Configure TLS communication between registry cache and containerd (#245)

* Configure tls communication between registry cache and containerd * Address PR review feedback * Adaptation to PoC with two component and two MRs * Fix tls Secret creation when upstream contains a port (contains `:`) * Address PR review feedback (2) * Address PR review feedback (3) --------- Co-authored-by: Ismail Alidzhikov <[email protected]>
gardener · Dec 12, 2024 · f614b47 · f614b47
1 parent 52e5997
commit f614b47
Show file tree

Hide file tree

Showing 20 changed files with 1,314 additions and 219 deletions.
diff --git a/charts/gardener-extension-registry-cache/templates/clusterrole.yaml b/charts/gardener-extension-registry-cache/templates/clusterrole.yaml
@@ -42,6 +42,8 @@ rules:
   - resources.gardener.cloud
   resources:
   - managedresources
+  # TODO(dimitar-kostadinov): Remove managedresources/status after May 2025.
+  - managedresources/status
   verbs:
   - get
   - list
@@ -50,6 +52,13 @@ rules:
   - update
   - patch
   - delete
+# TODO(dimitar-kostadinov): Remove the below rule for managedresources/status after May 2025.
+- apiGroups:
+  - resources.gardener.cloud
+  resources:
+  - managedresources/status
+  verbs:
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/example/controller-registration.yaml b/example/controller-registration.yaml
@@ -4,7 +4,7 @@ kind: ControllerDeployment
 metadata:
   name: extension-registry-cache
 helm:
-  rawChart: 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
+  rawChart: H4sIAAAAAAAAA+0da2/bOLKf9St47i62PVTyM0nPQA+XTbJtsG1iJLncHRaLgJYYmxtJ1JGSU2/b++03JPWWbdlO1n2sBkVsU+RwSM4MZ4ZDdYK5Q3zCTfI+JL6gzDc5mVAR8rlpY3tK2k8eDB2Ag7099QlQ/lTfu/1Bt7fX29+X5d393n7/Cdp7eNf1EIkQc4SecMbCVfXqnn+lMKldf2tKXI9OfMbJln3IBd4fDJauPyx7cf17nUGv8wR1HnWkS+BPvv5P0QiHIeG+QCFDepnR/ZT4aBxR16H+BAXYvsMTIizjKbqaUoFEFASMh/AFWMNFE5eNkYdDewq1XyBOXBzSGYF24TRXjn0HEPhkAk+Zj54FnNzS98RB9xTq/eW5hc59d46Yr1pKklBAOHKpTyzDOr68uQyBNkBxxDwPEFwfXSKHcmFYExq21V9NvmGNf+dt9TcpmE7a8k/yU8z8doZoDOOLAnRLXSKMv1riPoC/Y3wHf0MPvv8Pql5jTlkk0OnxCXQYcPYbsUPDog7BbV0PigxrJmzmkLbxuVd1faiX/6Mp5qE1x567bR918t/r75Xlv9dt5H8ngAN6Tbhc9yGadQ0cBOnPVtfqtAyHCJvTIFRFh+gNbAbIliyBbhlH4ZSg1zELoYuYcdCRZByUcpRl+NgjQ1TLa8Ys6btjQedfkRh9tVAv/w6zrQl7SB918n/QL9t/B/