[release-v2.10] 2nd batch release 2.10.2 (#5019)

Co-authored-by: rancherbot <[email protected]>

.github/CODEOWNERS

@@ -0,0 +1,82 @@
+# Global Reviewer
+/.github @rancher/release-team
+/docs @rancher/release-team
+/scripts @rancher/release-team
+/CNAME @rancher/release-team
+/Makefile @rancher/release-team
+/README.md @rancher/release-team
+/_config.yml @rancher/release-team
+/configuration.yaml @rancher/release-team
+/regsync.yaml @rancher/release-team
+/index.html @rancher/release-team
+
+# Elemental
+packages/elemental @rancher/elemental
+
+# Fleet
+packages/fleet @rancher/fleet
+
+# Harvester
+packages/harvester @rancher/harvester
+
+# Longhorn
+packages/longhorn @rancher/longhorn
+packages/longhorn-crd @rancher/longhorn
+
+# Neuvector
+packages/neuvector @rancher/neuvector
+packages/neuvector-monitor @rancher/neuvector
+
+# Rancher AKS EKS GKE
+packages/rancher-aks-operator @rancher/highlander
+packages/rancher-eks-operator @rancher/highlander
+packages/rancher-gke-operator @rancher/highlander
+
+
+# Rancher Alerting
+packages/rancher-alerting @rancher/observation-backup
+
+# Rancher Backup
+packages/rancher-backup @rancher/observation-backup
+
+# Rancher CIS Benchmark
+packages/rancher-cis-benchmark @rancher/infracloud-team
+tests/rancher-cis-benchmark @rancher/infracloud-team
+
+# Rancher CSP Adapter
+packages/rancher-csp-adapter @rancher/socket
+
+# Rancher OPA Gatekeeper
+packages/rancher-gatekeeper @rancher/mapps
+
+# Rancher Istio
+packages/rancher-istio @rancher/mapps
+tests/rancher-istio @rancher/mapps
+
+# Rancher Logging
+packages/rancher-logging @rancher/observation-backup
+
+# Rancher Monitoring
+packages/rancher-monitoring @rancher/observation-backup
+
+# Rancher SRIOV
+packages/rancher-sriov @rancher/rke1-team
+packages/rancher-nfd @rancher/rke1-team
+
+# Rancher Provisioning CAPI
+packages/rancher-provisioning-capi @rancher/rancher-team-2-hostbusters-dev
+
+# Rancher VSphere
+packages/rancher-vsphere @rancher/rancher-team-2-hostbusters-dev
+
+# Rancher Windows GSMA
+packages/rancher-windows-gsma @rancher/rancher-team-2-hostbusters-dev
+
+# Rancher Webhook
+packages/rancher-webhook @rancher/rancher-squad-frameworks
+
+# System Upgrade Controller
+packages/system-upgrade-controller @rancher/rancher-team-2-hostbusters-dev
+
+# UI Extension Operator
+packages/ui-plugin-operator @rancher/mapps

charts/harvester-cloud-provider/105.0.1+up0.2.7/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/harvester-cloud-provider/105.0.1+up0.2.7/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: kube-vip
+  repository: file://dependency_charts/kube-vip
+  version: 0.4.2
+digest: sha256:bbbff44d39375203f4880e5a76f0d9705f25edc53f89532e8ef39cd23d9ca92b
+generated: "2023-06-07T17:47:05.632456+08:00"

charts/harvester-cloud-provider/105.0.1+up0.2.7/Chart.yaml

@@ -0,0 +1,27 @@
+annotations:
+  catalog.cattle.io/certified: rancher
+  catalog.cattle.io/display-name: Harvester Cloud Provider
+  catalog.cattle.io/kube-version: '>= 1.23.0-0 < 1.32.0-0'
+  catalog.cattle.io/namespace: kube-system
+  catalog.cattle.io/os: linux
+  catalog.cattle.io/permits-os: linux
+  catalog.cattle.io/rancher-version: '>= 2.10.0-0 < 2.11.0-0'
+  catalog.cattle.io/release-name: harvester-cloud-provider
+  catalog.cattle.io/ui-component: harvester-cloud-provider
+  catalog.cattle.io/upstream-version: 0.2.7
+apiVersion: v2
+appVersion: v0.2.3
+dependencies:
+- condition: kube-vip.enabled
+  name: kube-vip
+  repository: file://./charts/kube-vip
+  version: 0.6.4
+description: A Helm chart for Harvester Cloud Provider
+keywords:
+- infrastructure
+- harvester
+maintainers:
+- name: harvester
+name: harvester-cloud-provider
+type: application
+version: 105.0.1+up0.2.7

charts/harvester-cloud-provider/105.0.1+up0.2.7/charts/kube-vip/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/harvester-cloud-provider/105.0.1+up0.2.7/charts/kube-vip/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+appVersion: v0.4.1
+description: A Helm chart for kube-vip
+name: kube-vip
+type: application
+version: 0.4.2

charts/harvester-cloud-provider/105.0.1+up0.2.7/charts/kube-vip/templates/_helpers.tpl

@@ -0,0 +1,74 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "kube-vip.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "kube-vip.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "kube-vip.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "kube-vip.labels" -}}
+helm.sh/chart: {{ include "kube-vip.chart" . }}
+{{ include "kube-vip.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "kube-vip.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "kube-vip.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "kube-vip.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "kube-vip.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
+
+{{/*
+Global system default registry
+*/}}
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}

charts/harvester-cloud-provider/105.0.1+up0.2.7/charts/kube-vip/templates/daemonset.yaml

@@ -0,0 +1,51 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: {{ include "kube-vip.name" . }}
+  namespace: {{ .Release.Namespace | default "kube-system" }}
+spec:
+  selector:
+    matchLabels:
+      {{- include "kube-vip.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "kube-vip.selectorLabels" . | nindent 8 }}
+    spec:
+      containers:
+      - args:
+          - manager
+        env:
+          {{- if eq .Values.env.cp_enable "true" }}
+          - name: vip_address
+            value: {{ required "A valid config.address required!" .Values.config.address}}
+          {{- end }}
+        {{- with .Values.env }}
+          {{- range $k, $v := . }}
+            {{- $name := $k }}
+            {{- $value := $v }}
+          - name: {{ quote $name }}
+            value: {{ quote $value }}
+          {{- end }}
+        {{- end }}
+        image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
+        name: kube-vip
+        resources:
+          {{- toYaml .Values.resources | nindent 10 }}
+        securityContext:
+          {{- toYaml .Values.securityContext | nindent 10 }}
+      hostNetwork: true
+      serviceAccountName: {{ include "kube-vip.name" . }}
+      {{- with .Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}

charts/harvester-cloud-provider/105.0.1+up0.2.7/charts/kube-vip/templates/rbac.yaml

@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "kube-vip.name" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+  {{- include "kube-vip.labels" . | nindent 4 }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  annotations:
+    rbac.authorization.kubernetes.io/autoupdate: "true"
+  name: {{ include "kube-vip.name" . }}
+rules:
+  - apiGroups: [""]
+    resources: ["services", "services/status", "nodes"]
+    verbs: ["list","get","watch", "update"]
+  - apiGroups: ["coordination.k8s.io"]
+    resources: ["leases"]
+    verbs: ["list", "get", "watch", "update", "create"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "kube-vip.name" . }}
+  labels:
+  {{- include "kube-vip.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ include "kube-vip.name" . }}
+subjects:
+- kind: ServiceAccount
+  name: {{ include "kube-vip.name" . }}
+  namespace: {{ .Release.Namespace }}