chore(passport): fine management affinity

Author: duanhongyi

charts/passport/Chart.yaml

@@ -9,4 +9,4 @@ description: Drycc Workflow passport (API).
 maintainers:
   - name: Drycc Team
     email: engineering@drycc.com
-version: v1.0.0
+version: v1.1.0

charts/passport/templates/passport-deployment.yaml

@@ -22,7 +22,10 @@ spec:
       labels:
         app: drycc-passport
     spec:
-      {{- include "common.affinities.pods.soft" (dict "key" "app" "values" (list "drycc-passport")) | indent 6 }}
+      affinity:
+        podAffinity: {{- include "common.affinities.pods" (dict "type" .Values.podAffinityPreset.type "key" .Values.podAffinityPreset.key "values" .Values.podAffinityPreset.values ) | nindent 10 }}
+        podAntiAffinity: {{- include "common.affinities.pods" (dict "type" .Values.podAntiAffinityPreset.type "key" .Values.podAntiAffinityPreset.key "values" .Values.podAntiAffinityPreset.values ) | nindent 10 }}
+        nodeAffinity: {{- include "common.affinities.nodes" (dict "type" .Values.nodeAffinityPreset.type "key" .Values.nodeAffinityPreset.key "values" .Values.nodeAffinityPreset.values ) | nindent 10 }}
       serviceAccount: drycc-passport
       initContainers:
       - name: drycc-passport-init

charts/passport/values.yaml

@@ -2,6 +2,25 @@ imageOrg: "drycc"
 imagePullPolicy: "Always"
 imageTag: "canary"
 imageRegistry: "registry.drycc.cc"
+
+nodeAffinityPreset:
+  key: "drycc.cc/node"
+  type: "soft"
+  values:
+  - "true"
+
+podAffinityPreset:
+  key: "security"
+  type: ""
+  values:
+  - "drycc-security"
+
+podAntiAffinityPreset:
+  key: "app"
+  type: "soft"
+  values:
+  - "drycc-passport"
+
 # Set passport deployment replicas
 replicas: 1
 # limitsCpu: "100m"