add syncer sidecar for vspehere csi (#61)

Signed-off-by: Nikolay Gorbatov <[email protected]>

Author: sprait

charts/helm_lib/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
 type: library
 name: deckhouse_lib_helm
-version: 1.25.0
+version: 1.26.0
 description: "Helm utils template definitions for Deckhouse modules."

charts/helm_lib/templates/_csi_controller.tpl

@@ -13,6 +13,11 @@ cpu: 10m
 memory: 25Mi
 {{- end }}
 
+{{- define "syncer_resources" }}
+cpu: 10m
+memory: 25Mi
+{{- end }}
+
 {{- define "snapshotter_resources" }}
 cpu: 10m
 memory: 25Mi
@@ -36,6 +41,7 @@ memory: 50Mi
   {{- $fullname := $config.fullname | default "csi-controller" }}
   {{- $snapshotterEnabled := dig "snapshotterEnabled" true $config }}
   {{- $resizerEnabled := dig "resizerEnabled" true $config }}
+  {{- $syncerEnabled := dig "syncerEnabled" false $config }}
   {{- $topologyEnabled := dig "topologyEnabled" true $config }}
   {{- $extraCreateMetadataEnabled := dig "extraCreateMetadataEnabled" false $config }}
   {{- $controllerImage := $config.controllerImage | required "$config.controllerImage is required" }}
@@ -48,6 +54,7 @@ memory: 50Mi
   {{- $resizerWorkers := $config.resizerWorkers | default "10" }}
   {{- $snapshotterWorkers := $config.snapshotterWorkers | default "10" }}
   {{- $additionalControllerEnvs := $config.additionalControllerEnvs }}
+  {{- $additionalSyncerEnvs := $config.additionalSyncerEnvs }}
   {{- $additionalControllerArgs := $config.additionalControllerArgs }}
   {{- $additionalControllerVolumes := $config.additionalControllerVolumes }}
   {{- $additionalControllerVolumeMounts := $config.additionalControllerVolumeMounts }}
@@ -65,6 +72,9 @@ memory: 50Mi
   {{- $resizerImageName := join "" (list "csiExternalResizer" $kubernetesSemVer.Major $kubernetesSemVer.Minor) }}
   {{- $resizerImage := include "helm_lib_module_common_image_no_fail" (list $context $resizerImageName) }}
 
+  {{- $syncerImageName := join "" (list "csiVsphereSyncer" $kubernetesSemVer.Major $kubernetesSemVer.Minor) }}
+  {{- $syncerImage := include "helm_lib_module_common_image_no_fail" (list $context $syncerImageName) }}
+
   {{- $snapshotterImageName := join "" (list "csiExternalSnapshotter" $kubernetesSemVer.Major $kubernetesSemVer.Minor) }}
   {{- $snapshotterImage := include "helm_lib_module_common_image_no_fail" (list $context $snapshotterImageName) }}
 
@@ -109,6 +119,14 @@ spec:
         cpu: 20m
         memory: 50Mi
     {{- end }}
+    {{- if $syncerEnabled }}
+    - containerName: "syncer"
+      minAllowed:
+        {{- include "syncer_resources" $context | nindent 8 }}
+      maxAllowed:
+        cpu: 20m
+        memory: 50Mi
+    {{- end }}
     {{- if $snapshotterEnabled }}
     - containerName: "snapshotter"
       minAllowed:
@@ -278,6 +296,33 @@ spec:
             {{- include "helm_lib_module_ephemeral_storage_logs_with_extra" 10 | nindent 12 }}
   {{- if not ( $context.Values.global.enabledModules | has "vertical-pod-autoscaler-crd") }}
             {{- include "resizer_resources" $context | nindent 12 }}
+  {{- end }}
+            {{- end }}
+            {{- if $syncerEnabled }}
+      - name: syncer
+        {{- include "helm_lib_module_container_security_context_read_only_root_filesystem" . | nindent 8 }}
+        image: {{ $syncerImage | quote }}
+        args:
+        - "--leader-election"
+        - "--leader-election-lease-duration=30s"
+        - "--leader-election-renew-deadline=20s"
+        - "--leader-election-retry-period=10s"
+    {{- if $additionalControllerArgs }}
+        {{- $additionalControllerArgs | toYaml | nindent 8 }}
+    {{- end }}
+    {{- if $additionalSyncerEnvs }}
+        env:
+        {{- $additionalSyncerEnvs | toYaml | nindent 8 }}
+    {{- end }}
+    {{- if $additionalControllerVolumeMounts }}
+        volumeMounts:
+        {{- $additionalControllerVolumeMounts | toYaml | nindent 8 }}
+    {{- end }}
+        resources:
+          requests:
+            {{- include "helm_lib_module_ephemeral_storage_logs_with_extra" 10 | nindent 12 }}
+  {{- if not ( $context.Values.global.enabledModules | has "vertical-pod-autoscaler-crd") }}
+            {{- include "syncer_resources" $context | nindent 12 }}
   {{- end }}
             {{- end }}
             {{- if $snapshotterEnabled }}

charts/helm_lib/templates/_csi_node.tpl

@@ -21,6 +21,7 @@ memory: 25Mi
   {{- $additionalNodeArgs := $config.additionalNodeArgs }}
   {{- $additionalNodeVolumes := $config.additionalNodeVolumes }}
   {{- $additionalNodeVolumeMounts := $config.additionalNodeVolumeMounts }}
+  {{- $additionalNodeLivenessProbesCmd := $config.additionalNodeLivenessProbesCmd }}
   {{- $initContainerCommand := $config.initContainerCommand }}
   {{- $initContainerImage := $config.initContainerImage }}
 
@@ -100,7 +101,7 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       containers:
       - name: node-driver-registrar
-        {{- include "helm_lib_module_container_security_context_read_only_root_filesystem_capabilities_drop_all" $context | nindent 8 }}
+        {{- include "helm_lib_module_container_security_context_not_allow_privilege_escalation" $context | nindent 8 }}
         image: {{ $driverRegistrarImage | quote }}
         args:
         - "--v=5"
@@ -115,6 +116,13 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
+      {{- if $additionalNodeLivenessProbesCmd }}
+        livenessProbe:
+          initialDelaySeconds: 3
+          exec:
+            command:
+        {{- $additionalNodeLivenessProbesCmd | toYaml | nindent 12 }}
+      {{- end }}
         volumeMounts:
         - name: plugin-dir
           mountPath: /csi