29g0b+dwHtNrocHf/b/Al2vyMWzGHLnIZXwAxDBFp4gC4PR+jyBIGoY1/9wLewUVIcEmQzL8D+XG7smQ6wmR9yOo5grxZGu20k+N9SG9iLmKdQLaS3lHDQJoFkMLMHkg71Jmw4kSgkajFFpo1aYwxfvnt9eHF8cnZycfPm8Ojnm+PTi3ZSz1S9MdcF/o25VhkXFjRbxs/IQt89s3GILKsN/65PLi5Pz8+exz/Je+wFLmkvQyy3QXSSoB6WUC944FHOGW/JAYKlpQypWH0SH4/B4kCFcWvLSqnWuFBaYFLL2oxzsDlQRhkqUGYEeexrq856+Q8JzAgQJ7b2BDf2/4Dz9ruN/7cL2GT9b8DcB5NcWGGwkS1Yo/+7nW6vtP69vYO9Rv/vAj58MJEDjhh4XS1ppbWQ+emTUW+pyXYEFL+sbeSRgH66pRONJm9c6nIrQWOlmIWV9GbZLouc9qyL3WCKu8Yd9Z0heGmyYaTVXNpvuVuXYIeA6wkqEqpRRxOwjHxTVzeT+tXhpIipB0pVY0NIPqG3aIrFSHmvqCWmuLe3P2wh6xq7ETjJqr4V4glKWwSc+uEtan0v/vG9KNfkJGCCwnY5X4WCuIIsQjjcGqGew9zXz82JDXwO2ET/2y4oSwL2jEs2igfU6P/+4KC8//f3uoNG/+8CTNMsqGk+xraFo3DKOP1dW5Z3L0GDMFDLiULWbHABbGB4JMQODvEQ1Mq6Tj5CLh6DQpNtEMJBYN1FY8J9EhLV0fp4EJKxabD228roXbdRtUvqAxf4NnT74QOyLmBbwIJYZ0CI1Iw8Ajt9aJjQkL7mLAoU6SZauoXBU04Ei7hN4qqx6Aj4MSN8HJdOSKg+XaBQfbmX0dIHdZRVLf1swwjDaD0C5Lcg/RYFsMKkShV2PCok7oIformlSpgXhcqZuSfjKWN3dn5XX5+qmBY1pZwkX4PF05ZSUDtrHvZhh3TSUih8iq7Oj8+fOdSjoCDMOwbz51CfzZ4P0QXx2IxUWsVTDC4yLDV6h+fShd6zFvaw6XLkRpubg2yRHODZUEbHa6mWziSIH7tHkq+Vq7nuQB5xhheOf8k6tlpVfILAjISPPn9r9a1518NBqfu4jwfhSIawisgMmdRQ6VIUDFwHi+mYwaKI9eiRSlcEWPP+FirKZowDo63WAUqtljqoQ+yBNQ/GLGgOy2acMAEf3gJ+sDkOiJ5VrfoCzmB3mpJIKP39yJzyufftx4It7b8xWAJySdYyA+v9/27J/tsDo7Cx/3YBD7P/ftRs8CcxA2HAF+RW0pvoqBXzBbWq5vL6syOisTxiVmanxnNJ+Iza5NC2WeSHG010qtyrA1PFjfv/p4WN9L8O4W2cClB7/r9fif/Cj0b/7wJK5//5kOs7HCxQ7A9UMwmyHC8N0UdTKWQVXfXBynBycWQLfUQ+UEX8EA0aRfXYsLn8g89iqoDyDPYnxk3wKfk9p+HymGCd/MvDnqL8HwwG+4387wLiE43CScG1WtjzZF1R6SRnLTUBCiAVZX2uZAGexYyzpupYz2Bc3PFWBl8yIkW0uCkyOmgtAxqF7D8yJWDl/H1Eef31ZR25bCL/DglcNvdgJJvZAKvlvwv7f1n++/1+t5H/XUDZ/wMZEZmrd5yu+JYu3uPJ9RfkCKqO6GRq4hmmQDt1aTg30wPuxSHRdjgPAJ8AL45wQwTEHqoo1oxKst4ATYzP38q47RD11JPApTYWmoRYvcSFR9ID1JQIdYTNuJ48lW39NjebD53PbSYnURgxSTm+Ufh8n4U66p8UgTU4JfadiLy2Duvm87r0tBb1et421Afw0DZZmdSSrN/VKt1nFk42Kwu3rAI9z9R5PPrOuopHbv0IMzKS6e+ttYym1vPVQ4m3iyWjgxnm1BaWTii7lIFQmTSWa5CFQrP1by1YvNaSFjq4Cm1CHpFllWTiWoy2RJhKactjr4zJLbDsw5l2O5mWANXvGb+Tsc2y/DKTg9hRj5gwwVqOQV+6LrsnznrtHeD5VS2W6w5mQjNTTGETEqYcV0aDGdqBORj0i5gTBaPXiTLgtfmRi4U4K06kmAuQV/NvnU5cWRTCTGcbTbsUW0yhYrqU5gZ7hQYlJUVxj1NwrPw6qbJR5LojBhpxXtCSOt0lSB/m22E+yfGZicxYwbxqk9Bul0yfnJNaaOLh97KZHXEOWyOMRP6Q10de5ajIdJjIkp2srNnl3LdFnjSJeUpg3xoTHJrpzvlq2caJlrQE5OTeBI0