charts: update providers to support caa restarts

thejasn · thejasn · commit 10f23af057e4 · 2026-05-14T10:59:20.000+05:30
Add missing configs in helm charts to support caa restarts

Signed-off-by: Thejas N &lt;thn@redhat.com&gt;
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/alibabacloud.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/alibabacloud.yaml
@@ -61,6 +61,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # Pod VM instance type
     # (default: "ecs.g8i.xlarge")
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/aws.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/aws.yaml
@@ -65,6 +65,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # Pod VM ami id
     # (required)
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/azure.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/azure.yaml
@@ -89,6 +89,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # [EXPERIMENTAL] Comma separated CIDRs for local pod subnets
     # (default: "")
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/byom.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/byom.yaml
@@ -53,6 +53,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # [EXPERIMENTAL] Comma separated CIDRs for local pod subnets
     # (default: "")
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/docker.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/docker.yaml
@@ -78,6 +78,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # [EXPERIMENTAL] Comma separated CIDRs for local pod subnets
     # (default: "")
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/gcp.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/gcp.yaml
@@ -85,6 +85,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # Pod VM image name
     # (default: "")
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/ibmcloud.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/ibmcloud.yaml
@@ -109,6 +109,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # [EXPERIMENTAL] Comma separated CIDRs for local pod subnets
     # (default: "")
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/ibmcloudpowervs.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/ibmcloudpowervs.yaml
@@ -49,6 +49,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # [EXPERIMENTAL] Comma separated CIDRs for local pod subnets
     # (default: "")
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/libvirt.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/libvirt.yaml
@@ -90,6 +90,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # [EXPERIMENTAL] Comma separated CIDRs for local pod subnets
     # (default: "")
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/providers/vsphere.yaml b/src/cloud-api-adaptor/install/charts/peerpods/providers/vsphere.yaml
@@ -77,6 +77,7 @@ providerConfigs:
     # base directory for pod directories
     # (default: "")
     # PODS_DIR: ""
+    # TLS_MATERIAL_PATH: "/run/peerpod/tls-material.json"
 
     # Maximum timeout in minutes for establishing agent proxy connection
     # (default: "")
diff --git a/src/cloud-api-adaptor/install/charts/peerpods/templates/daemonset.yaml b/src/cloud-api-adaptor/install/charts/peerpods/templates/daemonset.yaml
@@ -97,6 +97,9 @@ spec:
         - mountPath: /var/run/secrets/tokens
           name: vault-token
 {{- end }}
+      # On shutdown CAA drains each sandbox's agent proxy (up to 30s each).
+      # With up to 10 peer pods per node, draining can take ~300s total.
+      terminationGracePeriodSeconds: 360
       hostNetwork: true
       dnsPolicy: ClusterFirstWithHostNet
       nodeSelector:
@@ -128,6 +131,7 @@ spec:
 {{- end }}
       - hostPath:
           path: /run/peerpod
+          type: DirectoryOrCreate
         name: pods-dir
       - hostPath:
           path: /run/netns
