Added support for reusing the webhook TLS certificate across differen…

…t deployments to prevent cases where operator takes too long to start up (#282)
otterize · Feb 13, 2025 · 2edc900 · 2edc900
1 parent c774a00
commit 2edc900
Show file tree

Hide file tree

Showing 8 changed files with 46 additions and 0 deletions.
diff --git a/credentials-operator/templates/credentials-operator-deployment.yaml b/credentials-operator/templates/credentials-operator-deployment.yaml
@@ -58,6 +58,9 @@ spec:
       affinity:
           {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{ if .Values.operator.priorityClassName }}
+      priorityClassName: {{ .Values.operator.priorityClassName }}
+      {{ end }}
       containers:
       - args:
         - --secure-listen-address=0.0.0.0:8443

diff --git a/credentials-operator/values.yaml b/credentials-operator/values.yaml
@@ -1,6 +1,7 @@
 operator:
   repository: otterize
   image: credentials-operator
+  priorityClassName:
   pullPolicy:
   podSecurityContext:
     fsGroup: 65532

diff --git a/intents-operator/templates/intents-operator-deployment.yaml b/intents-operator/templates/intents-operator-deployment.yaml
@@ -15,6 +15,11 @@ metadata:
   name: intents-operator-controller-manager
   namespace: {{ .Release.Namespace }}
 spec:
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
   replicas: 1
   selector:
     matchLabels:
@@ -64,6 +69,9 @@ spec:
       affinity:
           {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{ if .Values.operator.priorityClassName }}
+      priorityClassName: {{ .Values.operator.priorityClassName }}
+      {{ end }}
       containers:
       - command:
         - /manager

diff --git a/intents-operator/templates/intents-operator-manager-clusterrole.yaml b/intents-operator/templates/intents-operator-manager-clusterrole.yaml
@@ -54,6 +54,17 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resourceNames:
+  - intents-operator-webhook-cert
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - update
+  - watch
 - apiGroups:
   - ""
   resources:

diff --git a/intents-operator/templates/intents-operator-webhook-secret.yaml b/intents-operator/templates/intents-operator-webhook-secret.yaml
@@ -0,0 +1,18 @@
+apiVersion: v1
+type: Opaque
+kind: Secret
+metadata:
+  name: intents-operator-webhook-cert
+  labels:
+    {{- with .Values.global.commonLabels }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+    app.kubernetes.io/version: {{ .Chart.Version }}
+  annotations:
+    {{- with .Values.global.commonAnnotations }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+    app.kubernetes.io/version: {{ .Chart.Version }}
+data:
+  tls.crt: {{ "placeholder" | b64enc | quote }}
+  tls.key: {{ "placeholder" | b64enc | quote }}
diff --git a/intents-operator/values.yaml b/intents-operator/values.yaml
@@ -1,6 +1,7 @@
 operator:
   repository: otterize
   image: intents-operator
+  priorityClassName:
   pullPolicy:
   podSecurityContext:
     fsGroup: 65532

diff --git a/network-mapper/templates/mapper-deployment.yaml b/network-mapper/templates/mapper-deployment.yaml
@@ -52,6 +52,9 @@ spec:
       affinity:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{ if .Values.mapper.priorityClassName }}
+      priorityClassName: {{ .Values.mapper.priorityClassName }}
+      {{ end }}
       containers:
         - name: {{ template "otterize.mapper.fullName" . }}
           image: "{{ .Values.mapper.repository }}/{{ .Values.mapper.image }}:{{ default $.Chart.AppVersion .Values.mapper.tag }}"

diff --git a/network-mapper/values.yaml b/network-mapper/values.yaml
@@ -9,6 +9,7 @@ mapper:
   repository: otterize
   image: network-mapper
   pullPolicy:
+  priorityClassName:
   podSecurityContext:
     fsGroup: 65532
     runAsGroup: 65532