feat: add infra node toleration by default

- Fixes #459
CrowdStrike · Dec 22, 2023 · ef8c8f9 · ef8c8f9
1 parent b6d783f
commit ef8c8f9
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/api/falcon/v1alpha1/falconnodesensor_types.go b/api/falcon/v1alpha1/falconnodesensor_types.go
@@ -35,7 +35,7 @@ type FalconNodeSensorSpec struct {
 // +k8s:openapi-gen=true
 type FalconNodeSensorConfig struct {
 	// Specifies tolerations for custom taints. Defaults to allowing scheduling on all nodes.
-	// +kubebuilder:default:={{key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule"}, {key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule"}}
+	// +kubebuilder:default:={{key: "node-role.kubernetes.io/master", operator: "Exists", effect: "NoSchedule"}, {key: "node-role.kubernetes.io/control-plane", operator: "Exists", effect: "NoSchedule"}, {key: "node-role.kubernetes.io/infra", operator: "Exists", effect: "NoSchedule"}}
 	// +operator-sdk:csv:customresourcedefinitions:type=spec,order=4
 	Tolerations []corev1.Toleration `json:"tolerations,omitempty"`
 

diff --git a/config/crd/bases/falcon.crowdstrike.com_falconnodesensors.yaml b/config/crd/bases/falcon.crowdstrike.com_falconnodesensors.yaml
@@ -464,6 +464,9 @@ spec:
                     - effect: NoSchedule
                       key: node-role.kubernetes.io/control-plane
                       operator: Exists
+                    - effect: NoSchedule
+                      key: node-role.kubernetes.io/infra
+                      operator: Exists
                     description: Specifies tolerations for custom taints. Defaults
                       to allowing scheduling on all nodes.
                     items:

diff --git a/deploy/falcon-operator.yaml b/deploy/falcon-operator.yaml
@@ -3021,6 +3021,9 @@ spec:
                     - effect: NoSchedule
                       key: node-role.kubernetes.io/control-plane
                       operator: Exists
+                    - effect: NoSchedule
+                      key: node-role.kubernetes.io/infra
+                      operator: Exists
                     description: Specifies tolerations for custom taints. Defaults
                       to allowing scheduling on all nodes.
                     items: