Sync charts with latest changes (gardener#31)

* Update VPA's `apiVersion`

from `autoscaling.k8s.io/v1beta2` to `autoscaling.k8s.io/v1`

Similar to gardener/gardener-extension-provider-aws@5c0592e

* Add liveness and readiness probe to the extension Pods

Similar to gardener/gardener-extension-provider-aws#497

* Remove `minAllowed.cpu` from the registry-cache extension and admission VPAs

Similar to gardener/gardener-extension-provider-aws#711

* Make the `gardener-extension-registry-cache-admission` Service topology-aware

Similar to gardener/gardener-extension-provider-aws#732 and gardener/gardener-extension-provider-aws#750

* Make the metrics port configurable

Follow-up after gardener#12

* Adapt `NetworkPolicy`s for the admission

Similar to gardener/gardener-extension-provider-aws@02182f9

charts/admission/charts/runtime/templates/deployment.yaml

@@ -20,6 +20,9 @@ spec:
         checksum/secret-kubeconfig: {{ include (print $.Template.BasePath "/secret-kubeconfig.yaml") . | sha256sum }}
         {{- end }}
       labels:
+        # TODO(ialidzhikov): Double check whether we need these NetworkPolicy labels.
+        networking.gardener.cloud/to-dns: allowed
+        networking.resources.gardener.cloud/to-virtual-garden-kube-apiserver-tcp-443: allowed
 {{ include "labels" . | indent 8 }}
     spec:
       {{- if not .Values.global.virtualGarden.enabled }}

charts/admission/charts/runtime/templates/service.yaml

@@ -3,8 +3,20 @@ kind: Service
 metadata:
   name: {{ include "name" . }}
   namespace: {{ .Release.Namespace }}
+  annotations:
+    networking.resources.gardener.cloud/from-all-webhook-targets-allowed-ports: '[{"protocol":"TCP","port":{{ .Values.global.webhookConfig.serverPort }}}]'
+    {{- if .Values.global.service.topologyAwareRouting.enabled }}
+    {{- if semverCompare ">= 1.27-0" .Capabilities.KubeVersion.GitVersion }}
+    service.kubernetes.io/topology-mode: "auto"
+    {{- else }}
+    service.kubernetes.io/topology-aware-hints: "auto"
+    {{- end }}
+    {{- end }}
   labels:
 {{ include "labels" . | indent 4 }}
+    {{- if .Values.global.service.topologyAwareRouting.enabled }}
+    endpoint-slice-hints.resources.gardener.cloud/consider: "true"
+    {{- end }}
 spec:
   type: ClusterIP
   selector:

charts/admission/charts/runtime/templates/vpa.yaml

@@ -10,7 +10,6 @@ spec:
     containerPolicies:
     - containerName: '*'
       minAllowed:
-        cpu: {{ required ".Values.global.vpa.resourcePolicy.minAllowed.cpu is required" .Values.global.vpa.resourcePolicy.minAllowed.cpu }}
         memory: {{ required ".Values.global.vpa.resourcePolicy.minAllowed.memory is required" .Values.global.vpa.resourcePolicy.minAllowed.memory }}
   {{- end }}
   targetRef:

charts/admission/values.yaml

@@ -15,7 +15,6 @@ global:
     enabled: true
     resourcePolicy:
       minAllowed:
-        cpu: 50m
         memory: 64Mi
     updatePolicy:
       updateMode: "Auto"
@@ -42,3 +41,6 @@ global:
     enabled: false
     expirationSeconds: 43200
     audience: ""
+  service:
+    topologyAwareRouting:
+      enabled: false

charts/gardener-extension-registry-cache/templates/deployment.yaml

@@ -53,6 +53,10 @@ spec:
         - --webhook-config-namespace={{ .Release.Namespace }}
         - --webhook-config-service-port={{ .Values.webhookConfig.servicePort }}
         - --webhook-config-server-port={{ .Values.webhookConfig.serverPort }}
+        {{- if .Values.metrics.port }}
+        - --metrics-bind-address=:{{ .Values.metrics.port }}
+        {{- end }}
+        - --health-bind-address=:{{ .Values.healthPort }}
         - --gardener-version={{ .Values.gardener.version }}
         env:
         - name: LEADER_ELECTION_NAMESPACE
@@ -63,11 +67,23 @@ spec:
         - name: IMAGEVECTOR_OVERWRITE
           value: /charts_overwrite/images_overwrite.yaml
         {{- end }}
-        {{- if .Values.resources }}
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: {{ .Values.healthPort }}
+            scheme: HTTP
+          initialDelaySeconds: 10
+        readinessProbe:
+          httpGet:
+            path: /readyz
+            port: {{ .Values.healthPort }}
+            scheme: HTTP
+          initialDelaySeconds: 5
         ports:
         - name: webhook-server
           containerPort: {{ .Values.webhookConfig.serverPort }}
           protocol: TCP
+        {{- if .Values.resources }}
         resources:
 {{ toYaml .Values.resources | trim | indent 10 }}
         {{- end }}

