Expose webhook affinity via values.yaml

Signed-off-by: Alex Shearn <[email protected]>
sigstore · Jan 6, 2025 · 6d62852 · 6d62852
1 parent 6c2fe80
commit 6d62852
Show file tree

Hide file tree

Showing 5 changed files with 582 additions and 237 deletions.
diff --git a/charts/policy-controller/Chart.yaml b/charts/policy-controller/Chart.yaml
@@ -8,7 +8,7 @@ sources:
 type: application
 
 name: policy-controller
-version: 0.8.0
+version: 0.8.1
 appVersion: 0.11.0
 
 maintainers:

diff --git a/charts/policy-controller/README.md b/charts/policy-controller/README.md
@@ -161,6 +161,7 @@ helm uninstall [RELEASE_NAME]
 | leasescleanup.image.version | string | `"latest-dev"` |  |
 | loglevel | string | `"info"` |  |
 | serviceMonitor.enabled | bool | `false` |  |
+| webhook.affinity | object | `{}` |  |
 | webhook.configData | object | `{}` |  |
 | webhook.customLabels | object | `{}` |  |
 | webhook.env | object | `{}` |  |

diff --git a/charts/policy-controller/templates/webhook/deployment_webhook.yaml b/charts/policy-controller/templates/webhook/deployment_webhook.yaml
@@ -33,6 +33,9 @@ spec:
       serviceAccountName: {{ include "webhook.serviceAccountName" . }}
       # To avoid node becoming SPOF, spread our replicas to different nodes.
       affinity:
+      {{- if .Values.webhook.affinity }}
+        {{- toYaml .Values.webhook.affinity | nindent 8 }}
+      {{- else }}
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
           - podAffinityTerm:
@@ -41,6 +44,7 @@ spec:
                   control-plane: {{ template "policy-controller.fullname" . }}-webhook
               topologyKey: kubernetes.io/hostname
             weight: 100
+      {{- end }}
       containers:
       - name: {{ template "policy-controller.name" . }}-{{ .Values.webhook.name }}
         image: "{{ template "policy-controller.image" .Values.webhook.image }}"