deployments: add priorityClass to SGX since it serves runtime plugins

Signed-off-by: Mikko Ylinen <[email protected]>
intel · May 8, 2024 · 0b70ce4 · 0b70ce4
1 parent 1780fbe
commit 0b70ce4
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/deployments/sgx_plugin/base/intel-sgx-plugin.yaml b/deployments/sgx_plugin/base/intel-sgx-plugin.yaml
@@ -13,6 +13,7 @@ spec:
       labels:
         app: intel-sgx-plugin
     spec:
+      priorityClassName: system-node-critical
       automountServiceAccountToken: false
       containers:
       - name: intel-sgx-plugin

diff --git a/pkg/controllers/sgx/controller_test.go b/pkg/controllers/sgx/controller_test.go
@@ -63,6 +63,7 @@ func (c *controller) newDaemonSetExpected(rawObj client.Object) *apps.DaemonSet
 					},
 				},
 				Spec: v1.PodSpec{
+					PriorityClassName:            "system-node-critical",
 					AutomountServiceAccountToken: &no,
 					Containers: []v1.Container{
 						{