Enable ServiceAccount token projection and token requestor for prov…

…ider-local
gardener · Jan 10, 2022 · 95a0395 · 95a0395
1 parent 4b27bc8
commit 95a0395
Show file tree

Hide file tree

Showing 14 changed files with 95 additions and 7 deletions.
diff --git a/charts/gardener/provider-local/extension/templates/deployment.yaml b/charts/gardener/provider-local/extension/templates/deployment.yaml
@@ -60,6 +60,9 @@ spec:
         - --webhook-config-server-port={{ .Values.webhookConfig.serverPort }}
         - --disable-controllers={{ .Values.disableControllers | join "," }}
         - --disable-webhooks={{ .Values.disableWebhooks | join "," }}
+        {{- if .Values.gardener.version }}
+        - --gardener-version={{ .Values.gardener.version }}
+        {{- end }}
         env:
         - name: LEADER_ELECTION_NAMESPACE
           valueFrom:

diff --git a/charts/gardener/provider-local/extension/values.yaml b/charts/gardener/provider-local/extension/values.yaml
@@ -78,5 +78,6 @@ coredns:
   enabled: true
 
 gardener:
+  version: ""
   seed:
     provider: local
diff --git a/...ardener/provider-local/internal/machine-controller-manager/seed/templates/deployment.yaml b/...ardener/provider-local/internal/machine-controller-manager/seed/templates/deployment.yaml
@@ -21,6 +21,10 @@ spec:
 {{- if .Values.podAnnotations }}
 {{ toYaml .Values.podAnnotations | indent 8 }}
 {{- end }}
+        {{- if .Values.useProjectedTokenMount }}
+        # TODO(rfranzke): Remove in a future release.
+        security.gardener.cloud/trigger: rollout
+        {{- end }}
       labels:
         gardener.cloud/role: controlplane
         app: kubernetes
@@ -49,7 +53,11 @@ spec:
         - --machine-health-timeout=10m
         - --namespace={{ .Release.Namespace }}
         - --port={{ .Values.metricsPortLocal }}
+        {{- if .Values.useTokenRequestor }}
+        - --target-kubeconfig=/var/run/secrets/gardener.cloud/shoot/generic-kubeconfig/kubeconfig
+        {{- else }}
         - --target-kubeconfig=/var/lib/machine-controller-manager/kubeconfig
+        {{- end }}
         - --v=3
         livenessProbe:
           failureThreshold: 3
@@ -64,9 +72,15 @@ spec:
         terminationMessagePath: /dev/termination-log
         terminationMessagePolicy: File
         volumeMounts:
