mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-04-18 02:06:52 +00:00
Code Activity

Add topologySpreadConstraints to helm charts

Browse source 
Signed-off-by: Ernesto R. C. Pereda <ernesto.cruz@alayacare.com>
This commit is contained in:
Ernesto R. C. Pereda 2021-07-06 15:29:46 -04:00
parent e74a5c803c
commit f691a93f03
No known key found for this signature in database
GPG key ID: 59C1D9A23BCD6629
3 changed files with 6 additions and 0 deletions

1
charts/kyverno/README.md
View file

@ -65,6 +65,7 @@ The following table lists the configurable parameters of the kyverno chart and t
| Parameter | Description | Default |
| ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `affinity` | node/pod affinities | `nil` |
| `topologySpreadConstraints` | node/pod topology spread constrains | `[]` |
| `createSelfSignedCert` | generate a self signed cert and certificate authority. Kyverno defaults to using kube-controller-manager CA-signed certificate or existing cert secret if false. | `false` |
| `config.existingConfig` | existing Kubernetes configmap to use for the resource filters configuration | `nil` |
| `config.resourceFilters` | list of resource types to be skipped by kyverno policy engine. See [documentation](https://kyverno.io/docs/installation/#resource-filters) for details | `[Event,*,*][*,kube-system,*][*,kube-public,*][*,kube-node-lease,*][Node,*,*][APIService,*,*][TokenReview,*,*][SubjectAccessReview,*,*][SelfSubjectAccessReview,*,*][*,kyverno,*][Binding,*,*][ReplicaSet,*,*][ReportChangeRequest,*,*][ClusterReportChangeRequest,*,*]` |

3
charts/kyverno/templates/deployment.yaml
View file

@ -35,6 +35,9 @@ spec:
{{- with .Values.tolerations }}
tolerations: {{ tpl (toYaml .) $ | nindent 8 }}
{{- end }}
{{- with .Values.topologySpreadConstraints }}
topologySpreadConstraints: {{ tpl (toYaml .) $ | nindent 8 }}
{{- end }}
serviceAccountName: {{ template "kyverno.serviceAccountName" . }}
{{- if .Values.priorityClassName }}
priorityClassName: {{ .Values.priorityClassName | quote }}

2
charts/kyverno/values.yaml
View file

@ -160,6 +160,8 @@ service:
nodePort:
annotations: {}
topologySpreadConstraints: []
metricsService:
create: true
type: ClusterIP