[ci skip] Fix CrowdSec pods failing due to priority class mismatch

Kyverno injects priorityClassName tier-1-cluster on pods in the crowdsec
namespace, but pods had no explicit priorityClassName set, defaulting
priority to 0. Admission controller rejected the mismatch (0 vs 800000).

Set priorityClassName on LAPI, agent (Helm values) and crowdsec-web
(Terraform deployment).
This commit is contained in:
Viktor Barzin 2026-02-21 19:18:15 +00:00
parent fd6f9166a9
commit de9c0869ba
3 changed files with 6 additions and 0 deletions

View file

@ -133,6 +133,7 @@ resource "kubernetes_deployment" "crowdsec-web" {
}
}
spec {
priority_class_name = "tier-1-cluster"
container {
name = "crowdsec-web"
image = "viktorbarzin/crowdsec_web"

View file

@ -2,6 +2,7 @@
container_runtime: containerd
agent:
priorityClassName: "tier-1-cluster"
# To specify each pod you want to process it logs (pods present in the node)
acquisition:
# The namespace where the pod is located
@ -43,6 +44,7 @@ agent:
configMap:
name: crowdsec-whitelist
lapi:
priorityClassName: "tier-1-cluster"
replicas: 3
extraSecrets:
dbPassword: "${DB_PASSWORD}"