Add PodDistruptionBudget and VPA to CCM chart (#467)

charts/internal/seed-controlplane/charts/cloud-controller-manager/templates/cloud-controller-manager-svc.yaml

@@ -3,12 +3,14 @@ kind: Service
 metadata:
   name: cloud-controller-manager
   namespace: {{ .Release.Namespace }}
-  labels:
-    app: kubernetes
-    role: cloud-controller-manager
   annotations:
+    networking.resources.gardener.cloud/from-all-scrape-targets-allowed-ports: '[{"port":{{ include "cloud-controller-manager.port" . }},"protocol":"TCP"}]'
+    # TODO: This label approach is deprecated and no longer needed in the future. Remove them as soon as gardener/[email protected] has been released.
     networking.resources.gardener.cloud/from-policy-pod-label-selector: all-scrape-targets
     networking.resources.gardener.cloud/from-policy-allowed-ports: '[{"port":{{ include "cloud-controller-manager.port" . }},"protocol":"TCP"}]'
+  labels:
+    app: kubernetes
+    role: cloud-controller-manager
 spec:
   type: ClusterIP
   clusterIP: None
@@ -18,4 +20,4 @@ spec:
       protocol: TCP
   selector:
     app: kubernetes
-    role: cloud-controller-manager
+    role: cloud-controller-manager

charts/internal/seed-controlplane/charts/cloud-controller-manager/templates/poddistruptionbudget.yaml

@@ -0,0 +1,14 @@
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: cloud-controller-manager
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app: kubernetes
+    role: cloud-controller-manager
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app: kubernetes
+      role: cloud-controller-manager

charts/internal/seed-controlplane/charts/cloud-controller-manager/templates/vpa.yaml

@@ -12,11 +12,10 @@ spec:
     updateMode: Auto
   resourcePolicy:
     containerPolicies:
-    - containerName: ironcore-cloud-controller-manager
-      minAllowed:
-        cpu: {{ .Values.resources.requests.cpu }}
-        memory: {{ .Values.resources.requests.memory }}
-      maxAllowed:
-        cpu: {{ .Values.vpa.resourcePolicy.maxAllowed.cpu }}
-        memory: {{ .Values.vpa.resourcePolicy.maxAllowed.memory }}
-      controlledValues: RequestsOnly
+      - containerName: ironcore-cloud-controller-manager
+        minAllowed:
+          memory: 40M
+        maxAllowed:
+          cpu: {{ .Values.vpa.resourcePolicy.maxAllowed.cpu }}
+          memory: {{ .Values.vpa.resourcePolicy.maxAllowed.memory }}
+        controlledValues: RequestsOnly

charts/internal/seed-controlplane/charts/cloud-controller-manager/values.yaml

@@ -1,19 +1,19 @@
 replicas: 1
 clusterName: shoot-foo-bar
+kubernetesVersion: 1.27.4
 podNetwork: 192.168.0.0/16
 podAnnotations: {}
 podLabels: {}
 featureGates: {}
   # CustomResourceValidation: true
-  # RotateKubeletServerCertificate: false
+# RotateKubeletServerCertificate: false
 images:
-  cloud-controller-manager: image-repository:image-tag
+  hyperkube: image-repository:image-tag
+userAgentHeaders: []
 resources:
   requests:
     cpu: 100m
-    memory: 75Mi
-  limits:
-    memory: 400Mi
+    memory: 64Mi
 tlsCipherSuites: []
 secrets:
   server: cloud-controller-manager-server