From 43b10adbbb3395399c59d5e878bb88ab10829860 Mon Sep 17 00:00:00 2001 From: Kirill Makhonin Date: Thu, 10 Jul 2025 14:40:17 -0400 Subject: [PATCH 1/2] feat: add nodeSelector, tolerations and affinity support for pod assignment in AWS SIGv4 Admission Controller --- .../aws-sigv4-proxy-admission-controller/README.md | 5 ++++- .../templates/deployment.yaml | 14 +++++++++++++- .../values.yaml | 11 ++++++++++- 3 files changed, 27 insertions(+), 3 deletions(-) diff --git a/stable/aws-sigv4-proxy-admission-controller/README.md b/stable/aws-sigv4-proxy-admission-controller/README.md index 71aea6235..51a6ba134 100644 --- a/stable/aws-sigv4-proxy-admission-controller/README.md +++ b/stable/aws-sigv4-proxy-admission-controller/README.md @@ -39,4 +39,7 @@ helm uninstall aws-sigv4-proxy-admission-controller --namespace | `serviceAccount.name` | The name of the service account to create or use | `""` | `rbac.create` | Whether to create rbac resources or not | `true` | `webhookService.port` | Incoming port used by webhook service | `443` -| `webhookService.targetPort` | Target port used by webhook service | `443` \ No newline at end of file +| `webhookService.targetPort` | Target port used by webhook service | `443` +| `nodeSelector` | Node labels for pod assignment | `{}` +| `tolerations` | Tolerations for pod assignment | `[]` +| `affinity` | Affinity for pod assignment | `{}` \ No newline at end of file diff --git a/stable/aws-sigv4-proxy-admission-controller/templates/deployment.yaml b/stable/aws-sigv4-proxy-admission-controller/templates/deployment.yaml index 48deabba5..bf0833aed 100644 --- a/stable/aws-sigv4-proxy-admission-controller/templates/deployment.yaml +++ b/stable/aws-sigv4-proxy-admission-controller/templates/deployment.yaml @@ -36,4 +36,16 @@ spec: volumes: - name: webhook-certs secret: - secretName: {{ template "aws-sigv4-proxy-admission-controller.fullname" . }}-webhook-certs \ No newline at end of file + secretName: {{ template "aws-sigv4-proxy-admission-controller.fullname" . }}-webhook-certs + {{- with .Values.nodeSelector }} + nodeSelector: +{{ toYaml . | indent 8 }} + {{- end }} + {{- with .Values.affinity }} + affinity: +{{ toYaml . | indent 8 }} + {{- end }} + {{- with .Values.tolerations }} + tolerations: +{{ toYaml . | indent 8 }} + {{- end }} \ No newline at end of file diff --git a/stable/aws-sigv4-proxy-admission-controller/values.yaml b/stable/aws-sigv4-proxy-admission-controller/values.yaml index ed7ab8444..c7d3d6e30 100644 --- a/stable/aws-sigv4-proxy-admission-controller/values.yaml +++ b/stable/aws-sigv4-proxy-admission-controller/values.yaml @@ -32,4 +32,13 @@ webhookService: # webhookService.port: Incoming port used by webhook service port: 443 # webhookService.targetPort: Target port used by webhook service - targetPort: 443 \ No newline at end of file + targetPort: 443 + +# nodeSelector: Node labels for pod assignment +nodeSelector: {} + +# tolerations: Tolerations for pod assignment +tolerations: [] + +# affinity: Affinity for pod assignment +affinity: {} From de1d2120f0150a72229407d3831ee229329fea49 Mon Sep 17 00:00:00 2001 From: Kirill Makhonin Date: Thu, 10 Jul 2025 14:42:21 -0400 Subject: [PATCH 2/2] chore: bump aws-sigv4-proxy-admission-controller chart version to 0.1.3 --- stable/aws-sigv4-proxy-admission-controller/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/stable/aws-sigv4-proxy-admission-controller/Chart.yaml b/stable/aws-sigv4-proxy-admission-controller/Chart.yaml index 143e7eed7..56cca1311 100644 --- a/stable/aws-sigv4-proxy-admission-controller/Chart.yaml +++ b/stable/aws-sigv4-proxy-admission-controller/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v1 name: aws-sigv4-proxy-admission-controller description: AWS SIGv4 Admission Controller Helm Chart for Kubernetes -version: 0.1.2 +version: 0.1.3 appVersion: 1.0 home: https://github.com/aws/eks-charts icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png