Added cluster-installation on STACKIT

content/README.md

@@ -24,6 +24,7 @@ and benefit from the expertise shared in this repository.
 
 |Date|Headline|
 |---|---|
+|2026-05-05|[Added cluster-installation on STACKIT](cluster-installation/stackit/)|
 |2026-03-19|[Added Portworx on Two-Node with Arbiter](storage/portworx-and-tna/)|
 |2026-03-19|[Added Agent-base installation example (proxy)](cluster-installation/agent-base-proxy/)|
 |2026-03-17|[Added KubeVirt CSI](kubevirt/kubevirt-csi-driver/)|

content/cluster-installation/stackit/ccm-and-csi-deployment.yaml

@@ -0,0 +1,59 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: stackit-cloud-controller-manager
+  namespace: kube-system
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: stackit-cloud-controller-manager
+  template:
+    metadata:
+      labels:
+        app: stackit-cloud-controller-manager
+    spec:
+      serviceAccountName: stackit-cloud-controller-manager
+      containers:
+        - name: stackit-cloud-controller-manager
+          image: ghcr.io/stackitcloud/cloud-provider-stackit/cloud-controller-manager:v1.36.0
+          args:
+            # CCM flags
+            - --cloud-provider=stackit
+            - --webhook-secure-port=0
+            - --concurrent-service-syncs=3
+            - --controllers=service-lb-controller
+            - --authorization-always-allow-paths=/metrics
+            - --leader-elect=true
+            - --leader-elect-resource-name=stackit-cloud-controller-manager
+          env:
+            - name: STACKIT_SERVICE_ACCOUNT_KEY_PATH
+              value: /etc/serviceaccount/sa_key.json
+          ports:
+            - containerPort: 10258
+              hostPort: 10258
+              name: https
+              protocol: TCP
+            - containerPort: 9090
+              hostPort: 9090
+              name: metrics
+              protocol: TCP
+          resources:
+            limits:
+              cpu: "0.5"
+              memory: 500Mi
+            requests:
+              cpu: "0.1"
+              memory: 100Mi
+          volumeMounts:
+            - mountPath: /etc/config
+              name: cloud-config
+            - mountPath: /etc/serviceaccount
+              name: cloud-secret
+      volumes:
+        - name: cloud-config
+          configMap:
+            name: stackit-cloud-config
+        - name: cloud-secret
+          secret:
+            secretName: stackit-cloud-secret

content/cluster-installation/stackit/cloud.yaml

@@ -0,0 +1,6 @@
+# cloud.yaml
+global:
+  projectId: <project id>
+  region: eu01
+loadBalancer:
+  networkId: <network id>

content/cluster-installation/stackit/csi/kustomization.yaml

@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: stackit-csi-driver
+resources:
+  # HTTPS so `oc apply -k` works without a GitHub SSH key (pin ref for reproducibility).
+  - https://github.com/stackitcloud/cloud-provider-stackit.git//deploy/csi-plugin?ref=main
+
+images:
+  - name: ghcr.io/stackitcloud/cloud-provider-stackit/stackit-csi-plugin:release-v1.34
+    newName: ghcr.io/stackitcloud/cloud-provider-stackit/stackit-csi-plugin
+    newTag: v1.36.0

content/cluster-installation/stackit/ign-bootstrap.rcc

@@ -0,0 +1,15 @@
+variant: fcos
+version: 1.5.0
+ignition:
+  config:
+    merge:
+      - source: "https://ignition.object.storage.eu01.onstackit.cloud/bootstrap.ign"
+storage:
+  files:
+    - path: /etc/hostname
+      overwrite: true
+      contents:
+        source: data:,bootstrap
+      mode: 420
+
+

content/cluster-installation/stackit/ign-control-plane-0.rcc

@@ -0,0 +1,13 @@
+variant: fcos
+version: 1.5.0
+ignition:
+  config:
+    merge:
+      - local: "conf/master.ign"
+storage:
+  files:
+    - path: /etc/hostname
+      overwrite: true
+      contents:
+        source: data:,control-plane-0
+      mode: 420

content/cluster-installation/stackit/ign-control-plane-1.rcc

@@ -0,0 +1,13 @@
+variant: fcos
+version: 1.5.0
+ignition:
+  config:
+    merge:
+      - local: "conf/master.ign"
+storage:
+  files:
+    - path: /etc/hostname
+      overwrite: true
+      contents:
+        source: data:,control-plane-1
+      mode: 420

content/cluster-installation/stackit/ign-control-plane-2.rcc

@@ -0,0 +1,13 @@
+variant: fcos
+version: 1.5.0
+ignition:
+  config:
+    merge:
+      - local: "conf/master.ign"
+storage:
+  files:
+    - path: /etc/hostname
+      overwrite: true
+      contents:
+        source: data:,control-plane-2
+      mode: 420

content/cluster-installation/stackit/ign-gpu-worker-0.rcc

@@ -0,0 +1,13 @@
+variant: fcos
+version: 1.5.0
+ignition:
+  config:
+    merge:
+      - local: "conf/worker.ign"
+storage:
+  files:
+    - path: /etc/hostname
+      overwrite: true
+      contents:
+        source: data:,gpu-worker-0
+      mode: 420

content/cluster-installation/stackit/ign-helper.rcc

@@ -0,0 +1,30 @@
+variant: fcos
+version: 1.5.0
+ignition:
+  config:
+    merge:
+      - source: "https://ignition.object.storage.eu01.onstackit.cloud/bootstrap.ign"
+
+storage:
+  files:
+    - path: /etc/hostname
+      overwrite: true
+      contents:
+        source: data:,helper
+      mode: 0420
+    - path: /home/core/.ssh/id_ed25519
+      overwrite: true
+      contents:
+        local: .ssh/ocp-on-stackit
+      mode: 0600
+    - path: /home/core/.ssh/id_ed25519.pub
+      overwrite: true
+      contents:
+        local: .ssh/ocp-on-stackit.pub
+      mode: 0600
+passwd:
+  users:
+    - name: core
+      password_hash: "$y$j9T$15cuONdoH5AKB62c9qTtD.$oOf4GqrwEnNzT7WuEFvkDuSOyv2xIx/z4EXzbQivdO0"
+      ssh_authorized_keys_local: 
+        - .ssh/ocp-on-stackit.pub

content/cluster-installation/stackit/ign-worker-0.rcc

@@ -0,0 +1,13 @@
+variant: fcos
+version: 1.5.0
+ignition:
+  config:
+    merge:
+      - local: "conf/worker.ign"
+storage:
+  files:
+    - path: /etc/hostname
+      overwrite: true
+      contents:
+        source: data:,worker-0
+      mode: 420

content/cluster-installation/stackit/ign-worker-1.rcc

@@ -0,0 +1,13 @@
+variant: fcos
+version: 1.5.0
+ignition:
+  config:
+    merge:
+      - local: "conf/worker.ign"
+storage:
+  files:
+    - path: /etc/hostname
+      overwrite: true
+      contents:
+        source: data:,worker-1
+      mode: 420

content/cluster-installation/stackit/ign-worker-2.rcc

@@ -0,0 +1,13 @@
+variant: fcos
+version: 1.5.0
+ignition:
+  config:
+    merge:
+      - local: "conf/worker.ign"
+storage:
+  files:
+    - path: /etc/hostname
+      overwrite: true
+      contents:
+        source: data:,worker-2
+      mode: 420