draft csi driver lvm extension

.gitignore

@@ -0,0 +1,9 @@
+.idea/
+vendor
+tools/vendor
+VERSION
+helm
+.vscode
+hack/tools/bin/*
+bin
+.ci/

Dockerfile

@@ -0,0 +1,12 @@
+FROM golang:1.23 AS builder
+
+WORKDIR /go/src/github.com/metal-stack/gardener-extension-csi-driver-lvm
+COPY . .
+RUN make install \
+ && strip /go/bin/gardener-extension-csi-driver-lvm
+
+FROM alpine:3.20
+WORKDIR /
+COPY charts /charts
+COPY --from=builder /go/bin/gardener-extension-csi-driver-lvm /gardener-extension-csi-driver-lvm
+CMD ["/gardener-extension-csi-driver-lvm"]

Dockerfile.dev

@@ -0,0 +1,3 @@
+FROM alpine:3.20
+COPY bin/gardener-extension-csi-driver-lvm /gardener-extension-csi-driver-lvm
+CMD ["/gardener-extension-csi-driver-lvm"]

LICENCE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2020 by the metal-stack.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

Makefile

@@ -0,0 +1,104 @@
+ENSURE_GARDENER_MOD         := $(shell go get github.com/gardener/gardener@$$(go list -m -f "{{.Version}}" github.com/gardener/gardener))
+GARDENER_HACK_DIR    		:= $(shell go list -m -f "{{.Dir}}" github.com/gardener/gardener)/hack
+IMAGE_TAG                   := $(or ${GITHUB_TAG_NAME}, latest)
+REGISTRY                    := ghcr.io/metal-stack
+IMAGE_PREFIX                := $(REGISTRY)
+REPO_ROOT                   := $(shell dirname "$(realpath $(lastword $(MAKEFILE_LIST)))")
+HACK_DIR                    := $(REPO_ROOT)/hack
+HOSTNAME                    := $(shell hostname)
+LD_FLAGS                    := "-w -X github.com/metal-stack/gardener-extension-csi-driver-lvm/pkg/version.Version=$(IMAGE_TAG)"
+VERIFY                      := true
+LEADER_ELECTION             := false
+IGNORE_OPERATION_ANNOTATION := false
+WEBHOOK_CONFIG_URL          := localhost
+
+GOLANGCI_LINT_VERSION := v1.61.0
+GO_VERSION := 1.23
+
+ifeq ($(CI),true)
+  DOCKER_TTY_ARG=""
+else
+  DOCKER_TTY_ARG=t
+endif
+
+export GO111MODULE := on
+
+TOOLS_DIR := $(HACK_DIR)/tools
+include $(GARDENER_HACK_DIR)/tools.mk
+
+#################################################################
+# Rules related to binary build, Docker image build and release #
+#################################################################
+
+.PHONY: tidy
+tidy:
+	@GO111MODULE=on go mod tidy
+	@mkdir -p $(REPO_ROOT)/.ci/hack && cp $(GARDENER_HACK_DIR)/.ci/* $(REPO_ROOT)/.ci/hack/ && chmod +xw $(REPO_ROOT)/.ci/hack/*
+
+.PHONY: build
+build:
+	go build -ldflags $(LD_FLAGS) -tags netgo -o bin/gardener-extension-csi-driver-lvm ./cmd/gardener-extension-csi-driver-lvm
+
+.PHONY: install
+install: tidy $(HELM)
+	@LD_FLAGS="-w -X github.com/gardener/$(EXTENSION_PREFIX)-$(NAME)/pkg/version.Version=$(VERSION)" \
+	bash $(GARDENER_HACK_DIR)/install.sh ./...
+
+.PHONY: docker-image
+docker-image:
+	@docker build --no-cache \
+		--build-arg VERIFY=$(VERIFY) \
+		--tag $(IMAGE_PREFIX)/gardener-extension-csi-driver-lvm:$(IMAGE_TAG) \
+		--file Dockerfile --memory 6g .
+
+.PHONY: docker-push
+docker-push:
+	@docker push $(IMAGE_PREFIX)/gardener-extension-csi-driver-lvm:$(IMAGE_TAG)
+
+#####################################################################
+# Rules for verification, formatting, linting, testing and cleaning #
+#####################################################################
+
+.PHONY: revendor
+revendor:
+	@GO111MODULE=on go mod vendor
+	@GO111MODULE=on go mod tidy
+	@chmod +x $(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/*
+	@chmod +x $(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/.ci/*
+	@$(REPO_ROOT)/hack/update-github-templates.sh
+
+.PHONY: clean
+clean:
+	@$(shell find ./example -type f -name "controller-registration.yaml" -exec rm '{}' \;)
+	@bash $(GARDENER_HACK_DIR)/clean.sh ./cmd/... ./pkg/...
+
+.PHONY: check-generate
+check-generate:
+	@$(REPO_ROOT)/vendor/github.com/gardener/gardener/hack/check-generate.sh $(REPO_ROOT)
+
+.PHONY: generate
+generate: $(VGOPATH) $(HELM) $(YQ)
+	@REPO_ROOT=$(REPO_ROOT) VGOPATH=$(VGOPATH) GARDENER_HACK_DIR=$(GARDENER_HACK_DIR) bash $(GARDENER_HACK_DIR)/generate-sequential.sh ./charts/... ./cmd/... ./pkg/...
+
+.PHONY: generate-in-docker
+generate-in-docker: tidy $(HELM) $(YQ)
+	# echo $(shell git describe --abbrev=0 --tags) > VERSION
+	docker run --rm -i$(DOCKER_TTY_ARG) -v $(PWD):/go/src/github.com/metal-stack/gardener-extension-csi-driver-lvm golang:$(GO_VERSION) \
+		sh -c "cd /go/src/github.com/metal-stack/gardener-extension-csi-driver-lvm \
+				&& make generate \
+				# && make install generate \
+				&& chown -R $(shell id -u):$(shell id -g) ."
+
+.PHONY: test
+test:
+	go test -v ./...
+
+.PHONY: push-to-gardener-local
+push-to-gardener-local:
+	CGO_ENABLED=1 go build \
+		-ldflags "-extldflags '-static -s -w'" \
+		-tags 'osusergo netgo static_build' \
+		-o bin/gardener-extension-csi-driver-lvm \
+		./cmd/gardener-extension-csi-driver-lvm
+	docker build -f Dockerfile.dev -t ghcr.io/metal-stack/gardener-extension-csi-driver-lvm:latest .
+	kind --name gardener-local load docker-image ghcr.io/metal-stack/gardener-extension-csi-driver-lvm:latest

