[Epic] Bootstrap fleet agent on the ClusterClass provisioned cluster #44
Open
Feature
0 of 4 issues completed
Description
We need to add support for injecting agent installation using Cluster Class templating.
Initially, we can explore using generated cluster registration service account certificate for this purpose.
- Add cluster registration SA and secret for APIServerCA value defaulting
- Expose APIServerCA and APIServerURL in FleetAddonConfig CR to use in automatic install
Additionally, we need to create a Secret resource with the fleet-agent deployment for the cluster. This can be performed by CAAPF binary, which contains the helm CLI in the image. Secret needs to be named as <cluster-name>-fleet-agent to allow usage of built-ins in the ClusterClass JsonPatch.
Deploying via ClusterClass would allow to use this secret as a source for /etc/kubernetes/manifests file, and deploy a static pod resource performing installation early in the bootstrap cycle.