Add priorityclass system-cluster-critical to operator

Ensure this component has precedence over user deployed workload.
projectsyn · Apr 17, 2024 · 895bcf6 · 895bcf6
1 parent 5934e0d
commit 895bcf6
Show file tree

Hide file tree

Showing 6 changed files with 27 additions and 0 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -22,6 +22,7 @@ parameters:
       enableMonitoring: ${patch_operator:monitoring_enabled}
 
     monitoring_enabled: true
+    priority_class: system-cluster-critical
 
     alerts:
       PatchReconcileSlow:

diff --git a/class/patch-operator.yml b/class/patch-operator.yml
@@ -34,3 +34,6 @@ parameters:
         - type: jsonnet
           filter: postprocess/fixup-helm-chart.jsonnet
           path: patch-operator/01_helm_chart/patch-operator/templates
+        - type: jsonnet
+          filter: postprocess/add-priorityclass.jsonnet
+          path: patch-operator/01_helm_chart/patch-operator/templates
diff --git a/postprocess/add-priorityclass.jsonnet b/postprocess/add-priorityclass.jsonnet
@@ -0,0 +1,20 @@
+local com = import 'lib/commodore.libjsonnet';
+local inv = com.inventory();
+// The hiera parameters for the component
+local params = inv.parameters.patch_operator;
+
+local priotityclassPatch = {
+  spec+: {
+    template+: {
+      spec+: {
+        priorityClassName: params.priority_class,
+      },
+    },
+  },
+};
+
+local deployFile = com.yaml_load(std.extVar('output_path') + '/' + 'manager.yaml');
+
+{
+  manager: deployFile + priotityclassPatch,
+}
diff --git a/...efaults/patch-operator/patch-operator/01_helm_chart/patch-operator/templates/manager.yaml b/...efaults/patch-operator/patch-operator/01_helm_chart/patch-operator/templates/manager.yaml
@@ -73,6 +73,7 @@ spec:
             - mountPath: /tmp/k8s-webhook-server/serving-certs
               name: webhook-server-cert
               readOnly: true
+      priorityClassName: system-cluster-critical
       serviceAccountName: controller-manager
       volumes:
         - name: patch-operator-certs

diff --git a/...ficates/patch-operator/patch-operator/01_helm_chart/patch-operator/templates/manager.yaml b/...ficates/patch-operator/patch-operator/01_helm_chart/patch-operator/templates/manager.yaml
@@ -73,6 +73,7 @@ spec:
             - mountPath: /tmp/k8s-webhook-server/serving-certs
               name: webhook-server-cert
               readOnly: true
+      priorityClassName: system-cluster-critical
       serviceAccountName: controller-manager
       volumes:
         - name: patch-operator-certs

diff --git a/...den/lib/patch-operator/patch-operator/01_helm_chart/patch-operator/templates/manager.yaml b/...den/lib/patch-operator/patch-operator/01_helm_chart/patch-operator/templates/manager.yaml
@@ -73,6 +73,7 @@ spec:
             - mountPath: /tmp/k8s-webhook-server/serving-certs
               name: webhook-server-cert
               readOnly: true
+      priorityClassName: system-cluster-critical
       serviceAccountName: controller-manager
       volumes:
         - name: patch-operator-certs