Added support for reusing the webhook TLS certificate across different deployments to prevent cases where operator takes too long to start up

credentials-operator/templates/credentials-operator-deployment.yaml

@@ -58,6 +58,9 @@ spec:
       affinity:
           {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{ if .Values.operator.priorityClassName }}
+      priorityClassName: {{ .Values.operator.priorityClassName }}
+      {{ end }}
       containers:
       - args:
         - --secure-listen-address=0.0.0.0:8443

credentials-operator/values.yaml

@@ -1,6 +1,7 @@
 operator:
   repository: otterize
   image: credentials-operator
+  priorityClassName:
   pullPolicy:
   podSecurityContext:
     fsGroup: 65532

intents-operator/templates/intents-operator-deployment.yaml

@@ -15,6 +15,11 @@ metadata:
   name: intents-operator-controller-manager
   namespace: {{ .Release.Namespace }}
 spec:
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
   replicas: 1
   selector:
     matchLabels:
@@ -64,6 +69,9 @@ spec:
       affinity:
           {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{ if .Values.operator.priorityClassName }}
+      priorityClassName: {{ .Values.operator.priorityClassName }}
+      {{ end }}
       containers:
       - command:
         - /manager

intents-operator/templates/intents-operator-manager-clusterrole.yaml

@@ -54,6 +54,17 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resourceNames:
+  - intents-operator-webhook-cert
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - update
+  - watch
 - apiGroups:
   - ""
   resources:

intents-operator/templates/intents-operator-webhook-secret.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+type: Opaque
+kind: Secret
+metadata:
+  name: intents-operator-webhook-cert
+  labels:
+    {{- with .Values.global.commonLabels }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+    app.kubernetes.io/version: {{ .Chart.Version }}
+  annotations:
+    {{- with .Values.global.commonAnnotations }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+    app.kubernetes.io/version: {{ .Chart.Version }}
+data:
+  tls.crt: {{ "placeholder" | b64enc | quote }}
+  tls.key: {{ "placeholder" | b64enc | quote }}

intents-operator/values.yaml

@@ -1,6 +1,7 @@
 operator:
   repository: otterize
   image: intents-operator
+  priorityClassName:
   pullPolicy:
   podSecurityContext:
     fsGroup: 65532

network-mapper/templates/mapper-deployment.yaml

@@ -52,6 +52,9 @@ spec:
       affinity:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{ if .Values.mapper.priorityClassName }}
+      priorityClassName: {{ .Values.mapper.priorityClassName }}
+      {{ end }}
       containers:
         - name: {{ template "otterize.mapper.fullName" . }}
           image: "{{ .Values.mapper.repository }}/{{ .Values.mapper.image }}:{{ default $.Chart.AppVersion .Values.mapper.tag }}"

network-mapper/values.yaml

@@ -9,6 +9,7 @@ mapper:
   repository: otterize
   image: network-mapper
   pullPolicy:
+  priorityClassName:
   podSecurityContext:
     fsGroup: 65532
     runAsGroup: 65532