feat: adding support for nodeSelector with runtime-enforcer debugger deployment

charts/runtime-enforcer/templates/debugger/deployment.yaml

@@ -34,13 +34,17 @@ spec:
           value: {{ include "runtime-enforcer.grpc.certDir" . | quote }}
         {{- with .Values.debugger.resources }}
         resources:
-          {{- toYaml . | nindent 10 }}
+        {{- toYaml . | nindent 10 }}
         {{- end }}
         volumeMounts:
         - name: grpc-certs
           mountPath: {{ include "runtime-enforcer.grpc.certDir" . }}
           readOnly: true
         securityContext: {{- toYaml .Values.debugger.containerSecurityContext | nindent 10 }}
+      {{- with .Values.debugger.nodeSelector }}
+      nodeSelector:
+      {{- toYaml . | nindent 8 }}
+      {{- end }}
       volumes:
       - name: grpc-certs
         csi:

charts/runtime-enforcer/tests/deployment_debugger_test.yaml

@@ -0,0 +1,27 @@
+suite: "Debugger Deployment Tests"
+templates:
+  - "templates/debugger/deployment.yaml"
+
+tests:
+  - it: "should set nodeSelector"
+    set:
+      debugger:
+        enabled: true
+        nodeSelector:
+          kubernetes.io/os: linux
+          node-role: control-plane
+    asserts:
+      - equal:
+          path: spec.template.spec.nodeSelector["kubernetes.io/os"]
+          value: linux
+      - equal:
+          path: spec.template.spec.nodeSelector["node-role"]
+          value: control-plane
+
+  - it: "should not render nodeSelector when empty"
+    set:
+      debugger:
+        nodeSelector: {}
+    asserts:
+      - notExists:
+          path: spec.template.spec.nodeSelector

charts/runtime-enforcer/values.schema.json

@@ -377,6 +377,10 @@
                 "interval": {
                     "type": "string"
                 },
+                "nodeSelector": {
+                    "type": "object",
+                    "additionalProperties": true
+                },
                 "resources": {
                     "type": "object",
                     "properties": {

charts/runtime-enforcer/values.yaml

@@ -158,6 +158,9 @@ debugger:
     requests:
       cpu: 500m
       memory: 256Mi
+  # debugger.nodeSelector -- Node selector for the debugger pods.
+  # @schema additionalProperties:true
+  nodeSelector: {}
 
 # Learning mode configuration
 learning: