feat(helm-ee)!: add worker pools and extraDeploy hook + major bump chart to v9.0.0

docs/worker-queues.md

@@ -20,6 +20,7 @@ For general API documentation, see [API Documentation](./api.md). For the exact
 - [Queue Management](#queue-management)
 - [Queue Assignment](#queue-assignment)
 - [Worker Configuration](#worker-configuration)
+  - [Helm Example: main and arm64 pools](#helm-example-main-and-arm64-pools)
 - [Metrics and Autoscaling](#metrics-and-autoscaling)
 - [End to End Example](#end-to-end-example)
   - [1. Create a queue](#1-create-a-queue)
@@ -119,6 +120,31 @@ Special handling:
 - In worker configuration, `all` is a wildcard value that means "consume from every queue"
 - If `all` is present, it overrides the need to list specific queues
 
+### Helm Example: main and arm64 pools
+
+If you deploy with the Helm chart, a minimal change pattern is to keep `main` on amd64 and add a dedicated `arm64` queue/pool:
+
+```yaml
+renovateWorker:
+  pools:
+    - name: main
+      replicas: 2
+      mendRnvWorkerQueues: main
+      nodeSelector:
+        kubernetes.io/arch: amd64
+    - name: arm64
+      replicas: 2
+      mendRnvWorkerQueues: arm64
+      nodeSelector:
+        kubernetes.io/arch: arm64
+```
+
+Then assign selected repositories or organizations to `arm64` via the queue assignment API. Unassigned jobs continue to route to `main`.
+
+Each entry in `renovateWorker.pools` renders a separate worker Deployment. Pool values are merged over root `renovateWorker` values.
+
+For additional Helm examples (including `extraDeploy` autoscaling patterns), see [`helm-charts/mend-renovate-ee/values.yaml`](../helm-charts/mend-renovate-ee/values.yaml).
+
 ## Metrics and Autoscaling
 
 If Prometheus metrics are enabled on the server, worker queue state is exposed through the metrics output.

helm-charts/mend-renovate-ee/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: mend-renovate-enterprise-edition
-version: 8.2.0
+version: 9.0.0
 appVersion: 14.2.0
 description: Mend Renovate Enterprise Edition
 home: https://github.com/mend/renovate-ce-ee

helm-charts/mend-renovate-ee/templates/_helpers.tpl

@@ -64,6 +64,79 @@ Expand the name of the worker secret
 {{- end -}}
 {{- end -}}
 
+{{/*
+Expand the name of the worker configmap
+*/}}
+{{- define "mend-renovate.worker-configmap-name" -}}
+{{- include "mend-renovate.fullname" . }}-config-js
+{{- end -}}
+
+{{/*
+Expand the name of the worker configmap for a pooled worker deployment.
+Input dict:
+  root: full chart context
+  worker: merged worker values for the current pool
+*/}}
+{{- define "mend-renovate.worker-configmap-name-for-pool" -}}
+{{- if gt (len (default (list) .root.Values.renovateWorker.pools)) 0 -}}
+{{- $poolName := required "renovateWorker.pools[].name is required when pools are configured" .worker.name -}}
+{{- include "mend-renovate.worker-configmap-name" .root }}-{{ $poolName }}
+{{- else -}}
+{{- include "mend-renovate.worker-configmap-name" .root -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Expand the name of the worker secret for a pooled worker deployment.
+Input dict:
+  root: full chart context
+  worker: merged worker values for the current pool
+*/}}
+{{- define "mend-renovate.worker-secret-name-for-pool" -}}
+{{- if .worker.existingSecret -}}
+{{- .worker.existingSecret -}}
+{{- else if gt (len (default (list) .root.Values.renovateWorker.pools)) 0 -}}
+{{- $poolName := required "renovateWorker.pools[].name is required when pools are configured" .worker.name -}}
+{{- include "mend-renovate.name" .root }}-worker-{{ $poolName }}
+{{- else -}}
+{{- include "mend-renovate.worker-secret-name" .root -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Validate worker pools configuration.
+*/}}
+{{- define "mend-renovate.validate-worker-pools" -}}
+{{- $workerPools := default (list) .Values.renovateWorker.pools -}}
+{{- $workerPoolNames := dict -}}
+
+{{- range $pool := $workerPools -}}
+  {{- $poolName := required "renovateWorker.pools[].name is required when pools are configured" $pool.name -}}
+
+  {{- if hasKey $workerPoolNames $poolName -}}
+    {{- fail (printf "duplicate renovateWorker.pools[].name %q is not allowed" $poolName) -}}
+  {{- end -}}
+
+  {{- $_ := set $workerPoolNames $poolName true -}}
+
+  {{- if and (kindIs "map" $pool) (hasKey $pool "serviceAccount") -}}
+    {{- fail (printf "renovateWorker.pools[%s].serviceAccount is not supported; use renovateWorker.serviceAccount for all worker pools" $poolName) -}}
+  {{- end -}}
+
+  {{- if and (kindIs "map" $pool) (hasKey $pool "npmrc") -}}
+    {{- fail (printf "renovateWorker.pools[%s].npmrc is not supported; use renovateWorker.npmrc at root level" $poolName) -}}
+  {{- end -}}
+
+  {{- if and (kindIs "map" $pool) (hasKey $pool "npmrcExistingSecret") -}}
+    {{- fail (printf "renovateWorker.pools[%s].npmrcExistingSecret is not supported; use renovateWorker.npmrcExistingSecret at root level" $poolName) -}}
+  {{- end -}}
+
+  {{- if and (kindIs "map" $pool) (hasKey $pool "extraDeploy") -}}
+    {{- fail (printf "renovateWorker.pools[%s].extraDeploy is not supported; use extraDeploy at root level" $poolName) -}}
+  {{- end -}}
+{{- end -}}
+{{- end -}}
+
 {{/*
 Expand the name of the web secret
 */}}
@@ -98,7 +171,7 @@ Expand the name of the server service account
 {{- end -}}
 
 {{/*
-Expand the name of the worker service account
+Expand the name of the worker service account.
 */}}
 {{- define "mend-renovate.worker-service-account-name" -}}
 {{- if .Values.renovateWorker.serviceAccount.create -}}