Add Alicloud controlplane webhooks

Makefile

@@ -152,7 +152,10 @@ start-provider-alicloud:
 		./controllers/provider-alicloud/cmd/gardener-extension-provider-alicloud \
 		--config-file=./controllers/provider-alicloud/example/00-componentconfig.yaml \
 		--infrastructure-ignore-operation-annotation=$(IGNORE_OPERATION_ANNOTATION) \
-		--leader-election=$(LEADER_ELECTION)
+		--leader-election=$(LEADER_ELECTION) \
+		--webhook-config-mode=url \
+		--webhook-config-name=alicloud-webhooks \
+		--webhook-config-host=$(HOSTNAME)
 
 .PHONY: start-provider-packet
 start-provider-packet:

controllers/provider-alicloud/charts/provider-alicloud/templates/configmap.yaml

@@ -15,3 +15,9 @@ data:
     machineImages:
 {{ toYaml .Values.config.machineImages | indent 4 }}
 {{- end }}
+    etcd:
+      storage:
+        className: {{ .Values.config.etcd.storage.className }}
+        capacity: {{ .Values.config.etcd.storage.capacity }}
+      backup:
+        schedule: {{ .Values.config.etcd.backup.schedule }}

controllers/provider-alicloud/charts/provider-alicloud/templates/storageclass.yaml

@@ -0,0 +1,10 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: {{ .Values.config.etcd.storage.className }}
+provisioner: diskplugin.csi.alibabacloud.com
+allowVolumeExpansion: true
+parameters:
+  csi.storage.k8s.io/fstype: ext4
+  type: cloud_ssd
+  readOnly: false

controllers/provider-alicloud/charts/provider-alicloud/values.yaml

@@ -6,16 +6,29 @@ image:
 resources: {}
 
 controllers:
+  controlplane:
+    concurrentSyncs: 5
   infrastructure:
     concurrentSyncs: 5
     ignoreOperationAnnotation: false
   worker:
     concurrentSyncs: 5
 
-disableControllers: []
+disableControllers:
+- controlplane-controller
+disableWebhooks:
+- controlplane
+- controlplaneexposure
+- controlplanebackup
 
 config:
   machineImages:
   - name: coreos
     version: 2023.5.0
     id: coreos_2023_4_0_64_30G_alibase_20190319.vhd
+  etcd:
+    storage:
+      className: gardener.cloud-fast
+      capacity: 25Gi
+    backup:
+      schedule: "0 */24 * * *"

controllers/provider-alicloud/cmd/gardener-extension-provider-alicloud/app/app.go

@@ -25,9 +25,12 @@ import (
 	alicloudcontrolplane "github.com/gardener/gardener-extensions/controllers/provider-alicloud/pkg/controller/controlplane"
 	alicloudinfrastructure "github.com/gardener/gardener-extensions/controllers/provider-alicloud/pkg/controller/infrastructure"
 	alicloudworker "github.com/gardener/gardener-extensions/controllers/provider-alicloud/pkg/controller/worker"
+	alicloudcontrolplanebackup "github.com/gardener/gardener-extensions/controllers/provider-alicloud/pkg/webhook/controlplanebackup"
+	alicloudcontrolplaneexposure "github.com/gardener/gardener-extensions/controllers/provider-alicloud/pkg/webhook/controlplaneexposure"
 	"github.com/gardener/gardener-extensions/pkg/controller"
 	controllercmd "github.com/gardener/gardener-extensions/pkg/controller/cmd"
 	"github.com/gardener/gardener-extensions/pkg/controller/infrastructure"
+	webhookcmd "github.com/gardener/gardener-extensions/pkg/webhook/cmd"
 
 	"github.com/spf13/cobra"
 	"sigs.k8s.io/controller-runtime/pkg/manager"
@@ -63,7 +66,18 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 			MaxConcurrentReconciles: 5,
 		}
 
