feat: Add priority classes

Author: Alan Christie

parameters-local.yaml

@@ -4,10 +4,14 @@
 # Here we assume you have setup /etc/hosts so that the following hostnames
 # resolve to the IP address of the host running the cluster:
 #
+#  - keycloak
 #  - rabbitmq
 
 k8s_kubeconfig: "{{ lookup('env', 'KUBECONFIG') }}"
 
+core_deploy_cluster_issuer: no
+infra_priority_class: im-application-critical
+
 ingress_class: "{{ lookup('env', 'IM_DEV_INGRESS_CLASS') | default('nginx', True)}}"
 
 ic_state: absent

roles/core/defaults/main.yaml

@@ -4,6 +4,7 @@
 # One of 'present' or 'absent'.
 core_state: present
 
+core_deploy_priority_classes: yes
 # If deploying (or un-deploying) priority classes
 # do we also include the default?
 core_include_default_priority_class: yes

roles/core/templates/pc-im.yaml.j2

@@ -87,8 +87,8 @@ kind: PriorityClass
 apiVersion: scheduling.k8s.io/v1
 metadata:
   name: im-default
-value: 83003000
+value: 83001000
 globalDefault: true
 description: >-
-  The Priority Class adopted when another is not specified.
+  The Priority Class adopted for new objects when another is not specified.
 {% endif %}

roles/infrastructure/defaults/main.yaml

@@ -5,6 +5,8 @@
 # If we un-deploy the entire infrastructure deployment is removed -
 # the namespace, database, PSPs etc.
 infra_state: present
+# The priority class applied to DB, keycloak and RabbitMQ (if set)
+infra_priority_class: ''
 
 # If set, use this kubernetes config, rather than K8S credentials.
 # You would set this if executing the playbooks locally, i.e. not from

roles/infrastructure/templates/statefulset-keycloak.yaml.j2

@@ -16,6 +16,9 @@ spec:
       labels:
         app: keycloak
     spec:
+{% if infra_priority_class %}
+      priorityClassName: {{ infra_priority_class }}
+{% endif %}
       serviceAccountName: {{ infra_namespace_service_account }}
 
       # A 'preferred' (not guaranteed)

roles/infrastructure/templates/statefulset-postgres.yaml.j2

@@ -16,6 +16,9 @@ spec:
       labels:
         app: database
     spec:
+{% if infra_priority_class %}
+      priorityClassName: {{ infra_priority_class }}
+{% endif %}
       serviceAccountName: {{ infra_namespace_service_account }}
 
       # A 'preferred' (not guaranteed)

roles/infrastructure/templates/statefulset-rabbitmq.yaml.j2

@@ -14,6 +14,9 @@ spec:
       labels:
         name: rabbitmq
     spec:
+{% if infra_priority_class %}
+      priorityClassName: {{ infra_priority_class }}
+{% endif %}
       serviceAccountName: {{ infra_namespace_service_account }}
 
       # We must have a 'core' node