charts/gardener-extension-registry-cache/templates/vpa.yaml

@@ -1,5 +1,5 @@
 {{- if .Values.vpa.enabled}}
-apiVersion: "autoscaling.k8s.io/v1beta2"
+apiVersion: autoscaling.k8s.io/v1
 kind: VerticalPodAutoscaler
 metadata:
   name: gardener-extension-registry-cache-vpa
@@ -10,7 +10,6 @@ spec:
     containerPolicies:
       - containerName: '*'
         minAllowed:
-          cpu: {{ required ".Values.vpa.resourcePolicy.minAllowed.cpu is required" .Values.vpa.resourcePolicy.minAllowed.cpu }}
           memory: {{ required ".Values.vpa.resourcePolicy.minAllowed.memory is required" .Values.vpa.resourcePolicy.minAllowed.memory }}
   {{- end }}
   targetRef:

charts/gardener-extension-registry-cache/values.yaml

@@ -20,11 +20,12 @@ vpa:
   enabled: true
   # resourcePolicy:
   #   minAllowed:
-  #     cpu: 100m
   #     memory: 128Mi
   updatePolicy:
     updateMode: "Auto"
 
+healthPort: 8081
+
 controllers:
   concurrentSyncs: 5
   ignoreOperationAnnotation: false

charts/registration/templates/controller-registration.yaml

@@ -5,7 +5,7 @@ metadata:
   name: extension-registry-cache
 type: helm
 providerConfig:
-  chart: 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
+  chart: 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
   values:
 {{ toYaml .Values.values | indent 4 }}
 

cmd/gardener-extension-registry-cache-admission/app/app.go

@@ -79,15 +79,15 @@ func NewAdmissionCommand(ctx context.Context) *cobra.Command {
 			}
 
 			if err := mgr.AddReadyzCheck("informer-sync", gardenerhealthz.NewCacheSyncHealthz(mgr.GetCache())); err != nil {
-				return fmt.Errorf("could not add readycheck for informers: %w", err)
+				return fmt.Errorf("could not add ready check for informers: %w", err)
 			}
 
 			if err := mgr.AddHealthzCheck("ping", healthz.Ping); err != nil {
-				return fmt.Errorf("could not add healthcheck: %w", err)
+				return fmt.Errorf("could not add health check to manager: %w", err)
 			}
 
 			if err := mgr.AddReadyzCheck("webhook-server", mgr.GetWebhookServer().StartedChecker()); err != nil {
-				return fmt.Errorf("could not add readycheck of webhook to manager: %w", err)
+				return fmt.Errorf("could not add ready check for webhook server to manager: %w", err)
 			}
 
 			return mgr.Start(ctx)

cmd/gardener-extension-registry-cache/app/app.go

@@ -21,10 +21,12 @@ import (
 	extensionscontroller "github.com/gardener/gardener/extensions/pkg/controller"
 	"github.com/gardener/gardener/extensions/pkg/controller/heartbeat"
 	"github.com/gardener/gardener/extensions/pkg/util"
+	gardenerhealthz "github.com/gardener/gardener/pkg/healthz"
 	"github.com/spf13/cobra"
 	corev1 "k8s.io/api/core/v1"
 	componentbaseconfig "k8s.io/component-base/config"
 	"sigs.k8s.io/controller-runtime/pkg/client"
+	"sigs.k8s.io/controller-runtime/pkg/healthz"
 	"sigs.k8s.io/controller-runtime/pkg/manager"
 
 	registryinstall "github.com/gardener/gardener-extension-registry-cache/pkg/apis/registry/install"
@@ -99,6 +101,18 @@ func (o *Options) run(ctx context.Context) error {
 		return fmt.Errorf("could not add the mutating webhook to manager: %s", err)
 	}
 
+	if err := mgr.AddReadyzCheck("informer-sync", gardenerhealthz.NewCacheSyncHealthz(mgr.GetCache())); err != nil {
+		return fmt.Errorf("could not add ready check for informers: %w", err)
+	}
+
+	if err := mgr.AddHealthzCheck("ping", healthz.Ping); err != nil {
+		return fmt.Errorf("could not add health check to manager: %w", err)
+	}
+
+	if err := mgr.AddReadyzCheck("webhook-server", mgr.GetWebhookServer().StartedChecker()); err != nil {
+		return fmt.Errorf("could not add ready check for webhook server to manager: %w", err)
+	}
+
 	if err := mgr.Start(ctx); err != nil {
 		return fmt.Errorf("error running manager: %w", err)
 	}

cmd/gardener-extension-registry-cache/app/options.go

@@ -68,6 +68,10 @@ func NewOptions() *Options {
 			LeaderElectionID:           controllercmd.LeaderElectionNameID(ExtensionName),
 			LeaderElectionResourceLock: resourcelock.LeasesResourceLock,
 			LeaderElectionNamespace:    os.Getenv("LEADER_ELECTION_NAMESPACE"),
+			WebhookServerPort:          443,
+			WebhookCertDir:             "/tmp/gardener-extensions-cert",
+			MetricsBindAddress:         ":8080",
+			HealthBindAddress:          ":8081",
 		},
 		controllerOptions: &controllercmd.ControllerOptions{
 			// This is a default value.