Merge pull request #92 from DockToFuture/support/node-local-dns-feature

Support node local dns feature

charts/gardener-extension-networking-cilium/templates/deployment.yaml

@@ -37,6 +37,9 @@ spec:
         - --healthcheck-max-concurrent-reconciles={{ .Values.controller.healthcheck.concurrentSyncs }}
         - --ignore-operation-annotation={{ .Values.controller.ignoreOperationAnnotation }}
         - --config-file=/etc/{{ include "name" . }}/config/config.yaml
+        - --webhook-config-namespace={{ .Release.Namespace }}
+        - --webhook-config-service-port={{ .Values.webhookConfig.servicePort }}
+        - --webhook-config-server-port={{ .Values.webhookConfig.serverPort }}
         - --gardener-version={{ .Values.gardener.version }}
         env:
         - name: LEADER_ELECTION_NAMESPACE
@@ -47,6 +50,10 @@ spec:
         - name: IMAGEVECTOR_OVERWRITE
           value: /charts_overwrite/images_overwrite.yaml
         {{- end }}
+        ports:
+        - name: webhook-server
+          containerPort: {{ .Values.webhookConfig.serverPort }}
+          protocol: TCP
 {{- if .Values.resources }}
         resources:
 {{ toYaml .Values.resources | nindent 10 }}

charts/gardener-extension-networking-cilium/templates/rbac.yaml

@@ -63,6 +63,7 @@ rules:
   - rbac.authorization.k8s.io
   - admissionregistration.k8s.io
   - apiextensions.k8s.io
+  - networking.k8s.io
   resources:
   - namespaces
   - events
@@ -81,6 +82,7 @@ rules:
   - pods/log
   - mutatingwebhookconfigurations
   - customresourcedefinitions
+  - networkpolicies
   verbs:
   - "*"
 ---

charts/gardener-extension-networking-cilium/templates/service.yaml

@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "name" . }}
+  namespace: {{ .Release.Namespace }}
+{{-  if .Values.ignoreResources }}
+  annotations:
+    resources.gardener.cloud/ignore: "true"
+{{- end }}
+  labels:
+{{ include "labels" . | indent 4 }}
+spec:
+  type: ClusterIP
+  selector:
+{{ include "labels" . | indent 6 }}
+  ports:
+  - port: {{ .Values.webhookConfig.servicePort }}
+    protocol: TCP
+    targetPort: {{ .Values.webhookConfig.serverPort }}

charts/gardener-extension-networking-cilium/values.yaml

@@ -43,3 +43,7 @@ config:
 
 gardener:
   version: ""
+
+webhookConfig:
+  servicePort: 443
+  serverPort: 10250

charts/internal/cilium/charts/agent/templates/clusterrole.yaml

@@ -74,6 +74,7 @@ rules:
   - ciliumidentities
   - ciliumlocalredirectpolicies
   - ciliumlocalredirectpolicies/status
+  - ciliumlocalredirectpolicies/finalizers
   - ciliumegressnatpolicies
   - ciliumendpointslices
   verbs:

charts/internal/cilium/charts/agent/templates/configmap.yaml

@@ -0,0 +1 @@
+../../config/templates/configmap.yaml

charts/internal/cilium/charts/agent/templates/daemonset.yaml

@@ -13,6 +13,7 @@ spec:
   template:
     metadata:
       annotations:
+        checksum/configmap-cilium: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
 {{- if and .Values.global.prometheus.enabled (not .Values.global.prometheus.serviceMonitor.enabled) }}
         prometheus.io/port: "{{ .Values.global.prometheus.port }}"
         prometheus.io/scrape: "true"

charts/internal/cilium/charts/network-policy/templates/dns.yaml

@@ -4,7 +4,7 @@ metadata:
   annotations:
     gardener.cloud/description: "Allows CoreDNS to be reachable by non-pod remote node IPs, in particular Cilium DNS proxies."
   name: gardener.cloud--allow-dns-from-remote-nodes
-  namespace: kube-system
+  namespace: {{ .Release.Namespace }}
 spec:
   endpointSelector:
     matchExpressions:

