some improvements

deploy/pve-cloud-controller-manager.yaml

@@ -87,14 +87,13 @@ subjects:
   name: cloud-controller-manager
 ---
 apiVersion: apps/v1
-kind: Deployment
+kind: DaemonSet
 metadata:
   name: pve-cloud-controller-manager
   namespace: kube-system
   labels:
     app: pve-cloud-controller-manager
 spec:
-  replicas: 1
   selector:
     matchLabels:
       app: pve-cloud-controller-manager
@@ -144,15 +143,19 @@ spec:
           type: Directory
       dnsPolicy: Default
       serviceAccountName: cloud-controller-manager
-      tolerations:
-      - effect: NoSchedule
-        key: node.cloudprovider.kubernetes.io/uninitialized
-        value: "true"
-      - key: CriticalAddonsOnly
-        operator: Exists
-      - effect: NoSchedule
-        key: node-role.kubernetes.io/master
-      - effect: NoSchedule
-        key: node.kubernetes.io/not-ready
       nodeSelector:
         node-role.kubernetes.io/master: ""
+        node-role.kubernetes.io/control-plane: ""
+      tolerations:
+      - key: node.cloudprovider.kubernetes.io/uninitialized
+        effect: NoSchedule
+        value: "true"
+      - key: node-role.kubernetes.io/master
+        effect: NoSchedule
+      - key: node.kubernetes.io/not-ready
+        effect: NoSchedule
+      - key: node-role.kubernetes.io/control-plane
+        effect: NoSchedule
+        operator: Exists
+      - key: CriticalAddonsOnly
+        operator: Exists

deploy/pve-csr-approver-manager.yaml

@@ -40,15 +40,6 @@ rules:
   verbs:
   - get
   - update
-- apiGroups: [""]
-  resources: ["configmaps"]
-  resourceNames: ["pve-csr-approver-manager"]
-  verbs:
-  - get
-  - update
-- apiGroups: [""]
-  resources: ["configmaps"]
-  verbs: ["create"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -64,14 +55,13 @@ subjects:
   name: pve-csr-approver
 ---
 apiVersion: apps/v1
-kind: Deployment
+kind: DaemonSet
 metadata:
   name: pve-csr-approver-manager
   namespace: kube-system
   labels:
     app: pve-csr-approver-manager
 spec:
-  replicas: 1
   selector:
     matchLabels:
       app: pve-csr-approver-manager
@@ -116,15 +106,19 @@ spec:
           type: Directory
       dnsPolicy: Default
       serviceAccountName: pve-csr-approver
-      tolerations:
-      - effect: NoSchedule
-        key: node.cloudprovider.kubernetes.io/uninitialized
-        value: "true"
-      - key: CriticalAddonsOnly
-        operator: Exists
-      - effect: NoSchedule
-        key: node-role.kubernetes.io/master
-      - effect: NoSchedule
-        key: node.kubernetes.io/not-ready
       nodeSelector:
         node-role.kubernetes.io/master: ""
+        node-role.kubernetes.io/control-plane: ""
+      tolerations:
+      - key: node.cloudprovider.kubernetes.io/uninitialized
+        effect: NoSchedule
+        value: "true"
+      - key: node-role.kubernetes.io/master
+        effect: NoSchedule
+      - key: node.kubernetes.io/not-ready
+        effect: NoSchedule
+      - key: node-role.kubernetes.io/control-plane
+        effect: NoSchedule
+        operator: Exists
+      - key: CriticalAddonsOnly
+        operator: Exists