Wpb 10335 | Ensure pods are distributed evenly on each k8s node

changelog.d/5-internal/WPB-10335

@@ -0,0 +1 @@
+Added node based topology constraint to ensure pods are distributed uniformly on all nodes.

charts/brig/templates/deployment.yaml

@@ -30,6 +30,13 @@ spec:
         fluentbit.io/parser: json
     spec:
       serviceAccountName: {{ .Values.serviceAccount.name }}
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: brig
       volumes:
         - name: "brig-config"
           configMap:

charts/cannon/templates/statefulset.yaml

@@ -34,6 +34,13 @@ spec:
         {{- end }}
     spec:
       terminationGracePeriodSeconds: {{ add .Values.config.drainOpts.gracePeriodSeconds 5 }}
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: cannon
       containers:
       {{- if .Values.service.nginz.enabled }}
       - name: nginz

charts/cargohold/templates/deployment.yaml

@@ -28,6 +28,13 @@ spec:
         checksum/secret: {{ include (print .Template.BasePath "/secret.yaml") . | sha256sum }}
     spec:
       serviceAccountName: {{ .Values.serviceAccount.name }}
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: cargohold
       volumes:
         - name: "cargohold-config"
           configMap:

charts/demo-smtp/templates/deployment.yaml

@@ -19,6 +19,13 @@ spec:
         app: {{ template "demo-smtp.name" . }}
         release: {{ .Release.Name }}
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: {{ template "demo-smtp.name" . }}
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image }}"

charts/fake-aws-s3/templates/reaper.yaml

@@ -17,6 +17,13 @@ spec:
       labels:
         app: {{ template "fullname" . }}-reaper
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: {{ template "fullname" . }}-reaper
       volumes:
       - name: minio-configuration
         projected:

charts/fake-aws-ses/templates/deployment.yaml

@@ -17,6 +17,13 @@ spec:
       labels:
         app: {{ template "fullname" . }}
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: {{ template "fullname" . }}
       containers:
       - name: fake-aws-ses
         image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"

charts/fake-aws-sns/templates/deployment.yaml

@@ -17,6 +17,13 @@ spec:
       labels:
         app: {{ template "fullname" . }}
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: {{ template "fullname" . }}
       containers:
       - name: fake-aws-sns
         image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"

charts/fake-aws-sqs/templates/deployment.yaml

@@ -19,6 +19,13 @@ spec:
       annotations:
         checksum/configmap: {{ include (print .Template.BasePath "/configmap.yaml") . | sha256sum }}
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: {{ template "fullname" . }}
       containers:
       - name: fake-aws-sqs
         image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"

charts/federator/templates/deployment.yaml

@@ -30,6 +30,13 @@ spec:
         {{- end }}
         fluentbit.io/parser: json
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: federator
       volumes:
         - name: "federator-config"
           configMap:

charts/galley/templates/deployment.yaml

@@ -28,6 +28,13 @@ spec:
         checksum/aws-secret: {{ include (print .Template.BasePath "/aws-secret.yaml") . | sha256sum }}
         checksum/secret: {{ include (print .Template.BasePath "/secret.yaml") . | sha256sum }}
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: galley
       serviceAccountName: {{ .Values.serviceAccount.name }}
       volumes:
         - name: "galley-config"

charts/gundeck/templates/deployment.yaml

@@ -28,6 +28,13 @@ spec:
         checksum/secret: {{ include (print .Template.BasePath "/secret.yaml") . | sha256sum }}
     spec:
       serviceAccountName: {{ .Values.serviceAccount.name }}
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: gundeck
       volumes:
         - name: "gundeck-config"
           configMap:

charts/legalhold/templates/deployment.yaml

@@ -17,6 +17,13 @@ spec:
       labels:
         name: "{{ .Release.Name }}-hold"
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              name: "{{ .Release.Name }}-hold"
       restartPolicy: Always
       containers:
         - name: hold

charts/nginz/templates/deployment.yaml

@@ -29,6 +29,13 @@ spec:
         fluentbit.io/parser-nginz: nginz
     spec:
       terminationGracePeriodSeconds: {{ .Values.terminationGracePeriodSeconds }}
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: nginz
       containers:
       - name: nginz-disco
         image: "{{ .Values.images.nginzDisco.repository }}:{{ .Values.images.nginzDisco.tag }}"

charts/openldap/templates/openldap.yaml

@@ -8,6 +8,13 @@ metadata:
     release: {{ .Release.Name }}
     heritage: {{ .Release.Service }}
 spec:
+  topologySpreadConstraints:
+    - maxSkew: 1
+      topologyKey: "kubernetes.io/hostname"
+      whenUnsatisfiable: ScheduleAnyway
+      labelSelector:
+        matchLabels:
+          app: openldap
   securityContext:
     fsGroup: 911
   volumes:

charts/outlook-addin/templates/deployment.yaml

@@ -15,6 +15,13 @@ spec:
       labels:
         app: {{ include "outlook.fullname" . }}
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: {{ include "outlook.fullname" . }}
       containers:
         - name: {{ include "outlook.fullname" . }}
           image: {{ .Values.containerImage }}

charts/proxy/templates/deployment.yaml

@@ -27,6 +27,13 @@ spec:
         checksum/configmap: {{ include (print .Template.BasePath "/configmap.yaml") . | sha256sum }}
         checksum/secret: {{ include (print .Template.BasePath "/secret.yaml") . | sha256sum }}
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: proxy
       volumes:
         - name: "proxy-config"
           configMap:

charts/reaper/templates/deployment.yaml

@@ -20,6 +20,13 @@ spec:
         release: {{ .Release.Name }}
     spec:
       serviceAccountName: reaper-role
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: reaper
       containers:
       - name: reaper
         image: bitnami/kubectl:1.24.12

charts/restund/templates/statefulset.yaml

@@ -26,6 +26,13 @@ spec:
       labels:
         {{- include "restund.selectorLabels" . | nindent 8 }}
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              {{- include "restund.selectorLabels" . | nindent 6 }}
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       hostNetwork: true

charts/spar/templates/deployment.yaml

@@ -26,6 +26,13 @@ spec:
         # An annotation of the configmap checksum ensures changes to the configmap cause a redeployment upon `helm upgrade`
         checksum/configmap: {{ include (print .Template.BasePath "/configmap.yaml") . | sha256sum }}
     spec:
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: "kubernetes.io/hostname"
+          whenUnsatisfiable: ScheduleAnyway
+          labelSelector:
+            matchLabels:
+              app: spar
       volumes:
         - name: "spar-config"
           configMap: