Add nodeaffinity for cFW pods

[multicloud/k8s.git] / starlingx / demo / firewall-host-netdevice / charts / sink-host-netdevice / templates / deployment.yaml

diff --git a/starlingx/demo/firewall-host-netdevice/charts/sink-host-netdevice/templates/deployment.yaml b/starlingx/demo/firewall-host-netdevice/charts/sink-host-netdevice/templates/deployment.yaml
index fe3d03f..eaa928a 100644 (file)
--- a/starlingx/demo/firewall-host-netdevice/charts/sink-host-netdevice/templates/deployment.yaml
+++ b/starlingx/demo/firewall-host-netdevice/charts/sink-host-netdevice/templates/deployment.yaml
@@ -23,6 +23,19 @@ spec:
             "interface": "veth22" }
           ]'
     spec:
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              {{- range .Values.global.nodeAffinity }}
+              - key: {{ .label.labelkey }}
+                operator: {{ .label.op }}
+                values:
+                {{- range .label.labelvalues }}
+                - {{ . }}
+                {{- end }}
+              {{- end }}
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
@@ -32,12 +45,10 @@ spec:
           env:
             - name: unprotectedNetCidr
               value: "{{.Values.global.unprotectedNetCidr}}"
-            - name: unprotectedNetGw
-              value: "{{.Values.global.unprotectedNetGw}}"
+            - name: unprotectedNetGwIp
+              value: "{{.Values.global.unprotectedNetGwIp}}"
             - name: protectedNetCidr
               value: "{{.Values.global.protectedNetCidr}}"
-            - name: protectedNetGw
-              value: "{{.Values.global.protectedNetGw}}"
             - name: protectedNetGwIp
               value: "{{.Values.global.protectedNetGwIp}}"
             - name: dcaeCollectorIp