driver: Deployment changes to run the driver in non-default namespace.

With this change all the driver deployment manifests uses a non-default namespace named 'pmem-csi' to deploy all the driver components. Did changes to secret and certificate creation scripts(setup-ca.sh, setup-ca-kubernetes.sh), such that they consider the namespace while creating certificates/secrets. setup-ca.sh script allows to reuse the existing CA to generate the new certificates by passing environment variable named CA.
intel · Dec 16, 2020 · 262fd07 · 262fd07
1 parent b6c080b
commit 262fd07
Show file tree

Hide file tree

Showing 48 changed files with 669 additions and 373 deletions.
diff --git a/deploy/bindata_generated.go b/deploy/bindata_generated.go
diff --git a/deploy/kubernetes-1.17/direct/pmem-csi.yaml b/deploy/kubernetes-1.17/direct/pmem-csi.yaml
@@ -1,20 +1,27 @@
 # Generated with "make kustomize", do not edit!
 
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    pmem-csi.intel.com/deployment: direct-production
+  name: pmem-csi
+---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-production
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-production
   name: pmem-csi-external-provisioner-cfg
-  namespace: default
+  namespace: pmem-csi
 rules:
 - apiGroups:
   - ""
@@ -144,15 +151,15 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-production
   name: pmem-csi-csi-provisioner-role-cfg
-  namespace: default
+  namespace: pmem-csi
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
   name: pmem-csi-external-provisioner-cfg
 subjects:
 - kind: ServiceAccount
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -167,15 +174,15 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 ---
 apiVersion: v1
 kind: Service
 metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-production
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 spec:
   ports:
   - port: 10000
@@ -190,7 +197,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-production
   name: pmem-csi-metrics
-  namespace: default
+  namespace: pmem-csi
 spec:
   ports:
   - port: 10010
@@ -206,7 +213,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-production
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 spec:
   replicas: 1
   selector:
@@ -315,7 +322,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-production
   name: pmem-csi-node
-  namespace: default
+  namespace: pmem-csi
 spec:
   selector:
     matchLabels:

diff --git a/deploy/kubernetes-1.17/direct/testing/pmem-csi.yaml b/deploy/kubernetes-1.17/direct/testing/pmem-csi.yaml
@@ -1,20 +1,27 @@
 # Generated with "make kustomize", do not edit!
 
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    pmem-csi.intel.com/deployment: direct-testing
+  name: pmem-csi
+---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-testing
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-testing
   name: pmem-csi-external-provisioner-cfg
-  namespace: default
+  namespace: pmem-csi
 rules:
 - apiGroups:
   - ""
@@ -144,15 +151,15 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-testing
   name: pmem-csi-csi-provisioner-role-cfg
-  namespace: default
+  namespace: pmem-csi
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
   name: pmem-csi-external-provisioner-cfg
 subjects:
 - kind: ServiceAccount
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -167,15 +174,15 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 ---
 apiVersion: v1
 kind: Service
 metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-testing
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 spec:
   ports:
   - port: 10000
@@ -190,7 +197,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-testing
   name: pmem-csi-controller-testing
-  namespace: default
+  namespace: pmem-csi
 spec:
   ports:
   - port: 10002
@@ -205,7 +212,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-testing
   name: pmem-csi-metrics
-  namespace: default
+  namespace: pmem-csi
 spec:
   ports:
   - port: 10010
@@ -221,7 +228,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-testing
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 spec:
   replicas: 1
   selector:
@@ -363,7 +370,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-testing
   name: pmem-csi-node
-  namespace: default
+  namespace: pmem-csi
 spec:
   selector:
     matchLabels:
@@ -508,7 +515,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: direct-testing
   name: pmem-csi-node-testing
-  namespace: default
+  namespace: pmem-csi
 spec:
   selector:
     matchLabels:

diff --git a/deploy/kubernetes-1.17/lvm/pmem-csi.yaml b/deploy/kubernetes-1.17/lvm/pmem-csi.yaml
@@ -1,20 +1,27 @@
 # Generated with "make kustomize", do not edit!
 
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    pmem-csi.intel.com/deployment: lvm-production
+  name: pmem-csi
+---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   labels:
     pmem-csi.intel.com/deployment: lvm-production
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   labels:
     pmem-csi.intel.com/deployment: lvm-production
   name: pmem-csi-external-provisioner-cfg
-  namespace: default
+  namespace: pmem-csi
 rules:
 - apiGroups:
   - ""
@@ -144,15 +151,15 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: lvm-production
   name: pmem-csi-csi-provisioner-role-cfg
-  namespace: default
+  namespace: pmem-csi
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
   name: pmem-csi-external-provisioner-cfg
 subjects:
 - kind: ServiceAccount
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -167,15 +174,15 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 ---
 apiVersion: v1
 kind: Service
 metadata:
   labels:
     pmem-csi.intel.com/deployment: lvm-production
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 spec:
   ports:
   - port: 10000
@@ -190,7 +197,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: lvm-production
   name: pmem-csi-metrics
-  namespace: default
+  namespace: pmem-csi
 spec:
   ports:
   - port: 10010
@@ -206,7 +213,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: lvm-production
   name: pmem-csi-controller
-  namespace: default
+  namespace: pmem-csi
 spec:
   replicas: 1
   selector:
@@ -315,7 +322,7 @@ metadata:
   labels:
     pmem-csi.intel.com/deployment: lvm-production
   name: pmem-csi-node
-  namespace: default
+  namespace: pmem-csi
 spec:
   selector:
     matchLabels: