From d72b8f735f39954824c489e074017a3ec9680871 Mon Sep 17 00:00:00 2001
From: Waleed Malik <ahmedwaleedmalik@gmail.com>
Date: Tue, 7 Dec 2021 23:38:57 +0500
Subject: [PATCH] Osm enhancements (#90)

* Improvements for default OSP's

* Remove templatization of docker version and use hard-coded values instead

* Remove templatization for containerd version in favor of hardcoded values
---
 cmd/osm-controller/main.go                    |  6 --
 examples/osp-amzn-linux.yaml                  | 30 +++---
 examples/osp-centos.yaml                      | 12 ++-
 examples/osp-rhel.yaml                        | 12 ++-
 examples/osp-ubuntu.yaml                      | 22 +++--
 hack/run-operating-system-manager.sh          |  1 -
 pkg/controllers/osc/osc_controller.go         |  4 -
 pkg/controllers/osc/osc_reconciler_test.go    | 97 +++++++++----------
 .../osc/resources/operating_system_config.go  | 14 +--
 pkg/controllers/osc/testdata/osp-rhel.yaml    |  2 +-
 .../osc/testdata/osp-ubuntu-20.04.yaml        |  2 +-
 pkg/providerconfig/types.go                   | 47 ---------
 12 files changed, 112 insertions(+), 137 deletions(-)
 delete mode 100644 pkg/providerconfig/types.go

diff --git a/cmd/osm-controller/main.go b/cmd/osm-controller/main.go
index 113e6d11..d5eee5b6 100644
--- a/cmd/osm-controller/main.go
+++ b/cmd/osm-controller/main.go
@@ -50,7 +50,6 @@ type options struct {
 	pauseImage            string
 	initialTaints         string
 	cniVersion            string
-	containerdVersion     string
 	criToolsVersion       string
 	nodeHTTPProxy         string
 	nodeNoProxy           string
@@ -79,7 +78,6 @@ func main() {
 	flag.StringVar(&opt.pauseImage, "pause-image", "", "pause image to use in Kubelet.")
 	flag.StringVar(&opt.initialTaints, "initial-taints", "", "taints to use when creating the node.")
 	flag.StringVar(&opt.cniVersion, "cni-version", "", "CNI version to use in the cluster.")
-	flag.StringVar(&opt.containerdVersion, "containerd-version", "", "Containerd version to use in the cluster.")
 	flag.StringVar(&opt.criToolsVersion, "cri-tools-version", "", "cri-tools version to install in the machine")
 	flag.StringVar(&opt.nodeHTTPProxy, "node-http-proxy", "", "If set, it configures the 'HTTP_PROXY' & 'HTTPS_PROXY' environment variable on the nodes.")
 	flag.StringVar(&opt.nodeNoProxy, "node-no-proxy", ".svc,.cluster.local,localhost,127.0.0.1", "If set, it configures the 'NO_PROXY' environment variable on the nodes.")
@@ -98,9 +96,6 @@ func main() {
 	if len(opt.cniVersion) == 0 {
 		klog.Fatal("-cni-version is required")
 	}
-	if len(opt.containerdVersion) == 0 {
-		klog.Fatal("-containerd-version is required")
-	}
 	if len(opt.criToolsVersion) == 0 {
 		klog.Fatal("-cri-tools-version is required")
 	}
@@ -160,7 +155,6 @@ func main() {
 		opt.pauseImage,
 		opt.initialTaints,
 		opt.cniVersion,
-		opt.containerdVersion,
 		opt.criToolsVersion,
 		opt.nodeHTTPProxy,
 		opt.nodeNoProxy,
diff --git a/examples/osp-amzn-linux.yaml b/examples/osp-amzn-linux.yaml
index 82e713d0..ed4c1755 100644
--- a/examples/osp-amzn-linux.yaml
+++ b/examples/osp-amzn-linux.yaml
@@ -63,7 +63,7 @@ spec:
           EOF
 
           yum install -y \
-          	containerd-{{ .ContainerdVersion }}* \
+          	containerd-1.4* \
           	yum-plugin-versionlock
           yum versionlock add containerd
 
@@ -90,10 +90,8 @@ spec:
           EOF
 
           yum install -y \
-          {{- if .ContainerdVersion }}
-              containerd-{{ .ContainerdVersion }}* \
-          {{- end }}
-              docker-{{ .DockerVersion }}* \
+              containerd-1.4* \
+              docker-19.03* \
               yum-plugin-versionlock
           yum versionlock add docker containerd
 
@@ -182,8 +180,6 @@ spec:
           chmod +x /opt/bin/health-monitor.sh
       fi
 
-
-
     configureProxyScript: |-
       {{- if .HTTPProxy }}
       cat <<EOF | tee -a /etc/environment
@@ -255,8 +251,6 @@ spec:
             #     mls - Multi Level Security protection.
             SELINUXTYPE=targeted
 
-
-
     - path: "/opt/bin/setup"
       permissions: 0755
       content:
@@ -407,8 +401,12 @@ spec:
               exit 1
             fi
 
-             # get the full hostname
+            # get the full hostname
             FULL_HOSTNAME=$(hostname -f)
+            # if /etc/hostname is not empty then use the hostname from there
+            if [ -s /etc/hostname ]; then
+              FULL_HOSTNAME=$(cat /etc/hostname)
+            fi
 
             # write the nodeip_env file
             # we need the line below because flatcar has the same string "coreos" in that file
@@ -502,6 +500,16 @@ spec:
               cpu: 200m
               ephemeral-storage: 1Gi
               memory: 200Mi
+            tlsCipherSuites:
+            - TLS_AES_128_GCM_SHA256
+            - TLS_AES_256_GCM_SHA384
+            - TLS_CHACHA20_POLY1305_SHA256
+            - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+            - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+            - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+            - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+            - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+            - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
             volumePluginDir: /var/lib/kubelet/volumeplugins
 
     - path: /etc/systemd/system/kubelet-healthcheck.service
@@ -518,4 +526,4 @@ spec:
             ExecStart=/opt/bin/health-monitor.sh kubelet
 
             [Install]
-            WantedBy=multi-user.target
\ No newline at end of file
+            WantedBy=multi-user.target
diff --git a/examples/osp-centos.yaml b/examples/osp-centos.yaml
index 5ddc01f0..1c2d8e0a 100644
--- a/examples/osp-centos.yaml
+++ b/examples/osp-centos.yaml
@@ -75,7 +75,7 @@ spec:
           EnvironmentFile=-/etc/environment
           EOF
 
-          yum install -y containerd.io-{{ .ContainerdVersion }}* yum-plugin-versionlock
+          yum install -y containerd.io-1.4* yum-plugin-versionlock
           yum versionlock add containerd.io
 
           systemctl daemon-reload
@@ -520,6 +520,16 @@ spec:
               cpu: 200m
               ephemeral-storage: 1Gi
               memory: 200Mi
+            tlsCipherSuites:
+            - TLS_AES_128_GCM_SHA256
+            - TLS_AES_256_GCM_SHA384
+            - TLS_CHACHA20_POLY1305_SHA256
+            - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+            - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+            - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+            - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+            - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+            - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
             volumePluginDir: /var/lib/kubelet/volumeplugins
 
     - path: /etc/systemd/system/kubelet-healthcheck.service
diff --git a/examples/osp-rhel.yaml b/examples/osp-rhel.yaml
index bf643b72..1bbe3ec7 100644
--- a/examples/osp-rhel.yaml
+++ b/examples/osp-rhel.yaml
@@ -73,7 +73,7 @@ spec:
           EnvironmentFile=-/etc/environment
           EOF
 
-          yum install -y containerd.io-{{ .ContainerdVersion }}* yum-plugin-versionlock
+          yum install -y containerd.io-1.4* yum-plugin-versionlock
           yum versionlock add containerd.io
 
           systemctl daemon-reload
@@ -520,6 +520,16 @@ spec:
               cpu: 200m
               ephemeral-storage: 1Gi
               memory: 200Mi
+            tlsCipherSuites:
+            - TLS_AES_128_GCM_SHA256
+            - TLS_AES_256_GCM_SHA384
+            - TLS_CHACHA20_POLY1305_SHA256
+            - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+            - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+            - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+            - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+            - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+            - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
             volumePluginDir: /var/lib/kubelet/volumeplugins
 
