-level=error
+      - --dns=8.8.8.8
+      - --dns=8.8.4.4
+      - --log-level=error
     privileged: true
     volumes:
-    - name: dockersock
-      path: /var/run
-    - name: manifests
-      path: /tmp/manifests
+      - name: docker-socket
+        path: /var/run
 
 steps:
-  - name: fetch
-    image: docker:git
-    commands:
-      - git fetch --tags
-    when:
-      event: tag
-
-  - name: test
+  - name: setup-ci
     image: autonomy/build-container:latest
     commands:
-      - sleep 5
-      - make test
+      - git fetch --tags
+      - apk add coreutils
+      - echo -e "$BUILDX_KUBECONFIG" > /root/.kube/config
+      - docker buildx create --driver kubernetes --driver-opt replicas=2 --driver-opt namespace=ci --driver-opt image=moby/buildkit:v0.6.2 --name ci --buildkitd-flags="--allow-insecure-entitlement security.insecure" --use
+      - docker buildx inspect --bootstrap
+    environment:
+      BUILDX_KUBECONFIG:
+        from_secret: kubeconfig
+    privileged: true
     volumes:
-      - name: dockersock
+      - name: docker-socket
         path: /var/run
-    depends_on:
-      - fetch
+      - name: docker
+        path: /root/.docker/buildx
+      - name: kube
+        path: /root/.kube
 
-  - name: build
+  - name: build-pull-request
     image: autonomy/build-container:latest
     pull: always
     commands:
-      - make docker-build
+      - make
+    when:
+      event:
+        include:
+          - pull_request
     volumes:
-      - name: dockersock
+      - name: docker-socket
         path: /var/run
-    depends_on:
-      - test
+      - name: docker
+        path: /root/.docker/buildx
+      - name: kube
+        path: /root/.kube
 
-  - name: push
+  - name: build-and-publish
     image: autonomy/build-container:latest
     pull: always
     environment:
@@ -62,39 +71,81 @@ steps:
       DOCKER_PASSWORD:
         from_secret: docker_password
     commands:
-      - make login
-      - make docker-push
-    volumes:
-      - name: dockersock
-        path: /var/run
+      - docker login --username "$${DOCKER_USERNAME}" --password "$${DOCKER_PASSWORD}"
+      - make PUSH=true
     when:
       event:
         exclude:
           - pull_request
-    depends_on:
-      - build
+    volumes:
+      - name: docker-socket
+        path: /var/run
+      - name: docker
+        path: /root/.docker/buildx
+      - name: kube
+        path: /root/.kube
+
+  - name: build-release
+    image: autonomy/build-container:latest
+    pull: always
+    commands:
+      - make release
+    when:
+      event:
+        - tag
+    volumes:
+      - name: docker-socket
+        path: /var/run
+      - name: docker
+        path: /root/.docker/buildx
+      - name: kube
+        path: /root/.kube
 
   - name: release
     image: plugins/github-release
     settings:
       api_key:
         from_secret: github_token
-      draft: true
-      files:
-        - /tmp/manifests/*
       checksum:
         - sha256
         - sha512
-    volumes:
-      - name: manifests
-        path: /tmp/manifests
-    depends_on:
-      - push
+      draft: true
+      files:
+        - _out/*
     when:
-      event: tag
+      event:
+        - tag
 
 volumes:
-  - name: dockersock
+  - name: docker-socket
+    temp: {}
+  - name: docker
+    temp: {}
+  - name: kube
     temp: {}
-  - name: manifests
-    temp: {}
+---
+kind: pipeline
+name: notify
+
+clone:
+  disable: true
+
+steps:
+  - name: slack
+    image: plugins/slack
+    settings:
+      webhook:
+        from_secret: slack_webhook
+      channel: proj-talos-maintainers
+    when:
+      status:
+        - success
+        - failure
+
+trigger:
+  status:
+    - success
+    - failure
+
+depends_on:
+  - default

