feat(deploy): add support for matching live migration

Author: weixiao-huang

deploy/helm/virtink/crds

@@ -0,0 +1 @@
+../../crd

deploy/helm/virtink/crds/virt.virtink.smartx.com_virtualmachines.yaml

@@ -55,3 +55,24 @@ webhooks:
     resources:
     - virtualmachines
   sideEffects: None
+- admissionReviewVersions:
+    - v1
+    - v1beta1
+  clientConfig:
+    service:
+      name: {{ .Values.virtController.name }}
+      namespace: {{ .Release.Namespace }}
+      path: /validate-v1alpha1-virtualmachinemigration
+  failurePolicy: Fail
+  name: validate.virtualmachinemigration.v1alpha1.virt.virtink.smartx.com
+  rules:
+    - apiGroups:
+        - virt.virtink.smartx.com
+      apiVersions:
+        - v1alpha1
+      operations:
+        - CREATE
+        - UPDATE
+      resources:
+        - virtualmachinemigrations
+  sideEffects: None

deploy/helm/virtink/templates/virt-controller/manifests.yaml

@@ -72,6 +72,22 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - virt.virtink.smartx.com
+  resources:
+  - virtualmachinemigrations
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - virt.virtink.smartx.com
+  resources:
+  - virtualmachinemigrations/status
+  verbs:
+  - get
+  - patch
+  - update
 - apiGroups:
   - virt.virtink.smartx.com
   resources:

deploy/helm/virtink/templates/virt-controller/rbac.yaml

@@ -0,0 +1,20 @@
+{{- $service := .Values.virtDaemon }}
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{ $service.name }}-cert
+spec:
+  issuerRef:
+    kind: Issuer
+    name: {{ $service.name }}-cert-issuer
+  dnsNames:
+    - {{ $service.name }}.{{ .Release.Namespace }}.svc
+    - {{ $service.name }}.{{ .Release.Namespace }}.svc.{{ .Values.clusterDomain }}
+  secretName: {{ $service.name }}-cert
+---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: {{ $service.name }}-cert-issuer
+spec:
+  selfSigned: {}

deploy/helm/virtink/templates/virt-daemon/cert.yaml

@@ -35,12 +35,23 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: spec.nodeName
+            - name: NODE_IP
+              valueFrom:
+                fieldRef:
+                  fieldPath: status.podIP
           args:
             - --zap-time-encoding=iso8601
           volumeMounts:
             - name: kubelet-pods
               mountPath: /var/lib/kubelet/pods
+            - name: cert
+              mountPath: /var/lib/virtink/daemon/cert
+              readOnly: true
       volumes:
         - name: kubelet-pods
           hostPath:
             path: /var/lib/kubelet/pods
+        - name: cert
+          secret:
+            secretName: virt-daemon-cert
+            defaultMode: 420