From 8a0262045f5dcdad3baeaa8b22d2296db282ec8b Mon Sep 17 00:00:00 2001
From: Andrea Zonca <code@andreazonca.com>
Date: Sun, 17 Mar 2024 04:01:12 +0000
Subject: [PATCH] import new deployment patch

---
 setup_https/deploymentPatch.sh  |  9 +++++++++
 setup_https/deploymentPatch.yml | 13 +++++++++++++
 2 files changed, 22 insertions(+)
 create mode 100644 setup_https/deploymentPatch.sh
 create mode 100644 setup_https/deploymentPatch.yml

diff --git a/setup_https/deploymentPatch.sh b/setup_https/deploymentPatch.sh
new file mode 100644
index 0000000..3198afc
--- /dev/null
+++ b/setup_https/deploymentPatch.sh
@@ -0,0 +1,9 @@
+# Patch deployments to make cert-manager pods spawn in master node
+# See https://github.com/zonca/jupyterhub-deploy-kubernetes-jetstream/issues/52
+
+DEPLOYMENTS=( "cert-manager" "cert-manager-cainjector" "cert-manager-webhook" )
+
+for DEPLOYMENT in ${DEPLOYMENTS[@]}
+do
+        kubectl patch deployment -n cert-manager $DEPLOYMENT --patch-file ./deploymentPatch.yml
+done
diff --git a/setup_https/deploymentPatch.yml b/setup_https/deploymentPatch.yml
new file mode 100644
index 0000000..8d97d48
--- /dev/null
+++ b/setup_https/deploymentPatch.yml
@@ -0,0 +1,13 @@
+# deploymentPatch.yml referenced in deploymentPatch.sh
+---
+spec:
+  template:
+    spec:
+      nodeSelector:
+        #"node-role.kubernetes.io/master": ""
+        "node-role.kubernetes.io/control-plane": ""
+      tolerations:
+        - key: "node-role.kubernetes.io/master"
+          operator: "Exists"
+        - key: "node-role.kubernetes.io/control-plane"
+          operator: "Exists"