EK4mBaSR1zlLS0naWancaN7vUrSrdOFRILZPT0AXM8eOj7Cnotd8Y9VHrRas8WH0dx2QB0cfAZrY3LKNWNzlPWhymDcq4SwleJnVe5Vmqmi5mlTHEB9Uxf6yxHqtax1JlSlWYH1tcTXtSVlxrpPVlHT4YXj06wsvYluwewYJO42emPO0xsSNPb8Wr4XINv2rTinnUDafL0enni4af6o/4hkh+0KmujJ/l2xJ/lpd2rYzenhwen1zcnLw9Obo6PT+7OTt8d3I5Ojw6SWsiNJO4f4INbpgrROiWEteJDwEq5XLHH6YGj5VyzLZmSULv6bvD1yfXQOz5xc359cnFvy5Oryq0DpE2enN+anuh47pqkVw6g5kUYsTZmOTHOA3D4DUJi8MO1HjbetV+Lz5SxkDt0koQoGnlKN9cXY1yD6hPQ4rdY+LieayMhqjbSWtwIhMbNqVVtprvhNQ9I9+BqHJhItGxR5ChS3fRUZmydcRbmWUhs5k7RFdHo2W8l5oa+ba5M/VqaCNr8RGB1HtZWKPbqZH9GXMjj7yTBsWCidAqLTcAT1bUwrRgV85VlKspL40OkTRMHypmNSb/EgIrQrcefYUZ0vNTMZpKE2Mn4bY8Z9cG5TeekE2nYwVZC2JxK2KACTjkFkdu+I45gGLQ6+QG8eXEzb4V2CT+FzAH7Dseqcug48iZkPUCgbX5H/uV/I/eoIn/7QTysb9AeUtZ9G/EnON0vX9U6/2VhAE39f4Tbxkcu3/6cVTPhbrdLzHCFmtzQTxQnkfyEiYH/fr3V6hr9fbNDijZIxzoqCQFfD8D6niJrdc0vM4byZGvjZ05LPUJuB5yoROH+tC9x3NxKGMKX9iZRQOPB5vo/40vfsRQp/+r5z+9bpP/sRvYIv/vARc/vsnjoGXXQxalWYPd65ez1lclHD9ennWul8fN5V6Qi75WpM1ctBxpNLJIfG5epBHyuYXmG4JN9f9Gid8x1Nr/g7L93x/0m/vfO4Et9f/DEr+/zW1gu/TwJi+8gc8Im+j/+HhqYxegRv/3+p2Dsv2/32ne/7QTWJjYGauUP1S7V/KA1smDuOXMM6GW65ghM/XBCvrhlw+t5MyjNWxdHY1aL1ryWWu43tnJp19/2IwClYtBiGPqxBgTOAjMUmHGCRgFwsp0lI5MX5RJ34SYdKbNJEgV95qLUkHnreI2VjighF410tZG0xAwx1T7c9pzdkAO00Bl3lrhKvpXtpknAUGdtBdf4TodVcKBuw1TpmeJG2SAJcc5cR3Vb+XIc9E5fvEYsXBmteIIs4K6NsOhelypxWmj08/PrUa/Wthi/8fa0lzfDKi9/9Er7/+D7n5z/2MnUPb/yjZA4lY0jl6qhcGdYyoDoDhFV+yOwATeYleQr0cfbSL/swBv9R7ouvjPoF+W/+7BoHn/806gZEnIJdZWhFO69SW5Xthg2oFZWI4IQaWQwrMRcw7jamAObKEyTOh/TbWRWGgLBpBYrfns32KZ1jW5RCsopEkCjpk92Cz9WZKiXma/nBjLo/6h9hKyjJusTI03ybvKXXx9mVWuJA+t1St+X+01Ldum1zQp19G9ytcL/Rc+QyETnoxSC23RpXmTiy4cyfLKpaMslWidNdCnBPkV1iU6kyhnScoZyle2snpf3g29Pxbq9f9Mz9kD/gOAOv1/0Km8/3+w1+T/7AT0dQulIJPXhoLnHnEWENNh9h14/MHdxHLIrJ2ySvzfX7SDaAzSk5a3cy+bq8hmiCdDpMwIKdVB7uLG6e0ZC0egsKTAG/kbbjL/xngKHncoXxwn9KvKtKf6AhFrYum3PklXdzxHKiCTXUky4ppybEW/OM3GfJqkGiZYpdQHTN7lon7uRdvJvR8jcW9fdl52JKm5A1Eea794ZwmiIdrreDpliHhqVvcH76gBqiejyElJWbQ95baFRGXHmPo9wFSn71pyK24ZRpbOrAiHKc1dqFC0pG8tT3bF/A0VncmcnssO9XWQRXdFgK6OfLr0jkZiHBsFT35opJeONJGDQT8uSlKgu/KNUIZRvVwyRL/8ahiL8llB339SS6xz4Ifqexa5SPgzLobu1PRf5IRgAntqNJZvG2s7sq58qT0MovAjbb6F9HBt1Yh2nzvtCj1KXlp9q2N1zDEYUlYXljLBMdSn4/F/09H69nepBhpooIEGGmiggQYaaOAx4P8+Q4pRAHgAAA==
   values:
     image:
       tag: v0.13.0-dev

