Alicloud: enable customized image sharing

controllers/provider-alicloud/charts/provider-alicloud/templates/configmap.yaml

@@ -20,6 +20,11 @@ data:
 {{- if .Values.config.machineImages }}
     machineImages:
 {{ toYaml .Values.config.machineImages | indent 4 }}
+{{- end }}
+{{- if .Values.config.machineImageOwnerSecret }}
+    machineImageOwnerSecretRef:
+      name: {{ .Values.config.machineImageOwnerSecret.name }}
+      namespace: {{ .Release.Namespace }}
 {{- end }}
     etcd:
       storage:

controllers/provider-alicloud/charts/provider-alicloud/templates/secret.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .Values.config.machineImageOwnerSecret.name }}
+  namespace: {{ .Release.Namespace }}
+data:
+  accessKeyID: {{ .Values.config.machineImageOwnerSecret.accessKeyID }}
+  accessKeySecret: {{ .Values.config.machineImageOwnerSecret.accessKeySecret }}
+type: Opaque

controllers/provider-alicloud/charts/provider-alicloud/values.yaml

@@ -62,6 +62,10 @@ config:
       capacity: 25Gi
 #   backup:
 #     schedule: "0 */24 * * *"
+  machineImageOwnerSecret:
+    name: machine-image-owner
+    accessKeyID: ZHVtbXk=
+    accessKeySecret: ZHVtbXk=
 
 gardener:
   seed:

controllers/provider-alicloud/cmd/gardener-extension-provider-alicloud/app/app.go

@@ -136,6 +136,8 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 			}
 
 			configFileOpts.Completed().ApplyMachineImages(&alicloudworker.DefaultAddOptions.MachineImages)
+			configFileOpts.Completed().ApplyMachineImages(&alicloudinfrastructure.DefaultAddOptions.MachineImages)
+			configFileOpts.Completed().ApplyMachineImageOwnerSecretRef(&alicloudinfrastructure.DefaultAddOptions.MachineImageOwnerSecretRef)
 			configFileOpts.Completed().ApplyETCDStorage(&alicloudcontrolplaneexposure.DefaultAddOptions.ETCDStorage)
 			configFileOpts.Completed().ApplyETCDBackup(&alicloudcontrolplanebackup.DefaultAddOptions.ETCDBackup)
 			backupBucketCtrlOpts.Completed().Apply(&alicloudbackupbucket.DefaultAddOptions.Controller)

controllers/provider-alicloud/docs/usage-as-operator.md

@@ -4,6 +4,8 @@ The [`core.gardener.cloud/v1alpha1.CloudProfile` resource](https://github.com/ga
 
 In this document we are describing how this configuration looks like for Alicloud and provide an example `CloudProfile` manifest with minimal configuration that you can use to allow creating Alicloud shoot clusters.
 
+In addition, this document also describes how to enable the use of customized machine images for Alicloud.
+
 ## `CloudProfileConfig`
 