     - path: /etc/systemd/system/kubelet-healthcheck.service
diff --git a/examples/osp-ubuntu.yaml b/examples/osp-ubuntu.yaml
index b98bd4ec..d4592da7 100644
--- a/examples/osp-ubuntu.yaml
+++ b/examples/osp-ubuntu.yaml
@@ -72,7 +72,7 @@ spec:
           EnvironmentFile=-/etc/environment
           EOF
 
-          apt-get install -y --allow-downgrades containerd.io={{ .ContainerdVersion }}*
+          apt-get install -y --allow-downgrades containerd.io=1.4*
           apt-mark hold containerd.io
 
           systemctl daemon-reload
@@ -102,11 +102,11 @@ spec:
           EnvironmentFile=-/etc/environment
           EOF
 
-          apt-get install -y \
-              containerd.io=1.4.3* \
-              docker-ce=5:19.03.13* \
-              docker-ce-cli=5:19.03.13*
-          apt-mark hold docker-ce docker-ce-cli containerd.io
+          apt-get install --allow-downgrades -y \
+              containerd.io=1.4* \
+              docker-ce-cli=5:19.03* \
+              docker-ce=5:19.03*
+          apt-mark hold docker-ce* containerd.io
 
           systemctl daemon-reload
           systemctl enable --now docker
@@ -544,6 +544,16 @@ spec:
               cpu: 200m
               ephemeral-storage: 1Gi
               memory: 200Mi
+            tlsCipherSuites:
+            - TLS_AES_128_GCM_SHA256
+            - TLS_AES_256_GCM_SHA384
+            - TLS_CHACHA20_POLY1305_SHA256
+            - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+            - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+            - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+            - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+            - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+            - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
             volumePluginDir: /var/lib/kubelet/volumeplugins
 
     - path: /etc/systemd/system/kubelet-healthcheck.service
diff --git a/hack/run-operating-system-manager.sh b/hack/run-operating-system-manager.sh
index 6aefc364..d83fc17a 100755
--- a/hack/run-operating-system-manager.sh
+++ b/hack/run-operating-system-manager.sh
@@ -27,5 +27,4 @@ $(dirname $0)/../_build/osm-controller \
   -namespace=cloud-init-settings \
   -worker-count=50 \
   -cni-version=v0.8.7 \
-  -containerd-version=1.4 \
   -cri-tools-version=v1.22.0
diff --git a/pkg/controllers/osc/osc_controller.go b/pkg/controllers/osc/osc_controller.go
index 99d84e88..d32d3719 100644
--- a/pkg/controllers/osc/osc_controller.go
+++ b/pkg/controllers/osc/osc_controller.go
@@ -63,7 +63,6 @@ type Reconciler struct {
 	clusterDNSIPs         []net.IP
 	kubeconfig            string
 	cniVersion            string
-	containerdVersion     string
 	criToolVersion        string
 	nodeHTTPProxy         string
 	nodeNoProxy           string
@@ -85,7 +84,6 @@ func Add(
 	pauseImage string,
 	initialTaints string,
 	cniVersion string,
-	containerdVersion string,
 	criToolsVersion string,
 	nodeHTTPProxy string,
 	nodeNoProxy string,
@@ -104,7 +102,6 @@ func Add(
 		initialTaints:         initialTaints,
 		externalCloudProvider: externalCloudProvider,
 		cniVersion:            cniVersion,
-		containerdVersion:     containerdVersion,
 		nodeHTTPProxy:         nodeHTTPProxy,
 		nodeNoProxy:           nodeNoProxy,
 		podCIDR:               podCIDR,
@@ -197,7 +194,6 @@ func (r *Reconciler) reconcileOperatingSystemConfigs(ctx context.Context, md *cl
 			r.pauseImage,
 			r.initialTaints,
 			r.cniVersion,
-			r.containerdVersion,
 			r.criToolVersion,
 			r.nodeHTTPProxy,
 			r.nodeNoProxy,
diff --git a/pkg/controllers/osc/osc_reconciler_test.go b/pkg/controllers/osc/osc_reconciler_test.go
index 06dd26ea..81dc31fe 100644
--- a/pkg/controllers/osc/osc_reconciler_test.go
+++ b/pkg/controllers/osc/osc_reconciler_test.go
@@ -68,13 +68,12 @@ func init() {
 }
 
