diff --git a/deploy/charts/trust-manager/README.md b/deploy/charts/trust-manager/README.md index 7706ba57..0d9e4b23 100644 --- a/deploy/charts/trust-manager/README.md +++ b/deploy/charts/trust-manager/README.md @@ -57,6 +57,7 @@ Kubernetes: `>= 1.25.0-0` | imagePullSecrets | list | `[]` | For Private docker registries, authentication is needed. Registry secrets are applied to the service account | | nodeSelector | object | `{"kubernetes.io/os":"linux"}` | Configure the nodeSelector; defaults to any Linux node (trust-manager doesn't support Windows nodes) | | replicaCount | int | `1` | Number of replicas of trust-manager to run. | +| priorityClassName | string | `""` | Configure the priority class of the pod; see https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass | | resources | object | `{}` | | | tolerations | list | `[]` | List of Kubernetes Tolerations; see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#toleration-v1-core | | topologySpreadConstraints | list | `[]` | List of Kubernetes TopologySpreadConstraints; see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#topologyspreadconstraint-v1-core | diff --git a/deploy/charts/trust-manager/templates/deployment.yaml b/deploy/charts/trust-manager/templates/deployment.yaml index 1b6eed00..5d9a7786 100644 --- a/deploy/charts/trust-manager/templates/deployment.yaml +++ b/deploy/charts/trust-manager/templates/deployment.yaml @@ -87,6 +87,9 @@ spec: seccompProfile: type: RuntimeDefault {{- end }} + {{- with .Values.priorityClassName }} + priorityClassName: "{{ . }}" + {{- end }} {{- with .Values.nodeSelector }} nodeSelector: {{- toYaml . | nindent 8 }} diff --git a/deploy/charts/trust-manager/values.yaml b/deploy/charts/trust-manager/values.yaml index a47bf158..0751cf3e 100644 --- a/deploy/charts/trust-manager/values.yaml +++ b/deploy/charts/trust-manager/values.yaml @@ -111,6 +111,9 @@ resources: {} # cpu: 100m # memory: 128Mi +# -- Configure the priority class of the pod; see https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass +priorityClassName: "" + # -- Configure the nodeSelector; defaults to any Linux node (trust-manager doesn't support Windows nodes) nodeSelector: kubernetes.io/os: linux