 The cloud profile configuration contains information about the real machine image IDs in the Alicloud environment (AMIs).
@@ -67,3 +69,78 @@ spec:
       - name: eu-central-1
         id: coreos_2023_4_0_64_30G_alibase_20190319.vhd
 ```
+
+## Enable customized machine images for the Alicloud extension
+
+Customized machine images can be created for an Alicloud account and shared with other Alicloud accounts. The same customized machine image has different image ID in different regions on Alicloud. Administrators/Operators need to explicitly declare them per imageID per region as below:
+
+```yaml
+machineImages:
+- name: customized_coreos
+  regions:
+  - imageID: <image_id_in_eu_central_1>
+    region: eu-central-1
+  - imageID: <image_id_in_cn_shanghai>
+    region: cn-shanghai
+  ...
+  version: 2191.4.1
+...
+```
+
+End-users have to have the permission to use the customized image from its creator Alicloud account. To enable end-users to use customized images, the images are shared from Alicloud account of Seed operator with end-users' Alicloud accounts. Administrators/Operators need to explicitly provide Seed operator's Alicloud account access credentials (base64 encoded) as below:
+
+```yaml
+machineImageOwnerSecret:
+  name: machine-image-owner
+  accessKeyID: <base64_encoded_access_key_id>
+  accessKeySecret: <base64_encoded_access_key_secret>
+```
+
+As a result, a Secret named `machine_image_owner` by default will be created in namespace of Alicloud provider extension.
+
+## Example `ControllerRegistration` manifest for enabling customized machine images
+
+```yaml
+apiVersion: core.gardener.cloud/v1alpha1
+kind: ControllerRegistration
+metadata:
+  name: extension-provider-alicloud
+spec:
+  deployment:
+    type: helm
+    providerConfig:
+      chart: |
+        H4sIFAAAAAAA/yk...
+      values:
+        config:
+          machineImageOwnerSecret:
+            accessKeyID: <base64_encoded_access_key_id>
+            accessKeySecret: <base64_encoded_access_key_secret>
+          machineImages:
+          - name: customized_coreos
+            regions:
+            - imageID: <image_id_in_eu_central_1>
+              region: eu-central-1
+            - imageID: <image_id_in_cn_shanghai>
+              region: cn-shanghai
+            ...
+            version: 2191.4.1
+          ...
+        resources:
+          limits:
+            cpu: 500m
+            memory: 1Gi
+          requests:
+            memory: 128Mi
+  resources:
+  - kind: BackupBucket
+    type: alicloud
+  - kind: BackupEntry
+    type: alicloud
+  - kind: ControlPlane
+    type: alicloud
+  - kind: Infrastructure
+    type: alicloud
+  - kind: Worker
+    type: alicloud
+```

controllers/provider-alicloud/example/controller-registration.yaml

@@ -18,7 +18,7 @@ spec:
   deployment:
     type: helm
     providerConfig:
-      chart: H4sIAAAAAAAAA+0cf2/btnJ/+1MQ3nvANtSyZTvJ6oc9PDfJOmNtEiRZi2EYAlqibS2yqFFUUq/bd393JCXrl604SdO107VAZJJ3PJLH493xpFDwG89lokN9z/F57Ha/eHToARzs7am/AMW/6tkeDO3+Xn9/H8vtgX1w8AXZe3xWyhBHkgpCvhCcy23t6uo/UQhL63+4oEJaK7r0H6uPuvXv9w8K679nD3pfkN5jMbAN/uHrT0PvDRORx4MRubFbNAzTn7ZlW72Oy25aLosc4YVSFY/JD8xfEgfFhMy4IHLByEsqXBYwQcZGjMiZESzC3kkWIMVWQJdsREoS17op9/ixp+UfA+X973LHmvPH7KNm//ft3n5h/w/7B3vN/n8K6HbJIQ9XwpsvJPnK+Zr0e/ZzcjE+IxfHBDY3DdQPOpt5vkclIw5fhjRYWbDTfaLQIiJYxMQNcy1yufAiAk0Zgb8gUbDzmUviABUB6olxSB34c8Fn8pYKRl7pJs/IjUX6oCocFkpCIxJwCXgcUMStFwG1QKG/mhwenwBj2EOr24X/CYWKTlLaRqORvtUjX2GDtqlqf/0fJLHiMVnSFXZKYuhMpoMwDEHvOGyYgMBh5NaTC82NpmIhjZ8NDT6VFJpTQAjh1yzbkFBpmFawkDIcdbu3t7cWVRxbXMy7ZtKirhlrB7g2WD8FPotwtn+PPQEjnq4I6GtAoFPg1ae3asHmgkGd5Mj1rfCkF8yfkchMOJJxvUgKbxrL3KQlPMLQsw1g2kAE2uMLMrlokxfji8nFMyTydnL5w+lPl+Tt+Px8fHI5Ob4gp+fk8PTkaHI5OT2BX9+T8cnP5MfJydEzwjxcSZjOUOAIgE0PpxMkBmldMJZjITlUopA53sxzYGjBPKZzRuYczooARkRCJpZehMsaAYMukvG9pSepVEWlcVktaDLnozmeUijHltVN/y+oc91NajoOD6Tgvg9KUbA5zoUiakWL8tlFLEOIvaMwItbdhIz2FHkB/cThi9i5ZnKUktClx4C3WhceajpnMHS2Lp0EM0GBZuzIWGTK33JxzUT6G8dKzoAszpk+qFmAQhKR7BREcRhyc4ibQpxanDWHC8EcSdbDIbnhtMIs9ea4/mShfP5LBoIM4hE9mie4u/+3Z+P53/h/Hx62rf/VgvmgZyNLhg/yBWvW3+4P7ML6H4AANPbfU8D79x3ispkXgFWE/lmbdP76qzU37lwndd46ZbcNUVngKoRWlo5Pp8yPwKgJrWu20hTVj3gKpzcD0bI83sXecjQ2kLihfmzYev8ejBrHj92UWYsYxC2MlHGLDCKVEdnQwvSveiqPwgtAfsAqVOjWOfMZBWPjBJir5CxlzVvC6ak5IwRrvBlZ0OhMQP070o4WtL+3P4Ju32D30BW2tySdkxQjFF4gZ6T97+h//46KLQULeeRJLlbbSMAYWRXB0b0JwmAz4y4uiMtCn6+WLJDG50+FI+re2Lnp+tgb4x8C2/Q/GH8zb76kYUet9A0YhFx00ARHv4LdOUZYd/4P9wd5/d8fDvbtRv8/BRjVk9vSb9RCnybrrBVfLkx47QXuCH0UkI/XNGwtmaQulXQEakBH+apVdbUgGaQIfIoKPaqKtYbRWnlUocuR/J9QCKeWJENsnbCjeoyu8lI7In8ika2jzpPLaLSPvWSPCnfb/z6fz8E1vOetQJ39h8Zefv/bw73G/nsSeKyNbSSko2Umv6O1NZnZvxj9Si3LyEqsTUsLoCYR60jDiBjK6Yaeeb4Eec2YYYiAOxrJ/vL95NXl8fmvLWJAmWIFCKmImEibvKbSWRSaZMkjV9mo0JIGoC/EN8mW6WxskXbxI1tdFTmBgaX1Z4qjMguwPCq0Ks7yLJ/riOvVEUxKUnYpYtb6UJOwpM4CTLit07Clzd9qIgRzuHCvltz1Zl5pCnZZ1nNFichVyDByLD69s+FO+v+Bt8F19z+Dg6L91+sNho3+fwp4LP2fysoHNeZ0L6kJh1uw0+mov9mBJLJsJdJtZU4bQ6Nw6NzY1A8X1Fa00lkwG/8weyK1Ciazoef4HrALLQOwI/G2SQ0SWC6Uj4zyoA5eLWEfUH0JCiRSs5Ve7rRr6FtlAnh3k+C36/irwjcsq3lOSnfkKoO5GztZxJSP38NdZwUwdusXEdL+prGI5I49Kpzd+tQoea+iWqrMkTpRTkzCZ65QbSDJf8b7pa3IG/0ZJMmk4yaSGYEbBBij9JRzfBpFJ8nuL3SCmJZBsdKW6ykFdLzd9OSqHts03DwdqvlU3ZfpRhtGnm2Xjnv/c/bj7gvbzv91tO5hBkDN+b9/0LeL5z88Nuf/U0Du2DRhWH38HaWrf2cr4IOc/ZgFgB0LduMhnz94qC9Wr/C2f0R6qkYlQUQ5BWMKD3kcSN1pBLxgiGdklCgY+6/uxse+JpDsDEMgMynqQA8CbtIP1qrzjuG1VFUumHMdxctM6CX1RipDZ7mV+EoF8Mm/rEvDqPUC5v6MygVp3ymY2/5ajVpfPgAbWdYKB8YGbrdah/dgtoatO8rRtwlGIkuJjUPheBTpcnXqhFuDmr98K3ObU252Fvv+GYclzJ9++uYkTCtzs8qX4Ge6axnqkG7FfdwCDCWRaVNS5BWOa6Z5p6OPx6lKRoEG77C9EwsBE9ZBDzlwPJ9F3+XPbEMwsrLY1hrzYhU4UXY0654YJrjctyOFXNePlpoOZm591wUToFu9kEa6uhlnokgGew8x9WZ3frPYdQx7uXSe3fvK49f2Ng849MJDph2ZzlpjbexAoZwmGOMUoUj7ViUg7T4CjVfH+S2bLji/ThY4PWO+23LEbMTWYaQOZj5luTKttKtnmVgTZkcVqLlehJlUmd2VG5ypXvuOaHj/xr2AtJ+1N9EyfVcRemuqNlBhwU1WUWj99ep4fHR8fnX86vgQc/GuTsavjy/OxofHaUtC1K3294IvR5lCDK4y3z1ns3ypKUflPErPPStdhvuedgm/k9fjl8dvgNnT86vTN8fnb88nlyVeR6Srcs0yVzndyrudbScWLnpUnrBEQvSqZ3pOzwiUhJwGv4u4EFTKkjvcH5HLw7OiTyNYxGPhsJy4p4VVft0a408SmLPN7lW4c2rWuB8v2Wu0fyqGnMbpE1hiQ73C9brzoSu+6RqwipnSqmfaCUbd08CHw1VizHfjyuP6eA4bOw4SPqk/5THfOUCfNSM67jiQ3rhUQVLH/ygGk2Z+AWaRG/vwNFHa0xQfv2NOnA0A6flQ1spFzjLNTAPaqMc6aTZvVybo12y1MXElTW0pYBGijwDoj0yCUqXabaWusLM7JMhkESQPuc/nqx+Rx3Y+bWbBI6km3WBoYS1ZYgVpc5K4ZJa7O4clE3DZjMa+fM1dwBv2e6ZqJ1G+myDvzm/dxtjC+/2iGtv8fxB5OIVErF78mcbunN0vEFCX/7E3LN7/9u2D5v2vJwEj9XNJvkJ3rMp7/prYxRSQUHkt3Rt7CsZAEjA44+5RKi4vlLj8PSIHYJX+FNAb6vloUSnyUTytHfCDIwafQqxx2/4X4Hs9xougNft/0B8U3/88wOpm/z8B4PVZdmerNaexXHDh/aHf9bj+Vh3Z69tBH+aMiXPus1329y47V8Q+GgMdvNV7KXgcKsugszlppJWznLFpNkARlUu6sOwyzlZgiMFjFSXZpo4eu/mRcfUrSrJ4eU+9sizbXLvFued1NZgFUzNIVLHKivQi/XCLOko9helTHMIKsfJkphNWO5c6fOSmpXkm2t+0y8Tb7TKZ1BiLMnVKv+v6cggLjgD8rdQwXr1WDv62ONL18KvZ6qhIt1noBHej4GsE17xtlnsLKtsg9DLCmVYUZiA943TvYOkFRjgj5ohEUHPzpI6QEFx/U7m+lEkQlWuT+0G1n5MTWRBLViqYwqYD30SXr1uUqn7jU/0AJuH6oasTd0A+YqleHTNOcS6By/QJXfJlMhsqHdxLautEyVxjWhEN9a1+1cwiZj0pWF8eORSds41rBDQkWAI+jDBprrdikfiDNOcLPb0fTIFCFyaMk0zBFg5bacpDRrXX8AMW1G+wK5WW1sgXOSf7cQy+j308fvawzf4z2uTBJmCt/9frl97/6jf5/08ClflfZif/Pbw3qZKQjGaanOXcsrvd26ZR3456HJHhcKA8unx4VsWsqACzYqdo78dewYfBHfa/sSburwbq9n9/WMz/sHsH+83+fwrYtv+Tk/yjqoGPPUGfOWzd/zovTyX1PcQIqHv/p1f8/le/t7fX7P8nARP/Zb+nZ10aDIgYW2dQk3YiIO1iMDhJ3yx6Oxe6/BDFp1qH7JBKuovKqBuTvmxKP1DW/t5n796oMjU2NWQcGhPrVPKu60XXrZAK4EianCFtmajqqyjCuAkLHLEKJYPRt/FGst3KvmWdI4z0Qj+ee4HlRJ4F/Uwp+GfKwXX4stAVNinM8yzS/bN3cljJzPpytD2jwEJ7M4Olt7Y/tlg28ESwTf/fhPRRvgNZZ/8Nh8OC/7e/v9e8//MkUIxitcshMnPN128bvf7GBMjOuDtOA2R3f1MIpOqOhmLqASqnLM1KqkpZxvJS2nLdbTs00BFjk6GpEHSJvmBv4/jan7UyLO9/nf/xmB+Arbv/6/WL8Z+9wX6T//8koJOZlbWQfN8FTIrYmjsCt36aeAxyguHetGBbSrKk8xFRRwjuwTCTAj2ZnXB5hp+LhO3Zyt65j4jdWgfiyfu/Wq1MhiUymL2+01u1kDU6IntpM5UvvKVV9qJuS7P8Fd2WhvqSbhulTZm0I6KMs1arnDk6Ir/82irkgaqy1pekKj0JX4n8kiSfvBip5yRRKaRxpJNWVT6jqiNEz/d5ZunnnlzEU7RAu+uMrezj1OfT7pJiMK47jT3f7SrS3SMOCyPUhzk17axAJdLE+dxnV+vMe43boUt3f2jQlPC0B1avbQqyXwe2rXef9qjs0qja//0OR9bXFZZltVq5aOOopdMXkxxUjF22nLSq+vXSqpdLzadCsVH3t4gHiayuX/SsbKFewbR7OtPMvB9pD/Bn4TXEbNaeYDxafygsN95+rz+whpamh7epaV5jRwvu5CihcIVtr4ZXvav94dWg9/JKOUkRu8Jv1PYG9nPrZqGpJ5RwDB1YfrkAa0J27BJTBV7s5zbwYm/lZdmRw6D3XPQ5p7Pn9Pn8j9/tb2d13a5fqCy8Tpl5mTJ/7d6Z0UgmjdJXJvt7Lz0lGVqvjRIR10mmaKP0yDfd/pB8g//arfTTbVpumGEiOebXDq2eiZwnPEI387O2dhpooIEGGmiggQYaaKCBBhpooIEGGmiggQYaaOCfAf8H4nzLcAB4AAA=
