Fix openshift conformance test

bindata/manifests/daemon/daemonset.yaml

@@ -12,6 +12,8 @@ spec:
       app: sriov-network-config-daemon
   updateStrategy:
     type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 33%
   template:
     metadata:
       labels:
@@ -28,6 +30,7 @@ spec:
       tolerations:
       - operator: Exists
       serviceAccountName: sriov-network-config-daemon
+      priorityClassName: "system-node-critical"
       containers:
       - name: sriov-network-config-daemon
         image: {{.Image}}
@@ -49,6 +52,10 @@ spec:
                 fieldPath: metadata.namespace
           - name: CLUSTER_TYPE
             value: "{{.ClusterType}}"
+        resources:
+          requests:
+            cpu: 100m
+            memory: 100Mi
         volumeMounts:
         - name: host
           mountPath: /host

bindata/manifests/operator-webhook/server.yaml

@@ -16,12 +16,15 @@ spec:
       app: operator-webhook
   updateStrategy:
     type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 33%
   template:
     metadata:
       labels:
         app: operator-webhook
     spec:
       serviceAccountName: operator-webhook-sa
+      priorityClassName: "system-cluster-critical"
       nodeSelector:
         beta.kubernetes.io/os: linux
         node-role.kubernetes.io/master:
@@ -49,6 +52,10 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
+        resources:
+          requests:
+            cpu: 10m
+            memory: 50Mi
         volumeMounts:
         - mountPath: /etc/tls
           name: tls

bindata/manifests/plugins/sriov-cni.yaml

@@ -14,6 +14,8 @@ spec:
       app: sriov-cni
   updateStrategy:
     type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 33%
   template:
     metadata:
       labels:
@@ -28,18 +30,27 @@ spec:
       tolerations:
       - operator: Exists
       serviceAccountName: sriov-cni
+      priorityClassName: "system-node-critical"
       containers:
       - name: sriov-cni
         image: {{.SRIOVCNIImage}}
         securityContext:
           privileged: true
+        resources:
+          requests:
+            cpu: 10m
+            memory: 10Mi
         volumeMounts:
         - name: cnibin
           mountPath: /host/opt/cni/bin
       - name: sriov-infiniband-cni
         image: {{.SRIOVInfiniBandCNIImage}}
         securityContext:
           privileged: true
+        resources:
+          requests:
+            cpu: 10m
+            memory: 10Mi
         volumeMounts:
         - name: cnibin
           mountPath: /host/opt/cni/bin

bindata/manifests/plugins/sriov-device-plugin.yaml

@@ -14,6 +14,8 @@ spec:
       app: sriov-device-plugin
   updateStrategy:
     type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 33%
   template:
     metadata:
       labels:
@@ -29,6 +31,7 @@ spec:
       tolerations:
       - operator: Exists
       serviceAccountName: sriov-device-plugin
+      priorityClassName: "system-node-critical"
       containers:
       - name: sriov-device-plugin
         image: {{.SRIOVDevicePluginImage}}
@@ -43,6 +46,10 @@ spec:
               fieldPath: spec.nodeName
         securityContext:
           privileged: true
+        resources:
+          requests:
+            cpu: 10m
+            memory: 50Mi
         volumeMounts:
         - name: devicesock
           mountPath: /var/lib/kubelet/

bindata/manifests/webhook/server.yaml

@@ -16,6 +16,8 @@ spec:
       app: network-resources-injector
   updateStrategy:
     type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 33%
   template:
     metadata:
       labels:
@@ -25,6 +27,7 @@ spec:
         openshift.io/component: network
     spec:
       serviceAccountName: network-resources-injector-sa
+      priorityClassName: "system-cluster-critical"
       nodeSelector:
         beta.kubernetes.io/os: linux
         node-role.kubernetes.io/master:
@@ -53,6 +56,10 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
+        resources:
+          requests:
+            cpu: 10m
+            memory: 50Mi
         volumeMounts:
         - mountPath: /etc/tls
           name: tls

deploy/operator.yaml

@@ -7,6 +7,10 @@ spec:
   selector:
     matchLabels:
       name: sriov-network-operator
+  updateStrategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 33%
   template:
     metadata:
       labels:
@@ -19,13 +23,18 @@ spec:
         key: node-role.kubernetes.io/master
         operator: Exists
       serviceAccountName: sriov-network-operator
+      priorityClassName: "system-node-critical"
       containers:
         - name: sriov-network-operator
           # Replace this with the built image name
           image: $SRIOV_NETWORK_OPERATOR_IMAGE
           command:
           - sriov-network-operator
           imagePullPolicy: IfNotPresent
+          resources:
+            requests:
+              cpu: 100m
+              memory: 100Mi
           env:
             - name: WATCH_NAMESPACE
               valueFrom:

deployment/sriov-network-operator/templates/operator.yaml

@@ -9,6 +9,10 @@ spec:
   selector:
     matchLabels:
       name: sriov-network-operator
+  updateStrategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 33%
   template:
     metadata:
       labels:
@@ -23,12 +27,17 @@ spec:
       {{- toYaml . | nindent 8 }}
       {{- end }}
       serviceAccountName: {{ include "sriov-network-operator.fullname" . }}
+      priorityClassName: "system-node-critical"
       containers:
         - name: {{ include "sriov-network-operator.fullname" . }}
           image: {{ .Values.images.operator }}
           command:
             - sriov-network-operator
           imagePullPolicy: IfNotPresent
+          resources:
+            requests:
+              cpu: 100m
+              memory: 100Mi
           env:
             - name: WATCH_NAMESPACE
               valueFrom: