Merge branch 'main' into enh/dualstack-service

Author: pierluigilenoci

helm/oauth2-proxy/Chart.yaml

@@ -1,5 +1,5 @@
 name: oauth2-proxy
-version: 7.12.19
+version: 7.13.0
 apiVersion: v2
 appVersion: 7.9.0
 home: https://oauth2-proxy.github.io/oauth2-proxy/
@@ -32,7 +32,7 @@ kubeVersion: ">=1.16.0-0"
 annotations:
   artifacthub.io/changes: |
     - kind: changed
-      description: Updated the Redis chart to the latest version
+      description: Allow maxUnavailable in PodDisruptionBudget
       links:
         - name: Github PR
-          url: https://github.com/oauth2-proxy/manifests/pull/318
+          url: https://github.com/oauth2-proxy/manifests/pull/317

helm/oauth2-proxy/README.md

@@ -178,7 +178,8 @@ The following table lists the configurable parameters of the oauth2-proxy chart
 | `podAnnotations`                                      | annotations to add to each pod                                                                                                                                                                                                                                   | `{}`                                                                                                 |
 | `podLabels`                                           | additional labels to add to each pod                                                                                                                                                                                                                             | `{}`                                                                                                 |
 | `podDisruptionBudget.enabled`                         | Enabled creation of PodDisruptionBudget (only if replicaCount > 1)                                                                                                                                                                                               | true                                                                                                 |
-| `podDisruptionBudget.minAvailable`                    | minAvailable parameter for PodDisruptionBudget                                                                                                                                                                                                                   | 1                                                                                                    |
+| `podDisruptionBudget.maxUnavailable`                  | maxUnavailable parameter for PodDisruptionBudget, one of maxUnavailable and minAvailable must be null                                                                                                                                                            | null                                                                                                 |
+| `podDisruptionBudget.minAvailable`                    | minAvailable parameter for PodDisruptionBudget, one of maxUnavailable and minAvailable must be null                                                                                                                                                              | 1                                                                                                    |
 | `podSecurityContext`                                  | Kubernetes security context to apply to pod                                                                                                                                                                                                                      | `{}`                                                                                                 |
 | `priorityClassName`                                   | priorityClassName                                                                                                                                                                                                                                                | `nil`                                                                                                |
 | `readinessProbe.enabled`                              | enable Kubernetes readinessProbe. Disable to use oauth2-proxy with Istio mTLS. See [Istio FAQ](https://istio.io/help/faq/security/#k8s-health-checks)                                                                                                            | `true`                                                                                               |

helm/oauth2-proxy/templates/poddisruptionbudget.yaml

@@ -11,5 +11,6 @@ spec:
   selector:
     matchLabels:
       {{- include "oauth2-proxy.selectorLabels" . | indent 6 }}
+  maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }}
   minAvailable: {{ .Values.podDisruptionBudget.minAvailable }}
 {{- end }}

helm/oauth2-proxy/values.yaml

@@ -303,8 +303,10 @@ enableServiceLinks: true
 
 ## PodDisruptionBudget settings
 ## ref: https://kubernetes.io/docs/concepts/workloads/pods/disruptions/
+## One of maxUnavailable and minAvailable must be set to null.
 podDisruptionBudget:
   enabled: true
+  maxUnavailable: null
   minAvailable: 1
 
 ## Horizontal Pod Autoscaling