+      chart: 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
       values:
         image:
           tag: 1.1.0-dev

controllers/provider-alicloud/hack/api-reference/api.md

@@ -283,13 +283,32 @@ string
 <td>
 </td>
 </tr>
+<tr>
+<td>
+<code>machineImages</code></br>
+<em>
+<a href="#alicloud.provider.extensions.gardener.cloud/v1alpha1.MachineImage">
+[]MachineImage
+</a>
+</em>
+</td>
+<td>
+<em>(Optional)</em>
+<p>MachineImages is a list of machine images that have been used in this infrastructure. Usually, the extension controller
+gets the mapping from name/version to the provider-specific machine image data in its componentconfig. However, if
+a version that is still in use gets removed from this componentconfig and Shoot&rsquo;s access to the this version is revoked,
+it cannot reconcile anymore existing <code>Infrastructure</code> resources that are still using this version. Hence, it stores
+the used versions in the provider status to ensure reconciliation is possible.</p>
+</td>
+</tr>
 </tbody>
 </table>
 <h3 id="alicloud.provider.extensions.gardener.cloud/v1alpha1.MachineImage">MachineImage
 </h3>
 <p>
 (<em>Appears on:</em>
-<a href="#alicloud.provider.extensions.gardener.cloud/v1alpha1.WorkerStatus">WorkerStatus</a>)
+<a href="#alicloud.provider.extensions.gardener.cloud/v1alpha1.WorkerStatus">WorkerStatus</a>, 
+<a href="#alicloud.provider.extensions.gardener.cloud/v1alpha1.InfrastructureStatus">InfrastructureStatus</a>)
 </p>
 <p>
 <p>MachineImage is a mapping from logical names and versions to provider-specific machine image data.</p>

controllers/provider-alicloud/hack/api-reference/config.md

@@ -73,6 +73,20 @@ logical names and versions to Alicloud-specific identifiers.</p>
 </tr>
 <tr>
 <td>
+<code>machineImageOwnerSecretRef</code></br>
+<em>
+<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.15/#secretreference-v1-core">
+Kubernetes core/v1.SecretReference
+</a>
+</em>
+</td>
+<td>
+<p>MachineImageOwnerSecretRef is the secret reference which contains credential of AliCloud subaccount for customized images.
+We currently assume multiple customized images should always be under this account.</p>
+</td>
+</tr>
+<tr>
+<td>
 <code>etcd</code></br>
 <em>
 <a href="#alicloud.provider.extensions.config.gardener.cloud/v1alpha1.ETCD">