diff --git a/deployments/sgx_plugin/base/intel-sgx-plugin.yaml b/deployments/sgx_plugin/base/intel-sgx-plugin.yaml index 078cbf3de..b6faf0c99 100644 --- a/deployments/sgx_plugin/base/intel-sgx-plugin.yaml +++ b/deployments/sgx_plugin/base/intel-sgx-plugin.yaml @@ -18,6 +18,7 @@ spec: labels: app: intel-sgx-plugin spec: + priorityClassName: system-node-critical automountServiceAccountToken: false containers: - name: intel-sgx-plugin diff --git a/pkg/controllers/sgx/controller_test.go b/pkg/controllers/sgx/controller_test.go index 971b5be86..a80b62989 100644 --- a/pkg/controllers/sgx/controller_test.go +++ b/pkg/controllers/sgx/controller_test.go @@ -74,6 +74,7 @@ func (c *controller) newDaemonSetExpected(rawObj client.Object) *apps.DaemonSet }, }, Spec: v1.PodSpec{ + PriorityClassName: "system-node-critical", AutomountServiceAccountToken: &no, Containers: []v1.Container{ {