Skip to content

Commit ecfeecf

Browse files
committed
Added new section about override scheduling feature
1 parent 3520204 commit ecfeecf

File tree

2 files changed

+73
-0
lines changed

2 files changed

+73
-0
lines changed
Lines changed: 71 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,71 @@
1+
// Module included in the following assemblies:
2+
//
3+
// * security/cert_manager_operator/cert-manager-customizing-api-fields.adoc
4+
5+
:_mod-docs-content-type: PROCEDURE
6+
[id="cert-manager-override-scheduling_{context}"]
7+
= Configuring Scheduling Overrides for CertManager Components
8+
9+
After installing the {cert-manager-operator}, you can configure the scheduling of {cert-manager} components by configuring the `overrideScheduling` field in the {cert-manager} custom resource. This allows you to define `nodeSelector` and `tolerations` for the `controllerConfig`, `webhookConfig`, and `cainjectorConfig` sections.
10+
11+
.Prerequisites
12+
13+
* You have access to the {product-title} cluster as a user with the `cluster-admin` role.
14+
* You have installed the {cert-manager-operator} 1.12.0 or later.
15+
16+
.Procedure
17+
18+
. To configure scheduling overrides, modify the {cert-manager} custom resource. Use the `overrideScheduling` field within `controllerConfig`, `webhookConfig`, or `cainjectorConfig` to specify `nodeSelector` and `tolerations` for the respective component.
19+
+
20+
.Example output
21+
[source,yaml]
22+
----
23+
apiVersion: operator.openshift.io/v1alpha1
24+
kind: CertManager
25+
metadata:
26+
name: cluster
27+
spec:
28+
controllerConfig:
29+
overrideScheduling:
30+
nodeSelector:
31+
<key1>: <value1> <1>
32+
<key2>: <value2>
33+
tolerations:
34+
- key: "<key1>" <1>
35+
operator: "Equal"
36+
value: "<value1>"
37+
effect: "NoSchedule"
38+
webhookConfig:
39+
overrideScheduling:
40+
nodeSelector:
41+
<key1>: <value1>
42+
tolerations:
43+
- key: "<key1>"
44+
operator: "Equal"
45+
value: "<value1>"
46+
effect: "NoSchedule"
47+
cainjectorConfig:
48+
overrideScheduling:
49+
nodeSelector:
50+
<key1>: <value1>
51+
tolerations:
52+
- key: "<key1>"
53+
operator: "Equal"
54+
value: "<value1>"
55+
effect: "NoSchedule"
56+
----
57+
<1> Replace <key1>, <key2> and <value1> with the specific key-value pairs for `nodeSelector` and `tolerations`.
58+
59+
.Verification
60+
61+
. After applying the updated {cert-manager} custom resource, verify that the scheduling overrides are active:
62+
63+
.. Check the pod specifications for the {cert-manager} components:
64+
+
65+
[source,terminal]
66+
----
67+
$ kubectl get pods -n openshift-cert-manager -o yaml | grep -A 10 "nodeSelector"
68+
----
69+
70+
.. Confirm that the `nodeSelector` and `tolerations` settings match the configuration.
71+

security/cert_manager_operator/cert-manager-customizing-api-fields.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,3 +20,5 @@ include::modules/cert-manager-override-arguments.adoc[leveloffset=+1]
2020
include::modules/cert-manager-override-flag-controller.adoc[leveloffset=+1]
2121

2222
include::modules/cert-manager-configure-cpu-memory.adoc[leveloffset=+1]
23+
24+
include::modules/cert-manager-override-scheduling.adoc[leveloffset=+1]

0 commit comments

Comments
 (0)