panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow to configure a priorityClassName for Daemonsets

Browse Source 
Signed-off-by: Marco Franssen <[email protected]>
This commit is contained in:
Marco Franssen
2023-02-27 08:09:00 -08:00
committed by kfox1111
parent ba41f04df5
commit f8cdec3f99
6 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spiffe-csi-driver/README.md
+1
View File
@@ -26,6 +26,7 @@ A Helm chart to install the SPIFFE CSI driver.
| nodeSelector."kubernetes.io/arch" | string | `"amd64"` | | | nodeSelector."kubernetes.io/arch" | string | `"amd64"` | |
| podAnnotations | object | `{}` | | | podAnnotations | object | `{}` | |
| podSecurityContext | object | `{}` | | | podSecurityContext | object | `{}` | |
| priorityClassName | string | `""` | Priority class assigned to daemonset pods |
| resources | object | `{}` | | | resources | object | `{}` | |
| securityContext.privileged | bool | `true` | | | securityContext.privileged | bool | `true` | |
| securityContext.readOnlyRootFilesystem | bool | `true` | | | securityContext.readOnlyRootFilesystem | bool | `true` | |
charts/spire/charts/spiffe-csi-driver/templates/daemonset.yaml
+3
View File
@@ -25,6 +25,9 @@ spec:
nodeSelector: nodeSelector:
{{- toYaml . | nindent 8 }} {{- toYaml . | nindent 8 }}
{{- end }} {{- end }}
{{- if .Values.priorityClassName }}
priorityClassName: {{ .Values.priorityClassName }}
{{- end }}
containers: containers:
# This is the container which runs the SPIFFE CSI driver. # This is the container which runs the SPIFFE CSI driver.
- name: {{ .Chart.Name }} - name: {{ .Chart.Name }}
charts/spire/charts/spiffe-csi-driver/values.yaml
+3
View File
@@ -63,3 +63,6 @@ nodeDriverRegistrar:
# limits: # limits:
# cpu: 100m # cpu: 100m
# memory: 64Mi # memory: 64Mi
# -- Priority class assigned to daemonset pods
priorityClassName: ""
charts/spire/charts/spire-agent/README.md
+1
View File
@@ -24,6 +24,7 @@ A Helm chart to install the SPIRE agent.
| nodeSelector."kubernetes.io/arch" | string | `"amd64"` | | | nodeSelector."kubernetes.io/arch" | string | `"amd64"` | |
| podAnnotations | object | `{}` | | | podAnnotations | object | `{}` | |
| podSecurityContext | object | `{}` | | | podSecurityContext | object | `{}` | |
| priorityClassName | string | `""` | Priority class assigned to daemonset pods |
| resources | object | `{}` | | | resources | object | `{}` | |
| securityContext | object | `{}` | | | securityContext | object | `{}` | |
| server.port | int | `8081` | | | server.port | int | `8081` | |
charts/spire/charts/spire-agent/templates/daemonset.yaml
+3
View File
@@ -30,6 +30,9 @@ spec:
serviceAccountName: {{ include "spire-agent.serviceAccountName" . }} serviceAccountName: {{ include "spire-agent.serviceAccountName" . }}
securityContext: securityContext:
{{- toYaml .Values.podSecurityContext | nindent 8 }} {{- toYaml .Values.podSecurityContext | nindent 8 }}
{{- if .Values.priorityClassName }}
priorityClassName: {{ .Values.priorityClassName }}
{{- end }}
initContainers: initContainers:
- name: init - name: init
# This is a small image with wait-for-it, choose whatever image # This is a small image with wait-for-it, choose whatever image
charts/spire/charts/spire-agent/values.yaml
+3
View File
@@ -84,3 +84,6 @@ telemetry:
prometheus: prometheus:
enabled: false enabled: false
port: 9988 port: 9988
# -- Priority class assigned to daemonset pods
priorityClassName: ""