deploy controller for backup s3

control-plane/roles/gardener/tasks/extensions.yaml

@@ -101,6 +101,18 @@
     - controller-registration.yaml
   when: gardener_extension_shoot_dns_service_enabled
 
+- name: Register controller for backup-s3
+  kubernetes.core.k8s:
+    template:
+      - path: backup-s3/controller-deployment.yaml.j2
+      - path: backup-s3/controller-registration.yaml.j2
+    kubeconfig: "{{ gardener_kube_apiserver_kubeconfig_path }}"
+    apply: yes
+  register: result
+  until: result is success
+  retries: 10
+  delay: 6
+
 - name: Register controller for dns-powerdns
   kubernetes.core.k8s:
     template:

control-plane/roles/gardener/templates/backup-s3/controller-deployment.yaml.j2

@@ -0,0 +1,12 @@
+---
+apiVersion: core.gardener.cloud/v1beta1
+kind: ControllerDeployment
+metadata:
+  name: backup-s3
+type: helm
+providerConfig:
+  chart: "{{ (lookup('url', 'https://raw.githubusercontent.com/metal-stack/gardener-extension-backup-s3/' + backup_s3_repo_ref + '/example/controller-registration.yaml', split_lines=False) | from_yaml_all | list)[0].providerConfig.chart }}"
+  values:
+    image:
+      repository: "{{ backup_s3_image_name }}"
+      tag: "{{ backup_s3_image_tag }}"

control-plane/roles/gardener/templates/backup-s3/controller-registration.yaml.j2

@@ -0,0 +1,16 @@
+---
+apiVersion: core.gardener.cloud/v1beta1
+kind: ControllerRegistration
+metadata:
+  name: backup-s3
+  annotations:
+    security.gardener.cloud/pod-security-enforce: baseline
+spec:
+  deployment:
+    deploymentRefs:
+    - name: backup-s3
+  resources:
+  - kind: BackupBucket
+    type: S3
+  - kind: BackupEntry
+    type: S3