diff --git a/hack/api-reference/registry.md b/hack/api-reference/registry.md
@@ -225,7 +225,7 @@ string
 </td>
 <td>
 <p>Endpoint is the registry cache endpoint.
-Example: &ldquo;<a href="http://10.4.246.205:5000&quot;">http://10.4.246.205:5000&rdquo;</a></p>
+Example: &ldquo;<a href="https://10.4.246.205:5000&quot;">https://10.4.246.205:5000&rdquo;</a></p>
 </td>
 </tr>
 <tr>
@@ -284,6 +284,17 @@ string
 <tbody>
 <tr>
 <td>
+<code>caSecretName</code></br>
+<em>
+string
+</em>
+</td>
+<td>
+<p>CASecretName is the name of the CA bundle secret.</p>
+</td>
+</tr>
+<tr>
+<td>
 <code>caches</code></br>
 <em>
 <a href="#registry.extensions.gardener.cloud/v1alpha3.RegistryCacheStatus">

diff --git a/pkg/apis/registry/types.go b/pkg/apis/registry/types.go
@@ -79,6 +79,8 @@ var (
 type RegistryStatus struct {
 	metav1.TypeMeta
 
+	// CASecretName is the name of the CA bundle secret.
+	CASecretName string
 	// Caches is a slice of deployed registry caches.
 	Caches []RegistryCacheStatus
 }
@@ -88,7 +90,7 @@ type RegistryCacheStatus struct {
 	// Upstream is the remote registry host (and optionally port).
 	Upstream string
 	// Endpoint is the registry cache endpoint.
-	// Example: "http://10.4.246.205:5000"
+	// Example: "https://10.4.246.205:5000"
 	Endpoint string
 	// RemoteURL is the remote registry URL.
 	RemoteURL string

diff --git a/pkg/apis/registry/v1alpha3/types.go b/pkg/apis/registry/v1alpha3/types.go
@@ -90,6 +90,8 @@ var (
 type RegistryStatus struct {
 	metav1.TypeMeta `json:",inline"`
 
+	// CASecretName is the name of the CA bundle secret.
+	CASecretName string `json:"caSecretName"`
 	// Caches is a slice of deployed registry caches.
 	Caches []RegistryCacheStatus `json:"caches"`
 }
@@ -99,7 +101,7 @@ type RegistryCacheStatus struct {
 	// Upstream is the remote registry host (and optionally port).
 	Upstream string `json:"upstream"`
 	// Endpoint is the registry cache endpoint.
-	// Example: "http://10.4.246.205:5000"
+	// Example: "https://10.4.246.205:5000"
 	Endpoint string `json:"endpoint"`
 	// RemoteURL is the remote registry URL.
 	RemoteURL string `json:"remoteURL"`

diff --git a/pkg/apis/registry/v1alpha3/zz_generated.conversion.go b/pkg/apis/registry/v1alpha3/zz_generated.conversion.go
diff --git a/pkg/component/registrycaches/export_test.go b/pkg/component/registrycaches/export_test.go