Uploaded image for project: 'Red Hat Advanced Cluster Security'
  1. Red Hat Advanced Cluster Security
  2. ROX-31063

[Install]: Support Global NodeSelectors and Tolerations in Central CR

    • Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • OpenShift Operator
    • Support Global NodeSelectors and Tolerations in Central CR
    • False
    • Hide

      None

      Show
      None
    • True
    • ROX-31014Global NodeSelector and Tolerances Support for Central CR
    • Not Selected
    • In Progress
    • ROX-31014 - Global NodeSelector and Tolerances Support for Central CR
    • 0% To Do, 100% In Progress, 0% Done
    • Hide

      2025-11-25:

      • implementation PR (for both Central and Secured Cluster CRs) in progress
      • TBD: code clean-up and more E2E testing

      2025-11-18:

      • started implementation work
      Show
      2025-11-25: implementation PR (for both Central and Secured Cluster CRs) in progress TBD: code clean-up and more E2E testing 2025-11-18: started implementation work

      • Find a place for the new fields. Perhaps something like spec.deploymentDefaults would be a better home than top-level spec? Think of a name generic enough to:
        • allow adding additional fields in the future (e.g. DeploymentSpec currently also contains hostAliases which could also use such default top-level setting)
        • be consistent with SecuredCluster if we also add such fields to it (now or eventually)
      • Add the new fields to the schema
        • nodeSelector
        • tolerations
        • pinToNodes: {None|InfraRole}
          • the former value is the default and is a no-op
          • the latter acts as the following default for the other ones:
                nodeSelector:
                  node-role.kubernetes.io/infra: ""
                tolerations:
                - key: node-role.kubernetes.io/infra
                  value: reserved
                  effect: NoSchedule
                - key: node-role.kubernetes.io/infra
                  value: reserved
                  effect: NoExecute
          • background discussion
      • Change translator code to take them into account in addition to the component-specific deployment specs; add tests
      • [Optional] For consistency also do something similar to SecuredCluster schema/translator
      • Provide a high-level description for docs team

              rh-ee-vbologa Vlad Bologa
              syethadk@redhat.com Sukumar Yethadka
              ACS Install
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: