-
Notifications
You must be signed in to change notification settings - Fork 324
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add tolerations
and nodeSelector
to Server ACL init jobs and nodeSelector
to Webhook cert manager
#1581
Conversation
cbb828b
to
4f9b49c
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good, just one comment about helm values.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry! A few more comments. I didn't notice these in my first review
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🎉
This solution is in response to an ask from a customer who wants to set
nodeSelector
for all Pods in their cluster. This adds that capability toserver-acl-init
jobs andwebhook-cert-manager
.Changes proposed in this PR:
global.acls.job
for configuringserver-acl-init
andserver-acl-init-cleanup
jobs.global.acls.job.tolerations
for setting tolerations onserver-acl-init
andserver-acl-init-cleanup
jobs.global.acls.job.nodeSelector
for setting the nodeSelector onserver-acl-init
andserver-acl-init-cleanup
jobs.webhookCertManager.nodeSelector
for setting the nodeSelector onwebhook-cert-manager-deployment
.How I've tested this PR:
server-acl-init
andwebhook-cert-manager
are deployed on a particular node. There is no anticipated reason why they shouldn't.How I expect reviewers to test this PR:
nodeSelector
.Checklist: