feat: configure scheduler on controller-manager and audit pods

Signed-off-by: Gergely Soti <[email protected]>
open-policy-agent · Sep 24, 2024 · 5a375e5 · 5a375e5
1 parent 0a4851a
commit 5a375e5
Show file tree

Hide file tree

Showing 8 changed files with 336 additions and 326 deletions.
diff --git a/cmd/build/helmify/kustomize-for-helm.yaml b/cmd/build/helmify/kustomize-for-helm.yaml
@@ -148,6 +148,7 @@ spec:
       hostNetwork: HELMSUBST_DEPLOYMENT_CONTROLLER_MANAGER_HOST_NETWORK
       dnsPolicy: HELMSUBST_DEPLOYMENT_CONTROLLER_MANAGER_DNS_POLICY
       serviceAccountName: HELMSUBST_DEPLOYMENT_CONTROLLER_MANAGER_SERVICE_ACCOUNT_NAME
+      schedulerName: HELMSUBST_DEPLOYMENT_SCHEDULER_NAME
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -228,6 +229,7 @@ spec:
       hostNetwork: HELMSUBST_DEPLOYMENT_AUDIT_HOST_NETWORK
       dnsPolicy: HELMSUBST_DEPLOYMENT_AUDIT_DNS_POLICY
       serviceAccountName: HELMSUBST_DEPLOYMENT_AUDIT_SERVICE_ACCOUNT_NAME
+      schedulerName: HELMSUBST_DEPLOYMENT_SCHEDULER_NAME
 ---
 apiVersion: v1
 kind: Secret

diff --git a/cmd/build/helmify/replacements.go b/cmd/build/helmify/replacements.go
@@ -1,6 +1,8 @@
 package main
 
 var replacements = map[string]string{
+    `HELMSUBST_DEPLOYMENT_SCHEDULER_NAME`: `{{ .Values.schedulerName }}`,
+
 	`HELMSUBST_DEPLOYMENT_CONTROLLER_MANAGER_CONTAINER_RESOURCES: ""`: `{{- toYaml .Values.controllerManager.resources | nindent 10 }}`,
 
 	`HELMSUBST_DEPLOYMENT_AUDIT_CONTAINER_RESOURCES: ""`: `{{- toYaml .Values.audit.resources | nindent 10 }}`,

diff --git a/cmd/build/helmify/static/README.md b/cmd/build/helmify/static/README.md
diff --git a/cmd/build/helmify/static/values.yaml b/cmd/build/helmify/static/values.yaml
@@ -303,3 +303,4 @@ externalCertInjection:
 serviceAccount:
   gatekeeperAdmin:
     create: true
+schedulerName: default-scheduler
diff --git a/manifest_staging/charts/gatekeeper/README.md b/manifest_staging/charts/gatekeeper/README.md
diff --git a/manifest_staging/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml b/manifest_staging/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml
@@ -162,6 +162,7 @@ spec:
       {{- if .Values.audit.priorityClassName }}
       priorityClassName:  {{ .Values.audit.priorityClassName }}
       {{- end }}
+      schedulerName: {{ .Values.schedulerName }}
       securityContext:
         {{- toYaml .Values.audit.podSecurityContext | nindent 8 }}
       serviceAccountName: {{ .Values.audit.serviceAccount.name }}

diff --git a/manifest_staging/charts/gatekeeper/templates/gatekeeper-controller-manager-deployment.yaml b/manifest_staging/charts/gatekeeper/templates/gatekeeper-controller-manager-deployment.yaml
@@ -179,6 +179,7 @@ spec:
       {{- if .Values.controllerManager.priorityClassName }}
       priorityClassName:  {{ .Values.controllerManager.priorityClassName }}
       {{- end }}
+      schedulerName: {{ .Values.schedulerName }}
       securityContext:
         {{- toYaml .Values.controllerManager.podSecurityContext | nindent 8 }}
       serviceAccountName: {{ .Values.controllerManager.serviceAccount.name }}

diff --git a/manifest_staging/charts/gatekeeper/values.yaml b/manifest_staging/charts/gatekeeper/values.yaml
@@ -303,3 +303,4 @@ externalCertInjection:
 serviceAccount:
   gatekeeperAdmin:
     create: true
+schedulerName: default-scheduler