-		controllerSwitches = alicloudcmd.ControllerSwitchOptions()
+		controllerSwitches   = alicloudcmd.ControllerSwitchOptions()
+		webhookSwitches      = alicloudcmd.WebhookSwitchOptions()
+		webhookServerOptions = &webhookcmd.ServerOptions{
+			Port:             7890,
+			CertDir:          "/tmp/cert",
+			Mode:             webhookcmd.ServiceMode,
+			Name:             "webhooks",
+			Namespace:        os.Getenv("WEBHOOK_CONFIG_NAMESPACE"),
+			ServiceSelectors: "{}",
+			Host:             "localhost",
+		}
+		webhookOptions = webhookcmd.NewAddToManagerOptions("alicloud-webhooks", webhookServerOptions, webhookSwitches)
 
 		aggOption = controllercmd.NewOptionAggregator(
 			restOpts,
@@ -73,6 +87,7 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 			controllercmd.PrefixOption("worker-", workerCtrlOpts),
 			configFileOpts,
 			controllerSwitches,
+			webhookOptions,
 		)
 	)
 
@@ -98,6 +113,8 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 			}
 
 			configFileOpts.Completed().ApplyMachineImages(&alicloudworker.DefaultAddOptions.MachineImages)
+			configFileOpts.Completed().ApplyETCDStorage(&alicloudcontrolplaneexposure.DefaultAddOptions.ETCDStorage)
+			configFileOpts.Completed().ApplyETCDBackup(&alicloudcontrolplanebackup.DefaultAddOptions.ETCDBackup)
 			controlPlaneCtrlOpts.Completed().Apply(&alicloudcontrolplane.Options)
 			infraCtrlOpts.Completed().Apply(&alicloudinfrastructure.DefaultAddOptions.Controller)
 			infraReconcileOpts.Completed().Apply(&alicloudinfrastructure.DefaultAddOptions.IgnoreOperationAnnotation)
@@ -107,6 +124,10 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 				controllercmd.LogErrAndExit(err, "Could not add controllers to manager")
 			}
 
+			if err := webhookOptions.Completed().AddToManager(mgr); err != nil {
+				controllercmd.LogErrAndExit(err, "Could not add webhooks to manager")
+			}
+
 			if err := mgr.Start(ctx.Done()); err != nil {
 				controllercmd.LogErrAndExit(err, "Error running manager")
 			}

controllers/provider-alicloud/example/00-componentconfig.yaml

@@ -5,3 +5,9 @@ machineImages:
 - name: coreos
   version: 2023.5.0
   id: coreos_2023_4_0_64_30G_alibase_20190319.vhd
+etcd:
+  storage:
+    className: gardener.cloud-fast
+    capacity: 25Gi
+  backup:
+    schedule: "0 */24 * * *"

controllers/provider-alicloud/example/30-etcd-backup-secret.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: etcd-backup
+  namespace: shoot--foo--bar
+type: Opaque
+data:
+  bucketName: YnVja2V0MTIz # bucket123
+  storageEndpoint: ZXUtd2VzdC0x # eu-west-1
+  accessKeyID: YWRtaW4= # admin
+  accessKeySecret: YWRtaW4= # admin

controllers/provider-alicloud/example/controller-registration.yaml

@@ -14,7 +14,7 @@ spec:
   deployment:
     type: helm
     providerConfig:
-      chart: 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
+      chart: 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
       values:
         image:
           tag: 0.7.0-dev

controllers/provider-alicloud/pkg/alicloud/secret.go

@@ -31,6 +31,8 @@ const (
 	AccessKeyID = "accessKeyID"
 	// AccessKeySecret is the data field in a secret where the access key secret is stored at.
 	AccessKeySecret = "accessKeySecret"
+	// StorageEndpoint is the data field in a secret where the storage endpoint is stored at.
+	StorageEndpoint = "storageEndpoint"
 )
 
 // ReadSecretCredentials reads the Credentials from the given secret.

controllers/provider-alicloud/pkg/alicloud/types.go

@@ -19,9 +19,13 @@ import "path/filepath"
 const (
 	// Name is the name of the Alicloud provider.
 	Name = "provider-alicloud"
+	// StorageProviderName is the name of the Alicloud storage provider.
+	StorageProviderName = "OSS"
 
 	// InfraRelease is the name of the alicloud-infra chart.
 	InfraRelease = "alicloud-infra"
+	// ETCDBackupRestoreImageName is the name of the etcd backup and restore image.
+	ETCDBackupRestoreImageName = "etcd-backup-restore"
 