+        {{- if .Values.useTokenRequestor }}
+        - mountPath: /var/run/secrets/gardener.cloud/shoot/generic-kubeconfig
+          name: kubeconfig
+          readOnly: true
+        {{- else }}
         - mountPath: /var/lib/machine-controller-manager
           name: machine-controller-manager
           readOnly: true
+        {{- end }}
       - name: local-machine-controller-manager
         image: {{ index .Values.images "machine-controller-manager" }}
         imagePullPolicy: IfNotPresent
@@ -82,7 +96,11 @@ spec:
         - --port={{ .Values.metricsPort }}
         - --safety-up=2
         - --safety-down=1
+        {{- if .Values.useTokenRequestor }}
+        - --target-kubeconfig=/var/run/secrets/gardener.cloud/shoot/generic-kubeconfig/kubeconfig
+        {{- else }}
         - --target-kubeconfig=/var/lib/machine-controller-manager/kubeconfig
+        {{- end }}
         - --v=3
         livenessProbe:
           failureThreshold: 3
@@ -106,10 +124,35 @@ spec:
             cpu: 350m
             memory: 256Mi
         volumeMounts:
+        {{- if .Values.useTokenRequestor }}
+        - mountPath: /var/run/secrets/gardener.cloud/shoot/generic-kubeconfig
+          name: kubeconfig
+          readOnly: true
+        {{- else }}
         - mountPath: /var/lib/machine-controller-manager
           name: machine-controller-manager
           readOnly: true
+        {{- end }}
       volumes:
+      {{- if .Values.useTokenRequestor }}
+      - name: kubeconfig
+        projected:
+          defaultMode: 420
+          sources:
+          - secret:
+              items:
+              - key: kubeconfig
+                path: kubeconfig
+              name: generic-token-kubeconfig
+              optional: false
+          - secret:
+              items:
+              - key: token
+                path: token
+              name: shoot-access-machine-controller-manager
+              optional: false
+      {{- else }}
       - name: machine-controller-manager
         secret:
           secretName: machine-controller-manager
+      {{- end }}
diff --git a/...ner/provider-local/internal/machine-controller-manager/seed/templates/serviceaccount.yaml b/...ner/provider-local/internal/machine-controller-manager/seed/templates/serviceaccount.yaml
