Enable custom annotations in Policy Controller pods

Signed-off-by: Guilherme Santos <[email protected]>
sigstore · Jul 2, 2024 · 3ae3ef9 · 3ae3ef9
1 parent 2b2182e
commit 3ae3ef9
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 1 deletion.
diff --git a/charts/policy-controller/Chart.yaml b/charts/policy-controller/Chart.yaml
@@ -8,7 +8,7 @@ sources:
 type: application
 
 name: policy-controller
-version: 0.6.8
+version: 0.7.0
 appVersion: 0.8.2
 
 maintainers:

diff --git a/charts/policy-controller/README.md b/charts/policy-controller/README.md
@@ -45,6 +45,7 @@ The Helm chart for Policy  Controller
 | webhook.namespaceSelector.matchExpressions[0].key | string | `"policy.sigstore.dev/include"` |  |
 | webhook.namespaceSelector.matchExpressions[0].operator | string | `"In"` |  |
 | webhook.namespaceSelector.matchExpressions[0].values[0] | string | `"true"` |  |
+| webhook.podAnnotations | object | `{}` |  |
 | webhook.podDisruptionBudget.enabled | bool | `true` |  |
 | webhook.podDisruptionBudget.minAvailable | int | `1` |  |
 | webhook.podSecurityContext.allowPrivilegeEscalation | bool | `false` |  |

diff --git a/charts/policy-controller/templates/webhook/deployment_webhook.yaml b/charts/policy-controller/templates/webhook/deployment_webhook.yaml
@@ -14,6 +14,10 @@ spec:
       control-plane: {{ template "policy-controller.fullname" . }}-webhook
   template:
     metadata:
+      {{- with .Values.webhook.podAnnotations }}
+      annotations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       labels:
         control-plane: {{ template "policy-controller.fullname" . }}-webhook
         {{- include "policy-controller.labels" . | nindent 8 }}

diff --git a/charts/policy-controller/values.schema.json b/charts/policy-controller/values.schema.json
@@ -118,6 +118,9 @@
                         }
                     }
                 },
+                "podAnnotations": {
+                    "type": "object"
+                },
                 "podDisruptionBudget": {
                     "type": "object",
                     "properties": {

diff --git a/charts/policy-controller/values.yaml b/charts/policy-controller/values.yaml
@@ -32,6 +32,7 @@ webhook:
     enabled: false
     runAsUser: 65532
   failurePolicy: Fail
+  podAnnotations: {}
   podSecurityContext:
     enabled: true
     allowPrivilegeEscalation: false