aboutsummaryrefslogtreecommitdiffstats
path: root/starlingx/demo/firewall-host-netdevice/templates
diff options
context:
space:
mode:
authorBin Yang <bin.yang@windriver.com>2020-02-24 12:42:24 +0800
committerBin Yang <bin.yang@windriver.com>2020-02-24 12:42:24 +0800
commit219a7eab4129b3e500bcaf6c62819011580895ba (patch)
treed9f2eff458c8e1cd6ef36c250983a876a8322448 /starlingx/demo/firewall-host-netdevice/templates
parent6547e45fd9f60437811ef35b9d101cdaef494542 (diff)
Add nodeaffinity for cFW pods
Change-Id: I31077bbaff99f7ffc2c13abd5899afd05cf560f9 Issue-ID: MULTICLOUD-999 Signed-off-by: Bin Yang <bin.yang@windriver.com>
Diffstat (limited to 'starlingx/demo/firewall-host-netdevice/templates')
-rw-r--r--starlingx/demo/firewall-host-netdevice/templates/deployment.yaml19
1 files changed, 15 insertions, 4 deletions
diff --git a/starlingx/demo/firewall-host-netdevice/templates/deployment.yaml b/starlingx/demo/firewall-host-netdevice/templates/deployment.yaml
index be0af964..e93e9da2 100644
--- a/starlingx/demo/firewall-host-netdevice/templates/deployment.yaml
+++ b/starlingx/demo/firewall-host-netdevice/templates/deployment.yaml
@@ -25,6 +25,19 @@ spec:
"interface": "veth21" }
]'
spec:
+ affinity:
+ nodeAffinity:
+ requiredDuringSchedulingIgnoredDuringExecution:
+ nodeSelectorTerms:
+ - matchExpressions:
+ {{- range .Values.global.nodeAffinity }}
+ - key: {{ .label.labelkey }}
+ operator: {{ .label.op }}
+ values:
+ {{- range .label.labelvalues }}
+ - {{ . }}
+ {{- end }}
+ {{- end }}
containers:
- name: {{ .Chart.Name }}
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
@@ -34,12 +47,10 @@ spec:
env:
- name: unprotectedNetCidr
value: "{{.Values.global.unprotectedNetCidr}}"
- - name: unprotectedNetGw
- value: "{{.Values.global.unprotectedNetGw}}"
+ - name: unprotectedNetGwIp
+ value: "{{.Values.global.unprotectedNetGwIp}}"
- name: protectedNetCidr
value: "{{.Values.global.protectedNetCidr}}"
- - name: protectedNetGw
- value: "{{.Values.global.protectedNetGw}}"
- name: protectedNetGwIp
value: "{{.Values.global.protectedNetGwIp}}"
- name: dcaeCollectorIp