chore: add priorityClassName: system-node-critical to kube-system,… (A…

…zure#555)
juhacket · Mar 14, 2019 · c5a5de7 · c5a5de7
1 parent 0360058
commit c5a5de7
Show file tree

Hide file tree

Showing 18 changed files with 170 additions and 145 deletions.
diff --git a/parts/k8s/addons/1.10/kubernetesmasteraddons-calico-daemonset.yaml b/parts/k8s/addons/1.10/kubernetesmasteraddons-calico-daemonset.yaml
@@ -333,7 +333,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
-      priorityClassName: system-cluster-critical
+      priorityClassName: system-node-critical
       securityContext:
         supplementalGroups: [ 65534 ]
         fsGroup: 65534

diff --git a/parts/k8s/addons/1.10/kubernetesmasteraddons-kube-dns-deployment.yaml b/parts/k8s/addons/1.10/kubernetesmasteraddons-kube-dns-deployment.yaml
@@ -82,7 +82,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
-      priorityClassName: system-cluster-critical
+      priorityClassName: system-node-critical
       tolerations:
       - key: "CriticalAddonsOnly"
         operator: "Exists"

diff --git a/parts/k8s/addons/1.11/kubernetesmasteraddons-calico-daemonset.yaml b/parts/k8s/addons/1.11/kubernetesmasteraddons-calico-daemonset.yaml
@@ -333,7 +333,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
-      priorityClassName: system-cluster-critical
+      priorityClassName: system-node-critical
       securityContext:
         supplementalGroups: [ 65534 ]
         fsGroup: 65534

diff --git a/parts/k8s/addons/1.7/kubernetesmasteraddons-calico-daemonset.yaml b/parts/k8s/addons/1.7/kubernetesmasteraddons-calico-daemonset.yaml
@@ -333,7 +333,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
-      priorityClassName: system-cluster-critical
+      priorityClassName: system-node-critical
       securityContext:
         supplementalGroups: [ 65534 ]
         fsGroup: 65534

diff --git a/parts/k8s/addons/1.8/kubernetesmasteraddons-calico-daemonset.yaml b/parts/k8s/addons/1.8/kubernetesmasteraddons-calico-daemonset.yaml
@@ -333,7 +333,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
-      priorityClassName: system-cluster-critical
+      priorityClassName: system-node-critical
       securityContext:
         supplementalGroups: [ 65534 ]
         fsGroup: 65534

diff --git a/parts/k8s/addons/1.9/kubernetesmasteraddons-calico-daemonset.yaml b/parts/k8s/addons/1.9/kubernetesmasteraddons-calico-daemonset.yaml
@@ -333,7 +333,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
-      priorityClassName: system-cluster-critical
+      priorityClassName: system-node-critical
       securityContext:
         supplementalGroups: [ 65534 ]
         fsGroup: 65534

diff --git a/parts/k8s/addons/1.9/kubernetesmasteraddons-kube-dns-deployment.yaml b/parts/k8s/addons/1.9/kubernetesmasteraddons-kube-dns-deployment.yaml
@@ -82,6 +82,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
+      priorityClassName: system-node-critical
       tolerations:
       - key: "CriticalAddonsOnly"
         operator: "Exists"

diff --git a/parts/k8s/addons/coredns.yaml b/parts/k8s/addons/coredns.yaml
@@ -122,11 +122,16 @@ spec:
               topologyKey: kubernetes.io/hostname
             weight: 5
       serviceAccountName: coredns
+      priorityClassName: system-node-critical
       tolerations:
         - key: node-role.kubernetes.io/master
           effect: NoSchedule
         - key: CriticalAddonsOnly
           operator: "Exists"
+        - operator: "Exists"
+          effect: NoExecute
+        - operator: "Exists"
+          effect: NoSchedule
       nodeSelector:
         beta.kubernetes.io/os: linux
       containers:

diff --git a/parts/k8s/addons/kubernetesmasteraddons-azure-npm-daemonset.yaml b/parts/k8s/addons/kubernetesmasteraddons-azure-npm-daemonset.yaml
@@ -68,6 +68,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
+      priorityClassName: system-node-critical
       tolerations:
       - key: CriticalAddonsOnly
         operator: Exists

