feat: Propagate global tolerations to webhook jobs (#668)

* fix: Propagate global tolerations to webhook jobs

* test: Add unit test for global tolerations

Signed-off-by: Volodymyr Chernetskyi <19735328+chernetskyi@users.noreply.github.com>

* chore: Add changelog entry

Signed-off-by: Volodymyr Chernetskyi <19735328+chernetskyi@users.noreply.github.com>

* Add additional helm unit test

---------

Signed-off-by: Volodymyr Chernetskyi <19735328+chernetskyi@users.noreply.github.com>
Co-authored-by: Daniel Budziwojski <dbudziwojski@newrelic.com>

Author: chernetskyi

CHANGELOG.md

@@ -10,6 +10,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### security
 - Allow pre-upgrade job pods to honor global security context settings @dpacheconr [#670](https://github.com/newrelic/k8s-metadata-injection/pull/670)
 
+### enhancement
+- Propagate global tolerations to webhook jobs @chernetskyi [#668](https://github.com/newrelic/k8s-metadata-injection/pull/668)
+
 ## v1.38.1 - 2025-10-20
 
 ### ⛓️ Dependencies

charts/nri-metadata-injection/templates/admission-webhooks/job-patch/job-createSecret.yaml

@@ -58,8 +58,8 @@ spec:
       nodeSelector:
         kubernetes.io/os: linux
         {{ include "newrelic.common.nodeSelector" . | nindent 8 }}
-      {{- if .Values.tolerations }}
+      {{- with include "newrelic.common.tolerations" . }}
       tolerations:
-        {{- toYaml .Values.tolerations | nindent 8 }}
+        {{- . | nindent 8 -}}
       {{- end }}
 {{- end }}

charts/nri-metadata-injection/templates/admission-webhooks/job-patch/job-patchWebhook.yaml

@@ -58,8 +58,8 @@ spec:
       nodeSelector:
         kubernetes.io/os: linux
         {{ include "newrelic.common.nodeSelector" . | nindent 8 }}
-      {{- if .Values.tolerations }}
+      {{- with include "newrelic.common.tolerations" . }}
       tolerations:
-        {{- toYaml .Values.tolerations | nindent 8 }}
+        {{- . | nindent 8 -}}
       {{- end }}
 {{- end }}

charts/nri-metadata-injection/tests/job_serviceaccount_test.yaml

@@ -57,3 +57,37 @@ tests:
           value:
             kubernetes.io/os: linux
             aCoolTestLabel: aCoolTestValue
+
+  - it: has propagated global tolerations
+    set:
+      cluster: my-cluster
+      global.tolerations:
+        - key: globalTaintKey
+          operator: Exists
+          effect: NoExecute
+    asserts:
+      - equal:
+          path: spec.template.spec.tolerations
+          value:
+            - key: globalTaintKey
+              operator: Exists
+              effect: NoExecute
+
+  - it: has overrides global tolerations with chart specific tolerations
+    set:
+      cluster: my-cluster
+      global.tolerations:
+        - key: globalTaintKey
+          operator: Exists
+          effect: NoExecute
+      tolerations:
+        - key: localTaintKey
+          operator: Exists
+          effect: NoExecute
+    asserts:
+      - equal:
+          path: spec.template.spec.tolerations
+          value:
+            - key: localTaintKey
+              operator: Exists
+              effect: NoExecute