feat: add pod annotations (#1897)

Signed-off-by: Miguel Martinez <miguel@chainloop.dev>

Author: migmartri

deployment/chainloop/README.md

@@ -710,6 +710,7 @@ chainloop config save \
 | `controlplane.automountServiceAccountToken`            | Mount Service Account token in controlplane pods                                                                                                                         | `false`         |
 | `controlplane.hostAliases`                             | controlplane pods host aliases                                                                                                                                           | `[]`            |
 | `controlplane.deploymentAnnotations`                   | Annotations for controlplane deployment                                                                                                                                  | `{}`            |
+| `controlplane.podAnnotations`                          | Annotations for controlplane pods                                                                                                                                        | `{}`            |
 | `controlplane.podLabels`                               | Extra labels for controlplane pods                                                                                                                                       | `{}`            |
 | `controlplane.podAffinityPreset`                       | Pod affinity preset. Ignored if `controlplane.affinity` is set. Allowed values: `soft` or `hard`                                                                         | `""`            |
 | `controlplane.podAntiAffinityPreset`                   | Pod anti-affinity preset. Ignored if `controlplane.affinity` is set. Allowed values: `soft` or `hard`                                                                    | `soft`          |
@@ -858,6 +859,7 @@ chainloop config save \
 | `cas.automountServiceAccountToken`                      | Mount Service Account token in cas pods                                                                                                                                                                                                             | `false`          |
 | `cas.hostAliases`                                       | cas pods host aliases                                                                                                                                                                                                                               | `[]`             |
 | `cas.deploymentAnnotations`                             | Annotations for cas deployment                                                                                                                                                                                                                      | `{}`             |
+| `cas.podAnnotations`                                    | Annotations for cas pods                                                                                                                                                                                                                            | `{}`             |
 | `cas.podLabels`                                         | Extra labels for cas pods                                                                                                                                                                                                                           | `{}`             |
 | `cas.podAffinityPreset`                                 | Pod affinity preset. Ignored if `cas.affinity` is set. Allowed values: `soft` or `hard`                                                                                                                                                             | `""`             |
 | `cas.podAntiAffinityPreset`                             | Pod anti-affinity preset. Ignored if `cas.affinity` is set. Allowed values: `soft` or `hard`                                                                                                                                                        | `soft`           |

deployment/chainloop/templates/cas/deployment.yaml

@@ -28,6 +28,9 @@ spec:
         checksum/config: {{ include (print $.Template.BasePath "/cas" "/configmap.yaml") . | sha256sum }}
         checksum/config-secret: {{ include (print $.Template.BasePath "/cas" "/secret-config.yaml") . | sha256sum }}
         checksum/public-key-secret: {{ include (print $.Template.BasePath "/cas" "/secret-jwt-public-key.yaml") . | sha256sum }}
+        {{- if .Values.cas.podAnnotations }}
+        {{- include "common.tplvalues.render" (dict "value" .Values.cas.podAnnotations "context" $) | nindent 8 }}
+        {{- end }}
       labels: {{ include "chainloop.cas.labels" . | nindent 8 }}
     spec:
       {{- include "common.images.renderPullSecrets" (dict "images" (list .Values.cas.image) "context" $) | nindent 6 }}

deployment/chainloop/templates/controlplane/deployment.yaml

@@ -30,6 +30,9 @@ spec:
         checksum/secret-config: {{ include (print $.Template.BasePath "/controlplane" "/secret-config.yaml") . | sha256sum }}
         checksum/cas-private-key: {{ include (print $.Template.BasePath "/controlplane" "/secret-jwt-cas-private-key.yaml") . | sha256sum }}
         kubectl.kubernetes.io/default-container: controlplane
+        {{- if .Values.controlplane.podAnnotations }}
+        {{- include "common.tplvalues.render" (dict "value" .Values.controlplane.podAnnotations "context" $) | nindent 8 }}
+        {{- end }}
       labels: {{- include "chainloop.controlplane.labels" . | nindent 8 }}
     spec:
       {{- include "common.images.renderPullSecrets" (dict "images" (list .Values.controlplane.image .Values.controlplane.migration.image) "context" $) | nindent 6 }}

deployment/chainloop/values.yaml

@@ -746,6 +746,11 @@ controlplane:
   ##
   deploymentAnnotations: {}
 
+  ## @param controlplane.podAnnotations Annotations for controlplane pods
+  ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
+  ##
+  podAnnotations: {}
+
   ## @param controlplane.podLabels Extra labels for controlplane pods
   ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
   ##
@@ -1423,6 +1428,11 @@ cas:
   ##
   deploymentAnnotations: {}
 
+  ## @param cas.podAnnotations Annotations for cas pods
+  ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
+  ##
+  podAnnotations: {}
+
   ## @param cas.podLabels Extra labels for cas pods
   ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
   ##