diff --git a/charts/spire/charts/spiffe-csi-driver/README.md b/charts/spire/charts/spiffe-csi-driver/README.md index 03ee62c..e8ca746 100644 --- a/charts/spire/charts/spiffe-csi-driver/README.md +++ b/charts/spire/charts/spiffe-csi-driver/README.md @@ -26,6 +26,7 @@ A Helm chart to install the SPIFFE CSI driver. | nodeSelector."kubernetes.io/arch" | string | `"amd64"` | | | podAnnotations | object | `{}` | | | podSecurityContext | object | `{}` | | +| priorityClassName | string | `""` | Priority class assigned to daemonset pods | | resources | object | `{}` | | | securityContext.privileged | bool | `true` | | | securityContext.readOnlyRootFilesystem | bool | `true` | | diff --git a/charts/spire/charts/spiffe-csi-driver/templates/daemonset.yaml b/charts/spire/charts/spiffe-csi-driver/templates/daemonset.yaml index 6a681df..339f728 100644 --- a/charts/spire/charts/spiffe-csi-driver/templates/daemonset.yaml +++ b/charts/spire/charts/spiffe-csi-driver/templates/daemonset.yaml @@ -25,6 +25,9 @@ spec: nodeSelector: {{- toYaml . | nindent 8 }} {{- end }} + {{- if .Values.priorityClassName }} + priorityClassName: {{ .Values.priorityClassName }} + {{- end }} containers: # This is the container which runs the SPIFFE CSI driver. - name: {{ .Chart.Name }} diff --git a/charts/spire/charts/spiffe-csi-driver/values.yaml b/charts/spire/charts/spiffe-csi-driver/values.yaml index b6be7ee..fa6efc1 100644 --- a/charts/spire/charts/spiffe-csi-driver/values.yaml +++ b/charts/spire/charts/spiffe-csi-driver/values.yaml @@ -63,3 +63,6 @@ nodeDriverRegistrar: # limits: # cpu: 100m # memory: 64Mi + +# -- Priority class assigned to daemonset pods +priorityClassName: "" diff --git a/charts/spire/charts/spire-agent/README.md b/charts/spire/charts/spire-agent/README.md index d2cb3a7..6fadeb9 100644 --- a/charts/spire/charts/spire-agent/README.md +++ b/charts/spire/charts/spire-agent/README.md @@ -24,6 +24,7 @@ A Helm chart to install the SPIRE agent. | nodeSelector."kubernetes.io/arch" | string | `"amd64"` | | | podAnnotations | object | `{}` | | | podSecurityContext | object | `{}` | | +| priorityClassName | string | `""` | Priority class assigned to daemonset pods | | resources | object | `{}` | | | securityContext | object | `{}` | | | server.port | int | `8081` | | diff --git a/charts/spire/charts/spire-agent/templates/daemonset.yaml b/charts/spire/charts/spire-agent/templates/daemonset.yaml index 4506adb..57a81f2 100644 --- a/charts/spire/charts/spire-agent/templates/daemonset.yaml +++ b/charts/spire/charts/spire-agent/templates/daemonset.yaml @@ -30,6 +30,9 @@ spec: serviceAccountName: {{ include "spire-agent.serviceAccountName" . }} securityContext: {{- toYaml .Values.podSecurityContext | nindent 8 }} + {{- if .Values.priorityClassName }} + priorityClassName: {{ .Values.priorityClassName }} + {{- end }} initContainers: - name: init # This is a small image with wait-for-it, choose whatever image diff --git a/charts/spire/charts/spire-agent/values.yaml b/charts/spire/charts/spire-agent/values.yaml index fd227da..dda6fe3 100644 --- a/charts/spire/charts/spire-agent/values.yaml +++ b/charts/spire/charts/spire-agent/values.yaml @@ -84,3 +84,6 @@ telemetry: prometheus: enabled: false port: 9988 + +# -- Priority class assigned to daemonset pods +priorityClassName: ""