updated manifests

deploy/pve-csr-approver-manager.yaml

@@ -9,28 +9,20 @@ kind: ClusterRole
 metadata:
   name: pve-csr-approver
 rules:
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - signers
-  # legacy-unknown: support before kubernetes-1.18.0
+- apiGroups: ["certificates.k8s.io"]
+  resources: ["signers"]
   resourceNames:
   - "kubernetes.io/legacy-unknown"
   - "kubernetes.io/kubelet-serving"
-  verbs:
-  - approve
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests
+  verbs: ["approve"]
+- apiGroups: ["certificates.k8s.io"]
+  resources: ["certificatesigningrequests"]
   verbs:
   - get
   - list
   - watch
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests/approval
+- apiGroups: ["certificates.k8s.io"]
+  resources: ["certificatesigningrequests/approval"]
   verbs:
   - create
   - update
@@ -39,22 +31,22 @@ kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: pve-csr-approver
-subjects:
-- kind: ServiceAccount
-  namespace: kube-system
-  name: pve-csr-approver
 roleRef:
   kind: ClusterRole
   name: pve-csr-approver
   apiGroup: rbac.authorization.k8s.io
+subjects:
+- kind: ServiceAccount
+  namespace: kube-system
+  name: pve-csr-approver
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  labels:
-    app: pve-csr-approver-manager
   name: pve-csr-approver-manager
   namespace: kube-system
+  labels:
+    app: pve-csr-approver-manager
 spec:
   replicas: 1
   selector:
@@ -62,11 +54,10 @@ spec:
       app: pve-csr-approver-manager
   template:
     metadata:
-      annotations:
-        scheduler.alpha.kubernetes.io/critical-pod: ""
       labels:
         app: pve-csr-approver-manager
     spec:
+      priorityClassName: system-node-critical
       containers:
       - name: manager
         env: