fix: AWS CCM manifest

Update helm chart and regen enabling hostNetwork.

Signed-off-by: Andrey Smirnov <[email protected]>

Author: smira

Makefile

@@ -3,9 +3,9 @@ TAG ?= $(shell git describe --tag --always --dirty)
 TF_PROJECTS := $(shell find examples/terraform/ -name '.terraform' -prune -o -name 'main.tf' -exec dirname {} \;)
 
 # renovate: datasource=helm depName=aws-cloud-controller-manager
-AWS_CCM_HELM_CHART_VERSION ?= 0.0.8
+AWS_CCM_HELM_CHART_VERSION ?= 0.0.9
 # renovate: datasource=github-releases depName=kubernetes/cloud-provider-aws
-AWS_CCM_VERSION ?= v1.32.1
+AWS_CCM_VERSION ?= v1.33.0
 
 .PHONY: fmt
 fmt:
@@ -28,4 +28,4 @@ check-dirty: fmt generate ## Verifies that source tree is not dirty
 aws-ccm:
 	helm repo add aws-cloud-controller-manager https://kubernetes.github.io/cloud-provider-aws
 	helm repo update
-	helm template --version $(AWS_CCM_HELM_CHART_VERSION) aws-cloud-controller-manager aws-cloud-controller-manager/aws-cloud-controller-manager --set args="{--v=2,--cloud-provider=aws,--configure-cloud-routes=false}" --set image.tag=$(AWS_CCM_VERSION) > examples/terraform/aws/manifests/ccm.yaml
+	helm template --version $(AWS_CCM_HELM_CHART_VERSION) aws-cloud-controller-manager aws-cloud-controller-manager/aws-cloud-controller-manager --set args="{--v=2,--cloud-provider=aws,--configure-cloud-routes=false}" --set image.tag=$(AWS_CCM_VERSION) --set hostNetworking=true > examples/terraform/aws/manifests/ccm.yaml

examples/terraform/aws/manifests/ccm.yaml

@@ -6,15 +6,15 @@ metadata:
   name: cloud-controller-manager
   namespace: kube-system
   labels:
-    helm.sh/chart: "aws-cloud-controller-manager-0.0.8"
+    helm.sh/chart: "aws-cloud-controller-manager-0.0.9"
 ---
 # Source: aws-cloud-controller-manager/templates/clusterrole.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: system:cloud-controller-manager
   labels:
-    helm.sh/chart: "aws-cloud-controller-manager-0.0.8"
+    helm.sh/chart: "aws-cloud-controller-manager-0.0.9"
 rules: 
   - apiGroups:
     - ""
@@ -95,14 +95,26 @@ rules:
     - serviceaccounts/token
     verbs:
     - create
+  - apiGroups:
+    - authentication.k8s.io
+    resources:
+    - tokenreviews
+    verbs:
+    - create
+  - apiGroups:
+    - authorization.k8s.io
+    resources:
+    - subjectaccessreviews
+    verbs:
+    - create
 ---
 # Source: aws-cloud-controller-manager/templates/cluserrolebinding.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: system:cloud-controller-manager
   labels:
-    helm.sh/chart: "aws-cloud-controller-manager-0.0.8"
+    helm.sh/chart: "aws-cloud-controller-manager-0.0.9"
 roleRef:
   kind: ClusterRole
   name: system:cloud-controller-manager
@@ -120,7 +132,7 @@ metadata:
   name: cloud-controller-manager:apiserver-authentication-reader
   namespace: kube-system
   labels: 
-    helm.sh/chart: "aws-cloud-controller-manager-0.0.8"
+    helm.sh/chart: "aws-cloud-controller-manager-0.0.9"
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -138,7 +150,7 @@ metadata:
   name: aws-cloud-controller-manager
   labels:
     k8s-app:  aws-cloud-controller-manager
-    helm.sh/chart: "aws-cloud-controller-manager-0.0.8"
+    helm.sh/chart: "aws-cloud-controller-manager-0.0.9"
   namespace: kube-system
 spec:
   selector:
@@ -165,11 +177,12 @@ spec:
       dnsPolicy: Default
       priorityClassName: system-node-critical
       serviceAccountName: cloud-controller-manager
+      hostNetwork: true
       securityContext:
         {}
       containers:
         - name: aws-cloud-controller-manager
-          image: "registry.k8s.io/provider-aws/cloud-controller-manager:v1.32.1"
+          image: "registry.k8s.io/provider-aws/cloud-controller-manager:v1.33.0"
           args:
             - --v=2
             - --cloud-provider=aws