feat(system-upgrades): Add feature to run system-upgrades

infrastructure/kustomization.yaml

@@ -9,3 +9,4 @@ resources:
   - prometheus
   - ingress-nginx
   - node-features
+  - system-upgrades

infrastructure/system-upgrades/calver-server.yaml

+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: calver
+  labels:
+    app: calver
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: calver
+  template:
+    metadata:
+      labels:
+        app: calver
+    spec:
+      containers:
+      - name: calver-server
+        image: quay.io/shivering-isles/calver-server:v1
+        ports:
+        - containerPort: 8080
+        resources:
+          requests:
+            cpu: 10m
+            memory: 64MiB
+          limits:
+            cpu: 500m
+            memory: 128MiB
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: calver
+spec:
+  selector:
+    app: calver
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: 8080

infrastructure/system-upgrades/fedora.yaml

+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: fedora-dnf-upgrade
+  namespace: system-upgrade
+type: Opaque
+stringData:
+  upgrade.sh: |
+    #!/bin/sh
+    set -e
+    set -x
+    dnf upgrade -y --best
+---
+apiVersion: upgrade.cattle.io/v1
+kind: Plan
+metadata:
+  name: fedora-35-latest
+  namespace: system-upgrade
+spec:
+  concurrency: 1
+  nodeSelector:
+    matchExpressions:
+      - {key: feature.node.kubernetes.io/system-os_release.ID, operator: In, values: ["fedora"]}
+      - {key: feature.node.kubernetes.io/system-os_release.VERSION_ID.major, operator: In, values: ["35"]}
+  serviceAccountName: system-upgrade
+  secrets:
+    - name: fedora-dnf-upgrade
+      path: /host/run/system-upgrade/secrets/fedora
+  drain:
+    deleteLocalData: true
+    ignoreDaemonSets: true
+    force: false
+  channel: http://calver/weekly
+  upgrade:
+    image: docker.io/library/fedora:35
+    command: ["chroot", "/host"]
+    args: ["sh", "/run/system-upgrade/secrets/fedora/upgrade.sh"]

infrastructure/system-upgrades/kustomization.yaml

+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: system-upgrade
+resources:
+  - https://git.shivering-isles.com/github-mirror/rancher/system-upgrade-controller/-/raw/v0.8.1/manifests/system-upgrade-controller.yaml
+  - fedora.yaml
+  - calver-server.yaml