Change tolerations to match upstream and allow override

packages/rancher-vsphere-csi/charts/templates/vsphere-csi-controller-deployment.yaml

@@ -39,25 +39,17 @@ spec:
                 - "true"
       {{- end }}
       serviceAccountName: vsphere-csi-controller
+      {{- if .Values.csiController.tolerations }}
       tolerations:
-        # Rancher specific change: These tolerations are intentionally different from upstream to avoid lessening the scope to only NoSchedule with a specific key
-        # - key: node-role.kubernetes.io/master
-        #   operator: Exists
-        #   effect: NoSchedule
-        - operator: "Exists"
+      {{- with .Values.csiController.tolerations }}
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- else }}
+      tolerations:
+        - key: node-role.kubernetes.io/master
+          operator: Exists
           effect: NoSchedule
-        - operator: "Exists"
-          effect: NoExecute
-        # uncomment below toleration if you need an aggressive pod eviction in case when
-        # node becomes not-ready or unreachable. Default is 300 seconds if not specified.
-        #- key: node.kubernetes.io/not-ready
-        #  operator: Exists
-        #  effect: NoExecute
-        #  tolerationSeconds: 30
-        #- key: node.kubernetes.io/unreachable
-        #  operator: Exists
-        #  effect: NoExecute
-        #  tolerationSeconds: 30
+      {{- end }}
       dnsPolicy: "Default"
       containers:
         - name: csi-attacher

packages/rancher-vsphere-csi/charts/values.yaml

@@ -42,6 +42,17 @@ csiController:
       repository: rancher/mirrored-k8scsi-csi-provisioner
       tag: v2.1.0
   nodeSelector: {}
+  # Uncomment below toleration if you need an aggressive pod eviction in case when
+  # node becomes not-ready or unreachable. Default is 300 seconds if not specified.
+  # tolerations:
+  # - key: node.kubernetes.io/not-ready
+  #   operator: Exists
+  #   effect: NoExecute
+  #   tolerationSeconds: 30
+  # - key: node.kubernetes.io/unreachable
+  #   operator: Exists
+  #   effect: NoExecute
+  #   tolerationSeconds: 30
 
 # Internal features
 csiMigration: