Add optional PodDisruptionBudgets

Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 description: Single sign-on for your Kubernetes services using Google OAuth
 name: buzzfeed-sso
-version: 0.2.11
+version: 0.2.12
 appVersion: 2.1.0
 home: https://github.com/buzzfeed/sso
 sources:

README.md

@@ -68,6 +68,7 @@ Parameter | Description | Default
 `auth.nodeSelector` | node selector logic for auth pods | `{}`
 `auth.tolerations` | resource tolerations for auth pods | `{}`
 `auth.affinity` | node affinity for auth pods | `{}`
+`auth.podDisruptionBudget` | PodDisruptionBudget for auth pods | `{}`
 `auth.service.type` | type of auth service to create | `ClusterIP`
 `auth.service.port` | port for the http auth service | `80`
 `auth.secret` | secrets to be generated randomly with `openssl rand -base64 32 | head -c 32`. | REQUIRED if `auth.customSecret` is not set
@@ -84,6 +85,7 @@ Parameter | Description | Default
 `proxy.nodeSelector` | node selector logic for proxy pods | `{}`
 `proxy.tolerations` | resource tolerations for proxy pods | `{}`
 `proxy.affinity` | node affinity for proxy pods | `{}`
+`proxy.podDisruptionBudget` | PodDisruptionBudget for proxy pods | `{}`
 `proxy.service.type` | type of proxy service to create | `ClusterIP`
 `proxy.service.port` | port for the http proxy service | `80`
 `proxy.secret` | secrets to be generated randomly with `openssl rand -base64 32 | head -c 32 | base64`. | REQUIRED if `proxy.customSecret` is not set

templates/auth-poddisruptionbudget.yaml

@@ -0,0 +1,20 @@
+{{- if and .Values.auth.enabled .Values.auth.podDisruptionBudget -}}
+{{- $name := include "buzzfeed-sso.name" . -}}
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+  name: {{ template "buzzfeed-sso.fullname" . }}-auth
+  labels:
+    app: {{ $name }}
+    chart: {{ template "buzzfeed-sso.chart" . }}
+    component: {{ $name }}-auth
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+spec:
+  {{- toYaml .Values.auth.podDisruptionBudget | nindent 2 }}
+  selector:
+    matchLabels:
+      app: {{ $name }}
+      component: {{ $name }}-auth
+      release: {{ .Release.Name }}
+{{- end }}

templates/proxy-poddisruptionbudget.yaml

@@ -0,0 +1,20 @@
+{{- if and .Values.proxy.enabled .Values.proxy.podDisruptionBudget -}}
+{{- $name := include "buzzfeed-sso.name" . -}}
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+  name: {{ template "buzzfeed-sso.fullname" . }}-proxy
+  labels:
+    app: {{ $name }}
+    chart: {{ template "buzzfeed-sso.chart" . }}
+    component: {{ $name }}-proxy
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+spec:
+  {{- toYaml .Values.proxy.podDisruptionBudget | nindent 2 }}
+  selector:
+    matchLabels:
+      app: {{ $name }}
+      component: {{ $name }}-proxy
+      release: {{ .Release.Name }}
+{{- end }}

values.yaml

@@ -18,6 +18,7 @@ auth:
   nodeSelector: {}
   tolerations: []
   affinity: {}
+  podDisruptionBudget: {}
   service:
     type: ClusterIP
     port: 80
@@ -55,6 +56,7 @@ proxy:
   nodeSelector: {}
   tolerations: []
   affinity: {}
+  podDisruptionBudget: {}
   service:
     type: ClusterIP
     port: 80