Adapt VPA resources to explicitly specify update mode InPlaceOrRecreate

[Velin-Todorov]

What this PR does / why we need it:
The changes in this PR explicitly set the update mode of the VPA resources to InPlaceOrRecreate. Doing so will allow us to remove the GRM webhook in a future release, as it is currently unconditionally enabled.

Which issue(s) this PR fixes:
Part of gardener/gardener#12955

Special notes for your reviewer:
N/A

Release note:

The update mode of the VerticalPodAutoscaler resource, deployed by oidc-apps-controller,  is now explicitly set to `InPlaceOrRecreate`, reflecting the actual runtime behavior after the unconditional enablement of the `VPAInPlaceUpdates` feature gate.

[gardener-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign nickytd for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[hyperspace-pr-bot]

Summary

The following content is AI-generated and provides a summary of the pull request:

---

How to categorize this PR?
/kind task
/area oidc-apps

What this PR does / why we need it:
This PR explicitly sets the updateMode of the VerticalPodAutoscaler resources deployed by the oidc-apps-controller from Recreate to InPlaceOrRecreate. This change reflects the actual runtime behavior following the unconditional enablement of the VPAInPlaceUpdates feature gate in Gardener, and is a prerequisite for removing the Gardener Resource Manager (GRM) mutating webhook that was previously responsible for injecting this update mode.

Code changes:

• Updated charts/oidc-apps-controller/values.yaml: Changed the default VPA updateMode from "Recreate" to "InPlaceOrRecreate".
• Updated pkg/webhook/test/vpa-mutating-webhook_test.go: Changed test fixtures for both target and non-target VPA objects to use UpdateModeInPlaceOrRecreate instead of UpdateModeRecreate.
• Updated test/e2e/crds/vpa-v1-crd-gen.yaml: Added InPlaceOrRecreate as a valid enum value for the updateMode field in the VPA CRD, aligning with upstream VPA changes.
• Updated example/controller-registration.yaml: Regenerated the embedded Helm chart with the updated VPA update mode value.

Additional context:
This is part of the broader Gardener initiative (gardener/gardener#12955) to enable in-place Pod resource updates for native Gardener components. Once all extensions and components have adopted InPlaceOrRecreate explicitly, the GRM webhook can be safely removed.

Which issue(s) this PR fixes:
Part of gardener/gardener#12955

Special notes for your reviewer:
N/A

Release note:

The update mode of the `VerticalPodAutoscaler` resource deployed by `oidc-apps-controller` is now explicitly set to `InPlaceOrRecreate`, reflecting the actual runtime behavior after the unconditional enablement of the `VPAInPlaceUpdates` feature gate.

---

• 🔄 Regenerate and Update Summary
• ✏️ Insert as PR Description (deletes this comment)
• 🗑️ Delete comment

PR Bot Information

Version: 1.28.2

• File Content Strategy: Full file content
• Output Template: PR Bot Custom Output Template
• Summary Prompt: PR Prompt File
• Event Trigger: pull_request.opened
• Correlation ID: 4eba0c30-85b0-11f1-8caf-ef5c0d749f8d
• LLM: anthropic--claude-4.6-sonnet
• GithubContextProvider: Enabling in-place Pod resource updates to Gardener native components gardener#12955

[gardener-prow]

@hyperspace-pr-bot[bot]: The label(s) area/oidc-apps cannot be applied, because the repository doesn't have them.

Details

In response to this:

Summary

The following content is AI-generated and provides a summary of the pull request:

---

How to categorize this PR?
/kind task
/area oidc-apps

What this PR does / why we need it:
This PR explicitly sets the updateMode of the VerticalPodAutoscaler resources deployed by the oidc-apps-controller from Recreate to InPlaceOrRecreate. This change reflects the actual runtime behavior following the unconditional enablement of the VPAInPlaceUpdates feature gate in Gardener, and is a prerequisite for removing the Gardener Resource Manager (GRM) mutating webhook that was previously responsible for injecting this update mode.

Code changes:

• Updated charts/oidc-apps-controller/values.yaml: Changed the default VPA updateMode from "Recreate" to "InPlaceOrRecreate".
• Updated pkg/webhook/test/vpa-mutating-webhook_test.go: Changed test fixtures for both target and non-target VPA objects to use UpdateModeInPlaceOrRecreate instead of UpdateModeRecreate.
• Updated test/e2e/crds/vpa-v1-crd-gen.yaml: Added InPlaceOrRecreate as a valid enum value for the updateMode field in the VPA CRD, aligning with upstream VPA changes.
• Updated example/controller-registration.yaml: Regenerated the embedded Helm chart with the updated VPA update mode value.

Additional context:
This is part of the broader Gardener initiative (gardener/gardener#12955) to enable in-place Pod resource updates for native Gardener components. Once all extensions and components have adopted InPlaceOrRecreate explicitly, the GRM webhook can be safely removed.

Which issue(s) this PR fixes:
Part of gardener/gardener#12955

Special notes for your reviewer:
N/A

Release note:

The update mode of the `VerticalPodAutoscaler` resource deployed by `oidc-apps-controller` is now explicitly set to `InPlaceOrRecreate`, reflecting the actual runtime behavior after the unconditional enablement of the `VPAInPlaceUpdates` feature gate.

---

• 🔄 Regenerate and Update Summary
• ✏️ Insert as PR Description (deletes this comment)
• 🗑️ Delete comment

PR Bot Information

Version: 1.28.2

• File Content Strategy: Full file content
• Output Template: PR Bot Custom Output Template
• Summary Prompt: PR Prompt File
• Event Trigger: pull_request.opened
• Correlation ID: 4eba0c30-85b0-11f1-8caf-ef5c0d749f8d
• LLM: anthropic--claude-4.6-sonnet
• GithubContextProvider: Enabling in-place Pod resource updates to Gardener native components gardener#12955

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.