@@ -3,3 +3,6 @@ kind: ServiceAccount
 metadata:
   name: machine-controller-manager
   namespace: {{ .Release.Namespace }}
+{{- if .Values.useProjectedTokenMount }}
+automountServiceAccountToken: false
+{{- end }}
diff --git a/charts/gardener/provider-local/internal/machine-controller-manager/seed/values.yaml b/charts/gardener/provider-local/internal/machine-controller-manager/seed/values.yaml
@@ -5,11 +5,13 @@ images:
 replicas: 1
 
 podAnnotations: {}
-
 podLabels: {}
 
 providerName: provider-foo
 
+useTokenRequestor: false
+useProjectedTokenMount: false
+
 namespace:
   uid: uuid-of-namespace
 

diff --git a/...ine-controller-manager/shoot/templates/clusterrolebinding-machine-controller-manager.yaml b/...ine-controller-manager/shoot/templates/clusterrolebinding-machine-controller-manager.yaml
@@ -8,5 +8,11 @@ roleRef:
   kind: ClusterRole
   name: extensions.gardener.cloud:{{ .Values.providerName }}:machine-controller-manager
 subjects:
+{{- if .Values.useTokenRequestor }}
+- kind: ServiceAccount
+  name: machine-controller-manager
+  namespace: kube-system
+{{- else }}
 - kind: User
   name: system:machine-controller-manager
+{{- end }}
diff --git a/...al/machine-controller-manager/shoot/templates/rolebinding-machine-controller-manager.yaml b/...al/machine-controller-manager/shoot/templates/rolebinding-machine-controller-manager.yaml
@@ -9,5 +9,11 @@ roleRef:
   kind: Role
   name: extensions.gardener.cloud:{{ .Values.providerName }}:machine-controller-manager
 subjects:
+{{- if .Values.useTokenRequestor }}
+- kind: ServiceAccount
+  name: machine-controller-manager
+  namespace: kube-system
+{{- else }}
 - kind: User
-  name: system:machine-controller-manager
+  name: system:machine-controller-manager
+{{- end }}
diff --git a/charts/gardener/provider-local/internal/machine-controller-manager/shoot/values.yaml b/charts/gardener/provider-local/internal/machine-controller-manager/shoot/values.yaml
@@ -1 +1,3 @@
 providerName: provider-foo
+
+useTokenRequestor: false
diff --git a/charts/gardener/provider-local/registration/templates/controller-registration.yaml b/charts/gardener/provider-local/registration/templates/controller-registration.yaml
@@ -5,7 +5,7 @@ metadata:
   name: provider-local
 type: helm
 providerConfig:
-  chart: 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
