Add nodeSelector, tolerations and affinity support for pod assignment in AWS SIGv4 Admission Controller

stable/aws-sigv4-proxy-admission-controller/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 name: aws-sigv4-proxy-admission-controller
 description: AWS SIGv4 Admission Controller Helm Chart for Kubernetes
-version: 0.1.2
+version: 0.1.3
 appVersion: 1.0
 home: https://github.com/aws/eks-charts
 icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png

stable/aws-sigv4-proxy-admission-controller/README.md

@@ -39,4 +39,7 @@ helm uninstall aws-sigv4-proxy-admission-controller --namespace <namespace>
 | `serviceAccount.name` | The name of the service account to create or use | `""`
 | `rbac.create` | Whether to create rbac resources or not | `true`
 | `webhookService.port` | Incoming port used by webhook service | `443`
-| `webhookService.targetPort` | Target port used by webhook service | `443`
+| `webhookService.targetPort` | Target port used by webhook service | `443`
+| `nodeSelector` | Node labels for pod assignment | `{}`
+| `tolerations` | Tolerations for pod assignment | `[]`
+| `affinity` | Affinity for pod assignment | `{}`

stable/aws-sigv4-proxy-admission-controller/templates/deployment.yaml

@@ -36,4 +36,16 @@ spec:
       volumes:
         - name: webhook-certs
           secret:
-            secretName: {{ template "aws-sigv4-proxy-admission-controller.fullname" . }}-webhook-certs
+            secretName: {{ template "aws-sigv4-proxy-admission-controller.fullname" . }}-webhook-certs
+    {{- with .Values.nodeSelector }}
+      nodeSelector:
+{{ toYaml . | indent 8 }}
+    {{- end }}
+    {{- with .Values.affinity }}
+      affinity:
+{{ toYaml . | indent 8 }}
+    {{- end }}
+    {{- with .Values.tolerations }}
+      tolerations:
+{{ toYaml . | indent 8 }}
+    {{- end }}

stable/aws-sigv4-proxy-admission-controller/values.yaml

@@ -32,4 +32,13 @@ webhookService:
   # webhookService.port: Incoming port used by webhook service
   port: 443
   # webhookService.targetPort: Target port used by webhook service
-  targetPort: 443
+  targetPort: 443
+
+# nodeSelector: Node labels for pod assignment
+nodeSelector: {}
+
+# tolerations: Tolerations for pod assignment
+tolerations: []
+
+# affinity: Affinity for pod assignment
+affinity: {}