feat: add nodeSelector, tolerations, and affinity support

[mikaeld]

Summary

• Adds nodeSelector, tolerations, and affinity as optional pod-level scheduling fields for workloads (Deployments, Rollouts) and tasks (Jobs, CronJobs)
• Adds schema validation for all three fields in values.schema.json
• Adds documentation and examples in values.yaml

Motivation

Tenants need the ability to schedule workloads onto specific node pools (e.g. high-memory, GPU, or dedicated pools) using standard Kubernetes scheduling primitives.

Usage example

workloads:
  my-workload:
    nodeSelector:
      cloud.google.com/gke-nodepool: high-memory-pool
    tolerations:
      - key: dedicated
        operator: Equal
        value: high-memory
        effect: NoSchedule

Test

Values

  workloads:
    default:
      nodeSelector:
        tenant: ingestion-sink
      tolerations:
        - key: tenant
          operator: Equal
          value: ingestion-sink
          effect: NoSchedule

Helm template output

apiVersion: apps/v1
kind: Deployment
metadata:
  name: structured-decoded-loader
      [...]
      nodeSelector:
        tenant: ingestion-sink
      tolerations:
        - effect: NoSchedule
          key: tenant
          operator: Equal
          value: ingestion-sink

Related

• SVCSE-4143
• SVCSE-4358

[emaydeck-mozilla]

Would you mind uncommenting the empty key/value pairs you added to values.yaml? Since they're empty, your if statements should still evaluate as false and uncommenting them will allow helm-docs to pick up on them for the readme.

Otherwise, this looks good. Thanks for getting it added!

[emaydeck-mozilla]

I'd love to get #219 merged before this so we can test that out as a release process. Let me ping you once that's done.

[github-actions]

Chart Version Preview

The following charts will be bumped when this PR is merged:

Chart	Current Version	New Version
mozcloud	0.15.2	0.16.0
Dry run; no changes made.
Release type: minor (set via PR label - apply patch, minor, major, or no-release to override)