Skip to content

Commit 37d27d6

Browse files
nikhisin3001nikhisin3001
authored
release v1.1.0
release v1.1.0
2 parents 814507b + 7be2c39 commit 37d27d6

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

60 files changed

+1503
-166
lines changed

‎Makefile

+1-4
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,5 @@
11
SHELL = bash
2-
3-
PKG_VERSION ?= v1.0.0
4-
OCI_DRIVER_VERSION ?= v1.30.0
5-
2+
PKG_VERSION ?= v1.1.0
63
PRE_COMMIT := $(shell command -v pre-commit 2> /dev/null)
74
PODMAN := $(shell command -v podman 2> /dev/null)
85
OC := $(shell command -v oc 2> /dev/null)

‎README.md

+4
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,10 @@
22

33
This repository contains [Terraform stacks](/terraform-stacks/README.md) as well as OpenShift and Kubernetes [manifest files](/custom_manifests/README.md) to support the deployment, installation, and management of Red Hat OpenShift clusters on Oracle Cloud Infrastructure (OCI).
44

5+
## Prerequisites
6+
⚠️ Important: Before creating the cluster, ensure you've executed the latest version of create-attribution-tags stack. This ensures all necessary tags are available prior to cluster provisioning.
7+
You only need to run this for the `first cluster deployment`. Subsequent cluster deployments will not require this step, as the tags will already exist.
8+
59
## Documentation and Installation Instructions
610

711
- [OSO Overview](https://docs.oracle.com/en-us/iaas/Content/openshift-on-oci/overview.htm)

‎custom_manifests/condensed-manifest.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ metadata:
1313
"pod-security.kubernetes.io/warn": "privileged"
1414
"security.openshift.io/scc.podSecurityLabelSync": "false"
1515
"openshift.io/run-level": "0"
16-
"pod-security.kubernetes.io/enforce-version": "v1.24"
16+
"pod-security.kubernetes.io/enforce-version": "v1.30"
1717

1818
---
1919

@@ -272,7 +272,7 @@ metadata:
272272
"pod-security.kubernetes.io/warn": "privileged"
273273
"security.openshift.io/scc.podSecurityLabelSync": "false"
274274
"openshift.io/run-level": "0"
275-
"pod-security.kubernetes.io/enforce-version": "v1.24"
275+
"pod-security.kubernetes.io/enforce-version": "v1.30"
276276

277277
---
278278

‎custom_manifests/manifests/01-oci-ccm.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ metadata:
1313
"pod-security.kubernetes.io/warn": "privileged"
1414
"security.openshift.io/scc.podSecurityLabelSync": "false"
1515
"openshift.io/run-level": "0"
16-
"pod-security.kubernetes.io/enforce-version": "v1.24"
16+
"pod-security.kubernetes.io/enforce-version": "v1.30"
1717

1818
---
1919

‎custom_manifests/manifests/01-oci-csi.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ metadata:
1313
"pod-security.kubernetes.io/warn": "privileged"
1414
"security.openshift.io/scc.podSecurityLabelSync": "false"
1515
"openshift.io/run-level": "0"
16-
"pod-security.kubernetes.io/enforce-version": "v1.24"
16+
"pod-security.kubernetes.io/enforce-version": "v1.30"
1717

1818
---
1919

‎custom_manifests/oci-ccm-csi-drivers/v1.30.0-RWX-LA/01-oci-ccm.yml

+259
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,259 @@
1+
# ----- 01-oci-ccm.yml -----
2+
3+
# oci-ccm-00-namespace.yaml
4+
apiVersion: v1
5+
kind: Namespace
6+
metadata:
7+
name: oci-cloud-controller-manager
8+
annotations:
9+
workload.openshift.io/allowed: management
10+
labels:
11+
"pod-security.kubernetes.io/enforce": "privileged"
12+
"pod-security.kubernetes.io/audit": "privileged"
13+
"pod-security.kubernetes.io/warn": "privileged"
14+
"security.openshift.io/scc.podSecurityLabelSync": "false"
15+
"openshift.io/run-level": "0"
16+
"pod-security.kubernetes.io/enforce-version": "v1.30"
17+
18+
---
19+
20+
# oci-ccm-01-service-account.yaml
21+
apiVersion: v1
22+
kind: ServiceAccount
23+
metadata:
24+
name: cloud-controller-manager
25+
namespace: oci-cloud-controller-manager
26+
27+
---
28+
29+
# oci-ccm-02-cluster-role.yaml
30+
apiVersion: rbac.authorization.k8s.io/v1
31+
kind: ClusterRole
32+
metadata:
33+
name: system:cloud-controller-manager
34+
labels:
35+
kubernetes.io/cluster-service: "true"
36+
rules:
37+
- apiGroups:
38+
- ""
39+
resources:
40+
- nodes
41+
verbs:
42+
- '*'
43+
44+
- apiGroups:
45+
- ""
46+
resources:
47+
- nodes/status
48+
verbs:
49+
- patch
50+
51+
- apiGroups:
52+
- ""
53+
resources:
54+
- services
55+
verbs:
56+
- list
57+
- watch
58+
- patch
59+
- get
60+
61+
- apiGroups:
62+
- ""
63+
resources:
64+
- services/status
65+
verbs:
66+
- patch
67+
- get
68+
- update
69+
70+
- apiGroups:
71+
- ""
72+
resources:
73+
- configmaps
74+
resourceNames:
75+
- "extension-apiserver-authentication"
76+
verbs:
77+
- get
78+
79+
- apiGroups:
80+
- ""
81+
resources:
82+
- events
83+
verbs:
84+
- list
85+
- watch
86+
- create
87+
- patch
88+
- update
89+
90+
# For leader election
91+
- apiGroups:
92+
- ""
93+
resources:
94+
- endpoints
95+
verbs:
96+
- create
97+
98+
- apiGroups:
99+
- ""
100+
resources:
101+
- endpoints
102+
resourceNames:
103+
- "cloud-controller-manager"
104+
verbs:
105+
- get
106+
- list
107+
- watch
108+
- update
109+
110+
- apiGroups:
111+
- ""
112+
resources:
113+
- configmaps
114+
verbs:
115+
- create
116+
117+
- apiGroups:
118+
- "coordination.k8s.io"
119+
resources:
120+
- leases
121+
verbs:
122+
- get
123+
- create
124+
- update
125+
- delete
126+
- patch
127+
- watch
128+
129+
- apiGroups:
130+
- ""
131+
resources:
132+
- configmaps
133+
resourceNames:
134+
- "cloud-controller-manager"
135+
verbs:
136+
- get
137+
- update
138+
139+
- apiGroups:
140+
- ""
141+
resources:
142+
- configmaps
143+
resourceNames:
144+
- "extension-apiserver-authentication"
145+
verbs:
146+
- get
147+
- list
148+
- watch
149+
150+
- apiGroups:
151+
- ""
152+
resources:
153+
- serviceaccounts
154+
verbs:
155+
- create
156+
- list
157+
- get
158+
- watch
159+
- apiGroups:
160+
- ""
161+
resources:
162+
- secrets
163+
verbs:
164+
- get
165+
- list
166+
167+
# For the PVL
168+
- apiGroups:
169+
- ""
170+
resources:
171+
- persistentvolumes
172+
verbs:
173+
- list
174+
- watch
175+
- patch
176+
---
177+
178+
# oci-ccm-03-cluster-role-binding.yaml
179+
kind: ClusterRoleBinding
180+
apiVersion: rbac.authorization.k8s.io/v1
181+
metadata:
182+
name: oci-cloud-controller-manager
183+
roleRef:
184+
apiGroup: rbac.authorization.k8s.io
185+
kind: ClusterRole
186+
name: system:cloud-controller-manager
187+
subjects:
188+
- kind: ServiceAccount
189+
name: cloud-controller-manager
190+
namespace: oci-cloud-controller-manager
191+
192+
---
193+
194+
# oci-ccm-05-daemon-set.yaml
195+
apiVersion: apps/v1
196+
kind: DaemonSet
197+
metadata:
198+
name: oci-cloud-controller-manager
199+
namespace: oci-cloud-controller-manager
200+
labels:
201+
k8s-app: oci-cloud-controller-manager
202+
spec:
203+
selector:
204+
matchLabels:
205+
component: oci-cloud-controller-manager
206+
tier: control-plane
207+
updateStrategy:
208+
type: RollingUpdate
209+
template:
210+
metadata:
211+
labels:
212+
component: oci-cloud-controller-manager
213+
tier: control-plane
214+
spec:
215+
serviceAccountName: cloud-controller-manager
216+
hostNetwork: true
217+
nodeSelector:
218+
node-role.kubernetes.io/control-plane: ""
219+
tolerations:
220+
- key: node.cloudprovider.kubernetes.io/uninitialized
221+
value: "true"
222+
effect: NoSchedule
223+
- key: node-role.kubernetes.io/control-plane
224+
operator: Exists
225+
effect: NoSchedule
226+
- key: node-role.kubernetes.io/master
227+
operator: Exists
228+
effect: NoSchedule
229+
- key: node.kubernetes.io/not-ready
230+
operator: Exists
231+
effect: NoSchedule
232+
volumes:
233+
- name: cfg
234+
secret:
235+
secretName: oci-cloud-controller-manager
236+
- name: kubernetes
237+
hostPath:
238+
path: /etc/kubernetes
239+
containers:
240+
- name: oci-cloud-controller-manager
241+
image: ghcr.io/dfoster-oracle/cloud-provider-oci-amd64:v1.30.0-rwx
242+
command:
243+
- /bin/bash
244+
- -c
245+
- |
246+
#!/bin/bash
247+
set -o allexport
248+
if [[ -f /etc/kubernetes/apiserver-url.env ]]; then
249+
source /etc/kubernetes/apiserver-url.env
250+
fi
251+
exec /usr/local/bin/oci-cloud-controller-manager --cloud-config=/etc/oci/cloud-provider.yaml --cloud-provider=oci --leader-elect-resource-lock=leases --concurrent-service-syncs=3 --v=2
252+
volumeMounts:
253+
- name: cfg
254+
mountPath: /etc/oci
255+
readOnly: true
256+
- name: kubernetes
257+
mountPath: /etc/kubernetes
258+
readOnly: true
259+
---

0 commit comments

Comments
 (0)