README.md

@@ -0,0 +1,15 @@
+# gardener-extension-csi-driver-lvm
+
+Provides a Gardener extension for managing [csi-driver-lvm](https://github.com/metal-stack/csi-driver-lvm) for a shoot cluster.
+
+The extension checks for the old [csi-lvm](https://github.com/metal-stack/csi-lvm/tree/master) and removes it.
+After success it applies the new driver.
+
+## Development
+
+This extension can be developed in the gardener-local devel environment.
+
+1. Start up the local devel environment
+1. The extension's docker image can be pushed into Kind using `make push-to-gardener-local`
+1. Install the extension `kubectl apply -k example/`
+1. Parametrize the `example/shoot.yaml` and apply with `kubectl -f example/shoot.yaml`

charts/gardener-extension-csi-driver-lvm/Chart.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+appVersion: "1.0"
+description: A Helm chart for the csi-driver-lvm extension
+name: gardener-extension-csi-driver-lvm
+version: 0.2.0

charts/gardener-extension-csi-driver-lvm/doc.go

@@ -0,0 +1,4 @@
+//go:generate sh -c "bash $GARDENER_HACK_DIR/generate-controller-registration.sh csi-driver-lvm . $(cat ../../VERSION) ../../example/controller-registration.yaml Extension:csi-driver-lvm"
+
+// Package chart enables go:generate support for generating the correct controller registration.
+package chart

charts/gardener-extension-csi-driver-lvm/templates/_helpers.tpl

@@ -0,0 +1,27 @@
+{{- define "name" -}}
+gardener-extension-csi-driver-lvm
+{{- end -}}
+
+{{- define "labels.app.key" -}}
+app.kubernetes.io/name
+{{- end -}}
+{{- define "labels.app.value" -}}
+{{ include "name" . }}
+{{- end -}}
+
+{{- define "labels" -}}
+{{ include "labels.app.key" . }}: {{ include "labels.app.value" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end -}}
+
+{{-  define "image" -}}
+  {{- if hasPrefix "sha256:" .Values.image.tag }}
+  {{- printf "%s@%s" .Values.image.repository .Values.image.tag }}
+  {{- else }}
+  {{- printf "%s:%s" .Values.image.repository .Values.image.tag }}
+  {{- end }}
+{{- end }}
+
+{{- define "deploymentversion" -}}
+apps/v1
+{{- end -}}

charts/gardener-extension-csi-driver-lvm/templates/configmap-imagevector-overwrite.yaml

@@ -0,0 +1,12 @@
+{{- if .Values.imageVectorOverwrite }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ include "name" . }}-imagevector-overwrite
+  namespace: {{ .Release.Namespace }}
+  labels:
+{{ include "labels" . | indent 4 }}
+data:
+  images_overwrite.yaml: |
+{{ .Values.imageVectorOverwrite | indent 4 }}
+{{- end }}

