Skip to content

Commit 9724e90

Browse files
irbyirby
authored
Merge pull request #72 from slammajamma28/priority-class
Add priorityClassName
2 parents bcef427 + 5369f77 commit 9724e90

3 files changed

Lines changed: 33 additions & 24 deletions

File tree

‎deploy/charts/command-cert-manager-issuer/README.md‎

Lines changed: 28 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -63,29 +63,33 @@ helm install command-cert-manager-issuer command-issuer/command-cert-manager-iss
6363

6464
The following table lists the configurable parameters of the `command-cert-manager-issuer` chart and their default values.
6565

66-
| Parameter | Description | Default |
67-
|----------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------|
68-
| `replicaCount` | Number of replica command-cert-manager-issuers to run | `1` |
69-
| `image.repository` | Image repository | `ghcr.io/keyfactor/command-cert-manager-issuer` |
70-
| `image.pullPolicy` | Image pull policy | `IfNotPresent` |
71-
| `image.tag` | Image tag | `""` |
72-
| `imagePullSecrets` | Image pull secrets | `[]` |
73-
| `nameOverride` | Name override | `""` |
74-
| `fullnameOverride` | Full name override | `""` |
75-
| `crd.create` | Specifies if CRDs will be created | `true` |
76-
| `crd.annotations` | Annotations to add to the CRD | `{}` |
77-
| `serviceAccount.create` | Specifies if a service account should be created | `true` |
78-
| `serviceAccount.annotations` | Annotations to add to the service account | `{}` |
79-
| `serviceAccount.name` | Name of the service account to use | `""` (uses the fullname template if `create` is true) |
66+
| Parameter | Description | Default |
67+
|----------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------|
68+
| `replicaCount` | Number of replica command-cert-manager-issuers to run | `1` |
69+
| `image.repository` | Image repository | `ghcr.io/keyfactor/command-cert-manager-issuer` |
70+
| `image.pullPolicy` | Image pull policy | `IfNotPresent` |
71+
| `image.tag` | Image tag | `""` |
72+
| `imagePullSecrets` | Image pull secrets | `[]` |
73+
| `nameOverride` | Name override | `""` |
74+
| `fullnameOverride` | Full name override | `""` |
75+
| `secretConfig.useClusterRoleForSecretAccess` | Specifies if the ServiceAccount should be granted access to the Secret resource using a ClusterRole | `false` |
76+
| `secretConfig.useClusterRoleForConfigMapAccess` | Specifies if the ServiceAccount should be granted access to the ConfigMap resource using a ClusterRole | `false` |
77+
| `crd.create` | Specifies if CRDs will be created | `true` |
78+
| `crd.annotations` | Annotations to add to the CRD | `{}` |
79+
| `serviceAccount.create` | Specifies if a service account should be created | `true` |
80+
| `serviceAccount.labels` | Labels to add to the service account | `{}` |
81+
| `serviceAccount.annotations` | Annotations to add to the service account | `{}` |
82+
| `serviceAccount.name` | Name of the service account to use | `""` (uses the fullname template if `create` is true) |
8083
| `serviceAccount.automountServiceAccountToken` | Controls whether Kubernetes automatically mounts the service account token into the pod. When `false` (default), a projected volume is used instead, giving explicit control over token expiration and file permissions. Setting to `true` uses Kubernetes' default token mount, which has no expiration and is less restrictive — only recommended if the projected volume approach causes compatibility issues. | `false` |
8184
| `serviceAccount.projectedTokenVolume.expirationSeconds` | Lifetime in seconds of the projected service account token. The kubelet will rotate the token before it expires. Only applies when `automountServiceAccountToken` is `false`. | `3607` |
82-
| `serviceAccount.projectedTokenVolume.defaultMode` | File permission bits for the projected token volume. Only applies when `automountServiceAccountToken` is `false`. | `0444` |
83-
| `podAnnotations` | Annotations for the pod | `{}` |
84-
| `podSecurityContext.runAsNonRoot` | Run pod as non-root | `true` |
85-
| `securityContext` | Security context for the pod | `{}` (with commented out options) |
86-
| `resources` | CPU/Memory resource requests/limits | `{}` (with commented out options) |
87-
| `nodeSelector` | Node labels for pod assignment | `{}` |
88-
| `tolerations` | Tolerations for pod assignment | `[]` |
89-
| `env` | Environmental variables set for pod | `{}` |
90-
| `secretConfig.useClusterRoleForSecretAccess` | Specifies if the ServiceAccount should be granted access to the Secret resource using a ClusterRole | `false` |
91-
| `defaultHealthCheckInterval` | Specifies the default health check interval for issuers | `""` (uses the default in the code which is 10 minutes) |
85+
| `serviceAccount.projectedTokenVolume.defaultMode` | File permission bits for the projected token volume. Only applies when `automountServiceAccountToken` is `false`. | `0444` |
86+
| `podLabels` | Labels for the pod | `{}` |
87+
| `podAnnotations` | Annotations for the pod | `{}` |
88+
| `podSecurityContext.runAsNonRoot` | Run pod as non-root | `true` |
89+
| `securityContext` | Security context for the pod | `{}` (with commented out options) |
90+
| `resources` | CPU/Memory resource requests/limits | `{}` (with commented out options) |
91+
| `nodeSelector` | Node labels for pod assignment | `{}` |
92+
| `tolerations` | Tolerations for pod assignment | `[]` |
93+
| `priorityClassName` | Priority class to set for pod | `""` |
94+
| `defaultHealthCheckInterval` | Specifies the default health check interval for issuers | `""` (uses the default in the code which is 10 minutes)|
95+
| `env` | Environmental variables set for pod | `{}` |

‎deploy/charts/command-cert-manager-issuer/templates/deployment.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -121,4 +121,7 @@ spec:
121121
tolerations:
122122
{{- toYaml . | nindent 8 }}
123123
{{- end }}
124+
{{- if .Values.priorityClassName }}
125+
priorityClassName: {{ .Values.priorityClassName }}
126+
{{- end }}
124127
terminationGracePeriodSeconds: 10

‎deploy/charts/command-cert-manager-issuer/values.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,8 @@ nodeSelector: {}
8989

9090
tolerations: []
9191

92+
priorityClassName: ""
93+
9294
defaultHealthCheckInterval: ""
9395

9496
env: {}

0 commit comments

Comments
 (0)