 type testConfig struct {
-	namespace         string
-	clusterAddress    string
-	containerRuntime  string
-	containerdVersion string
-	cniVersion        string
-	kubeVersion       string
-	clusterDNSIPs     []net.IP
+	namespace        string
+	clusterAddress   string
+	containerRuntime string
+	cniVersion       string
+	kubeVersion      string
+	clusterDNSIPs    []net.IP
 }
 
 func TestReconciler_Reconcile(t *testing.T) {
@@ -101,13 +100,12 @@ func TestReconciler_Reconcile(t *testing.T) {
 			mdName:          "ubuntu-20.04-aws",
 			secretFile:      "secret-ubuntu-20.04-aws-containerd.yaml",
 			config: testConfig{
-				namespace:         "cloud-init-settings",
-				clusterAddress:    "http://127.0.0.1/configs",
-				containerRuntime:  "containerd",
-				cniVersion:        "v0.8.7",
-				containerdVersion: "1.4",
-				kubeVersion:       "1.22.1",
-				clusterDNSIPs:     []net.IP{net.IPv4(10, 0, 0, 0)},
+				namespace:        "cloud-init-settings",
+				clusterAddress:   "http://127.0.0.1/configs",
+				containerRuntime: "containerd",
+				cniVersion:       "v0.8.7",
+				kubeVersion:      "1.22.1",
+				clusterDNSIPs:    []net.IP{net.IPv4(10, 0, 0, 0)},
 			},
 			cloudProvider:     "aws",
 			cloudProviderSpec: runtime.RawExtension{Raw: []byte(`{"zone": "eu-central-1b", "vpc": "e-123f", "subnetID": "test-subnet"}`)},
@@ -122,13 +120,12 @@ func TestReconciler_Reconcile(t *testing.T) {
 			mdName:          "ubuntu-20.04-aws",
 			secretFile:      "secret-ubuntu-20.04-aws-docker.yaml",
 			config: testConfig{
-				namespace:         "cloud-init-settings",
-				clusterAddress:    "http://127.0.0.1/configs",
-				containerRuntime:  "docker",
-				cniVersion:        "v0.8.7",
-				containerdVersion: "1.4",
-				kubeVersion:       "1.22.1",
-				clusterDNSIPs:     []net.IP{net.IPv4(10, 0, 0, 0)},
+				namespace:        "cloud-init-settings",
+				clusterAddress:   "http://127.0.0.1/configs",
+				containerRuntime: "docker",
+				cniVersion:       "v0.8.7",
+				kubeVersion:      "1.22.1",
+				clusterDNSIPs:    []net.IP{net.IPv4(10, 0, 0, 0)},
 			},
 			cloudProvider:     "aws",
 			cloudProviderSpec: runtime.RawExtension{Raw: []byte(`{"zone": "eu-central-1b", "vpc": "e-123f", "subnetID": "test-subnet"}`)},
@@ -143,13 +140,12 @@ func TestReconciler_Reconcile(t *testing.T) {
 			mdName:          "flatcar-aws-containerd",
 			secretFile:      "secret-flatcar-aws-containerd.yaml",
 			config: testConfig{
-				namespace:         "cloud-init-settings",
-				clusterAddress:    "http://127.0.0.1/configs",
-				containerRuntime:  "containerd",
-				cniVersion:        "v0.8.7",
-				containerdVersion: "1.4",
-				kubeVersion:       "1.22.1",
-				clusterDNSIPs:     []net.IP{net.IPv4(10, 0, 0, 0)},
+				namespace:        "cloud-init-settings",
+				clusterAddress:   "http://127.0.0.1/configs",
+				containerRuntime: "containerd",
+				cniVersion:       "v0.8.7",
+				kubeVersion:      "1.22.1",
+				clusterDNSIPs:    []net.IP{net.IPv4(10, 0, 0, 0)},
 			},
 			cloudProvider:     "aws",
 			cloudProviderSpec: runtime.RawExtension{Raw: []byte(`{"zone": "eu-central-1b", "vpc": "e-123f", "subnetID": "test-subnet"}`)},
@@ -164,13 +160,12 @@ func TestReconciler_Reconcile(t *testing.T) {
 			mdName:          "flatcar-aws-docker",
 			secretFile:      "secret-flatcar-aws-docker.yaml",
 			config: testConfig{
-				namespace:         "cloud-init-settings",
-				clusterAddress:    "http://127.0.0.1/configs",
-				containerRuntime:  "docker",
-				cniVersion:        "v0.8.7",
-				containerdVersion: "1.4",
-				kubeVersion:       "1.22.1",
-				clusterDNSIPs:     []net.IP{net.IPv4(10, 0, 0, 0)},
+				namespace:        "cloud-init-settings",
+				clusterAddress:   "http://127.0.0.1/configs",
+				containerRuntime: "docker",
+				cniVersion:       "v0.8.7",
+				kubeVersion:      "1.22.1",
+				clusterDNSIPs:    []net.IP{net.IPv4(10, 0, 0, 0)},
 			},
 			cloudProvider:     "aws",
 			cloudProviderSpec: runtime.RawExtension{Raw: []byte(`{"cloud-config-key": "cloud-config-value"}`)},
@@ -185,13 +180,12 @@ func TestReconciler_Reconcile(t *testing.T) {
 			mdName:          "osp-rhel-aws",
 			secretFile:      "secret-rhel-8.x-containerd.yaml",
 			config: testConfig{
-				namespace:         "cloud-init-settings",
-				clusterAddress:    "http://127.0.0.1/configs",
-				containerRuntime:  "containerd",
-				cniVersion:        "v0.8.7",
-				containerdVersion: "1.4",
-				kubeVersion:       "1.22.1",
-				clusterDNSIPs:     []net.IP{net.IPv4(10, 0, 0, 0)},
+				namespace:        "cloud-init-settings",
+				clusterAddress:   "http://127.0.0.1/configs",
+				containerRuntime: "containerd",
+				cniVersion:       "v0.8.7",
+				kubeVersion:      "1.22.1",
+				clusterDNSIPs:    []net.IP{net.IPv4(10, 0, 0, 0)},
 			},
 			cloudProvider:     "aws",
 			cloudProviderSpec: runtime.RawExtension{Raw: []byte(`{"zone": "eu-central-1b", "vpc": "e-123f", "subnetID": "test-subnet"}`)},
@@ -437,15 +431,14 @@ func loadFile(obj runtime.Object, name string) error {
 
