Merge pull request #8675 from phuhung273/vpa-chart-admission-affinity

feat(chart): affinity, tolerations, nodeSelector for VPA Admission Controller

Author: k8s-ci-robot

vertical-pod-autoscaler/charts/vertical-pod-autoscaler/README.md

@@ -22,6 +22,7 @@ The Vertical Pod Autoscaler (VPA) automatically adjusts the CPU and memory resou
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| admissionController.affinity | object | `{}` |  |
 | admissionController.enabled | bool | `true` |  |
 | admissionController.extraArgs | list | `[]` |  |
 | admissionController.extraEnv | list | `[]` |  |
@@ -52,6 +53,7 @@ The Vertical Pod Autoscaler (VPA) automatically adjusts the CPU and memory resou
 | admissionController.tls.existingSecret | string | `""` |  |
 | admissionController.tls.key | string | `""` |  |
 | admissionController.tls.secretName | string | `"vpa-tls-certs"` |  |
+| admissionController.tolerations | list | `[]` |  |
 | admissionController.volumeMounts[0].mountPath | string | `"/etc/tls-certs"` |  |
 | admissionController.volumeMounts[0].name | string | `"tls-certs"` |  |
 | admissionController.volumeMounts[0].readOnly | bool | `true` |  |

vertical-pod-autoscaler/charts/vertical-pod-autoscaler/templates/admission-controller-deployment.yaml

@@ -35,6 +35,18 @@ spec:
       securityContext:
         runAsNonRoot: true
         runAsUser: 65534
+      {{- with .Values.admissionController.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.admissionController.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.admissionController.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: admission-controller
           image: {{ include "vertical-pod-autoscaler.admissionController.image" . }}

vertical-pod-autoscaler/charts/vertical-pod-autoscaler/values.yaml

@@ -68,6 +68,12 @@ admissionController:
   # Node selector labels for scheduling the Admission Controller.
   nodeSelector: {}
 
+  # Affinity for pod assignment.
+  affinity: {}
+
+  # List of node taints to tolerate.
+  tolerations: []
+
   tls:
     secretName: vpa-tls-certs
     caCert: ""