From 4914b4d7e0561c02051c02d73af85d6ba1a5ea31 Mon Sep 17 00:00:00 2001
From: Antoine Asseman <antoine.asseman@kyndryl.com>
Date: Fri, 6 Jun 2025 18:15:41 +0200
Subject: [PATCH] feat: support affinity in the enforcer daemonset

Useful to dodge Fargate nodes for example.
---
 charts/core/templates/enforcer-daemonset.yaml | 4 ++++
 charts/core/values.yaml                       | 1 +
 2 files changed, 5 insertions(+)

diff --git a/charts/core/templates/enforcer-daemonset.yaml b/charts/core/templates/enforcer-daemonset.yaml
index 10684cb4..a1027558 100644
--- a/charts/core/templates/enforcer-daemonset.yaml
+++ b/charts/core/templates/enforcer-daemonset.yaml
@@ -55,6 +55,10 @@ spec:
       imagePullSecrets:
         - name: {{ .Values.imagePullSecrets }}
     {{- end }}
+    {{- if .Values.enforcer.affinity }}
+      affinity:
+{{ toYaml .Values.enforcer.affinity | indent 8 }}
+    {{- end }}
     {{- if .Values.enforcer.tolerations }}
       tolerations:
 {{ toYaml .Values.enforcer.tolerations | indent 8 }}
diff --git a/charts/core/values.yaml b/charts/core/values.yaml
index df677ba6..22d72574 100644
--- a/charts/core/values.yaml
+++ b/charts/core/values.yaml
@@ -335,6 +335,7 @@ enforcer:
   podLabels: {}
   podAnnotations: {}
   env: []
+  affinity: {}
   tolerations:
     - effect: NoSchedule
       key: node-role.kubernetes.io/master