Dockerfile

@@ -1,40 +1,55 @@
-ARG KUBEBUILDER_VERSION=2.0.0
+# syntax = docker/dockerfile-upstream:1.1.4-experimental
 
-FROM golang:1.13-alpine as base
-RUN apk add --no-cache make curl git
-
-FROM base AS modules
+FROM golang:1.13 AS build
 ENV GO111MODULE on
 ENV GOPROXY https://proxy.golang.org
 ENV CGO_ENABLED 0
-WORKDIR /go/src/github.com/talos-systems/cluster-api-bootstrap-provider-talos
+WORKDIR /tmp
+RUN go get sigs.k8s.io/controller-tools/cmd/[email protected]
+WORKDIR /src
 COPY ./go.mod ./
 COPY ./go.sum ./
 RUN go mod download
 RUN go mod verify
-COPY ./api ./api
-COPY ./config ./config
-COPY ./controllers ./controllers
-COPY ./hack ./hack
-COPY main.go main.go
-COPY Makefile Makefile
-COPY PROJECT PROJECT
-RUN go mod vendor
+COPY ./ ./
 RUN go list -mod=readonly all >/dev/null
 RUN ! go mod tidy -v 2>&1 | grep .
 
-FROM modules AS test
-RUN mkdir -p /usr/local/kubebuilder/bin
-ARG KUBEBUILDER_VERSION
-RUN curl -L https://github.com/kubernetes-sigs/kubebuilder/releases/download/v${KUBEBUILDER_VERSION}/kubebuilder_${KUBEBUILDER_VERSION}_linux_amd64.tar.gz | tar -xvz --strip-components=2 -C /usr/local/kubebuilder/bin
-RUN make generate fmt vet manifests && go test ./... -coverprofile cover.out
+FROM build AS manifests-build
+ARG NAME
+RUN controller-gen rbac:roleName=manager-role crd paths="./..." output:rbac:artifacts:config=config/rbac output:crd:artifacts:config=config/crd/bases
+FROM scratch AS manifests
+COPY --from=manifests-build /src/config/crd /config/crd
+COPY --from=manifests-build /src/config/rbac /config/rbac
+
+FROM build AS generate-build
+RUN controller-gen object:headerFile=./hack/boilerplate.go.txt paths="./..."
+FROM scratch AS generate
+COPY --from=generate-build /src/api /api
+
+FROM k8s.gcr.io/hyperkube:v1.17.0 AS release-build
+RUN apt update -y \
+  && apt install -y curl \
+  && curl -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv3.4.0/kustomize_v3.4.0_linux_amd64.tar.gz \
+  && tar -xf kustomize_v3.4.0_linux_amd64.tar.gz -C /usr/local/bin \
+  && rm kustomize_v3.4.0_linux_amd64.tar.gz
+COPY ./config ./config
+ARG REGISTRY_AND_USERNAME
+ARG NAME
+ARG TAG
+RUN cd config/manager \
+  && kustomize edit set image controller=${REGISTRY_AND_USERNAME}/${NAME}:${TAG} \
+  && cd - \
+  && kubectl kustomize config >/release.yaml
+FROM scratch AS release
+COPY --from=release-build /release.yaml /release.yaml
 
-# Build the manager binary
-FROM test AS build
-RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build -a -o manager main.go
+FROM build AS binary
+RUN --mount=type=cache,target=/root/.cache/go-build GOOS=linux go build -ldflags "-s -w" -o /manager
+RUN chmod +x /manager
 
-# Copy the controller-manager into a thin image
-FROM gcr.io/distroless/static:latest
-WORKDIR /
-COPY --from=build /go/src/github.com/talos-systems/cluster-api-bootstrap-provider-talos/manager .
-ENTRYPOINT ["/manager"]
+FROM scratch AS container
+COPY --from=docker.io/autonomy/ca-certificates:v0.1.0 / /
+COPY --from=docker.io/autonomy/fhs:v0.1.0 / /
+COPY --from=binary /manager /manager
+ENTRYPOINT [ "/manager" ]