Add tolerations to spire-server hook pods (#742)

Applies the tolerations in the spire-server chart to the pods created
by the hooks. Previously they were only applied to the pods of the
server itself.

Signed-off-by: Alec Wilson <[email protected]>
This commit is contained in:
Alec Wilson
2026-02-09 00:32:56 +00:00
committed by GitHub
parent 7d2664544d
commit 86a806f3c6
4 changed files with 16 additions and 0 deletions
@@ -58,6 +58,10 @@ spec:
metadata:
name: {{ include "spire-server.fullname" . }}-post-install
spec:
{{- with .Values.tolerations }}
tolerations:
{{- toYaml . | nindent 8 }}
{{- end }}
restartPolicy: Never
serviceAccountName: {{ include "spire-server.serviceAccountName" . }}-post-install
securityContext:
@@ -58,6 +58,10 @@ spec:
metadata:
name: {{ include "spire-server.fullname" . }}-post-upgrade
spec:
{{- with .Values.tolerations }}
tolerations:
{{- toYaml . | nindent 8 }}
{{- end }}
restartPolicy: Never
serviceAccountName: {{ include "spire-server.serviceAccountName" . }}-post-upgrade
securityContext:
@@ -61,6 +61,10 @@ spec:
metadata:
name: {{ include "spire-server.fullname" . }}-pre-delete
spec:
{{- with .Values.tolerations }}
tolerations:
{{- toYaml . | nindent 8 }}
{{- end }}
restartPolicy: Never
serviceAccountName: {{ include "spire-server.serviceAccountName" . }}-pre-delete
securityContext:
@@ -58,6 +58,10 @@ spec:
metadata:
name: {{ include "spire-server.fullname" . }}-pre-upgrade
spec:
{{- with .Values.tolerations }}
tolerations:
{{- toYaml . | nindent 8 }}
{{- end }}
restartPolicy: Never
serviceAccountName: {{ include "spire-server.serviceAccountName" . }}-pre-upgrade
securityContext: