feat(node-servant-applier): updated default bcj policy and affinity

Signed-off-by: Armin Schlegel <armin.schlegel@gmx.de>
edgefarm · Jan 29, 2024 · 873e572 · 873e572
1 parent 334e475
commit 873e572
Show file tree

Hide file tree

Showing 2 changed files with 36 additions and 12 deletions.
diff --git a/charts/node-servant-applier/templates/rbac.yaml b/charts/node-servant-applier/templates/rbac.yaml
@@ -42,3 +42,32 @@ subjects:
 - kind: ServiceAccount
   name: node-servant-applier
   namespace: kube-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: node-servant-applier
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - nodes
+  verbs:
+  - list
+  - watch
+  - get
+  - patch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: node-servant-applier
+subjects:
+- kind: ServiceAccount
+  name: node-servant-applier
+  namespace: kube-system
+  apiGroup: ""
+roleRef:
+  kind: ClusterRole
+  name: node-servant-applier
+  apiGroup: rbac.authorization.k8s.io
diff --git a/charts/node-servant-applier/values.yaml b/charts/node-servant-applier/values.yaml
@@ -14,17 +14,12 @@ tolerations:
     key: edgefarm.io
 
 affinity:
-  {}
-  # nodeAffinity:
-  #   requiredDuringSchedulingIgnoredDuringExecution:
-  #     nodeSelectorTerms:
-  #       - matchExpressions:
-  #           - key: openyurt.io/is-edge-worker
-  #             operator: In
-  #             values:
-  #               - "true"
+  nodeAffinity:
+    requiredDuringSchedulingIgnoredDuringExecution:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: node.edgefarm.io/to-be-converted
+              operator: Exists
 
 completionPolicy:
-  {}
-  # type: Always
-  # ttlSecondsAfterFinished: 60
+  type: Never