# Source: https://github.com/kubernetes/cloud-provider-vsphere
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: {{ .Chart.Name }}-cloud-controller-manager
  labels:
    component: {{ .Chart.Name }}-cloud-controller-manager
    tier: control-plane
  namespace: {{ .Release.Namespace }}
  annotations:
    scheduler.alpha.kubernetes.io/critical-pod: ""
spec:
  selector:
    matchLabels:
      name: {{ .Chart.Name }}-cloud-controller-manager
  updateStrategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        name: {{ .Chart.Name }}-cloud-controller-manager
        component: {{ .Chart.Name }}-cloud-controller-manager
        tier: control-plane
    spec:
      {{- if .Values.cloudControllerManager.nodeSelector }}
      nodeSelector:
      {{- with .Values.cloudControllerManager.nodeSelector }}
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- else }}
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              # RKE node selector label
              - key: node-role.kubernetes.io/controlplane
                operator: In
                values:
                - "true"
            - matchExpressions:
              # RKE2 node selector label
              - key: node-role.kubernetes.io/control-plane
                operator: In
                values:
                - "true"
      {{- end }}
      {{- if .Values.cloudControllerManager.tolerations }}
      tolerations:
      {{- with .Values.cloudControllerManager.tolerations }}
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- else }}
      tolerations:
        - key: node.cloudprovider.kubernetes.io/uninitialized
          value: "true"
          effect: NoSchedule
        - key: node-role.kubernetes.io/master
          effect: NoSchedule
          operator: Exists
        - key: node.kubernetes.io/not-ready
          effect: NoSchedule
          operator: Exists
        # Rancher specific change: These tolerations are added to account for RKE1 and RKE2 taints
        - key: node-role.kubernetes.io/controlplane
          effect: NoSchedule
          value: "true"
        - key: node-role.kubernetes.io/control-plane
          effect: NoSchedule
          value: "true"
        - key: node-role.kubernetes.io/etcd
          effect: NoSchedule
          value: "true"
      {{- end }}
      securityContext:
        runAsUser: 1001
      serviceAccountName: {{ .Chart.Name }}-cloud-controller-manager
      containers:
        - name: {{ .Chart.Name }}-cloud-controller-manager
          image: "{{ template "system_default_registry" . }}{{ default (include "get_image" . ) (include "get_image_override" . ) }}"
          args:
            - --cloud-provider=vsphere
            - --v=2
            - --cloud-config=/etc/cloud/vsphere.conf
          volumeMounts:
            - mountPath: /etc/cloud
              name: vsphere-config-volume
              readOnly: true
          resources:
            requests:
              cpu: 200m
      hostNetwork: true
      volumes:
      - name: vsphere-config-volume
        configMap:
          name: vsphere-cloud-config