diff --git a/deploy/charts/trust-manager/README.md b/deploy/charts/trust-manager/README.md index 4b5eb36e..523fca2c 100644 --- a/deploy/charts/trust-manager/README.md +++ b/deploy/charts/trust-manager/README.md @@ -58,6 +58,7 @@ Kubernetes: `>= 1.25.0-0` | imagePullSecrets | list | `[]` | For Private docker registries, authentication is needed. Registry secrets are applied to the service account | | namespace | string | `""` | The namespace to install trust-manager into. If not set, the namespace of the release will be used. This is helpful when installing trust-manager as a chart dependency (sub chart) | | nodeSelector | object | `{"kubernetes.io/os":"linux"}` | Configure the nodeSelector; defaults to any Linux node (trust-manager doesn't support Windows nodes) | +| priorityClassName | string | `""` | Configure the priority class of the pod; see https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass | | replicaCount | int | `1` | Number of replicas of trust-manager to run. | | resources | object | `{}` | | | secretTargets.authorizedSecrets | list | `[]` | A list of secret names which trust-manager will be permitted to read and write across all namespaces. These will be the only allowable Secrets that can be used as targets. If the list is empty (and authorizedSecretsAll is false), trust-manager will not be able to write to secrets and will only be able to read secrets in the trust namespace for use as sources. | diff --git a/deploy/charts/trust-manager/templates/deployment.yaml b/deploy/charts/trust-manager/templates/deployment.yaml index 62c7e884..8ffcedd8 100644 --- a/deploy/charts/trust-manager/templates/deployment.yaml +++ b/deploy/charts/trust-manager/templates/deployment.yaml @@ -89,6 +89,9 @@ spec: seccompProfile: type: RuntimeDefault {{- end }} + {{- with .Values.priorityClassName }} + priorityClassName: "{{ . }}" + {{- end }} {{- with .Values.nodeSelector }} nodeSelector: {{- toYaml . | nindent 8 }} diff --git a/deploy/charts/trust-manager/values.yaml b/deploy/charts/trust-manager/values.yaml index 6b4ffc5d..0c5966aa 100644 --- a/deploy/charts/trust-manager/values.yaml +++ b/deploy/charts/trust-manager/values.yaml @@ -130,6 +130,9 @@ resources: {} # cpu: 100m # memory: 128Mi +# -- Configure the priority class of the pod; see https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass +priorityClassName: "" + # -- Configure the nodeSelector; defaults to any Linux node (trust-manager doesn't support Windows nodes) nodeSelector: kubernetes.io/os: linux