From 832eae727401ba978a393c8ba1d39560c81f14d1 Mon Sep 17 00:00:00 2001 From: Giovanni Ferri Date: Wed, 9 Sep 2026 00:52:18 +0100 Subject: [PATCH] fix(cert-manager): tolerate tainted unraid nodes --- values/base/cert-manager.yaml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/values/base/cert-manager.yaml b/values/base/cert-manager.yaml index c526c4b..49be26b 100644 --- a/values/base/cert-manager.yaml +++ b/values/base/cert-manager.yaml @@ -1,2 +1,31 @@ crds: enabled: true + +# Unraid-lab runs all nodes with NoSchedule taints: three control-plane nodes, +# plus the runner node taint on the first control-plane. Cert-manager must be +# schedulable on the cluster's only available nodes. +tolerations: + - key: node-role.kubernetes.io/control-plane + operator: Exists + effect: NoSchedule + - key: imp.dev/runner + operator: Exists + effect: NoSchedule + +webhook: + tolerations: + - key: node-role.kubernetes.io/control-plane + operator: Exists + effect: NoSchedule + - key: imp.dev/runner + operator: Exists + effect: NoSchedule + +cainjector: + tolerations: + - key: node-role.kubernetes.io/control-plane + operator: Exists + effect: NoSchedule + - key: imp.dev/runner + operator: Exists + effect: NoSchedule