 func buildReconciler(fakeClient client.Client, config testConfig) Reconciler {
 	return Reconciler{
-		Client:            fakeClient,
-		log:               testUtil.DefaultLogger,
-		generator:         generator.NewDefaultCloudConfigGenerator(""),
-		namespace:         config.namespace,
-		clusterAddress:    config.clusterAddress,
-		kubeconfig:        kubeconfigPath,
-		containerRuntime:  config.containerRuntime,
-		containerdVersion: config.containerdVersion,
-		cniVersion:        config.cniVersion,
-		clusterDNSIPs:     config.clusterDNSIPs,
+		Client:           fakeClient,
+		log:              testUtil.DefaultLogger,
+		generator:        generator.NewDefaultCloudConfigGenerator(""),
+		namespace:        config.namespace,
+		clusterAddress:   config.clusterAddress,
+		kubeconfig:       kubeconfigPath,
+		containerRuntime: config.containerRuntime,
+		cniVersion:       config.cniVersion,
+		clusterDNSIPs:    config.clusterDNSIPs,
 	}
 }
diff --git a/pkg/controllers/osc/resources/operating_system_config.go b/pkg/controllers/osc/resources/operating_system_config.go
index a2032cf8..d59d9411 100644
--- a/pkg/controllers/osc/resources/operating_system_config.go
+++ b/pkg/controllers/osc/resources/operating_system_config.go
@@ -61,7 +61,6 @@ func OperatingSystemConfigCreator(
 	pauseImage string,
 	initialTaints string,
 	cniVersion string,
-	containerdVersion string,
 	criToolsVersion string,
 	nodeHTTPProxy string,
 	nodeNoProxy string,
@@ -81,9 +80,14 @@ func OperatingSystemConfigCreator(
 				return nil, fmt.Errorf("failed to decode provider configs: %v", err)
 			}
 
-			cloudConfig, err := cloudprovider.GetCloudConfig(providerConfig, md.Spec.Template.Spec.Versions.Kubelet)
-			if err != nil {
-				return nil, fmt.Errorf("failed to fetch cloud-config: %v", err)
+			var cloudConfig string
+			if providerConfig.OverwriteCloudConfig != nil {
+				cloudConfig = *providerConfig.OverwriteCloudConfig
+			} else {
+				cloudConfig, err = cloudprovider.GetCloudConfig(providerConfig, md.Spec.Template.Spec.Versions.Kubelet)
+				if err != nil {
+					return nil, fmt.Errorf("failed to fetch cloud-config: %v", err)
+				}
 			}
 
