commit 949e00e4fcc663f0e226e3edf48fcb567004f5c4 parent 28f6a0dd0e43e1abdec0d5d6a78c7c6c815ca3ff Author: MTRNord <MTRNord@users.noreply.github.com> Date: Sun, 3 Aug 2025 16:22:45 +0200 Set seccomp on descheduler Diffstat:
| M | infrastructure_talos/controllers/descheduler.yaml | | | 91 | +++++++++++++++++++++++++++++++++++++++++-------------------------------------- |
1 file changed, 47 insertions(+), 44 deletions(-)
diff --git a/infrastructure_talos/controllers/descheduler.yaml b/infrastructure_talos/controllers/descheduler.yaml @@ -42,52 +42,55 @@ spec: - IPv4 serviceMonitor: enabled: true + podSecurityContext: + seccompProfile: + type: RuntimeDefault deschedulerPolicy: profiles: - name: default pluginConfig: - - name: DefaultEvictor - args: - ignorePvcPods: true - evictLocalStoragePods: true - - name: RemoveDuplicates - - name: RemovePodsHavingTooManyRestarts - args: - podRestartThreshold: 100 - includingInitContainers: true - - name: RemovePodsViolatingNodeAffinity - args: - nodeAffinityType: - - requiredDuringSchedulingIgnoredDuringExecution - - name: RemovePodsViolatingNodeTaints - - name: RemovePodsViolatingInterPodAntiAffinity - - name: RemovePodsViolatingTopologySpreadConstraint - - name: LowNodeUtilization - args: - thresholds: - cpu: 20 - memory: 20 - pods: 20 - targetThresholds: - cpu: 70 - memory: 80 - pods: 60 - - name: HighNodeUtilization - args: - thresholds: - cpu: 80 - memory: 85 - pods: 65 + - name: DefaultEvictor + args: + ignorePvcPods: true + evictLocalStoragePods: true + - name: RemoveDuplicates + - name: RemovePodsHavingTooManyRestarts + args: + podRestartThreshold: 100 + includingInitContainers: true + - name: RemovePodsViolatingNodeAffinity + args: + nodeAffinityType: + - requiredDuringSchedulingIgnoredDuringExecution + - name: RemovePodsViolatingNodeTaints + - name: RemovePodsViolatingInterPodAntiAffinity + - name: RemovePodsViolatingTopologySpreadConstraint + - name: LowNodeUtilization + args: + thresholds: + cpu: 20 + memory: 20 + pods: 20 + targetThresholds: + cpu: 70 + memory: 80 + pods: 60 + - name: HighNodeUtilization + args: + thresholds: + cpu: 80 + memory: 85 + pods: 65 plugins: - balance: - enabled: - - RemoveDuplicates - - RemovePodsViolatingTopologySpreadConstraint - - LowNodeUtilization - #- HighNodeUtilization - deschedule: - enabled: - - RemovePodsHavingTooManyRestarts - - RemovePodsViolatingNodeTaints - - RemovePodsViolatingNodeAffinity - - RemovePodsViolatingInterPodAntiAffinity + balance: + enabled: + - RemoveDuplicates + - RemovePodsViolatingTopologySpreadConstraint + - LowNodeUtilization + #- HighNodeUtilization + deschedule: + enabled: + - RemovePodsHavingTooManyRestarts + - RemovePodsViolatingNodeTaints + - RemovePodsViolatingNodeAffinity + - RemovePodsViolatingInterPodAntiAffinity