feat: support CAPI v1alpha4

This PR will add all of the changes necessary for supporting CAPI v1alpha4 resources.

Signed-off-by: Gerard de Leeuw <[email protected]>
Signed-off-by: Artem Chernyshev <[email protected]>

Author: lion7

Dockerfile

@@ -59,7 +59,7 @@ ARG TAG
 RUN cd config/manager \
   && kustomize edit set image controller=${REGISTRY_AND_USERNAME}/${NAME}:${TAG} \
   && cd - \
-  && kustomize build config >/control-plane-components.yaml \
+  && kustomize build config/default >/control-plane-components.yaml \
   && cp config/metadata/metadata.yaml /metadata.yaml
 
 FROM scratch AS release

config/crd/kustomization.yaml

@@ -1,5 +1,10 @@
+# This kustomization.yaml is not intended to be run by itself,
+# since it depends on service name and namespace that are out of this kustomize package.
+# It should be run by config/default
 commonLabels:
   cluster.x-k8s.io/v1alpha3: v1alpha3
+  cluster.x-k8s.io/v1alpha4: v1alpha3
+
 # This kustomization.yaml is not intended to be run by itself,
 # since it depends on service name and namespace that are out of this kustomize package.
 # It should be run by config/default

config/default/kustomization.yaml

@@ -1,8 +1,52 @@
 namespace: cacppt-system
 
+namePrefix: cacppt-
+
+# Labels to add to all resources and selectors.
+commonLabels:
+  cluster.x-k8s.io/provider: "control-plane-talos"
+
 resources:
   - namespace.yaml
 
 bases:
-- ../rbac
-- ../manager
+  - ../crd
+  - ../certmanager
+  - ../webhook
+  - ../rbac
+  - ../manager
+
+patchesStrategicMerge:
+  - manager_webhook_patch.yaml
+#  - webhookcainjection_patch.yaml
+
+vars:
+  - name: CERTIFICATE_NAMESPACE # namespace of the certificate CR
+    objref:
+      kind: Certificate
+      group: cert-manager.io
+      version: v1alpha2
+      name: serving-cert # this name should match the one in certificate.yaml
+    fieldref:
+      fieldpath: metadata.namespace
+  - name: CERTIFICATE_NAME
+    objref:
+      kind: Certificate
+      group: cert-manager.io
+      version: v1alpha2
+      name: serving-cert # this name should match the one in certificate.yaml
+  - name: SERVICE_NAMESPACE # namespace of the service
+    objref:
+      kind: Service
+      version: v1
+      name: webhook-service
+    fieldref:
+      fieldpath: metadata.namespace
+  - name: SERVICE_NAME
+    objref:
+      kind: Service
+      version: v1
+      name: webhook-service
+
+configurations:
+  - kustomizeconfig.yaml

config/default/kustomizeconfig.yaml

@@ -0,0 +1,4 @@
+# This configuration is for teaching kustomize how to update name ref and var substitution
+varReference:
+  - kind: Deployment
+    path: spec/template/spec/volumes/secret/secretName

config/webhook/manager_webhook_patch.yaml renamed to config/default/manager_webhook_patch.yaml

@@ -8,9 +8,6 @@ spec:
     spec:
       containers:
         - name: manager
-          args:
-            - "--metrics-addr=127.0.0.1:8080"
-            - "--webhook-port=9443"
           ports:
             - containerPort: 9443
               name: webhook-server

config/webhook/webhookcainjection_patch.yaml renamed to config/default/webhookcainjection_patch.yaml

@@ -19,7 +19,7 @@ spec:
         - command:
             - /manager
           args:
-            - --metrics-addr=127.0.0.1:8080
+            - --metrics-bind-addr=127.0.0.1:8080
             - --enable-leader-election
           image: controller:latest
           imagePullPolicy: Always

config/kustomization.yaml

@@ -7,3 +7,6 @@ releaseSeries:
 - major: 0
   minor: 2
   contract: v1alpha3
+- major: 0
+  minor: 3
+  contract: v1alpha4