In some deployments, the master or control-plane nodes might not have the possibility of mounting PVC's. Yet, while we don't want folks to schedule them merely on the worker nodes to ensure they're not sharing resources with user workloads, users might have specialized infra nodes where it would be entirely acceptable to schedule the result server. So, let's make this configurable to enable this use-case.
This requires:
changing the ScanSettings to receive these new settings: The selector and tolerations
Making sure that this gets propagated down the ComplianceSuite and ComplianceScan
JAORMX
commented
3 years ago
In some deployments, the
masterorcontrol-planenodes might not have the possibility of mounting PVC's. Yet, while we don't want folks to schedule them merely on theworkernodes to ensure they're not sharing resources with user workloads, users might have specializedinfranodes where it would be entirely acceptable to schedule the result server. So, let's make this configurable to enable this use-case.This requires:
ComplianceSuiteandComplianceScan