1. Proposed title of this feature request

Allow removing kata runtime from a subset of nodes

2. What is the nature and description of the request?

When Sandboxed Containers are deployed with the default settings (ie. without eligibility check or kataConfigPoolSelector option in KataConfig) the kata runtime is deployed on all worker nodes. If we then would like to remove the kata runtime  from a subset of nodes, it is not possible.

• https://docs.openshift.com/container-platform/4.10/sandboxed_containers/deploying-sandboxed-container-workloads.html

3. Why does the customer need this? (List the business requirements here)

Customer deployed Sandboxed Containers in their baremetal cluster and is not able to remove kata runtime form certain subset of nodes.

4. List any affected packages or components.

• OpenShift Sandboxed Containers