docs: PDBs for all pods, require spread

Co-Authored-By: [email protected] <[email protected]>

helm/docs-app/CHANGELOG.md

@@ -0,0 +1,18 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+
+- Use `requiredDuringSchedulingIgnoredDuringExecution` for `podAntiAffinity`
+- Add `PodDisruptionBudget` (PDB) for all deployments
+- Add `RollingUpdate` strategy with `maxSurge: 1` and `maxUnavailable: 1`
+
+### Changed
+
+### Removed

helm/docs-app/templates/deployment.yaml

@@ -8,6 +8,11 @@ metadata:
 spec:
   replicas: 2
   revisionHistoryLimit: 2
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 1
   selector:
     matchLabels:
       app: {{ .Values.name }}
@@ -19,21 +24,18 @@ spec:
     spec:
       affinity:
         podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - podAffinityTerm:
-              labelSelector:
-                matchLabels:
-                  app: {{ .Values.name }}
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchLabels:
+                app: {{ .Values.name }}
               topologyKey: kubernetes.io/hostname
-            weight: 100
       securityContext:
         runAsUser: 1000
         seccompProfile:
           type: RuntimeDefault
 
       containers:
         - name: docs-app
-          # Public image required
           image: gsoci.azurecr.io/giantswarm/docs:{{ .Chart.Version }}
           securityContext:
             allowPrivilegeEscalation: false