propagate k8s version to helm template calls

components/cert-manager/controller/component.yaml

@@ -4,6 +4,7 @@ component:
   imports:
     - dns-controller
     - namespace
+    - k8sversion
 
   stubs:
     - lib/templates/utilities.yaml

components/cert-manager/controller/deployment.yaml

@@ -126,6 +126,8 @@ helm:
   source: "chart-checkout/charts/cert-manager"
   name: cert-manager
   namespace: (( .namespace.name ))
+  flags:
+    deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
   values:
     image:
       repository: (( .landscape.versions.cert-manager.controller.image_repo || ~~ ))

components/cert-manager/solver/component.yaml

@@ -4,6 +4,7 @@ component:
   imports:
     - dns-controller
     - cert-controller: cert-manager/controller
+    - k8sversion
 
   stubs: []
 

components/cert-manager/solver/deployment.yaml

@@ -21,6 +21,8 @@ helm:
   source: "git/repo/charts/certificate-dns-bridge"
   name: certificate-dns-bridge
   namespace: (( imports.cert-controller.export.namespace ))
+  flags:
+    deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
   values:
     groupName: (( imports.cert-controller.export.groupName ))
     solverName: (( imports.cert-controller.export.solverName ))

components/dashboard/component.yaml

@@ -24,6 +24,7 @@ component:
     - cert: cert-manager/cert
     - cert-controller: cert-manager/controller
     - dns-controller
+    - k8sversion
     - (( ( .landscape.gardener.network-policies.active || false ) ? "network-policies" :~~ ))
     - (( ( .landscape.dashboard.terminals.active || false ) ? "terminals" :~~ ))
 

components/dashboard/deployment.yaml

@@ -41,6 +41,8 @@ dashboard:
   source: "git/repo/charts/gardener-dashboard"
   name: "dashboard"
   namespace: (( .landscape.namespace ))
+  flags:
+    deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
   values:
     global:
       apiServerUrl: (( imports.kube_apiserver.export.apiserver_url ))

components/dns-controller/component.yaml

@@ -15,6 +15,9 @@
 ---
 landscape: (( &temporary ))
 component:
+  imports:
+  - k8sversion
+
   stubs:
     - plugins/kubectl/utilities.yaml
 

components/dns-controller/deployment.yaml

@@ -42,6 +42,8 @@ helm:
   source: "git/repo/charts/external-dns-management"
   name: (( settings.fullname ))
   namespace: (( .spec.common.namespace ))
+  flags:
+    deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
   values: (( .spec.helm ))
 
 kubectl:

components/etcd/cluster/component.yaml

@@ -19,6 +19,7 @@ component:
   imports:
     - (( landscape.etcd.backup.active ? { "backupinfra" = "etcd/backupinfra" } :~~ ))
     - namespace
+    - k8sversion
 
   stubs:
     - lib/templates/utilities.yaml

components/etcd/cluster/deployment.yaml

@@ -81,6 +81,8 @@ etcd:
     source: chart
     name: garden-etcd-main
     namespace: (( .landscape.namespace ))
+    flags:
+      deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
     values:
       name: (( main.name ))
       replicas: 1
@@ -121,6 +123,8 @@ etcd:
     source: chart
     name: garden-etcd-events
     namespace: (( .landscape.namespace ))
+    flags:
+      deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
     values:
       name: (( events.name ))
       replicas: 1

components/gardencontent/seeds/manifests/seed_manifests.yaml

@@ -268,6 +268,8 @@ pluginSpecs:
     source: "git/repo/charts/gardener/gardenlet"
     name: gardenlet
     namespace: garden
+    flags:
+      deploy: (( "--kube-version=" configValues.k8sVersion ))
     values: (( gardenletSpec ))
   seedReady:
     kubeconfig: (( configValues.kubeconfigs.virtual ))

components/gardencontent/seeds/seeds/deployment.yaml

@@ -64,3 +64,6 @@ providerconfig:
     shootDefaultNetworks: (( v.shootDefaultNetworks || ~~ ))
     settings: (( v.seedSettings || ~~ ))
   secretname: (( name "-" v.mode ))
+  cloudprofile: (( v.cloudprofile || v.name ))
+  k8sVersion: (( .imports.shoots.export.shoots[v.name].k8sVersion ))
+

components/gardencontent/seeds/shoots/deployment.yaml

@@ -65,5 +65,6 @@ shoot_template:
   <<: (( &template &temporary ))
   name: (( e.metadata.name ))
   namespace: (( e.metadata.namespace ))
+  k8sVersion: (( e.spec.kubernetes.version ))
 
 shoots: (( sum[.kubectl.[*].manifests[0]|[]|s,e|-> s *.shoot_template] ))

components/gardencontent/seeds/soils/component.yaml

@@ -22,6 +22,7 @@ component:
     - gardener_runtime: gardener/extensions
     - ingress_dns: ingress-controller
     - kube_apiserver: kube-apiserver
+    - k8sversion
 
   stubs:
     - plugins/kubectl/utilities.yaml

components/gardencontent/seeds/soils/deployment.yaml

@@ -76,5 +76,6 @@ providerconfig:
     settings: (( v.seedSettings || ~~ ))
   secretname: (( name "-" v.mode ))
   monitoring: (( landscape.monitoring ))
+  k8sVersion: (( .imports.k8sversion.export.k8sVersions.soils[v.name] ))
 
 renderedPluginSpecs: (( sum[.iaasSeedsSoils|[]|s,id,v|-> s [ ( "configValues" = *providerconfig ) read( __ctx.DIR "/../manifests/seed_manifests.yaml", "yaml" ).pluginSpecs ]] ))

components/gardener/extensions/deployment.yaml

@@ -97,6 +97,8 @@ admission:
     source: (( "extensions." n "/repo/charts/" name "/charts/application" ))
     name: (( admission.fullName(n) ))
     namespace: (( .landscape.namespace ))
+    flags:
+      deploy: (( "--kube-version=" .imports.kube_apiserver.export.k8sVersion ))
     values: (( *admission.values_template ))
   helm_template_runtime:
     <<: (( &template ))

components/gardener/runtime/component.yaml

@@ -19,6 +19,7 @@ component:
     - gardener_virtual: gardener/virtual
     - kube_apiserver: "kube-apiserver"
     - namespace
+    - k8sversion
 
   stubs:
     - plugins/kubectl/utilities.yaml

components/gardener/runtime/deployment.yaml

@@ -82,6 +82,8 @@ gardener:
   values: (( merge(.imports.gardener_virtual.export.gardener.values, spec) ))
   name: gardener
   namespace: (( landscape.namespace ))
+  flags:
+    deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
   spec:
     global:
       apiserver:

components/gardener/virtual/deployment.yaml

@@ -128,6 +128,8 @@ gardener:
   source: "git/repo/charts/gardener/controlplane/charts/application"
   name: "gardener"
   namespace: "garden"
+  flags:
+    deploy: (( "--kube-version=" .imports.kube_apiserver.export.k8sVersion ))
   values:
     global:
       apiserver:

components/identity/component.yaml

@@ -19,6 +19,7 @@ component:
     - ingress-controller
     - namespace
     - cert: cert-manager/cert
+    - k8sversion
 
   stubs:
     - lib/templates/utilities.yaml

components/identity/deployment.yaml

@@ -64,6 +64,8 @@ identity:
   source: "git/repo/charts/identity"
   name: "identity"
   namespace: (( .landscape.namespace ))
+  flags:
+    deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
   values:
     image:
       repository: (( .identity_version.image_repo || ~~ ))

components/ingress-controller/component.yaml

@@ -17,6 +17,7 @@ landscape: (( &temporary ))
 component:
   imports:
     - dns-controller
+    - k8sversion
 
   plugins:
     - git

components/ingress-controller/deployment.yaml

@@ -34,7 +34,7 @@ ingresscontroller:
   name: "nginx-ingress"
   namespace: "kube-system"
   flags:
-    deploy: "--kube-version=1.20.0"
+    deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
   values:
     fullnameOverride: (( .ingresscontroller.name ))
     controller:

components/kube-apiserver/component.yaml

@@ -22,6 +22,7 @@ component:
     - namespace
     - (( ( .landscape.gardener.network-policies.active || false ) ? "network-policies" :~~ ))
     - cert-controller: cert-manager/controller
+    - k8sversion
 
   stubs:
     - lib/templates/utilities.yaml

components/kube-apiserver/deployment.yaml

@@ -104,6 +104,8 @@ kubeapiserver:
   name: "garden-kube-apiserver"
   namespace: (( .landscape.namespace ))
   serviceName: (( name ))
+  flags:
+    deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
   values:
     images:
       apiserver: (( .landscape.versions.kube-apiserver.image_repo ":" .landscape.versions.kube-apiserver.image_tag ))

components/kube-apiserver/export.yaml

@@ -20,7 +20,7 @@ env: (( &temporary ))
 
 temp:
   <<: (( &temporary ))
-  command:
+  get_kubeconfig_command:
     - kubectl
     - --kubeconfig
     - (( lookup_file(landscape.clusters.[0].kubeconfig, env.ROOTDIR).[0] ))
@@ -31,15 +31,23 @@ temp:
     - garden-kubeconfig-for-admin
     - "-o"
     - "jsonpath={.data.kubeconfig}"
+  get_k8s_version_command:
+    - kubectl
+    - --kubeconfig
+    - (( tempfile(asyaml(export.kubeconfig)) ))
+    - version
+    - -o
+    - yaml
 
 export:
   gardener_dns: (( .settings.gardener_dns ))
   apiserver_dns: (( .settings.apiserver_dns ))
   apiserver_url: (( "https://" apiserver_dns ))
   apiserver_url_internal: (( .settings.apiserver_url_internal ))
   kube_apiserver_ca: (( .state.kube_apiserver_ca.value ))
-  kubeconfig: (( parse(base64_decode(exec( temp.command ))) || "" ))
+  kubeconfig: (( parse(base64_decode(exec( temp.get_kubeconfig_command ))) || "" ))
   kubeconfig_internal_merge_snippet: (( .files.kubeconfig_internal_merge_snippet.data ))
+  k8sVersion: (( ( "raw_version" = exec( temp.get_k8s_version_command ) ) raw_version.serverVersion.major "." raw_version.serverVersion.minor ))
 
 files:
   kubeconfig:

components/monitoring/gardener-metrics-exporter/component.yaml

@@ -7,6 +7,7 @@ component:
     - grafana: monitoring/grafana
     - kube-apiserver
     - namespace
+    - k8sversion
 
   plugins:
     - git

components/monitoring/gardener-metrics-exporter/deployment.yaml

@@ -71,6 +71,8 @@ helm:
   source: "git/repo/charts/gardener-metrics-exporter"
   name: gardener-metrics-exporter
   namespace: (( .landscape.namespace ))
+  flags:
+    deploy: (( "--kube-version=" .imports.k8sversion.export.k8sVersions.base ))
   values:
     image:
       repository: (( .landscape.versions.monitoring.gardener-metrics-exporter.image_repo || ~~ ))