Csi proxy image

.github/workflows/csi-proxy.yml

@@ -0,0 +1,40 @@
+name: csi-proxy
+
+on:
+  push:
+    branches: [ master ]
+    paths:
+      - hostprocess/csi-proxy/VERSION
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - hostprocess/csi-proxy/**
+    branchs:
+      - master
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build:
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/checkout@v2
+      - name: login to GitHub container registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: build image for ci
+        if: ${{ github.event_name == 'pull_request' }}
+        run: |
+          cd hostprocess/csi-proxy
+          ./build.sh --version ci
+      - name: build image for release
+        if: ${{ github.event_name != 'pull_request' }}
+        run: |
+          cd hostprocess/csi-proxy
+          export version=$(cat ./hostprocess/csi-proxy/VERSION)
+          ./build.sh --version $version --push

hostprocess/csi-proxy/Dockerfile.windows

@@ -0,0 +1,15 @@
+ARG REGISTRY=mcr.microsoft.com/windows
+ARG WINDOWS_BASE_IMAGE=nanoserver
+ARG WINDOWS_VERSION=1809
+
+FROM --platform=linux/amd64 golang:1.16 as builder
+ARG CSI_PROXY_VERSION=v1.0.2
+RUN git clone https://github.com/kubernetes-csi/csi-proxy.git /go/csi-proxy &&\
+    cd /go/csi-proxy &&\
+    git checkout tags/${CSI_PROXY_VERSION} &&\
+    make build
+
+FROM ${REGISTRY}/${WINDOWS_BASE_IMAGE}:${WINDOWS_VERSION}
+COPY --from=builder /go/csi-proxy/bin/csi-proxy.exe /csi-proxy.exe
+ENV PATH="C:\Windows\system32;C:\Windows;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;"
+ENTRYPOINT ["csi-proxy.exe", "-v", "4"]

hostprocess/csi-proxy/README.md

@@ -0,0 +1,9 @@
+# CSI-proxy
+
+Runs [csi-proxy](https://github.com/kubernetes-csi/csi-proxy) on Windows nodes as a hostprocess container.
+
+## Deploy
+
+``` bash
+kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/sig-windows-tools/master/hostprocess/csi-proxy/csi-proxy.yaml
+```

hostprocess/csi-proxy/VERSION

@@ -0,0 +1 @@
+v1.0.2

hostprocess/csi-proxy/build.sh

@@ -0,0 +1,71 @@
+#!/bin/bash
+set -e
+
+args=$(getopt -o v:p -l version:,push -- "$@")
+eval set -- "$args"
+
+while [ $# -ge 1 ]; do
+  case "$1" in
+    --)
+      shift
+      break
+      ;;
+    -v|--version)
+      version="$2"
+      shift 
+      ;;
+    -p|--push)
+      push="1"
+      shift
+      ;;
+  esac
+  shift
+done
+
+if [[ -z "$version" ]]; then
+  echo "--version is required"
+  exit 1
+fi
+echo "Using version ${version}"
+
+output="type=docker,dest=./export.tar"
+
+if [[ "$push" == "1" ]]; then
+  output="type=registry"
+fi
+
+repository=${repository:-"ghcr.io/kubernetes-sigs/sig-windows"}
+
+set -x
+
+docker buildx create --name img-builder --use --platform windows/amd64
+trap 'docker buildx rm img-builder' EXIT
+
+
+declare -a win_vers=("1809" "ltsc2022")
+
+manifest_entries=""
+
+# Build container images with buildx
+for win_ver in "${win_vers[@]}"; do
+  docker buildx build --platform windows/amd64 --output=$output -f Dockerfile.windows --build-arg=WINDOWS_VERSION=$win_ver -t ${repository}/csi-proxy:${version}-$win_ver .
+
+  manifest_entries="$manifest_entries ${repository}/csi-proxy:${version}-$win_ver"
+done
+
+if [[ $push != "1" ]]; then
+  exit
+fi
+
+# Create manifest
+docker manifest create ${repository}/csi-proxy:${version} $manifest_entries
+
+# Annotate manifests
+for win_ver in "${win_vers[@]}"; do
+  os_ver=$(docker manifest inspect mcr.microsoft.com/windows/nanoserver:${win_ver} | grep "os.version" | head -n 1 | awk -F\" '{print $4}')
+  docker manifest annotate --os windows --arch amd64 --os-version $os_ver $repository/csi-proxy:$version $repository/csi-proxy:$version-$win_ver
+done
+
+docker manifest inspect $repository/csi-proxy:$version
+
+docker manifest push ${repository}/csi-proxy:${version}

hostprocess/csi-proxy/csi-proxy.yaml

@@ -0,0 +1,24 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: csi-proxy
+  namespace: kube-system
+spec:
+  selector:
+    matchLabels:
+      name: csi-proxy
+  template:
+    metadata:
+      labels:
+        name: csi-proxy
+    spec:
+      nodeSelector:
+        "kubernetes.io/os": windows
+      securityContext:
+        windowsOptions:
+          hostProcess: true
+          runAsUserName: "NT AUTHORITY\\SYSTEM"
+      hostNetwork: true
+      containers:
+        - name: csi-proxy
+          image: ghcr.io/kubernetes-sigs/sig-windows/csi-proxy:v1.0.2