feat: add pdb to policy-controller

Signed-off-by: Caleb Woodbine <[email protected]>

charts/policy-controller/README.md

@@ -54,6 +54,9 @@ The Helm chart for Policy  Controller
 | webhook.resources.requests.memory | string | `"128Mi"` |  |
 | webhook.securityContext.enabled | bool | `false` |  |
 | webhook.securityContext.runAsUser | int | `65532` |  |
+| webhook.podDisruptionBudget.enabled | bool | `true` |  |
+| webhook.podDisruptionBudget.minAvailable | int | `1` |  |
+| webhook.podDisruptionBudget.maxUnavailable | int | `null` |  |
 | webhook.service.annotations | object | `{}` |  |
 | webhook.service.port | int | `443` |  |
 | webhook.service.type | string | `"ClusterIP"` |  |

charts/policy-controller/templates/webhook/poddisruptionbudget.yaml

@@ -0,0 +1,27 @@
+{{ if .Values.webhook.podDisruptionBudget.enabled }}
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: {{ template "policy-controller.fullname" . }}-webhook
+  labels:
+    {{- include "policy-controller.labels" . | nindent 4 }}
+    control-plane: {{ template "policy-controller.fullname" . }}-webhook
+{{- if .Values.labels }}
+{{- with .Values.labels }}
+    {{- toYaml . | nindent 4 }}
+{{- end }}
+{{- end }}
+  annotations:
+{{- if .Values.annotations }}
+{{- with .Values.annotations }}
+    {{- toYaml . | nindent 4 }}
+{{- end }}
+{{- end }}
+spec:
+  minAvailable: {{ .Values.webhook.podDisruptionBudget.minAvailable }}
+  maxUnavailable: {{ .Values.webhook.podDisruptionBudget.maxUnavailable }}
+  selector:
+    matchLabels:
+      {{- include "policy-controller.selectorLabels" . | nindent 6 }}
+      control-plane: {{ template "policy-controller.fullname" . }}-webhook
+{{- end }}

charts/policy-controller/values.yaml

@@ -37,6 +37,10 @@ webhook:
     capabilities:
       drop:
         - ALL
+  podDisruptionBudget:
+    enabled: true
+    minAvailable: 1
+    # maxUnavailable: 3
   serviceAccount:
     annotations: {}
     create: true