Skip to content
This repository has been archived by the owner on Oct 24, 2023. It is now read-only.

chore: add priorityClassName: system-node-critical to kube-system,… #555

Merged
Merged
Original file line number Diff line number Diff line change
Expand Up @@ -333,7 +333,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
securityContext:
supplementalGroups: [ 65534 ]
fsGroup: 65534
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
tolerations:
- key: "CriticalAddonsOnly"
operator: "Exists"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -333,7 +333,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
securityContext:
supplementalGroups: [ 65534 ]
fsGroup: 65534
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -333,7 +333,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
securityContext:
supplementalGroups: [ 65534 ]
fsGroup: 65534
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -333,7 +333,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
securityContext:
supplementalGroups: [ 65534 ]
fsGroup: 65534
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -333,7 +333,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
securityContext:
supplementalGroups: [ 65534 ]
fsGroup: 65534
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-node-critical
tolerations:
- key: "CriticalAddonsOnly"
operator: "Exists"
Expand Down
5 changes: 5 additions & 0 deletions parts/k8s/addons/coredns.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -122,11 +122,16 @@ spec:
topologyKey: kubernetes.io/hostname
weight: 5
serviceAccountName: coredns
priorityClassName: system-node-critical
tolerations:
- key: node-role.kubernetes.io/master
effect: NoSchedule
- key: CriticalAddonsOnly
operator: "Exists"
- operator: "Exists"
effect: NoExecute
- operator: "Exists"
effect: NoSchedule
nodeSelector:
beta.kubernetes.io/os: linux
containers:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-node-critical
tolerations:
- key: CriticalAddonsOnly
operator: Exists
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -333,7 +333,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
securityContext:
supplementalGroups: [ 65534 ]
fsGroup: 65534
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,7 @@ spec:
nodeSelector:
beta.kubernetes.io/arch: amd64
beta.kubernetes.io/os: linux
priorityClassName: system-node-critical
tolerations:
- key: node.kubernetes.io/not-ready
operator: Exists
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,7 @@ spec:
scheduler.alpha.kubernetes.io/critical-pod: ''
seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
spec:
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
tolerations:
- key: CriticalAddonsOnly
operator: Exists
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,11 +14,16 @@ spec:
component: kube-proxy
tier: node
spec:
priorityClassName: system-node-critical
tolerations:
- key: node-role.kubernetes.io/master
operator: Equal
value: "true"
effect: NoSchedule
- operator: "Exists"
effect: NoExecute
- operator: "Exists"
effect: NoSchedule
containers:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is to ensure that we never schedule kube-proxy on master, correct?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's the opposite: it ensures that kube-proxy will always be able to be scheduled on any node, regardless of taint.

- command:
- /hyperkube
Expand Down
5 changes: 5 additions & 0 deletions parts/k8s/containeraddons/azure-cni-networkmonitor.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,18 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-node-critical
tolerations:
- key: CriticalAddonsOnly
operator: Exists
- key: node-role.kubernetes.io/master
operator: Equal
value: "true"
effect: NoSchedule
- operator: "Exists"
effect: NoExecute
- operator: "Exists"
effect: NoSchedule
nodeSelector:
palma21 marked this conversation as resolved.
Show resolved Hide resolved
beta.kubernetes.io/os: linux
containers:
Expand Down
5 changes: 5 additions & 0 deletions parts/k8s/containeraddons/ip-masq-agent.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@ spec:
k8s-app: azure-ip-masq-agent
tier: node
spec:
priorityClassName: system-node-critical
hostNetwork: true
nodeSelector:
beta.kubernetes.io/os: linux
Expand All @@ -25,6 +26,10 @@ spec:
operator: Equal
value: "true"
effect: NoSchedule
- operator: "Exists"
effect: NoExecute
- operator: "Exists"
effect: NoSchedule
containers:
- name: azure-ip-masq-agent
image: {{ContainerImage "ip-masq-agent"}}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -142,6 +142,7 @@ spec:
labels:
app: cluster-autoscaler
spec:
priorityClassName: system-node-critical
<hostNet>
serviceAccountName: cluster-autoscaler
tolerations:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -104,7 +104,7 @@ spec:
annotations:
scheduler.alpha.kubernetes.io/critical-pod: ''
spec:
priorityClassName: system-cluster-critical
priorityClassName: system-node-critical
containers:
- image: {{ContainerImage "heapster"}}
imagePullPolicy: IfNotPresent
Expand Down