charts/internal/cilium/charts/network-policy/templates/nodelocaldns.yaml

@@ -0,0 +1,23 @@
+{{- if .Values.global.nodeLocalDNS.enabled -}}
+apiVersion: "cilium.io/v2"
+kind: CiliumLocalRedirectPolicy
+metadata:
+  name: "nodelocaldns"
+  namespace: {{ .Release.Namespace }}
+spec:
+  redirectFrontend:
+    serviceMatcher:
+      serviceName: kube-dns
+      namespace: {{ .Release.Namespace }}
+  redirectBackend:
+    localEndpointSelector:
+      matchLabels:
+        k8s-app: node-local-dns
+    toPorts:
+      - port: "53"
+        name: dns
+        protocol: UDP
+      - port: "53"
+        name: dns-tcp
+        protocol: TCP
+{{- end }}

charts/internal/cilium/charts/operator/templates/configmap.yaml

@@ -0,0 +1 @@
+../../config/templates/configmap.yaml

charts/internal/cilium/charts/operator/templates/deployment.yaml

@@ -22,6 +22,7 @@ spec:
   template:
     metadata:
       annotations:
+        checksum/configmap-cilium: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
 {{- if and .Values.global.prometheus.enabled (not .Values.global.prometheus.serviceMonitor.enabled) }}
         prometheus.io/port: {{ .Values.global.operatorPrometheus.port | quote }}
         prometheus.io/scrape: "true"

charts/internal/cilium/values.yaml

@@ -24,6 +24,9 @@ requirements:
 
 # global groups all configuration options that have effect on all sub-charts
 global:
+  nodeLocalDNS:
+    enabled: false
+
   podCIDR: ""
   # pullPolicy is the container image pull policy
   pullPolicy: IfNotPresent

cmd/gardener-extension-networking-cilium/app/app.go

@@ -28,6 +28,9 @@ import (
 	"github.com/gardener/gardener/extensions/pkg/controller"
 	controllercmd "github.com/gardener/gardener/extensions/pkg/controller/cmd"
 	"github.com/gardener/gardener/extensions/pkg/util"
+	webhookcmd "github.com/gardener/gardener/extensions/pkg/webhook/cmd"
+	v1beta1constants "github.com/gardener/gardener/pkg/apis/core/v1beta1/constants"
+	"github.com/pkg/errors"
 	"github.com/spf13/cobra"
 	corev1 "k8s.io/api/core/v1"
 	"k8s.io/client-go/tools/leaderelection/resourcelock"
@@ -61,6 +64,20 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 
 		configFileOpts = &ciliumcmd.ConfigOptions{}
 
+		// options for the webhook server
+		webhookServerOptions = &webhookcmd.ServerOptions{
+			Namespace: os.Getenv("WEBHOOK_CONFIG_NAMESPACE"),
+		}
+
+		webhookSwitches = ciliumcmd.WebhookSwitchOptions()
+		webhookOptions  = webhookcmd.NewAddToManagerOptions(
+			cilium.Name,
+			ciliumcontroller.ShootWebhooksResourceName,
+			map[string]string{v1beta1constants.LabelNetworkingProvider: cilium.Type},
+			webhookServerOptions,
+			webhookSwitches,
+		)
+
 		aggOption = controllercmd.NewOptionAggregator(
 			generalOpts,
 			restOpts,
@@ -69,6 +86,7 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 			controllercmd.PrefixOption("healthcheck-", healthCheckCtrlOpts),
 			reconcileOpts,
 			configFileOpts,
+			webhookOptions,
 		)
 	)
 
@@ -105,6 +123,12 @@ func NewControllerManagerCommand(ctx context.Context) *cobra.Command {
 			configFileOpts.Completed().ApplyHealthCheckConfig(&healthcheck.AddOptions.HealthCheckConfig)
 			healthCheckCtrlOpts.Completed().Apply(&healthcheck.AddOptions.Controller)
 
+			shootWebhookConfig, err := webhookOptions.Completed().AddToManager(ctx, mgr)
+			if err != nil {
+				return errors.Wrap(err, "Could not add webhooks to manager")
+			}
+			ciliumcontroller.DefaultAddOptions.ShootWebhookConfig = shootWebhookConfig
+
 			if err := ciliumcontroller.AddToManager(mgr); err != nil {
 				return fmt.Errorf("could not add controllers to manager: %w", err)
 			}

example/controller-registration.yaml

@@ -5,7 +5,7 @@ metadata:
   name: networking-cilium
 type: helm
 providerConfig:
-  chart: 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
+  chart: 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
   values:
     image:
       tag: v1.13.0-dev