feat(vpa-chart): add chart logic for the vpa recommender

vertical-pod-autoscaler/charts/vertical-pod-autoscaler/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.3.0
+version: 0.4.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

vertical-pod-autoscaler/charts/vertical-pod-autoscaler/README.md

@@ -4,7 +4,7 @@ WARNING: This chart is currently under development and is not ready for producti
 
 Automatically adjust resources for your workloads
 
-![Version: 0.3.0](https://img.shields.io/badge/Version-0.3.0-informational?style=flat-square)
+![Version: 0.4.0](https://img.shields.io/badge/Version-0.4.0-informational?style=flat-square)
 ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 ![AppVersion: 1.5.1](https://img.shields.io/badge/AppVersion-1.5.1-informational?style=flat-square)
 
@@ -63,3 +63,31 @@ The Vertical Pod Autoscaler (VPA) automatically adjusts the CPU and memory resou
 | imagePullSecrets | list | `[]` |  |
 | nameOverride | string | `nil` |  |
 | rbac.create | bool | `true` |  |
+| recommender.affinity | object | `{}` |  |
+| recommender.enabled | bool | `true` |  |
+| recommender.extraArgs | list | `[]` |  |
+| recommender.extraEnv | list | `[]` |  |
+| recommender.image.pullPolicy | string | `"IfNotPresent"` |  |
+| recommender.image.repository | string | `"registry.k8s.io/autoscaling/vpa-recommender"` |  |
+| recommender.image.tag | string | `nil` |  |
+| recommender.leaderElection.enabled | string | `nil` |  |
+| recommender.leaderElection.leaseDuration | string | `"15s"` |  |
+| recommender.leaderElection.renewDeadline | string | `"10s"` |  |
+| recommender.leaderElection.resourceName | string | `"vpa-recommender-lease"` |  |
+| recommender.leaderElection.resourceNamespace | string | `""` |  |
+| recommender.leaderElection.retryPeriod | string | `"2s"` |  |
+| recommender.nodeSelector | object | `{}` |  |
+| recommender.podAnnotations | object | `{}` |  |
+| recommender.podDisruptionBudget.enabled | bool | `true` |  |
+| recommender.podDisruptionBudget.maxUnavailable | int or string | `nil` | Maximum number/percentage of pods that can be unavailable after the eviction. IMPORTANT: You can specify either 'minAvailable' or 'maxUnavailable', but not both. |
+| recommender.podDisruptionBudget.minAvailable | int or string | `1` | Minimum number/percentage of pods that must be available after the eviction. IMPORTANT: You can specify either 'minAvailable' or 'maxUnavailable', but not both. |
+| recommender.podLabels | object | `{}` |  |
+| recommender.replicas | int | `2` |  |
+| recommender.resources.limits.cpu | string | `"200m"` |  |
+| recommender.resources.limits.memory | string | `"1000Mi"` |  |
+| recommender.resources.requests.cpu | string | `"50m"` |  |
+| recommender.resources.requests.memory | string | `"500Mi"` |  |
+| recommender.serviceAccount.annotations | object | `{}` |  |
+| recommender.serviceAccount.create | bool | `true` |  |
+| recommender.serviceAccount.labels | object | `{}` |  |
+| recommender.tolerations | list | `[]` |  |

vertical-pod-autoscaler/charts/vertical-pod-autoscaler/templates/_helpers.tpl

@@ -79,4 +79,27 @@ Create the name of the namespace to use
 */}}
 {{- define "common.names.namespace" -}}
 {{- default .Release.Namespace .Values.namespaceOverride | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
+{{- end -}}
+
+
+{{/*
+recommender
+*/}}
+{{- define "vertical-pod-autoscaler.recommender.fullname" -}}
+{{ include "vertical-pod-autoscaler.fullname" . }}-recommender
+{{- end }}
+
+{{- define "vertical-pod-autoscaler.recommender.labels" -}}
+{{ include "vertical-pod-autoscaler.labels" . }}
+app.kubernetes.io/component: recommender
+app.kubernetes.io/component-instance: {{ .Release.Name }}-recommender
+{{- end }}
+
+{{- define "vertical-pod-autoscaler.recommender.selectorLabels" -}}
+{{ include "vertical-pod-autoscaler.selectorLabels" . }}
+app.kubernetes.io/component: recommender
+{{- end }}
+
+{{- define "vertical-pod-autoscaler.recommender.image" -}}
+{{- printf "%s:%s" .Values.recommender.image.repository (default .Chart.AppVersion .Values.recommender.image.tag) }}
+{{- end }}

vertical-pod-autoscaler/charts/vertical-pod-autoscaler/templates/recommender-clusterrolebindings.yaml

@@ -0,0 +1,78 @@
+{{- if and (.Values.recommender.enabled) .Values.rbac.create -}}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-metrics-reader
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-metrics-reader
+subjects:
+- kind: ServiceAccount
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-actor
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-actor
+subjects:
+- kind: ServiceAccount
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-status-actor
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-status-actor
+subjects:
+- kind: ServiceAccount
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-checkpoint-actor
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-checkpoint-actor
+subjects:
+- kind: ServiceAccount
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-target-reader
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-target-reader
+subjects:
+- kind: ServiceAccount
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+{{- end -}}
+

vertical-pod-autoscaler/charts/vertical-pod-autoscaler/templates/recommender-clusterroles.yaml

@@ -0,0 +1,158 @@
+{{- if and (.Values.recommender.enabled) .Values.rbac.create -}}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-metrics-reader
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+  - "metrics.k8s.io"
+  resources:
+  - pods
+  verbs:
+  - get
+  - list
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-actor
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - nodes
+  - limitranges
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  - events.k8s.io
+  resources:
+  - events
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - patch
+  - update
+- apiGroups:
+  - "poc.autoscaling.k8s.io"
+  resources:
+  - verticalpodautoscalers
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - "autoscaling.k8s.io"
+  resources:
+  - verticalpodautoscalers
+  verbs:
+  - get
+  - list
+  - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-status-actor
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+  - "autoscaling.k8s.io"
+  resources:
+  - verticalpodautoscalers/status
+  verbs:
+  - get
+  - patch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-checkpoint-actor
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+  - "poc.autoscaling.k8s.io"
+  resources:
+  - verticalpodautoscalercheckpoints
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - patch
+  - delete
+- apiGroups:
+  - "autoscaling.k8s.io"
+  resources:
+  - verticalpodautoscalercheckpoints
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  verbs:
+  - get
+  - list
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ include "vertical-pod-autoscaler.recommender.fullname" . }}-target-reader
+  labels:
+    {{- include "vertical-pod-autoscaler.recommender.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+  - '*'
+  resources:
+  - '*/scale'
+  verbs:
+  - get
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - replicationcontrollers
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - apps
+  resources:
+  - daemonsets
+  - deployments
+  - replicasets
+  - statefulsets
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - batch
+  resources:
+  - jobs
+  - cronjobs
+  verbs:
+  - get
+  - list
+  - watch
+{{- end -}}