charts/gardener-extension-csi-driver-lvm/templates/configmap.yaml

@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ include "name" . }}-configmap
+  namespace: {{ .Release.Namespace }}
+  labels:
+{{ include "labels" . | indent 4 }}
+data:
+  config.yaml: |
+    ---
+    apiVersion: csi-driver-lvm.metal.extensions.config.gardener.cloud/v1alpha1
+    kind: ControllerConfiguration
+{{- if .Values.config.clientConnection }}
+    clientConnection:
+      acceptContentTypes: {{ required ".Values.config.clientConnection.acceptContentTypes is required" .Values.config.clientConnection.acceptContentTypes }}
+      contentType: {{ required ".Values.config.clientConnection.contentType is required" .Values.config.clientConnection.contentType }}
+      qps: {{ required ".Values.config.clientConnection.qps is required" .Values.config.clientConnection.qps }}
+      burst: {{ required ".Values.config.clientConnection.burst is required" .Values.config.clientConnection.burst }}
+{{- end }}
+{{- if .Values.config.hostWritePath }}
+    defaultHostWritePath: {{ .Values.config.hostWritePath }}
+{{- end }}
+{{- if .Values.config.devicePattern }}
+    defaultDevicePattern: {{ .Values.config.devicePattern }}
+{{- end }}

charts/gardener-extension-csi-driver-lvm/templates/deployment.yaml

@@ -0,0 +1,99 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "name" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+{{ include "labels" . | indent 4 }}
+spec:
+  revisionHistoryLimit: 0
+  replicas: {{ .Values.replicaCount }}
+  selector:
+    matchLabels:
+{{ include "labels" . | indent 6 }}
+  template:
+    metadata:
+      annotations:
+        {{- if .Values.imageVectorOverwrite }}
+        checksum/configmap-csi-driver-lvm-imagevector-overwrite: {{ include (print $.Template.BasePath "/configmap-imagevector-overwrite.yaml") . | sha256sum }}
+        {{- end }}
+        checksum/configmap-{{ include "name" . }}-config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
+      labels:
+        networking.gardener.cloud/to-runtime-apiserver: allowed
+        networking.gardener.cloud/to-dns: allowed
+        networking.gardener.cloud/to-public-networks: allowed
+        networking.gardener.cloud/to-private-networks: allowed
+        networking.resources.gardener.cloud/to-all-shoots-kube-apiserver-tcp-443: allowed
+{{ include "labels" . | indent 8 }}
+    spec:
+      containers:
+      - name: {{ include "name" . }}
+        image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
+        command:
+        - /gardener-extension-csi-driver-lvm
+        - --config=/etc/{{ include "name" . }}/config/config.yaml
+        - --max-concurrent-reconciles={{ .Values.controllers.concurrentSyncs }}
+        - --healthcheck-max-concurrent-reconciles={{ .Values.controllers.healthcheck.concurrentSyncs }}
+        - --ignore-operation-annotation={{ .Values.controllers.ignoreOperationAnnotation }}
+        - --disable-controllers={{ .Values.disableControllers | join "," }}
+        {{- if .Values.metricsPort }}
+        - --metrics-bind-address=:{{ .Values.metricsPort }}
+        {{- end }}
+        {{- if .Values.healthPort }}
+        - --health-bind-address=:{{ .Values.healthPort }}
+        {{- end }}
+        {{- if .Values.gardener.version }}
+        - --gardener-version={{ .Values.gardener.version }}
+        {{- end }}
+        - --log-level={{ .Values.logLevel | default "info" }}
+        - --log-format={{ .Values.logFormat | default "json" }}
+        env:
+        - name: BACKEND_SECRET_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: BACKEND_SECRET_PREFIX
+          value: default-backend-secret-
+        - name: LEADER_ELECTION_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        {{- if .Values.imageVectorOverwrite }}
+        - name: IMAGEVECTOR_OVERWRITE
+          value: /charts_overwrite/images_overwrite.yaml
+        {{- end }}
+{{- if .Values.resources }}
+        resources:
+{{ toYaml .Values.resources | nindent 10 }}
+{{- end }}
+        volumeMounts:
+        - name: config
+          mountPath: /etc/{{ include "name" . }}/config
+        {{- if .Values.imageVectorOverwrite }}
+        - name: imagevector-overwrite
+          mountPath: /charts_overwrite/
+          readOnly: true
+        {{- end }}
+      serviceAccountName: {{ include "name" . }}
+      # affinity:
+      #   podAntiAffinity:
+      #     requiredDuringSchedulingIgnoredDuringExecution:
+      #     - labelSelector:
+      #         matchExpressions:
+      #         - key: {{ include "labels.app.key" . }}
+      #           operator: In
+      #           values:
+      #           - {{ include "labels.app.value" . }}
+      #       topologyKey: "kubernetes.io/hostname"
+      volumes:
+      - name: config
+        configMap:
+          name: {{ include "name" . }}-configmap
+          defaultMode: 420
+      {{- if .Values.imageVectorOverwrite }}
+      - name: imagevector-overwrite
+        configMap:
+          name: {{ include "name" . }}-imagevector-overwrite
+          defaultMode: 420
+      {{- end }}

charts/gardener-extension-csi-driver-lvm/templates/poddisruptionbudget.yaml

@@ -0,0 +1,14 @@
+{{- if gt (int .Values.replicaCount) 1 }}
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+  name: {{ include "name" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+{{ include "labels" . | indent 4 }}
+spec:
+  maxUnavailable: {{ sub (int .Values.replicaCount) 1 }}
+  selector:
+    matchLabels:
+{{ include "labels" . | indent 6 }}
+{{- end }}