 			CACert, err := resources.GetCACert(kubeconfig)
@@ -120,7 +124,6 @@ func OperatingSystemConfigCreator(
 				Kubeconfig:            kubeconfigStr,
 				CloudConfig:           cloudConfig,
 				ContainerRuntime:      containerRuntime,
-				ContainerdVersion:     containerdVersion,
 				CloudProviderName:     cloudProviderName,
 				CRIToolsVersion:       criToolsVersion,
 				ExternalCloudProvider: externalCloudProvider,
@@ -185,7 +188,6 @@ type filesData struct {
 	Kubeconfig            string
 	CloudConfig           string
 	ContainerRuntime      string
-	ContainerdVersion     string
 	CRIToolsVersion       string
 	CloudProviderName     osmv1alpha1.CloudProvider
 	NetworkConfig         *providerconfigtypes.NetworkConfig
diff --git a/pkg/controllers/osc/testdata/osp-rhel.yaml b/pkg/controllers/osc/testdata/osp-rhel.yaml
index fb51783a..b147bac2 100644
--- a/pkg/controllers/osc/testdata/osp-rhel.yaml
+++ b/pkg/controllers/osc/testdata/osp-rhel.yaml
@@ -73,7 +73,7 @@ spec:
           EnvironmentFile=-/etc/environment
           EOF
 
-          yum install -y containerd.io-{{ .ContainerdVersion }}* yum-plugin-versionlock
+          yum install -y containerd.io-1.4* yum-plugin-versionlock
           yum versionlock add containerd.io
 
           systemctl daemon-reload
diff --git a/pkg/controllers/osc/testdata/osp-ubuntu-20.04.yaml b/pkg/controllers/osc/testdata/osp-ubuntu-20.04.yaml
index 0539835d..4917af76 100644
--- a/pkg/controllers/osc/testdata/osp-ubuntu-20.04.yaml
+++ b/pkg/controllers/osc/testdata/osp-ubuntu-20.04.yaml
@@ -78,7 +78,7 @@ spec:
           EnvironmentFile=-/etc/environment
           EOF
 
-          apt-get install -y --allow-downgrades containerd.io={{ .ContainerdVersion }}*
+          apt-get install -y --allow-downgrades containerd.io=1.4*
           apt-mark hold containerd.io
 
           systemctl daemon-reload
diff --git a/pkg/providerconfig/types.go b/pkg/providerconfig/types.go
deleted file mode 100644
index 25fcf360..00000000
--- a/pkg/providerconfig/types.go
+++ /dev/null
@@ -1,47 +0,0 @@
-/*
-Copyright 2021 The Operating System Manager contributors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package providerconfig
-
-import "k8s.io/apimachinery/pkg/runtime"
-
-type CloudProvider string
-
-const (
-	CloudProviderAWS          CloudProvider = "aws"
-	CloudProviderAzure        CloudProvider = "azure"
-	CloudProviderDigitalocean CloudProvider = "digitalocean"
-	CloudProviderGoogle       CloudProvider = "gce"
-	CloudProviderHetzner      CloudProvider = "hetzner"
-	CloudProviderKubeVirt     CloudProvider = "kubevirt"
-	CloudProviderLinode       CloudProvider = "linode"
-	CloudProviderOpenstack    CloudProvider = "openstack"
-	CloudProviderPacket       CloudProvider = "packet"
-	CloudProviderVsphere      CloudProvider = "vsphere"
-	CloudProviderFake         CloudProvider = "fake"
-	CloudProviderAlibaba      CloudProvider = "alibaba"
-	CloudProviderAnexia       CloudProvider = "anexia"
-	CloudProviderScaleway     CloudProvider = "scaleway"
-	CloudProviderBaremetal    CloudProvider = "baremetal"
-	CloudProviderExternal     CloudProvider = "external"
-)
-
-type Config struct {
-	SSHPublicKeys []string `json:"sshPublicKeys"`
-
-	CloudProvider     CloudProvider        `json:"cloudProvider"`
-	CloudProviderSpec runtime.RawExtension `json:"cloudProviderSpec"`
-}