feat: support container resize policy for runtime resource updates (#346)

* feat: support container resize policy for runtime resource updates

Add resizePolicy option to allow in-place pod resource updates
without restart (beta and enabled by default in Kubernetes 1.33+)

Ref: https://kubernetes.io/docs/tasks/configure-pod-container/resize-container-resources/

---------

Signed-off-by: younsl <cysl@kakao.com>

Author: younsl

helm/oauth2-proxy/Chart.yaml

@@ -1,5 +1,5 @@
 name: oauth2-proxy
-version: 8.1.1
+version: 8.2.0
 apiVersion: v2
 appVersion: 7.12.0
 home: https://oauth2-proxy.github.io/oauth2-proxy/
@@ -31,8 +31,8 @@ maintainers:
 kubeVersion: ">=1.16.0-0"
 annotations:
   artifacthub.io/changes: |
-    - kind: fixed
-      description: Fixed the Pod Disruption Budget when Horizontal Pod Autoscaling is enabled
+    - kind: added
+      description: Add support for new container resize policy feature
       links:
         - name: Github PR
-          url: https://github.com/oauth2-proxy/manifests/pull/341
+          url: https://github.com/oauth2-proxy/manifests/pull/346

helm/oauth2-proxy/README.md

@@ -198,6 +198,7 @@ The following table lists the configurable parameters of the oauth2-proxy chart
 | `readinessProbe.successThreshold`                     | number of successes                                                                                                                                                                                                                                              | 1                                                                                                    |
 | `replicaCount`                                        | desired number of pods                                                                                                                                                                                                                                           | `1`                                                                                                  |
 | `resources`                                           | pod resource requests & limits                                                                                                                                                                                                                                   | `{}`                                                                                                 |
+| `resizePolicy`                                        | Container resize policy for runtime resource updates. See [Kubernetes docs](https://kubernetes.io/docs/tasks/configure-pod-container/resize-container-resources/)                                                                                               | `[]`                                                                                                 |
 | `revisionHistoryLimit`                                | maximum number of revisions maintained                                                                                                                                                                                                                           | 10                                                                                                   |
 | `service.portNumber`                                  | port number for the service                                                                                                                                                                                                                                      | `80`                                                                                                 |
 | `service.appProtocol`                                 | application protocol on the port of the service                                                                                                                                                                                                                  | `http`                                                                                               |

helm/oauth2-proxy/templates/deployment.yaml

@@ -285,6 +285,9 @@ spec:
 {{- end }}
         resources:
 {{ toYaml .Values.resources | indent 10 }}
+{{- with .Values.resizePolicy }}
+        resizePolicy: {{ toYaml . | nindent 10 }}
+{{- end }}
         volumeMounts:
 {{- with .Values.config.google }}
 {{- if and .adminEmail (or .serviceAccountJson .existingSecret) }}

helm/oauth2-proxy/values.yaml

@@ -215,6 +215,14 @@ resources:
   #   cpu: 100m
   #   memory: 300Mi
 
+# Container resize policy for runtime resource updates
+# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/resize-container-resources/
+resizePolicy: []
+  # - resourceName: cpu
+  #   restartPolicy: NotRequired
+  # - resourceName: memory
+  #   restartPolicy: RestartContainer
+
 extraVolumes:
   []
   # - name: ca-bundle-cert