Merge pull request #2561 from artyom-p/helm-chart-tolerations

feat(helm/infisical-core): nodeSelector and tolerations support

.infisicalignore

@@ -8,3 +8,7 @@ frontend/src/views/Project/MembersPage/components/MemberListTab/MemberRoleForm/S
 docs/mint.json:generic-api-key:651
 backend/src/ee/services/hsm/hsm-service.ts:generic-api-key:134
 docs/documentation/platform/audit-log-streams/audit-log-streams.mdx:generic-api-key:104
+docs/cli/commands/bootstrap.mdx:jwt:86
+docs/documentation/platform/audit-log-streams/audit-log-streams.mdx:generic-api-key:102
+docs/self-hosting/guides/automated-bootstrapping.mdx:jwt:74
+frontend/src/pages/secret-manager/SecretDashboardPage/components/SecretListView/SecretDetailSidebar.tsx:generic-api-key:72

helm-charts/infisical-standalone-postgres/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 1.5.0 (March 26, 2025)
+
+Changes:
+* Added support for Kubernetes pod scheduling customization via `nodeSelector` and `tolerations`
+
+Features:
+* `nodeSelector`: Configure pod placement on nodes with specific labels
+* `tolerations`: Enable pods to schedule on tainted nodes
+
 ## 1.4.1 (March 19, 2025)
 
 Changes:

helm-charts/infisical-standalone-postgres/Chart.yaml

@@ -7,7 +7,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.4.1
+version: 1.5.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

helm-charts/infisical-standalone-postgres/templates/infisical.yaml

@@ -29,6 +29,14 @@ spec:
       affinity:
         {{- toYaml . | nindent 8 }}
     {{- end }}
+    {{- with $infisicalValues.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+    {{- end }}
+    {{- with $infisicalValues.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+    {{- end }}
     {{- if $infisicalValues.image.imagePullSecrets }}
       imagePullSecrets:
         {{- toYaml $infisicalValues.image.imagePullSecrets | nindent 6 }}

helm-charts/infisical-standalone-postgres/values.yaml

@@ -49,6 +49,10 @@ infisical:
 
   # -- Node affinity settings for pod placement
   affinity: {}
+  # -- Tolerations definitions
+  tolerations: []
+  # -- Node selector for pod placement
+  nodeSelector: {}
   # -- Kubernetes Secret reference containing Infisical root credentials
   kubeSecretRef: "infisical-secrets"
 
@@ -127,7 +131,7 @@ redis:
   cluster:
     # -- Clustered Redis deployment
     enabled: false
-  
+
   # -- Requires a password for Redis authentication
   usePassword: true