Distributed provisioning

Makefile

@@ -184,9 +184,6 @@ KUSTOMIZE += deploy/common/pmem-storageclass-cache.yaml=deploy/kustomize/storage
 KUSTOMIZE += deploy/common/pmem-storageclass-late-binding.yaml=deploy/kustomize/storageclass-late-binding
 KUSTOMIZE += deploy/operator/pmem-csi-operator.yaml=deploy/kustomize/operator
 
-# Special one-off deployment with device mode = fake.
-KUSTOMIZE += deploy/kubernetes-1.19/pmem-csi-fake.yaml=deploy/kustomize/kubernetes-base-fake
-
 KUSTOMIZE_OUTPUT := $(foreach item,$(KUSTOMIZE),$(firstword $(subst =, ,$(item))))
 
 # This function takes the name of a .yaml output file and returns the
@@ -204,14 +201,14 @@ $(KUSTOMIZE_OUTPUT): _work/kustomize $(KUSTOMIZE_INPUT)
 	mkdir -p ${@D}
 	$(call KUSTOMIZE_INVOCATION,$<,$@) >$@
 	if echo "$@" | grep '/pmem-csi-' | grep -qv '\-operator'; then \
-		dir=$$(echo "$@" | tr - / | sed -e 's;kubernetes/;kubernetes-;' -e 's;/alpha/;-alpha/;' -e 's/.yaml//' -e 's;/pmem/csi/;/;') && \
+		dir=$$(echo "$@" | tr - / | sed -e 's;kubernetes/;kubernetes-;' -e 's;/alpha/;-alpha/;'  -e 's;/distributed/;-distributed/;' -e 's/.yaml//' -e 's;/pmem/csi/;/;') && \
 		mkdir -p $$dir && \
 		cp $@ $$dir/pmem-csi.yaml && \
 		echo 'resources: [ pmem-csi.yaml ]' > $$dir/kustomization.yaml; \
 	fi
 
 kustomize: _work/go-bindata clean_kustomize_output $(KUSTOMIZE_OUTPUT)
-	$< -o deploy/bindata_generated.go -pkg deploy deploy/kubernetes-*/*/pmem-csi.yaml
+	$< -o deploy/bindata_generated.go -pkg deploy deploy/kubernetes-*/*/pmem-csi.yaml deploy/kustomize/webhook/webhook.yaml deploy/kustomize/scheduler/scheduler-service.yaml
 
 clean_kustomize_output:
 	rm -rf deploy/kubernetes-*

deploy/crd/pmem-csi.intel.com_pmemcsideployments.yaml

@@ -55,15 +55,9 @@ spec:
           spec:
             description: DeploymentSpec defines the desired state of Deployment
             properties:
-              caCert:
-                description: CACert encoded root certificate of the CA by which the
-                  registry and node controller certificates are signed If not provided
-                  operator uses a self-signed CA certificate
-                format: byte
-                type: string
               controllerDriverResources:
                 description: ControllerDriverResources Compute resources required
-                  by driver container running on master node
+                  by central driver container
                 properties:
                   limits:
                     additionalProperties:
@@ -88,6 +82,12 @@ spec:
                       to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/'
                     type: object
                 type: object
+              controllerTLSSecret:
+                description: ControllerTLSSecret is the name of a secret which contains
+                  ca.crt, tls.crt and tls.key data for the scheduler extender and
+                  pod mutation webhook. A controller is started if (and only if) this
+                  secret is specified.
+                type: string
               deviceMode:
                 description: DeviceMode to use to manage PMEM devices.
                 enum:
@@ -118,17 +118,14 @@ spec:
               logLevel:
                 description: LogLevel number for the log verbosity
                 type: integer
-              nodeControllerCert:
-                description: NodeControllerCert encoded certificate signed by a CA
-                  for node controller server authentication If not provided, provisioned
-                  one by the operator using self-signed CA
-                format: byte
-                type: string
-              nodeControllerKey:
-                description: NodeControllerPrivateKey encoded private key used for
-                  node controller server certificate If not provided, provisioned
-                  one by the operator
-                format: byte
+              mutatePods:
+                description: MutatePod defines how a mutating pod webhook is configured
+                  if a controller is started. The field is ignored if the controller
+                  is not enabled. The default is "Try".
+                enum:
+                - Always
+                - Try
+                - Never
                 type: string
               nodeDriverResources:
                 description: NodeDriverResources Compute resources required by driver
@@ -232,17 +229,15 @@ spec:
                       to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/'
                     type: object
                 type: object
-              registryCert:
-                description: RegistryCert encoded certificate signed by a CA for registry
-                  server authentication If not provided, provisioned one by the operator
-                  using self-signed CA
-                format: byte
-                type: string
-              registryKey:
-                description: RegistryPrivateKey encoded private key used for registry
-                  server certificate If not provided, provisioned one by the operator
-                format: byte
-                type: string
+              schedulerNodePort:
+                description: SchedulerNodePort, if non-zero, ensures that the "scheduler"
+                  service is created as a NodeService with that fixed port number.
+                  Otherwise that service is created as a cluster service. The number
+                  must be from the range reserved by Kubernetes for node ports. This
+                  is useful if the kube-scheduler cannot reach the scheduler extender
+                  via a cluster service.
+                format: int32
+                type: integer
             type: object
           status:
             description: DeploymentStatus defines the observed state of Deployment