add calico-apiserver (#2707)

Signed-off-by: Josh Wolf <josh@wolfs.io>

images/calico/configs/latest.apiserver.apko.yaml

@@ -0,0 +1,24 @@
+contents:
+  packages:
+    - calico-apiserver
+
+accounts:
+  groups:
+    - groupname: nonroot
+      gid: 65532
+  users:
+    - username: nonroot
+      uid: 65532
+      gid: 65532
+  # Chart overrides this at runtime
+  # https://github.com/projectcalico/calico/blob/23ae58b62765b14aa2c5952b2fc6c40155731a79/manifests/apiserver.yaml#L91
+  run-as: 65532
+
+paths:
+  # https://github.com/projectcalico/calico/blob/23ae58b62765b14aa2c5952b2fc6c40155731a79/manifests/apiserver.yaml#L93
+  - path: /code
+    type: directory
+    permissions: 0o777
+
+entrypoint:
+  command: /usr/bin/calico-apiserver

images/calico/main.tf

@@ -7,7 +7,8 @@ locals {
     "csi",
     "typha",
     "pod2daemon",
-    "node-driver-registrar"
+    "node-driver-registrar",
+    "apiserver"
   ])
 
   // Normally the package is named like "calico-{component}"

images/calico/tests/install.sh

@@ -48,6 +48,8 @@ spec:
       digest: ${CSI_DIGEST}
     - image: calico/typha
       digest: ${TYPHA_DIGEST}
+    - image: calico/apiserver
+      digest: ${APISERVER_DIGEST}
     - image: calico/node-driver-registrar
       digest: ${NODE_DRIVER_REGISTRAR_DIGEST}
     # This isn't used on Linux, it just needs to have a value.

images/calico/tests/main.tf

@@ -16,6 +16,7 @@ variable "digests" {
     typha                 = string
     node-driver-registrar = string
     calicoctl             = string
+    apiserver             = string
   })
 }
 
@@ -72,6 +73,8 @@ spec:
       digest: ${local.parsed["csi"].digest}
     - image: calico/typha
       digest: ${local.parsed["typha"].digest}
+    - image: calico/apiserver
+      digest: ${local.parsed["apiserver"].digest}
     - image: calico/node-driver-registrar
       digest: ${local.parsed["node-driver-registrar"].digest}
 EOm