helm: add custom labels for toolbox deployment

Allow to assign custom labels for toolbox deployment. Some audit policies require specific labels for all kubernetes objects.

Signed-off-by: Juri Malinovski <juri.malinovski@coolbet.com>
(cherry picked from commit cc7e6b328b)

Documentation/Helm-Charts/ceph-cluster-chart.md

@@ -81,6 +81,7 @@ The following table lists the configurable parameters of the rook-operator chart
 | `toolbox.containerSecurityContext` | Toolbox container security context | `{"capabilities":{"drop":["ALL"]},"runAsGroup":2016,"runAsNonRoot":true,"runAsUser":2016}` |
 | `toolbox.enabled` | Enable Ceph debugging pod deployment. See [toolbox](../Troubleshooting/ceph-toolbox.md) | `false` |
 | `toolbox.image` | Toolbox image, defaults to the image used by the Ceph cluster | `nil` |
+| `toolbox.labels` | Toolbox labels | `{}` |
 | `toolbox.priorityClassName` | Set the priority class for the toolbox if desired | `nil` |
 | `toolbox.resources` | Toolbox resources | `{"limits":{"memory":"1Gi"},"requests":{"cpu":"100m","memory":"128Mi"}}` |
 | `toolbox.tolerations` | Toolbox tolerations | `[]` |

deploy/charts/rook-ceph-cluster/templates/deployment.yaml

@@ -7,6 +7,9 @@ metadata:
   namespace: {{ .Release.Namespace }} # namespace:cluster
   labels:
     app: rook-ceph-tools
+    {{- if .Values.toolbox.labels }}
+    {{- toYaml .Values.toolbox.labels | nindent 4 }}
+    {{- end }}
 spec:
   replicas: 1
 {{- if .Values.revisionHistoryLimit }}
@@ -19,6 +22,9 @@ spec:
     metadata:
       labels:
         app: rook-ceph-tools
+        {{- if .Values.toolbox.labels }}
+        {{- toYaml .Values.toolbox.labels | nindent 8 }}
+        {{- end }}
     spec:
       dnsPolicy: ClusterFirstWithHostNet
 {{- $network := .Values.cephClusterSpec.network | default dict -}}

deploy/charts/rook-ceph-cluster/values.yaml

@@ -30,6 +30,8 @@ toolbox:
   tolerations: []
   # -- Toolbox affinity
   affinity: {}
+  # -- Toolbox labels
+  labels: {}
   # -- Toolbox container security context
   containerSecurityContext:
     runAsNonRoot: true