 	// MachineControllerManagerImageName is the name of the MachineControllerManager image.
 	MachineControllerManagerImageName = "machine-controller-manager"
@@ -38,10 +42,17 @@ const (
 	// CSIPluginImageName is the name of the CSI plugin image.
 	CSIPluginImageName = "csi-plugin-alicloud"
 
+	// BucketName is a constant for the key in a backup secret that holds the bucket name.
+	// The bucket name is written to the backup secret by Gardener as a temporary solution.
+	// TODO In the future, the bucket name should come from a BackupBucket resource (see https://github.com/gardener/gardener/blob/master/docs/proposals/02-backupinfra.md)
+	BucketName = "bucketName"
+
 	// CloudProviderConfigName is the name of the configmap containing the cloud provider config.
 	CloudProviderConfigName = "cloud-provider-config"
 	// MachineControllerManagerName is a constant for the name of the machine-controller-manager.
 	MachineControllerManagerName = "machine-controller-manager"
+	// BackupSecretName is the name of the secret containing the credentials for storing the backups of Shoot clusters.
+	BackupSecretName = "etcd-backup"
 )
 
 var (

controllers/provider-alicloud/pkg/apis/config/types.go

@@ -15,6 +15,7 @@
 package config
 
 import (
+	"k8s.io/apimachinery/pkg/api/resource"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 )
 
@@ -27,6 +28,8 @@ type ControllerConfiguration struct {
 	// MachineImages is the list of machine images that are understood by the controller. It maps
 	// logical names and versions to Alicloud-specific identifiers.
 	MachineImages []MachineImage
+	// ETCD is the etcd configuration.
+	ETCD ETCD
 }
 
 // MachineImage is a mapping from logical names and versions to Alicloud-specific identifiers.
@@ -38,3 +41,25 @@ type MachineImage struct {
 	// ID is the id of the image.
 	ID string
 }
+
+// ETCD is an etcd configuration.
+type ETCD struct {
+	// ETCDStorage is the etcd storage configuration.
+	Storage ETCDStorage
+	// ETCDBackup is the etcd backup configuration.
+	Backup ETCDBackup
+}
+
+// ETCDStorage is an etcd storage configuration.
+type ETCDStorage struct {
+	// ClassName is the name of the storage class used in etcd-main volume claims.
+	ClassName *string
+	// Capacity is the storage capacity used in etcd-main volume claims.
+	Capacity *resource.Quantity
+}
+
+// ETCDBackup is an etcd backup configuration.
+type ETCDBackup struct {
+	// Schedule is the etcd backup schedule.
+	Schedule *string
+}

controllers/provider-alicloud/pkg/apis/config/v1alpha1/types.go

@@ -15,6 +15,7 @@
 package v1alpha1
 
 import (
+	"k8s.io/apimachinery/pkg/api/resource"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 )
 
@@ -27,6 +28,8 @@ type ControllerConfiguration struct {
 	// MachineImages is the list of machine images that are understood by the controller. It maps
 	// logical names and versions to Alicloud-specific identifiers.
 	MachineImages []MachineImage `json:"machineImages,omitempty"`
+	// ETCD is the etcd configuration.
+	ETCD ETCD `json:"etcd"`
 }
 
 // MachineImage is a mapping from logical names and versions to Alicloud-specific identifiers.
@@ -38,3 +41,28 @@ type MachineImage struct {
 	// ID is the id of the image.
 	ID string `json:"id"`
 }
+
+// ETCD is an etcd configuration.
+type ETCD struct {
+	// ETCDStorage is the etcd storage configuration.
+	Storage ETCDStorage `json:"storage"`
+	// ETCDBackup is the etcd backup configuration.
+	Backup ETCDBackup `json:"backup"`
+}
+
+// ETCDStorage is an etcd storage configuration.
+type ETCDStorage struct {
+	// ClassName is the name of the storage class used in etcd-main volume claims.
+	// +optional
+	ClassName *string `json:"className,omitempty"`
+	// Capacity is the storage capacity used in etcd-main volume claims.
+	// +optional
+	Capacity *resource.Quantity `json:"capacity,omitempty"`
+}
+
+// ETCDBackup is an etcd backup configuration.
+type ETCDBackup struct {
+	// Schedule is the etcd backup schedule.
+	// +optional
+	Schedule *string `json:"schedule,omitempty"`
+}