fix: promote system addons to system-cluster-critical (#2533)

Azure · Jan 8, 2020 · 02bc287 · 02bc287
1 parent 17099c5
commit 02bc287
Show file tree

Hide file tree

Showing 13 changed files with 76 additions and 52 deletions.
diff --git a/parts/k8s/addons/1.16/kubernetesmasteraddons-aad-pod-identity-deployment.yaml b/parts/k8s/addons/1.16/kubernetesmasteraddons-aad-pod-identity-deployment.yaml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: aad-pod-id-nmi-service-account
-  namespace: default
+  namespace: kube-system
   labels:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
@@ -76,7 +76,7 @@ metadata:
 subjects:
 - kind: ServiceAccount
   name: aad-pod-id-nmi-service-account
-  namespace: default
+  namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: aad-pod-id-nmi-role
@@ -92,7 +92,7 @@ metadata:
     tier: node
     k8s-app: aad-pod-id
   name: nmi
-  namespace: default
+  namespace: kube-system
 spec:
   selector:
     matchLabels:
@@ -104,6 +104,7 @@ spec:
         component: nmi
         tier: node
     spec:
+      priorityClassName: system-cluster-critical
       serviceAccountName: aad-pod-id-nmi-service-account
       hostNetwork: true
       containers:
@@ -141,7 +142,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: aad-pod-id-mic-service-account
-  namespace: default
+  namespace: kube-system
   labels:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
@@ -181,7 +182,7 @@ metadata:
 subjects:
 - kind: ServiceAccount
   name: aad-pod-id-mic-service-account
-  namespace: default
+  namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: aad-pod-id-mic-role
@@ -196,7 +197,7 @@ metadata:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
   name: mic
-  namespace: default
+  namespace: kube-system
 spec:
   selector:
     matchLabels:

diff --git a/parts/k8s/addons/1.16/kubernetesmasteraddons-blobfuse-flexvolume-installer.yaml b/parts/k8s/addons/1.16/kubernetesmasteraddons-blobfuse-flexvolume-installer.yaml
@@ -16,6 +16,7 @@ spec:
         name: blobfuse
         kubernetes.io/cluster-service: "true"
     spec:
+      priorityClassName: system-cluster-critical
       containers:
       - name: blobfuse-flexvol-installer
         image: {{ContainerImage "blobfuse-flexvolume"}}

diff --git a/parts/k8s/addons/1.16/kubernetesmasteraddons-keyvault-flexvolume-installer.yaml b/parts/k8s/addons/1.16/kubernetesmasteraddons-keyvault-flexvolume-installer.yaml
@@ -20,6 +20,7 @@ spec:
         kubernetes.io/cluster-service: "true"
         addonmanager.kubernetes.io/mode: Reconcile
     spec:
+      priorityClassName: system-cluster-critical
       tolerations:
       containers:
       - name: keyvault-flexvolume

diff --git a/parts/k8s/addons/1.17/kubernetesmasteraddons-aad-pod-identity-deployment.yaml b/parts/k8s/addons/1.17/kubernetesmasteraddons-aad-pod-identity-deployment.yaml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: aad-pod-id-nmi-service-account
-  namespace: default
+  namespace: kube-system
   labels:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
@@ -76,7 +76,7 @@ metadata:
 subjects:
 - kind: ServiceAccount
   name: aad-pod-id-nmi-service-account
-  namespace: default
+  namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: aad-pod-id-nmi-role
@@ -92,7 +92,7 @@ metadata:
     tier: node
     k8s-app: aad-pod-id
   name: nmi
-  namespace: default
+  namespace: kube-system
 spec:
   selector:
     matchLabels:
@@ -106,6 +106,7 @@ spec:
       annotations:
         cluster-autoscaler.kubernetes.io/daemonset-pod: "true"
     spec:
+      priorityClassName: system-cluster-critical
       serviceAccountName: aad-pod-id-nmi-service-account
       hostNetwork: true
       containers:
@@ -143,7 +144,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: aad-pod-id-mic-service-account
-  namespace: default
+  namespace: kube-system
   labels:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
@@ -183,7 +184,7 @@ metadata:
 subjects:
 - kind: ServiceAccount
   name: aad-pod-id-mic-service-account
-  namespace: default
+  namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: aad-pod-id-mic-role
@@ -198,7 +199,7 @@ metadata:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
   name: mic
-  namespace: default
+  namespace: kube-system
 spec:
   selector:
     matchLabels:

diff --git a/parts/k8s/addons/1.17/kubernetesmasteraddons-blobfuse-flexvolume-installer.yaml b/parts/k8s/addons/1.17/kubernetesmasteraddons-blobfuse-flexvolume-installer.yaml
@@ -18,6 +18,7 @@ spec:
       annotations:
         cluster-autoscaler.kubernetes.io/daemonset-pod: "true"
     spec:
+      priorityClassName: system-cluster-critical
       containers:
       - name: blobfuse-flexvol-installer
         image: {{ContainerImage "blobfuse-flexvolume"}}

diff --git a/parts/k8s/addons/1.17/kubernetesmasteraddons-keyvault-flexvolume-installer.yaml b/parts/k8s/addons/1.17/kubernetesmasteraddons-keyvault-flexvolume-installer.yaml
@@ -22,6 +22,7 @@ spec:
       annotations:
         cluster-autoscaler.kubernetes.io/daemonset-pod: "true"
     spec:
+      priorityClassName: system-cluster-critical
       tolerations:
       containers:
       - name: keyvault-flexvolume

