feat: support creating management.catte.io/v3 cluster

.golangci.yml

@@ -13,6 +13,9 @@ issues:
       linters:
         - testpackage
         - gochecknoglobals
+    - path: internal/controllers/import_controller(_v3)?\.go
+      linters:
+        - dupl
     - text: var-naming
       linters:
         - revive

charts/rancher-turtles/templates/deployment.yaml

@@ -26,7 +26,7 @@ spec:
       containers:
       - args:
         - --leader-elect
-        - --feature-gates=rancher-kube-secret-patch={{ index .Values "rancherTurtles" "features" "rancher-kubeconfigs" "label"}}
+        - --feature-gates=managementv3-cluster={{ index .Values "rancherTurtles" "features" "managementv3-cluster" "enabled"}},rancher-kube-secret-patch={{ index .Values "rancherTurtles" "features" "rancher-kubeconfigs" "label"}}
         {{- range .Values.rancherTurtles.managerArguments }}
         - {{ . }}
         {{- end }}  

charts/rancher-turtles/templates/rancher-turtles-components.yaml

@@ -1751,77 +1751,23 @@ rules:
   - clusters/status
   verbs:
   - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - cluster.x-k8s.io
-  resources:
-  - machinepools
-  verbs:
-  - create
-  - delete
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
-  - cluster.x-k8s.io
-  resources:
-  - machinepools/finalizers
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - cluster.x-k8s.io
-  resources:
-  - machinepools/status
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - cluster.x-k8s.io
-  resources:
-  - machines
-  - machines/status
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - cluster.x-k8s.io
+  - coordination.k8s.io
   resources:
-  - machinesets
+  - leases
   verbs:
   - create
-  - delete
   - get
-  - list
-  - patch
   - update
-  - watch
 - apiGroups:
-  - cluster.x-k8s.io
+  - infrastructure.cluster.x-k8s.io
   resources:
-  - machinesets/finalizers
+  - '*'
   verbs:
   - create
   - delete
@@ -1831,47 +1777,29 @@ rules:
   - update
   - watch
 - apiGroups:
-  - cluster.x-k8s.io
+  - management.cattle.io
   resources:
-  - machinesets/status
+  - clusterregistrationtokens
+  - clusterregistrationtokens/status
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
   - create
-  - get
-  - update
 - apiGroups:
-  - infrastructure.cluster.x-k8s.io
+  - management.cattle.io
   resources:
-  - '*'
+  - clusters
+  - clusters/status
   verbs:
   - create
   - delete
+  - deletecollection
   - get
   - list
   - patch
   - update
   - watch
-- apiGroups:
-  - management.cattle.io
-  resources:
-  - clusterregistrationtokens
-  - clusterregistrationtokens/status
-  verbs:
-  - get
-  - list
-  - watch
-  - create
 - apiGroups:
   - provisioning.cattle.io
   resources:

charts/rancher-turtles/values.yaml

@@ -13,6 +13,8 @@ rancherTurtles:
       kubectlImage: rancher/kubectl
     rancher-kubeconfigs:
       label: true
+    managementv3-cluster:
+      enabled: false
 cluster-api-operator:
   enabled: true
   cert-manager:

config/rbac/role.yaml

@@ -37,77 +37,23 @@ rules:
   - clusters/status
   verbs:
   - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - cluster.x-k8s.io
-  resources:
-  - machinepools
-  verbs:
-  - create
-  - delete
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
-  - cluster.x-k8s.io
-  resources:
-  - machinepools/finalizers
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - cluster.x-k8s.io
-  resources:
-  - machinepools/status
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - cluster.x-k8s.io
-  resources:
-  - machines
-  - machines/status
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - cluster.x-k8s.io
+  - coordination.k8s.io
   resources:
-  - machinesets
+  - leases
   verbs:
   - create
-  - delete
   - get
-  - list
-  - patch
   - update
-  - watch
 - apiGroups:
-  - cluster.x-k8s.io
+  - infrastructure.cluster.x-k8s.io
   resources:
-  - machinesets/finalizers
+  - '*'
   verbs:
   - create
   - delete
@@ -117,47 +63,29 @@ rules:
   - update
   - watch
 - apiGroups:
-  - cluster.x-k8s.io
+  - management.cattle.io
   resources:
-  - machinesets/status
+  - clusterregistrationtokens
+  - clusterregistrationtokens/status
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
   - create
-  - get
-  - update
 - apiGroups:
-  - infrastructure.cluster.x-k8s.io
+  - management.cattle.io
   resources:
-  - '*'
+  - clusters
+  - clusters/status
   verbs:
   - create
   - delete
+  - deletecollection
   - get
   - list
   - patch
   - update
   - watch
-- apiGroups:
-  - management.cattle.io
-  resources:
-  - clusterregistrationtokens
-  - clusterregistrationtokens/status
-  verbs:
-  - get
-  - list
-  - watch
-  - create
 - apiGroups:
   - provisioning.cattle.io
   resources:

feature/feature.go

@@ -25,6 +25,9 @@ const (
 	// RancherKubeSecretPatch is used to enable patching of the Rancher v2prov created kubeconfig
 	// secrets so that they can be used with CAPI 1.5.x.
 	RancherKubeSecretPatch featuregate.Feature = "rancher-kube-secret-patch" //nolint:gosec
+
+	// ManagementV3Cluster is used to enable the management.cattle.io/v3 cluster resource.
+	ManagementV3Cluster featuregate.Feature = "managementv3-cluster" //nolint:gosec
 )
 
 func init() {
@@ -33,4 +36,5 @@ func init() {
 
 var defaultGates = map[featuregate.Feature]featuregate.FeatureSpec{
 	RancherKubeSecretPatch: {Default: false, PreRelease: featuregate.Beta},
+	ManagementV3Cluster:    {Default: false, PreRelease: featuregate.Beta},
 }