fix: make the webhook tolerations configurable

Signed-off-by: Cosmin Cojocar <gcojocar@adobe.com>
kubernetes-sigs · Apr 13, 2022 · fc2b176 · fc2b176
1 parent ac82a2e
commit fc2b176
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/internal/pkg/manager/spod/bindata/webhook.go b/internal/pkg/manager/spod/bindata/webhook.go
@@ -123,9 +123,13 @@ func GetWebhook(
 	image string,
 	pullPolicy corev1.PullPolicy,
 	caInjectType CAInjectType,
+	tolerations []corev1.Toleration,
 ) *Webhook {
 	deployment := webhookDeployment.DeepCopy()
 	deployment.Namespace = namespace
+	if len(tolerations) > 0 {
+		deployment.Spec.Template.Spec.Tolerations = tolerations
+	}
 
 	ctr := &deployment.Spec.Template.Spec.Containers[0]
 	ctr.Image = image

diff --git a/internal/pkg/manager/spod/spod_controller.go b/internal/pkg/manager/spod/spod_controller.go
@@ -157,7 +157,8 @@ func (r *ReconcileSPOd) Reconcile(_ context.Context, req reconcile.Request) (rec
 	}
 	configuredSPOd := r.getConfiguredSPOd(spod, image, pullPolicy, caInjectType)
 
-	webhook := bindata.GetWebhook(r.log, r.namespace, spod.Spec.WebhookOpts, image, pullPolicy, caInjectType)
+	webhook := bindata.GetWebhook(r.log, r.namespace, spod.Spec.WebhookOpts, image,
+		pullPolicy, caInjectType, spod.Spec.Tolerations)
 	metricsService := bindata.GetMetricsService(r.namespace, caInjectType)
 
 	var certManagerResources *bindata.CertManagerResources