Add control-plane NoSchedule tolerations on calico deployments

kubernetes-sigs · Feb 16, 2022 · f95a16e · f95a16e
1 parent f5a5c73
commit f95a16e
Show file tree

Hide file tree

Showing 6 changed files with 45 additions and 1 deletion.
diff --git a/templates/addons/calico-ipv6.yaml b/templates/addons/calico-ipv6.yaml
@@ -3702,6 +3702,8 @@ spec:
         operator: Exists
       - effect: NoSchedule
         key: node-role.kubernetes.io/master
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/control-plane
 ---
 apiVersion: apps/v1
 kind: Deployment

diff --git a/templates/addons/calico-ipv6/kustomization.yaml b/templates/addons/calico-ipv6/kustomization.yaml
@@ -12,3 +12,8 @@ patches:
     name: calico-node
     namespace: kube-system
   path: patches/calico-node.yaml
+- path: patches/control-plane-tolerations.yaml
+  target:
+    kind: Deployment
+    name: calico-kube-controllers
+    namespace: kube-system
diff --git a/templates/addons/calico-ipv6/patches/control-plane-tolerations.yaml b/templates/addons/calico-ipv6/patches/control-plane-tolerations.yaml
@@ -0,0 +1,15 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: calico-kube-controllers
+  namespace: kube-system
+spec:
+  template:
+    spec:
+      tolerations:
+      - key: CriticalAddonsOnly
+        operator: Exists
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/master
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/control-plane
diff --git a/templates/addons/calico.yaml b/templates/addons/calico.yaml
@@ -3716,6 +3716,8 @@ spec:
         operator: Exists
       - effect: NoSchedule
         key: node-role.kubernetes.io/master
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/control-plane
 ---
 apiVersion: policy/v1beta1
 kind: PodDisruptionBudget

diff --git a/templates/addons/calico/kustomization.yaml b/templates/addons/calico/kustomization.yaml
@@ -13,4 +13,9 @@ patches:
     kind: DaemonSet
     name: calico-node
     namespace: kube-system
-  path: patches/remove-aws-reference.yaml
+  path: patches/remove-aws-reference.yaml
+- path: patches/control-plane-tolerations.yaml
+  target:
+    kind: Deployment
+    name: calico-kube-controllers
+    namespace: kube-system
diff --git a/templates/addons/calico/patches/control-plane-tolerations.yaml b/templates/addons/calico/patches/control-plane-tolerations.yaml
@@ -0,0 +1,15 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: calico-kube-controllers
+  namespace: kube-system
+spec:
+  template:
+    spec:
+      tolerations:
+      - key: CriticalAddonsOnly
+        operator: Exists
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/master
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/control-plane