4.16 new introduced daemonset dose not have the toleration for infra nodes.

4.16.x    

Always

    1. Setup the managed cluster (ROSA)
    2. Check the daemonset in openshift-network-operator namespace
 

The iptables-alerter pods are running in the master nodes but not the infra     

If we would like the iptables-alerter to be running across the fleet, it should not only tolerate the masters only?

        tolerations:
        - effect: NoSchedule
          key: node-role.kubernetes.io/master
          operator: Exists

It should tolerate all the taints or at least tolerate the infra role "node-role.kubernetes.io/master" for better managed cluster stable.