diff --git a/deployments/sgx_plugin/base/intel-sgx-plugin.yaml b/deployments/sgx_plugin/base/intel-sgx-plugin.yaml index 9e4020289..a1857a0bf 100644 --- a/deployments/sgx_plugin/base/intel-sgx-plugin.yaml +++ b/deployments/sgx_plugin/base/intel-sgx-plugin.yaml @@ -13,6 +13,7 @@ spec: labels: app: intel-sgx-plugin spec: + priorityClassName: system-node-critical automountServiceAccountToken: false containers: - name: intel-sgx-plugin diff --git a/pkg/controllers/sgx/controller_test.go b/pkg/controllers/sgx/controller_test.go index eb7916ba6..d838ee9a6 100644 --- a/pkg/controllers/sgx/controller_test.go +++ b/pkg/controllers/sgx/controller_test.go @@ -63,6 +63,7 @@ func (c *controller) newDaemonSetExpected(rawObj client.Object) *apps.DaemonSet }, }, Spec: v1.PodSpec{ + PriorityClassName: "system-node-critical", AutomountServiceAccountToken: &no, Containers: []v1.Container{ {