Merge pull request #476 from ingvagabund/deploy-pdb-for-oauth-apiserver

bug 1998031: Deploy PDB to prevent more than one replica going unavailable
openshift · Sep 1, 2021 · b6c02e6 · b6c02e6
2 parents 1b6ef29 + f3baff8
commit b6c02e6
Show file tree

Hide file tree

Showing 3 changed files with 43 additions and 0 deletions.
diff --git a/bindata/oauth-apiserver/oauth-apiserver-pdb.yaml b/bindata/oauth-apiserver/oauth-apiserver-pdb.yaml
@@ -0,0 +1,11 @@
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: oauth-apiserver-pdb
+  namespace: openshift-oauth-apiserver
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app: openshift-oauth-apiserver
+      apiserver: "true"
diff --git a/pkg/operator/assets/bindata.go b/pkg/operator/assets/bindata.go
diff --git a/pkg/operator/starter.go b/pkg/operator/starter.go
@@ -565,6 +565,7 @@ func prepareOauthAPIServerOperator(ctx context.Context, controllerContext *contr
 			"oauth-apiserver/sa.yaml",
 			"oauth-apiserver/RBAC/useroauthaccesstokens_binding.yaml",
 			"oauth-apiserver/RBAC/useroauthaccesstokens_clusterrole.yaml",
+			"oauth-apiserver/oauth-apiserver-pdb.yaml",
 		},
 		operatorCtx.kubeInformersForNamespaces,
 		operatorCtx.kubeClient,