Implement the CCM/CSI migration

addons/csi-openstack-cinder/driver.yaml

@@ -1,4 +1,4 @@
-apiVersion: storage.k8s.io/v1beta1
+apiVersion: storage.k8s.io/v1
 kind: CSIDriver
 metadata:
   name: cinder.csi.openstack.org

addons/machinecontroller/machine-controller.yaml

@@ -592,6 +592,9 @@ spec:
             {{ if .Config.CloudProvider.External }}
             - -node-external-cloud-provider
             {{ end }}
+            {{ if .CSIMigrationFeatureGates }}
+            - -node-kubelet-feature-gates={{ .CSIMigrationFeatureGates }}
+            {{ end }}
           env:
             - name: HTTPS_PROXY
               value: "{{ .Config.Proxy.HTTPS }}"

pkg/addons/applier.go

@@ -55,6 +55,7 @@ type templateData struct {
 	Config                              *kubeoneapi.KubeOneCluster
 	Certificates                        map[string]string
 	Credentials                         map[string]string
+	CSIMigrationFeatureGates            string
 	MachineControllerCredentialsEnvVars string
 	InternalImages                      *internalImages
 	Resources                           map[string]string
@@ -94,6 +95,14 @@ func newAddonsApplier(s *state.State) (*applier, error) {
 		return nil, errors.Wrap(err, "failed to load CA keypair")
 	}
 
+	// We're intentionally ignoring the error here. If the provider is not supported
+	// the function will return an empty string (""), which we can easily detect in
+	// the templates
+	csiMigrationFeatureGates := ""
+	if s.ShouldEnableCSIMigration() {
+		_, csiMigrationFeatureGates, _ = s.Cluster.CSIMigrationFeatureGates(s.ShouldUnregisterInTreeCloudProvider())
+	}
+
 	certsMap, err := certificate.NewSignedWebhookCert(
 		resources.MachineControllerWebhookName,
 		resources.MachineControllerNameSpace,
@@ -113,6 +122,7 @@ func newAddonsApplier(s *state.State) (*applier, error) {
 			"KubernetesCA":                 certsMap[resources.KubernetesCACertName],
 		},
 		Credentials:                         creds,
+		CSIMigrationFeatureGates:            csiMigrationFeatureGates,
 		MachineControllerCredentialsEnvVars: string(credsEnvVars),
 		InternalImages: &internalImages{
 			pauseImage: s.PauseImage,