feat/cloudprofile

.github/workflows/shoot-from-scratch.yaml

@@ -40,7 +40,9 @@ jobs:
         run: nix-shell --command 'bash hack/ci/07-tests.sh'
       - name: Install Gardenlet
         id: installGardenlet
-        run: nix-shell --command 'bash hack/ci/08-gardenlet.sh'
+        run: nix-shell --command 'echo "$CLOUD_SECRET" > hack/scerets/hcloud_token ; bash hack/ci/08-gardenlet.sh'
+        env:
+          CLOUD_SECRET: ${{ secrets.HCLOUD_TESTING_TOKEN }}
       - name: Delete shoot
         run: nix-shell --command 'bash hack/ci/delete-shoot.sh'
       - name: Delete shoot after failure

.gitignore

@@ -5,3 +5,5 @@ flux_*
 *.DS_STORE*
 hack/dev-env/gardenlet/garden-content/token.yaml
 hack/dev-env/gardenlet/config/internal-gardenlet-values.yaml
+hack/secrets/*
+hack/dev-env/gardenlet/garden-content/cloud_secret.yaml

hack/ci/08-gardenlet.sh

@@ -20,9 +20,13 @@ yq eval '.stringData.token-id = env(TOKEN_ID)' hack/dev-env/gardenlet/garden-con
 yq eval '.metadata.name = "bootstrap-token-" + env(TOKEN_ID)' -i hack/dev-env/gardenlet/garden-content/token.yaml
 yq eval '.stringData.token-secret = env(TOKEN_ID_SECRET)' -i hack/dev-env/gardenlet/garden-content/token.yaml
 
+export CLOUD_TOKEN=$(cat hack/secrets/hcloud_token)
+yq eval '.data.hcloudToken = env(CLOUD_TOKEN)' hack/dev-env/gardenlet/garden-content/cloud_secret.yaml.tmpl > hack/dev-env/gardenlet/garden-content/cloud_secret.yaml
+
 bash hack/ci/05-config-bucket.sh > /dev/null
 
 rm hack/dev-env/gardenlet/garden-content/token.yaml
 rm hack/dev-env/gardenlet/config/internal-gardenlet-values.yaml
 
 flux create ks 23ke-env-gardenlet --source=Bucket/23ke-config --path=./dev-env/gardenlet > /tmp/stdout 2> /tmp/stderr || { echo -e "\rError while creating gardenlet kustomization ❌"; echo "STDOUT":; cat /tmp/stdout; echo "STDERR:"; cat /tmp/stderr; exit 1; }
+

hack/dev-env/gardenlet/garden-content/cloud_secret.yaml.tmpl

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cloud-secret
+  namespace: garden-testing
+type: Opaque
+data:
+  hcloudToken: ...

hack/dev-env/gardenlet/garden-content/cpfl.yaml

@@ -0,0 +1,115 @@
+apiVersion: core.gardener.cloud/v1beta1
+kind: CloudProfile
+metadata:
+  name: hcloud
+spec:
+  type: hcloud
+  kubernetes:
+    versions:
+      - version: 1.20.11
+        classification: supported
+  machineImages:
+    - name: ubuntu
+      versions:
+        - version: 20.4.20210616
+          cri:
+            - name: containerd
+  machineTypes:
+    - name: cx21
+      cpu: "2"
+      memory: 4Gi
+      gpu: "0"
+    - name: cpx21
+      cpu: "3"
+      memory: 4Gi
+      gpu: "0"
+    - name: cx31
+      cpu: "2"
+      memory: 8Gi
+      gpu: "0"
+    - name: cpx31
+      cpu: "4"
+      memory: 8Gi
+      gpu: "0"
+    - name: cx41
+      cpu: "4"
+      memory: 16Gi
+      gpu: "0"
+    - name: cpx41
+      cpu: "8"
+      memory: 16Gi
+      gpu: "0"
+    - name: cx51
+      cpu: "8"
+      memory: 32Gi
+      gpu: "0"
+    - name: cpx51
+      cpu: "16"
+      memory: 32Gi
+      gpu: "0"
+    - name: ccx11
+      cpu: "2"
+      memory: 8Gi
+      gpu: "0"
+    - name: ccx12
+      cpu: "2"
+      memory: 8Gi
+      gpu: "0"
+    - name: ccx21
+      cpu: "4"
+      memory: 16Gi
+      gpu: "0"
+    - name: ccx22
+      cpu: "4"
+      memory: 16Gi
+      gpu: "0"
+    - name: ccx31
+      cpu: "8"
+      memory: 32Gi
+      gpu: "0"
+    - name: ccx32
+      cpu: "8"
+      memory: 32Gi
+      gpu: "0"
+    - name: ccx41
+      cpu: "16"
+      memory: 64Gi
+      gpu: "0"
+    - name: ccx42
+      cpu: "16"
+      memory: 64Gi
+      gpu: "0"
+    - name: ccx51
+      cpu: "32"
+      memory: 128Gi
+      gpu: "0"
+    - name: ccx52
+      cpu: "32"
+      memory: 128Gi
+      gpu: "0"
+    - name: ccx62
+      cpu: "48"
+      memory: 192Gi
+      gpu: "0"
+  regions:
+    - name: hel1
+      zones:
+        - name: hel1-dc2
+    - name: fsn1
+      zones:
+        - name: fsn1-dc14
+    - name: nbg1
+      zones:
+        - name: nbg1-dc3
+  providerConfig:
+    apiVersion: hcloud.provider.extensions.gardener.cloud/v1alpha1
+    kind: CloudProfileConfig
+    machineImages:
+      - name: ubuntu
+        versions:
+          - version: 20.4.20210616
+            imageName: ubuntu-20.04
+    regions:
+      - name: hel1
+      - name: fsn1
+      - name: nbg1

hack/dev-env/gardenlet/garden-content/kustomization.yaml

@@ -2,3 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - token.yaml
+  - cpfl.yaml
+  - project.yaml
+  - cloud_secret.yaml
+  - secret_binding.yaml

hack/dev-env/gardenlet/garden-content/project.yaml

@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: garden-testing
+  labels:
+    gardener.cloud/role: project
+    project.gardener.cloud/name: testing
+---
+apiVersion: core.gardener.cloud/v1beta1
+kind: Project
+metadata:
+  name: testing
+spec:
+  owner:
+    apiGroup: rbac.authorization.k8s.io
+    kind: User
+    name: admin@localhost
+  members: []
+  namespace: garden-testing

hack/dev-env/gardenlet/garden-content/secret_binding.yaml

@@ -0,0 +1,10 @@
+apiVersion: core.gardener.cloud/v1beta1
+kind: SecretBinding
+metadata:
+  labels:
+    cloudprofile.garden.sapcloud.io/name: hcloud
+  name: cloud-secret
+  namespace: garden-testing
+secretRef:
+  name: cloud-secret
+  namespace: garden-testing