diff --git a/parts/k8s/addons/1.18/kubernetesmasteraddons-aad-pod-identity-deployment.yaml b/parts/k8s/addons/1.18/kubernetesmasteraddons-aad-pod-identity-deployment.yaml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: aad-pod-id-nmi-service-account
-  namespace: default
+  namespace: kube-system
   labels:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
@@ -76,7 +76,7 @@ metadata:
 subjects:
 - kind: ServiceAccount
   name: aad-pod-id-nmi-service-account
-  namespace: default
+  namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: aad-pod-id-nmi-role
@@ -92,7 +92,7 @@ metadata:
     tier: node
     k8s-app: aad-pod-id
   name: nmi
-  namespace: default
+  namespace: kube-system
 spec:
   selector:
     matchLabels:
@@ -106,6 +106,7 @@ spec:
       annotations:
         cluster-autoscaler.kubernetes.io/daemonset-pod: "true"
     spec:
+      priorityClassName: system-cluster-critical
       serviceAccountName: aad-pod-id-nmi-service-account
       hostNetwork: true
       containers:
@@ -143,7 +144,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: aad-pod-id-mic-service-account
-  namespace: default
+  namespace: kube-system
   labels:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
@@ -183,7 +184,7 @@ metadata:
 subjects:
 - kind: ServiceAccount
   name: aad-pod-id-mic-service-account
-  namespace: default
+  namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: aad-pod-id-mic-role
@@ -198,7 +199,7 @@ metadata:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
   name: mic
-  namespace: default
+  namespace: kube-system
 spec:
   selector:
     matchLabels:

diff --git a/parts/k8s/addons/1.18/kubernetesmasteraddons-blobfuse-flexvolume-installer.yaml b/parts/k8s/addons/1.18/kubernetesmasteraddons-blobfuse-flexvolume-installer.yaml
@@ -18,6 +18,7 @@ spec:
       annotations:
         cluster-autoscaler.kubernetes.io/daemonset-pod: "true"
     spec:
+      priorityClassName: system-cluster-critical
       containers:
       - name: blobfuse-flexvol-installer
         image: {{ContainerImage "blobfuse-flexvolume"}}

diff --git a/parts/k8s/addons/1.18/kubernetesmasteraddons-keyvault-flexvolume-installer.yaml b/parts/k8s/addons/1.18/kubernetesmasteraddons-keyvault-flexvolume-installer.yaml
@@ -22,6 +22,7 @@ spec:
       annotations:
         cluster-autoscaler.kubernetes.io/daemonset-pod: "true"
     spec:
+      priorityClassName: system-cluster-critical
       tolerations:
       containers:
       - name: keyvault-flexvolume

diff --git a/parts/k8s/addons/kubernetesmasteraddons-aad-pod-identity-deployment.yaml b/parts/k8s/addons/kubernetesmasteraddons-aad-pod-identity-deployment.yaml
@@ -2,7 +2,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: aad-pod-id-nmi-service-account
-  namespace: default
+  namespace: kube-system
   labels:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
@@ -76,7 +76,7 @@ metadata:
 subjects:
 - kind: ServiceAccount
   name: aad-pod-id-nmi-service-account
-  namespace: default
+  namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: aad-pod-id-nmi-role
@@ -92,14 +92,15 @@ metadata:
     tier: node
     k8s-app: aad-pod-id
   name: nmi
-  namespace: default
+  namespace: kube-system
 spec:
   template:
     metadata:
       labels:
         component: nmi
         tier: node
     spec:
+      priorityClassName: system-cluster-critical
       serviceAccountName: aad-pod-id-nmi-service-account
       hostNetwork: true
       containers:
@@ -137,7 +138,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: aad-pod-id-mic-service-account
-  namespace: default
+  namespace: kube-system
   labels:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
@@ -177,7 +178,7 @@ metadata:
 subjects:
 - kind: ServiceAccount
   name: aad-pod-id-mic-service-account
-  namespace: default
+  namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: aad-pod-id-mic-role
@@ -192,7 +193,7 @@ metadata:
     kubernetes.io/cluster-service: "true"
     addonmanager.kubernetes.io/mode: Reconcile
   name: mic
-  namespace: default
+  namespace: kube-system
 spec:
   template:
     metadata:

diff --git a/parts/k8s/addons/kubernetesmasteraddons-blobfuse-flexvolume-installer.yaml b/parts/k8s/addons/kubernetesmasteraddons-blobfuse-flexvolume-installer.yaml
@@ -16,6 +16,7 @@ spec:
         name: blobfuse
         kubernetes.io/cluster-service: "true"
     spec:
+      priorityClassName: system-cluster-critical
       containers:
       - name: blobfuse-flexvol-installer
         image: {{ContainerImage "blobfuse-flexvolume"}}
@@ -31,11 +32,11 @@ spec:
         - name: volplugins
           mountPath: /etc/kubernetes/volumeplugins/
         - name: varlog
-          mountPath: /var/log/      
+          mountPath: /var/log/
       volumes:
       - name: varlog
         hostPath:
-          path: /var/log/              
+          path: /var/log/
       - name: volplugins
         hostPath:
           path: /etc/kubernetes/volumeplugins/

diff --git a/parts/k8s/addons/kubernetesmasteraddons-keyvault-flexvolume-installer.yaml b/parts/k8s/addons/kubernetesmasteraddons-keyvault-flexvolume-installer.yaml
@@ -17,6 +17,7 @@ spec:
         kubernetes.io/cluster-service: "true"
         addonmanager.kubernetes.io/mode: Reconcile
     spec:
+      priorityClassName: system-cluster-critical
       tolerations:
       containers:
       - name: keyvault-flexvolume