chore: move bootstrap provider to our minimized controller template

This PR will move the bootstrap provider to use our controller code,
getting rid of some of the headache of using kubebuilder directly.

Signed-off-by: Spencer Smith <[email protected]>

Author: rsmitty

.drone.yml

@@ -1,59 +1,68 @@
+---
+kind: secret
+name: kubeconfig
+
+get:
+  path: buildx
+  name: kubeconfig
+
 ---
 kind: pipeline
 name: default
 
-workspace:
-  base: /go
-  path: src/github.com/talos-systems/cluster-api-bootstrap-provider-talos
-
 services:
   - name: docker
     image: docker:19.03-dind
     entrypoint:
-    - dockerd
+      - dockerd
     command:
-    - --dns=8.8.8.8
-    - --dns=8.8.4.4
-    - --mtu=1440
-    - --log-level=error
+      - --dns=8.8.8.8
+      - --dns=8.8.4.4
+      - --log-level=error
     privileged: true
     volumes:
-    - name: dockersock
-      path: /var/run
-    - name: manifests
-      path: /tmp/manifests
+      - name: docker-socket
+        path: /var/run
 
 steps:
-  - name: fetch
-    image: docker:git
-    commands:
-      - git fetch --tags
-    when:
-      event: tag
-
-  - name: test
+  - name: setup-ci
     image: autonomy/build-container:latest
     commands:
-      - sleep 5
-      - make test
+      - git fetch --tags
+      - apk add coreutils
+      - echo -e "$BUILDX_KUBECONFIG" > /root/.kube/config
+      - docker buildx create --driver kubernetes --driver-opt replicas=2 --driver-opt namespace=ci --driver-opt image=moby/buildkit:v0.6.2 --name ci --buildkitd-flags="--allow-insecure-entitlement security.insecure" --use
+      - docker buildx inspect --bootstrap
+    environment:
+      BUILDX_KUBECONFIG:
+        from_secret: kubeconfig
+    privileged: true
     volumes:
-      - name: dockersock
+      - name: docker-socket
         path: /var/run
-    depends_on:
-      - fetch
+      - name: docker
+        path: /root/.docker/buildx
+      - name: kube
+        path: /root/.kube
 
-  - name: build
+  - name: build-pull-request
     image: autonomy/build-container:latest
     pull: always
     commands:
-      - make docker-build
+      - make
+    when:
+      event:
+        include:
+          - pull_request
     volumes:
-      - name: dockersock
+      - name: docker-socket
         path: /var/run
-    depends_on:
-      - test
+      - name: docker
+        path: /root/.docker/buildx
+      - name: kube
+        path: /root/.kube
 
-  - name: push
+  - name: build-and-publish
     image: autonomy/build-container:latest
     pull: always
     environment:
@@ -62,39 +71,81 @@ steps:
       DOCKER_PASSWORD:
         from_secret: docker_password
     commands:
-      - make login
-      - make docker-push
-    volumes:
-      - name: dockersock
-        path: /var/run
+      - docker login --username "$${DOCKER_USERNAME}" --password "$${DOCKER_PASSWORD}"
+      - make PUSH=true
     when:
       event:
         exclude:
           - pull_request
-    depends_on:
-      - build
+    volumes:
+      - name: docker-socket
+        path: /var/run
+      - name: docker
+        path: /root/.docker/buildx
+      - name: kube
+        path: /root/.kube
+
+  - name: build-release
+    image: autonomy/build-container:latest
+    pull: always
+    commands:
+      - make release
+    when:
+      event:
+        - tag
+    volumes:
+      - name: docker-socket
+        path: /var/run
+      - name: docker
+        path: /root/.docker/buildx
+      - name: kube
+        path: /root/.kube
 
   - name: release
     image: plugins/github-release
     settings:
       api_key:
         from_secret: github_token
-      draft: true
-      files:
-        - /tmp/manifests/*
       checksum:
         - sha256
         - sha512
-    volumes:
-      - name: manifests
-        path: /tmp/manifests
-    depends_on:
-      - push
+      draft: true
+      files:
+        - _out/*
     when:
-      event: tag
+      event:
+        - tag
 
 volumes:
-  - name: dockersock
+  - name: docker-socket
+    temp: {}
+  - name: docker
+    temp: {}
+  - name: kube
     temp: {}
-  - name: manifests
-    temp: {}
+---
+kind: pipeline
+name: notify
+
+clone:
+  disable: true
+
+steps:
+  - name: slack
+    image: plugins/slack
+    settings:
+      webhook:
+        from_secret: slack_webhook
+      channel: proj-talos-maintainers
+    when:
+      status:
+        - success
+        - failure
+
+trigger:
+  status:
+    - success
+    - failure
+
+depends_on:
+  - default

Dockerfile

@@ -1,40 +1,55 @@
-ARG KUBEBUILDER_VERSION=2.0.0
+# syntax = docker/dockerfile-upstream:1.1.4-experimental
 
-FROM golang:1.13-alpine as base
-RUN apk add --no-cache make curl git
-
-FROM base AS modules
+FROM golang:1.13 AS build
 ENV GO111MODULE on
 ENV GOPROXY https://proxy.golang.org
 ENV CGO_ENABLED 0
-WORKDIR /go/src/github.com/talos-systems/cluster-api-bootstrap-provider-talos
+WORKDIR /tmp
+RUN go get sigs.k8s.io/controller-tools/cmd/[email protected]
+WORKDIR /src
 COPY ./go.mod ./
 COPY ./go.sum ./
 RUN go mod download
 RUN go mod verify
-COPY ./api ./api
-COPY ./config ./config
-COPY ./controllers ./controllers
-COPY ./hack ./hack
-COPY main.go main.go
-COPY Makefile Makefile
-COPY PROJECT PROJECT
-RUN go mod vendor
+COPY ./ ./
 RUN go list -mod=readonly all >/dev/null
 RUN ! go mod tidy -v 2>&1 | grep .
 
-FROM modules AS test
-RUN mkdir -p /usr/local/kubebuilder/bin
-ARG KUBEBUILDER_VERSION
-RUN curl -L https://github.com/kubernetes-sigs/kubebuilder/releases/download/v${KUBEBUILDER_VERSION}/kubebuilder_${KUBEBUILDER_VERSION}_linux_amd64.tar.gz | tar -xvz --strip-components=2 -C /usr/local/kubebuilder/bin
-RUN make generate fmt vet manifests && go test ./... -coverprofile cover.out
+FROM build AS manifests-build
+ARG NAME
+RUN controller-gen rbac:roleName=manager-role crd paths="./..." output:rbac:artifacts:config=config/rbac output:crd:artifacts:config=config/crd/bases
+FROM scratch AS manifests
+COPY --from=manifests-build /src/config/crd /config/crd
+COPY --from=manifests-build /src/config/rbac /config/rbac
+
+FROM build AS generate-build
+RUN controller-gen object:headerFile=./hack/boilerplate.go.txt paths="./..."
+FROM scratch AS generate
+COPY --from=generate-build /src/api /api
+
+FROM k8s.gcr.io/hyperkube:v1.17.0 AS release-build
+RUN apt update -y \
+  && apt install -y curl \
+  && curl -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv3.4.0/kustomize_v3.4.0_linux_amd64.tar.gz \
+  && tar -xf kustomize_v3.4.0_linux_amd64.tar.gz -C /usr/local/bin \
+  && rm kustomize_v3.4.0_linux_amd64.tar.gz
+COPY ./config ./config
+ARG REGISTRY_AND_USERNAME
+ARG NAME
+ARG TAG
+RUN cd config/manager \
+  && kustomize edit set image controller=${REGISTRY_AND_USERNAME}/${NAME}:${TAG} \
+  && cd - \
+  && kubectl kustomize config >/release.yaml
+FROM scratch AS release
+COPY --from=release-build /release.yaml /release.yaml
 
-# Build the manager binary
-FROM test AS build
-RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build -a -o manager main.go
+FROM build AS binary
+RUN --mount=type=cache,target=/root/.cache/go-build GOOS=linux go build -ldflags "-s -w" -o /manager
+RUN chmod +x /manager
 
-# Copy the controller-manager into a thin image
-FROM gcr.io/distroless/static:latest
-WORKDIR /
-COPY --from=build /go/src/github.com/talos-systems/cluster-api-bootstrap-provider-talos/manager .
-ENTRYPOINT ["/manager"]
+FROM scratch AS container
+COPY --from=docker.io/autonomy/ca-certificates:v0.1.0 / /
+COPY --from=docker.io/autonomy/fhs:v0.1.0 / /
+COPY --from=binary /manager /manager
+ENTRYPOINT [ "/manager" ]