From 3ef83fd6188f6307ff34c3500bf2018a5f1063c7 Mon Sep 17 00:00:00 2001
From: James Sturtevant <jstur@microsoft.com>
Date: Thu, 3 Mar 2022 14:38:15 -0800
Subject: [PATCH] tolerate the control-plane taint

---
 admission-webhook/deploy/deploy-gmsa-webhook.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/admission-webhook/deploy/deploy-gmsa-webhook.sh b/admission-webhook/deploy/deploy-gmsa-webhook.sh
index d39a7336..3457a593 100755
--- a/admission-webhook/deploy/deploy-gmsa-webhook.sh
+++ b/admission-webhook/deploy/deploy-gmsa-webhook.sh
@@ -163,6 +163,9 @@ main() {
         TOLERATIONS='
       tolerations:
       - key: node-role.kubernetes.io/master
+        operator: Exists
+        effect: NoSchedule
+      - key: node-role.kubernetes.io/control-plane
         operator: Exists
         effect: NoSchedule'
     fi