+  chart: H4sIAAAAAAAAA+09+3PbNtL9WX8FRrlOk3whJcqSnONNv+9U2209TWyN5STTudx5KBKSWFMEjw87ujT/+7d4keBDoqQ4cpvj9mEJj8UC2F0sFgtoboUO9nGo4Q8x9iOX+FoQkjvXgSSP2JbX+eazoQtwPBiwvwDFv+yzcdQ3eoPecEjTjWHvuP8NGnx+0/WQRLEVIvRNSEi8qVxd/p8U5rXzf7KwwlhfWUtv3zboBA/7/bXz3zsa5ue/1+31et+g7kN2dB38l8+/FbhvcUjn3UR3RssKguxrV4d/Wg6O7NANYpY2Qj9jb4lsyhNoRkIULzD6SfAQekUZBo0F/6CUpVq+tcQmquW11l2h7ccena8f6uXfIbY+J5/TRo38HxnDgvwbx0fHw0b+DwGdDjohwSp054sYPbWfIdC9BpqMxmhyhkC+LZ99sWYz13OtGCObLAPLX+lo5HmIVYtQiCMc3mFHR9cLN0JQFCP467k2sBR2UOJTdUBVxSiwbPgzIbP43goxesWLvEB3OuqBwrBxECMrQj6JoR6BKuG9GwE2n1V/dX5ydgGE0RZanQ78KzFUNJLiFhoN9fQuekoLtEVW+9nfKIoVSdDSWtFGUQKNxWknBEHQOu02DIBvY3TvxgtODceiUxy/ChxkGltQ3IIKAXybqQWRFQuiGSziODA7nfv7e91iFOsknHfEoEUd0VcNqBa13vgejuho/ztxQ+jxdIVAX0MFawq0etY9m7B5iCEvJpTq+9CNXX/+AkViwCkax43i0J0mcW7QJI3QdbUADBuwQHs0QeeTNvphNDmfvKBI3p1f/3z55hq9G11djS6uz88m6PIKnVxenJ5fn19ewLcf0ejiV/TL+cXpC4RdOpMwnEFIewBkunQ4gWMorgnGORLkuhIF2HZnrg1d8+eJNcdoTmCF8KFHKMDh0o3otEZAoEPReO7Sja2YJZX6pbegyJyYc6rsKB/reif9d2HZtx2Zo9nEj0PieaABQzynY8GQ6tEC5VUj0sU6lUOGP1jQN9wpqNGpFeHOOtTUukKnFxO5dJocP6RcYZuEjvh+wquPYTywSDr3Z6EFeBI7TkKZeIHjexLeim+XAe0XDNpkFcV4CUhm7lzkvYNisrnCANnBw3RLRcLshqgjF50iMrVyB0gNPCAk2oi+QDTMkWajNtUHmou+i5iouUvgHbPz8SNIxa+MpLeWl+BIv2N/0O8gKkBPjPro06fO/LsvTHJ7G5oRiq25ifTnnUMQRMVnDEJAZYzbdtinSiVCOUKTICDC7hOJVBSplAGThtiOUdYMyjXTClTsjV33h4F6+y/joX3b2Hn/DzbIca/Z/x8Cdpn/mwX2YC2J9DjYyRdQY/8bRmn/3xsag8b+PwR8/KghB89cH6xiuktvI+3Tp1b9Tp3Ww77DSrdUJJ41xV4EFm2g3+IVR8e+JFMw3TDwke6SDm0qh2MNCrZCt0UJWKZtL3FSSnUkKm4gpFy3SCDFYqI1JUT7rKVyL1wfmAe2BKy6foU9DNaQfgHEVVKWksYMEk4ZQjTHnaGFFY1DyP8AlsDC6g2GZju1U1h5HQwClNYIQtePZ6j9bfT3b6NiyRAHJHJjEq42oYA+4iqE5t4IobNKv+HjY3N3A3Wwi/632c5haQUam/w7MPhIqNEtGd1n4rU+4jr/b394VND/x/3BUaP/DwFC++Sk+i2b2Es5r1z35dzEt7BhMhHfSb62gtYSx5ZjxZYJmoD7equ1dTXjiEoR7BEqVClL5kqGK2azQp1T9LltXEuSw1qMbvJcaqLfKZKNvc6j+1qV2n7y75H5HLZ+W54K1ch/z+geF+S/P+g39t9B4KEEW3CExnkkL9GcxxT5pe6NlN8iXfKgbnskcQSbJdxzYCKBORXomevFwJyKJUYrUImmaP/x4/mr67Orf7aQAGaNFSCwwgiHaZHXVmwvCkUU9M+Xlr0Au011DC4tH1RG+JyJiLahQNrIL3h1U6QFupbmjxlNZSJggphzPRznib7iPvebUxgWmXYdJrj1GMOwPqugTf7Q47EkjjtbbT0eaUEQF8elzKoUpN1jm4ebJUWDI+rPQ//K6r+HvUX4Xocuv6cMTE8NQA7f6xuGUv+f/7uh/z2t47rft56PZ2knRo5THA90cyNF82aZeDGsir7lxzeuc3ODCPMqk/BvCZ2Fx1ZjDewJu63/IXb83f2Au/v/jOPeceP/OwTsM/+pHfgw9p/RL/n/+oNhE/9zECjs/8QU6/z4xxHeux1NRIGkygjcwGiarCaRnRDqD/OwNO1086/dwRH6mC5ZOAxJGKVfF9jy4oWSj6jFucROYt+iQVbuU/opxJbD1/vSMMh1M9KpWeHaWIdhmDDDY3JxfiaG55OKi28baZfp2Rf+gKDGe/2p/vxZ/v+st+9Tq/c9N3uRG4EJoYGlS4/I5yBw99ZKzyXq0Z0NhYFjwVbmblhJe+bLeyBqqKGipbaWHi2A/TXtY+8T/M/4tIkSPzcsMMfAIAucRMj8qzE4SjNmJLyHNmH30MGx3YH+Ee+OmfL5GVxaH24g1U7CkG7GDVAYFTNps4iPoyzLIyRQvsyVkfGI5ShZljO1POrFbXGUqtv2saXzy8M++t/BgUdWS5iO7RaAGv3f7w0HBf0/6HYb/X8Q2FH/W0EQddJF4DRlhNwqoG7zoUJxQfjsBYLGBVHsIWbBT5GJDPbtzqW1fgadScLVKxoNZKIe5ETYY749ThHbj71SSCwRyaIW8HzFs+k6AAr4TQDdw7IGaKVJEs6B7N7g2yztjW/dWa5Hx44ThVC8CuDzlYoE0qVQCZKUwWP0+D4RkUxmpuIW2L6NkmVmfuWcMU/ZAQ76i34tUOs/WBEeW7AittdYbu1nzGvKj5sAc6a3vdzwlAYIITkFLDOJyZIkfjzhK+XItum3a3KLgWNmFixNomS2z5V1NWSFc6UhDTEPkvKdrQ6SfmkSpPk8tAfdvoz0uR3SM7msq+yveWfoL/VuvsI48bwxAd5Zmeh8dkHiMY1gBC5OVwX3DlgxisYhmeKMOli1YHaTEF8voMKCeCADAyWXRvT9hGO1AvWyxAsTdbh1ks8hIXDoy+7Lbi45gpmmUvLz9fVYyXB9N3Yt7xR71mqCYZQcYPyhWhV25C5x0jxDzYsS24YOKYQbSm7sLjFJ4rRq1qmiwGaU52Ytndkx6xM11BT0HImKgBkGMbGJZ6I3p+PdMWmxHVRiuz7ZhM2owAbSF7p2NW0qNmotultyxdGWXJFZoOrQAlMYL41tmOLhptxQ+hmRJISqKsUsuDLK92GJl6Booepx97Wr5NAAVRwVS9tBQgnsLitx5FBEGMw9N17ReEdYDVQ8lueR+3Ho3oEWmOOzCNYF4SdWFQ1rzwqsqeuB0OACJU5IgnyKRvHmemA5l763uoJF/0doKWKRkyaKqUNRFrojXrLEr6muy8kC04VjPr+K8irxHVfGGkdT0XiuOZ84eJJbxyjkwxEITCOsMsmHlkREbZtYarqRBzsKSQZvVdHDttzQqSPj4JmVePFraNxE/Z7KXbC7WObGVUO3eGWikoqmwLm9IqtavVSNz3+XWX4w2Mf+T422h/H/dHtGr3z+19j/B4F9/T/pyXyF/2d7S74R6seGfeRfesS2vRNaJ/+D45L89wbHjfwfAvaVf7HXe5R9P99Sn3D34/m4tMMvtJ1uVjRBhtw6cFNb7AjKNj/wxRzHuW2IxJA4GzHIHU0Jwx9P3+0i/7v6/SRsln+jOxwU5f/oqFn/DwM7O/c2RQG1tgvkY7HQatDh3AdhvZLbTo6o5ANLt6XFeCFe3URtul1qt3KHELtEDGZuxSpH4iDncFSCB0XiCd318UY3+Btr6BgKBFs5IHPORoWgfFbm1Mt8lvnCLJEX28MtuWUAqSxe9mJWx4Tu4tusj0pe7+msPLQSfbIgNR0n7iQSC+PEDkFw/Hn1SRfdi0e0RMaUstATuaWWXifadEBo79gl4+ySHnCTq7gF8tj5utOmrsP2+o5syfwvZQ3VqQsjTpgLxrOi6GKzzLO6Od/vFhWqfME1uoWDcPmqpcR9inIx1dFbjPfVgzQzx6BkuYSJVx06nfrrMFlhTQONRzOYEqBFpeKiRW+/V8jgBc9EOV2WewXFVIooTsEZAb35q4HMatmRKOCnX6iXSkWuHmGrtfWs5mTl21GxJbCZ0r7t3JBSeYt2Qna3ea9WeNW6NrjPnamc3VtRKte14+YuYe/eVL5+bWtsvdN4AB5lsEwvr22AVbmUNUZphSLue3YffPce8Hp1lBN5E537U4WDb+fGKtHUte3zO/G7tyYq1uInzh4zT2vVYRaqdXfkcp++Jf4FiWLNDeqw0WLn43VI0pARLfJdTWwj61DWhNYwxsTTBSG3Ir5cS83M7zdcF1lbWxJLl1GVNlGMxzZJ6uj2bQt8NLS2Fh0/hyqpQjeifVaidXNTKrJPslxYu38DmwG1X7TX4RJtVyF6J7LWYCkYdKmxLd5mKjaYro0iX21wU90Kswv7d+qyy62BV2ej07Orm7NXZyf0YZGbi9Hrs8l4dHKmnCKwQOsfwULKn+rMXOw5V3iWTxXp/IBGmrh6ylD7GraS3vPXo5/O3gKxl1c3l2/Prt5dnV+XaDWReMYhu5fUqbyotGm4SoewnADJm5zf1AOx/Fnojoxa9JAUhifM7944KCeJ5cc3shq/I1+Yoka3cNdqz8lYdzTHR2jdJTQJ6gFeaZrqDuoqpoo+nuSDLW0qU+eMwL4flTJQ+rrPaRLSJ1vA/nASuv07Z0u4SD77gO2EHXvmDuCYcV8+JRS9ovvQM/4CT34LJ6uz87u6q9KFWii9CACs75cy+QsrxaZoY1tcuFYrxCQgHpmvfqE0tvPnnnRFYhuFVjYBWzNL6SB0Gx6pPCzd6+KjhDUnrV/82uEu/j/gWlhCwoS9BThNnDnezhFY6//vF+//wYfG/3cQELIyj9FT6oSocmo9Q0bxCnDAts2dO2MK66d0GI6Jc5qyxw+MPR7ac7ifQ6/CVxYl09oOf7Yj789wZ3gn+Rc+IZv6hHY4Aqg9/z/uF8//usfdRv4PAapUR6mxodOASlhZ08OAseoO3F6qhbFryJnutuYemdIgRrbayaCt3BOzsinE2Iw9NrYG+2OP3dcAu8h/OLXsfR6Crov/7/aL73/0usPm/deDgKZpuZWdzbGVxAuQwf/wt/uKukAcvF8Rryr4Z+36vsvKHSYeNck1emnpp5AkgTi/X/toQKsQtqohcTspaskwYOkAr0jpAA/ECc9IncvFr2qhvMO2Mk0tLlyI+S9qgUqP5qYstTL3veY+Z9mw1ZiKEaH2GNsluhH/cE8NGvYpSD8l/IZCaeSdLYZc8f5HpYSHJ2ndgXCZMH733UlT80S0n7fLyG0Cc+76qgSU8TILtYDNDnEltbshlOnM+uV5haCYwilT9bje1w5iu83+0KN/9mGa1lirCXgFRzy/m3vmUy0QuIq0KhmC/zMrozwM6VYgKnztzGAEPfc/ksFgR+3H/GOEYeTjVLj5kbAoJY5YBVOmcQ2yInPz5r/kpBf25MonNUsUt/ipZ6QqHlAuuJQwBSVHRZkPcFqilPUbmfIPsOXOPnT4PUbg5yRmKkH47XIPpog2oUmylMPK3p1zs1wxBWwX524lDuJBCT2yAiZjldNGa9ajoteFaNj+JgYAHDHsxjzotSzOp7yI/LNWrx/4kH+xRQyaEN5nOQQbKIRS5eW1hh7Yxf4G4s9WylxYnjiGf5hN92ObKA18QdjF/t817ldC3f7/2Cj6/3rDXvP+30Fg6+Derz/ub1NY8XZxe0qkcVB/xlY4W94cgLzlad3O87+H/AtrZ3s1UOv/6xtF/5/R+P8OA5vkX1oRj+rEf+wB+sphF/m/C6y9fgeuRv6No+Py+1/N+5+HgcJZOZ1iEbRVOPJrl/dt4vyv1xZq463YtY2JM0p3bds/IQptb6lB5IpdQby0FtTA3nwatyqUYBi+CebJyosBPIb5u+fftUT8hOuP6OVzrMQGszvtQGb6k0zt9bToGQId6tEfWpLV2hu6UKymxEXIu/N7EMCr7kODqFl89F1aK2m4VdXFEppeulxSFzoBBbjzSp0+nsKjJRTTiJKuFtazcn+WA9kDQ73+5yE8n/MDoDX6/8jol37/kz4J3+j/AwC/TcGUpPyJBxPhRL6mk7IHMAV1NWU/O5U5dzuluxDsp6uYzUDFO1j32k5LDbqgL5CUX1DK7iwNut/SCtJNiD5+aoG0U8rFepVG4VWp+7LyZqp7kL5GInXpsM/eIdmscdp0eWu3WkrALi2knimlq4waec1vkSmnImtKGbwUP3jagCl/5LShID8W2lCg8pRpQ3nhQd5Ugo7U+u6JveQGBAjxSHMYbqN3TH9mTzfacmkphounk6/c2tg0cOvuQ8iIhFY56NpE//hnqxBCzdIKbowUxRNUFXlIX7N8guTvEpjssww6DKwk4mHgzAJheTBUDO+VIp9zN14kU90my04WCal+nHpk2lla1JHRmSau53QY6s4psYEP2BssHLcq9VLkCZl7+Ca7n8XratbSGfZFNSbg7SO92xYJ6Q/3Grph6B/+3L0ySr1q/+/3tGc9nqHrequV88KYGUdzd02/fySSZLi1QV81bLXyd75MRV3Ra1+mPAFsPXkCtWMmkSwERlwXfIGwPtdRJO8fTldQDDtadj0QarZEYYod8HD9mF44lHVZZqo+5Y1GIUgt+XxaSb+mvw1lttQBarPuSvWa6jfEl4THXuUaaKCBBhpooIEGGmiggQYaaKCBBhpooIEGGmiggQYaaKCBBhpooIEGvl74f47Lvd4AoAAA
   values:
 {{ toYaml .Values.values | indent 4 }}