From a085f40758160271648f8b2f42c59e200898151e Mon Sep 17 00:00:00 2001 From: Connor Catlett Date: Mon, 19 Dec 2022 16:54:27 +0000 Subject: [PATCH] Update kustomize manifests with helm chart changes Signed-off-by: Connor Catlett --- deploy/kubernetes/base/controller.yaml | 57 ++++++++++++++++++++++++++ deploy/kubernetes/base/node.yaml | 21 ++++++++++ 2 files changed, 78 insertions(+) diff --git a/deploy/kubernetes/base/controller.yaml b/deploy/kubernetes/base/controller.yaml index 37c1969956..3b7366753b 100644 --- a/deploy/kubernetes/base/controller.yaml +++ b/deploy/kubernetes/base/controller.yaml @@ -9,6 +9,10 @@ metadata: app.kubernetes.io/name: aws-ebs-csi-driver spec: replicas: 2 + strategy: + rollingUpdate: + maxUnavailable: 1 + type: RollingUpdate selector: matchLabels: app: ebs-csi-controller @@ -33,6 +37,17 @@ spec: values: - fargate weight: 1 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: app + operator: In + values: + - ebs-csi-controller + topologyKey: kubernetes.io/hostname + weight: 100 tolerations: - key: CriticalAddonsOnly operator: Exists @@ -102,6 +117,13 @@ spec: timeoutSeconds: 3 periodSeconds: 10 failureThreshold: 5 + resources: + limits: + cpu: 100m + memory: 256Mi + requests: + cpu: 10m + memory: 40Mi securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true @@ -122,6 +144,13 @@ spec: volumeMounts: - name: socket-dir mountPath: /var/lib/csi/sockets/pluginproxy/ + resources: + limits: + cpu: 100m + memory: 256Mi + requests: + cpu: 10m + memory: 40Mi securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true @@ -139,6 +168,13 @@ spec: volumeMounts: - name: socket-dir mountPath: /var/lib/csi/sockets/pluginproxy/ + resources: + limits: + cpu: 100m + memory: 256Mi + requests: + cpu: 10m + memory: 40Mi securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true @@ -155,6 +191,13 @@ spec: volumeMounts: - name: socket-dir mountPath: /var/lib/csi/sockets/pluginproxy/ + resources: + limits: + cpu: 100m + memory: 256Mi + requests: + cpu: 10m + memory: 40Mi securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true @@ -172,6 +215,13 @@ spec: volumeMounts: - name: socket-dir mountPath: /var/lib/csi/sockets/pluginproxy/ + resources: + limits: + cpu: 100m + memory: 256Mi + requests: + cpu: 10m + memory: 40Mi securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true @@ -184,6 +234,13 @@ spec: volumeMounts: - name: socket-dir mountPath: /csi + resources: + limits: + cpu: 100m + memory: 256Mi + requests: + cpu: 10m + memory: 40Mi securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true diff --git a/deploy/kubernetes/base/node.yaml b/deploy/kubernetes/base/node.yaml index d3df86fe91..0dea5b5ce1 100644 --- a/deploy/kubernetes/base/node.yaml +++ b/deploy/kubernetes/base/node.yaml @@ -79,6 +79,13 @@ spec: timeoutSeconds: 3 periodSeconds: 10 failureThreshold: 5 + resources: + limits: + cpu: 100m + memory: 256Mi + requests: + cpu: 10m + memory: 40Mi securityContext: privileged: true readOnlyRootFilesystem: true @@ -100,6 +107,13 @@ spec: mountPath: /csi - name: registration-dir mountPath: /registration + resources: + limits: + cpu: 100m + memory: 256Mi + requests: + cpu: 10m + memory: 40Mi securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true @@ -112,6 +126,13 @@ spec: volumeMounts: - name: plugin-dir mountPath: /csi + resources: + limits: + cpu: 100m + memory: 256Mi + requests: + cpu: 10m + memory: 40Mi securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true