feat(helm): add allowControlPlane to allow to deploy NuvlaEdge on a control-plane node

schaubl · schaubl · commit 12d2d663e2f3 · 2025-07-14T19:41:02.000+02:00
diff --git a/helm/templates/agent-deployment.yaml b/helm/templates/agent-deployment.yaml
@@ -19,6 +19,12 @@ spec:
       serviceAccountName: {{ .Values.serviceAccount.name }}
       nodeSelector:
         kubernetes.io/hostname: {{ .Values.kubernetesNode }}
+      {{- if .Values.allowControlPlane }}
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      {{- end }}
       containers:
         # AGENT
         - name: agent
diff --git a/helm/templates/kubernetes-credentials-manager-job.yaml b/helm/templates/kubernetes-credentials-manager-job.yaml
@@ -15,6 +15,12 @@ spec:
       serviceAccountName: {{ .Values.serviceAccount.name }}
       nodeSelector:
         kubernetes.io/hostname: {{ .Values.kubernetesNode }}
+      {{- if .Values.allowControlPlane }}
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      {{- end }}
       containers:
         - name: kubernetes-credentials-manager
           image: "{{ .Values.nuvlaedge.image.registry }}{{ .Values.nuvlaedge.image.organization }}/{{ .Values.nuvlaedge.image.repository }}:{{ .Values.nuvlaedge.image.tag | default .Chart.AppVersion }}"
diff --git a/helm/templates/peripheral-manager-bluetooth-deployment.yaml b/helm/templates/peripheral-manager-bluetooth-deployment.yaml
@@ -22,6 +22,12 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       nodeSelector:
         kubernetes.io/hostname: {{ .Values.kubernetesNode }}
+      {{- if .Values.allowControlPlane }}
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      {{- end }}
       containers:
         - name: peripheral-manager-bluetooth
           command: ["bluetooth"]
diff --git a/helm/templates/peripheral-manager-gpu-deployment.yaml b/helm/templates/peripheral-manager-gpu-deployment.yaml
@@ -20,6 +20,12 @@ spec:
     spec:
       nodeSelector:
         kubernetes.io/hostname: {{ .Values.kubernetesNode }}
+      {{- if .Values.allowControlPlane }}
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      {{- end }}
       containers:
         - name: peripheral-manager-gpu
           command: ["gpu"]
diff --git a/helm/templates/peripheral-manager-modbus-deployment.yaml b/helm/templates/peripheral-manager-modbus-deployment.yaml
@@ -20,6 +20,12 @@ spec:
     spec:
       nodeSelector:
         kubernetes.io/hostname: {{ .Values.kubernetesNode }}
+      {{- if .Values.allowControlPlane }}
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      {{- end }}
       containers:
         - name: peripheral-manager-modbus
           command: ["modbus"]
diff --git a/helm/templates/peripheral-manager-network-deployment.yaml b/helm/templates/peripheral-manager-network-deployment.yaml
@@ -22,6 +22,12 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       nodeSelector:
         kubernetes.io/hostname: {{ .Values.kubernetesNode }}
+      {{- if .Values.allowControlPlane }}
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      {{- end }}
       containers:
         - name: peripheral-manager-network
           command: ["network"]
diff --git a/helm/templates/peripheral-manager-usb-deployment.yaml b/helm/templates/peripheral-manager-usb-deployment.yaml
@@ -22,6 +22,12 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       nodeSelector:
         kubernetes.io/hostname: {{ .Values.kubernetesNode }}
+      {{- if .Values.allowControlPlane }}
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      {{- end }}
       containers:
         - name: peripheral-manager-usb
           command: ["usb"]
diff --git a/helm/templates/security-deployment.yaml b/helm/templates/security-deployment.yaml
@@ -21,6 +21,12 @@ spec:
       serviceAccountName: {{ .Values.serviceAccount.name }}
       nodeSelector:
         kubernetes.io/hostname: {{ .Values.kubernetesNode }}
+      {{- if .Values.allowControlPlane }}
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      {{- end }}
       containers:
         - name: security
           image: "{{ .Values.nuvlaedge.image.registry }}{{ .Values.nuvlaedge.image.organization }}/{{ .Values.nuvlaedge.image.repository }}:{{ .Values.nuvlaedge.image.tag | default .Chart.AppVersion }}"
diff --git a/helm/templates/vpn-client-deployment.yaml b/helm/templates/vpn-client-deployment.yaml
@@ -23,6 +23,12 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       nodeSelector:
         kubernetes.io/hostname: {{ .Values.kubernetesNode }}
+      {{- if .Values.allowControlPlane }}
+      tolerations:
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"
+          effect: "NoSchedule"
+      {{- end }}
       containers:
         - name: {{ .Values.vpnClientComponentName }}
           command: ["openvpn-client"]
