adds tolerations, nodeSelector, and affinity to scaffold. (#763)

Signed-off-by: ianhundere <[email protected]>

charts/scaffold/Chart.lock

@@ -1,21 +1,21 @@
 dependencies:
 - name: fulcio
   repository: https://sigstore.github.io/helm-charts
-  version: 2.3.19
+  version: 2.3.20
 - name: rekor
   repository: https://sigstore.github.io/helm-charts
-  version: 1.4.0
+  version: 1.4.2
 - name: trillian
   repository: https://sigstore.github.io/helm-charts
-  version: 0.2.22
+  version: 0.2.24
 - name: ctlog
   repository: https://sigstore.github.io/helm-charts
-  version: 0.2.52
+  version: 0.2.53
 - name: tuf
   repository: https://sigstore.github.io/helm-charts
-  version: 0.1.12
+  version: 0.1.14
 - name: tsa
   repository: https://sigstore.github.io/helm-charts
-  version: 1.0.2
-digest: sha256:9f99a82164d1b86071eb345985e53d41b0304fecdd7fde7649dc9486477975f7
-generated: "2024-05-14T11:49:22.640407283-07:00"
+  version: 1.0.3
+digest: sha256:caf960fdcf37c5819ddd2c2719cc557d28d59923cca4fd8c273f8dc0c94a15a5
+generated: "2024-06-27T09:57:50.636761-04:00"

charts/scaffold/Chart.yaml

@@ -4,7 +4,7 @@ description: Scaffolding the components of the sigstore architecture
 
 type: application
 
-version: 0.6.50
+version: 0.6.51
 keywords:
   - security
   - pki
@@ -16,27 +16,27 @@ maintainers:
 
 dependencies:
   - name: fulcio
-    version: 2.3.19
+    version: 2.3.20
     repository: https://sigstore.github.io/helm-charts
     condition: fulcio.enabled
   - name: rekor
-    version: 1.4.0
+    version: 1.4.2
     repository: https://sigstore.github.io/helm-charts
     condition: rekor.enabled
   - name: trillian
-    version: 0.2.22
+    version: 0.2.24
     repository: https://sigstore.github.io/helm-charts
     condition: trillian.enabled
   - name: ctlog
-    version: 0.2.52
+    version: 0.2.53
     repository: https://sigstore.github.io/helm-charts
     condition: ctlog.enabled
   - name: tuf
-    version: 0.1.12
+    version: 0.1.14
     repository: https://sigstore.github.io/helm-charts
     condition: tuf.enabled
   - name: tsa
-    version: 1.0.2
+    version: 1.0.3
     repository: https://sigstore.github.io/helm-charts
     condition: tsa.enabled
 

charts/scaffold/templates/copy-secrets-job.yaml

@@ -78,4 +78,16 @@ spec:
             "-c",
             "curl {{ .Values.tsa.server.fullnameOverride}}.{{ .Values.tsa.namespace.name }}.svc.cluster.local/api/v1/timestamp/certchain -o /tmp/cert-chain -v && kubectl create secret generic {{ .Values.tuf.secrets.tsa.name }} --from-file=cert-chain=/tmp/cert-chain"
         ]
-{{- end }}
+      {{- if .Values.copySecretJob.nodeSelector }}
+      nodeSelector:
+{{ toYaml .Values.copySecretJob.nodeSelector | indent 8 }}
+      {{- end }}
+      {{- if .Values.copySecretJob.tolerations }}
+      tolerations:
+{{ toYaml .Values.copySecretJob.tolerations | indent 8 }}
+      {{- end }}
+      {{- if .Values.copySecretJob.affinity }}
+      affinity:
+{{ toYaml .Values.copySecretJob.affinity | indent 8 }}
+      {{- end }}
+{{- end }}