Decouple cfcr

manifests/ops-files/addons-spec.yml

@@ -1,3 +1,3 @@
 - type: replace
-  path: /instance_groups/name=apply-addons/jobs/name=apply-specs/properties/addons-spec?
+  path: /instance_groups/name=apply-addons/jobs/name=apply-specs/properties/specs?/addons?
   value: ((addons-spec))

manifests/ops-files/change-cidrs.yml

@@ -1,8 +1,4 @@
 ---
-- type: replace
-  path: /instance_groups/name=apply-addons/jobs/name=apply-specs/properties/kubedns-service-ip?
-  value: ((kubedns_service_ip))
-
 - type: replace
   path: /instance_groups/name=master/jobs/name=kube-apiserver/properties/k8s-args/service-cluster-ip-range?
   value: ((service_cluster_cidr))
@@ -11,6 +7,10 @@
   path: /instance_groups/name=worker/jobs/name=kubelet/properties/kubelet-configuration/clusterDNS?
   value: [((kubedns_service_ip))]
 
+- type: replace
+  path: /instance_groups/name=apply-addons/jobs/name=apply-specs/properties/specs/coredns/name=service/value/spec/clusterIP
+  value: ((kubedns_service_ip))
+
 - type: replace
   path: /instance_groups/name=worker/jobs/name=flanneld/properties?/pod-network-cidr?
   value: ((pod_network_cidr))

manifests/ops-files/iaas/azure/cloud-provider.yml

@@ -80,3 +80,29 @@
 - type: replace
   path: /instance_groups/name=worker/jobs/name=kube-proxy/properties/cloud-provider?
   value: azure
+
+- type: replace
+  path: /instance_groups/name=master/jobs/name=kubernetes-roles/properties/specs?/cloud-provider?
+  value: |
+    ---
+    apiVersion: rbac.authorization.k8s.io/v1
+    kind: ClusterRole
+    metadata:
+      name: system:azure-cloud-provider
+    rules:
+    - apiGroups: ['']
+      resources: ['secrets']
+      verbs:     ['get','create']
+    ---
+    apiVersion: rbac.authorization.k8s.io/v1beta1
+    kind: ClusterRoleBinding
+    metadata:
+      name: system:azure-cloud-provider
+    roleRef:
+      kind: ClusterRole
+      apiGroup: rbac.authorization.k8s.io
+      name: system:azure-cloud-provider
+    subjects:
+    - kind: ServiceAccount
+      name: persistent-volume-binder
+      namespace: kube-system

manifests/ops-files/iaas/vsphere/cloud-provider.yml

@@ -62,3 +62,20 @@
   path: /instance_groups/name=apply-addons/jobs/name=apply-specs/consumes?
   value:
     cloud-provider: {from: master-cloud-provider}
+
+- type: replace
+  path: /instance_groups/name=master/jobs/name=kubernetes-roles/properties/specs?/cloud-provider?
+  value: |
+    ---
+    kind: ClusterRoleBinding
+    apiVersion: rbac.authorization.k8s.io/v1
+    metadata:
+      name: kubo:internal:vsphere-cloud-provider
+    subjects:
+    - kind: ServiceAccount
+      name: vsphere-cloud-provider
+      namespace: kube-system
+    roleRef:
+      kind: ClusterRole
+      name: system:node
+      apiGroup: rbac.authorization.k8s.io

manifests/ops-files/misc/dev.yml

@@ -3,3 +3,9 @@
   value:
     name: kubo
     version: latest
+
+- type: replace
+  path: /releases/name=kubernetes?
+  value:
+    name: kubernetes
+    version: latest

manifests/ops-files/non-precompiled-releases.yml

@@ -17,3 +17,6 @@
     sha1: 41df19697d6a69d2552bc2c132928157fa91abe0
     url: https://bosh.io/d/github.com/cloudfoundry-incubator/bpm-release?v=1.0.4
     version: 1.0.4
+  - name: kubernetes
+    url: https://storage.googleapis.com/kubo-pipeline-store-test/kubernetes-release.tar.gz
+    version: 0.0.0-dev.3

manifests/ops-files/windows/add-worker.yml

@@ -21,6 +21,13 @@
     url: "https://storage.googleapis.com/kubo-precompiled-releases/kubo-windows-0.31.0-windows2019-2019.2-20190325-131732-878123.tgz"
     sha1: "05ead5f098611e25a6fc6e5cfb33825cf1c9b8ae"
 
+- type: replace
+  path: /releases/-
+  value:
+    name: "kubernetes-windows"
+    url: https://storage.googleapis.com/kubo-pipeline-store-test/kubernetes-windows-release.tar.gz
+    version: 0.0.0-dev.7
+
 - type: replace
   path: /addons/-
   value: