Background

We expect every openshift cluster that relies on Cluster API to have an infrastructure cluster and a cluster object.

These resources should exist for the lifetime of the cluster and should not be able to be removed.

We must ensure that infracluster objects from supported platforms cannot be deleted once created.

Changes to go into the cluster-capi-operator.

Steps

• Build validating admission that prevents InfraCluster objects from being deleted
• Either use a webhook, or ValidatingAdmissionPolicy to achieve this
• Apply only to the infracluster object in the openshift-cluster-api namespace

Stakeholders

• Cluster infra

Definition of Done

• When installed into a cluster, the cluster's infracluster object cannot be removed using `oc delete`

• Docs

• <Add docs requirements for this card>

• Testing

• <Explain testing that will be added>