diff --git a/parts/k8s/addons/kubernetesmasteraddons-calico-daemonset.yaml b/parts/k8s/addons/kubernetesmasteraddons-calico-daemonset.yaml
@@ -333,7 +333,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
-      priorityClassName: system-cluster-critical
+      priorityClassName: system-node-critical
       securityContext:
         supplementalGroups: [ 65534 ]
         fsGroup: 65534

diff --git a/parts/k8s/addons/kubernetesmasteraddons-flannel-daemonset.yaml b/parts/k8s/addons/kubernetesmasteraddons-flannel-daemonset.yaml
@@ -57,6 +57,7 @@ spec:
       nodeSelector:
         beta.kubernetes.io/arch: amd64
         beta.kubernetes.io/os: linux
+      priorityClassName: system-node-critical
       tolerations:
         - key: node.kubernetes.io/not-ready
           operator: Exists

diff --git a/parts/k8s/addons/kubernetesmasteraddons-kube-dns-deployment.yaml b/parts/k8s/addons/kubernetesmasteraddons-kube-dns-deployment.yaml
@@ -83,7 +83,7 @@ spec:
         scheduler.alpha.kubernetes.io/critical-pod: ''
         seccomp.security.alpha.kubernetes.io/pod: 'docker/default'
     spec:
-      priorityClassName: system-cluster-critical
+      priorityClassName: system-node-critical
       tolerations:
       - key: CriticalAddonsOnly
         operator: Exists

diff --git a/parts/k8s/addons/kubernetesmasteraddons-kube-proxy-daemonset.yaml b/parts/k8s/addons/kubernetesmasteraddons-kube-proxy-daemonset.yaml
@@ -14,11 +14,16 @@ spec:
         component: kube-proxy
         tier: node
     spec:
+      priorityClassName: system-node-critical
       tolerations:
       - key: node-role.kubernetes.io/master
         operator: Equal
         value: "true"
         effect: NoSchedule
+      - operator: "Exists"
+        effect: NoExecute
+      - operator: "Exists"
+        effect: NoSchedule
       containers:
       - command:
         - /hyperkube

diff --git a/parts/k8s/containeraddons/azure-cni-networkmonitor.yaml b/parts/k8s/containeraddons/azure-cni-networkmonitor.yaml
@@ -17,13 +17,18 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
+      priorityClassName: system-node-critical
       tolerations:
       - key: CriticalAddonsOnly
         operator: Exists
       - key: node-role.kubernetes.io/master
         operator: Equal
         value: "true"
         effect: NoSchedule
+      - operator: "Exists"
+        effect: NoExecute
+      - operator: "Exists"
+        effect: NoSchedule
       nodeSelector:
         beta.kubernetes.io/os: linux
       containers:

diff --git a/parts/k8s/containeraddons/ip-masq-agent.yaml b/parts/k8s/containeraddons/ip-masq-agent.yaml
@@ -15,6 +15,7 @@ spec:
         k8s-app: azure-ip-masq-agent
         tier: node
     spec:
+      priorityClassName: system-node-critical
       hostNetwork: true
       nodeSelector:
         beta.kubernetes.io/os: linux
@@ -25,6 +26,10 @@ spec:
         operator: Equal
         value: "true"
         effect: NoSchedule
+      - operator: "Exists"
+        effect: NoExecute
+      - operator: "Exists"
+        effect: NoSchedule
       containers:
       - name: azure-ip-masq-agent
         image: {{ContainerImage "ip-masq-agent"}}

diff --git a/parts/k8s/containeraddons/kubernetesmasteraddons-cluster-autoscaler-deployment.yaml b/parts/k8s/containeraddons/kubernetesmasteraddons-cluster-autoscaler-deployment.yaml
@@ -142,6 +142,7 @@ spec:
       labels:
         app: cluster-autoscaler
     spec:
+      priorityClassName: system-node-critical
       <hostNet>
       serviceAccountName: cluster-autoscaler
       tolerations:

diff --git a/parts/k8s/containeraddons/kubernetesmasteraddons-heapster-deployment.yaml b/parts/k8s/containeraddons/kubernetesmasteraddons-heapster-deployment.yaml
@@ -104,7 +104,7 @@ spec:
       annotations:
         scheduler.alpha.kubernetes.io/critical-pod: ''
     spec:
-      priorityClassName: system-cluster-critical
+      priorityClassName: system-node-critical
       containers:
         - image: {{ContainerImage "heapster"}}
           imagePullPolicy: IfNotPresent