feat: PodDisruptionBudget configuration (#414)

Signed-off-by: José Guilherme Vanz <[email protected]>
Signed-off-by: Víctor Cuadrado Juan <[email protected]>
Co-authored-by: Víctor Cuadrado Juan <[email protected]>

Author: jvanz

charts/kubewarden-controller/templates/rbac.yaml

@@ -92,6 +92,17 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - policy
+  resources:
+  - poddisruptionbudgets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - update
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

charts/kubewarden-defaults/templates/policyserver-default.yaml

@@ -14,6 +14,11 @@ spec:
   image: {{ template "system_default_registry" . }}{{ .Values.policyServer.image.repository }}:{{ .Values.policyServer.image.tag }}
   serviceAccountName: {{ .Values.policyServer.serviceAccountName }}
   replicas: {{ .Values.policyServer.replicaCount | default 1 }}
+  {{- if .Values.policyServer.minAvailable  }}
+  minAvailable: {{ .Values.policyServer.minAvailable  }}
+  {{- end }}
+  {{- if .Values.policyServer.maxUnavailable }}
+  maxUnavailable: {{ .Values.policyServer.maxUnavailable  }}
   {{- if .Values.policyServer.affinity }}
   affinity: {{ .Values.policyServer.affinity | toYaml | nindent 4 }}
   {{- end }}
@@ -55,5 +60,3 @@ spec:
   securityContexts: {{ toYaml .Values.policyServer.securityContexts | nindent 4 }}
   {{- end }}
 {{- end }}
-
-

charts/kubewarden-defaults/values.schema.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "http://json-schema.org/schema#",
+  "type": "object",
+  "properties": {
+    "policyServer": {
+      "type": "object",
+      "properties": {
+        "maxUnavailable": {
+          "type": "string"
+        },
+        "minAvailable": {
+          "type": "string"
+        }
+      },
+      "allOf": [
+        {
+          "not": {
+            "properties": {
+              "minAvailable": {
+                "type": "string",
+                "minLength": 1
+              },
+              "maxUnavailable": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      ],
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": true
+}

charts/kubewarden-defaults/values.yaml

@@ -57,6 +57,8 @@ additionalAnnotations: {}
 # Policy Server settings
 policyServer:
   replicaCount: 1
+  minAvailable: ""
+  maxUnavailable: ""
   image:
     # The registry is defined in the global.cattle.systemDefaultRegistry value
     repository: "kubewarden/policy-server"