Uploaded image for project: 'Red Hat Advanced Cluster Security'
  1. Red Hat Advanced Cluster Security
  2. ROX-31063

[Install]: Support Global NodeSelectors and Tolerations in Central CR

    • Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • None
    • Support Global NodeSelectors and Tolerations in Central CR
    • False
    • Hide

      None

      Show
      None
    • False
    • ROX-31014Global NodeSelector and Tolerances Support for Central CR
    • Not Selected
    • To Do
    • ROX-31014 - Global NodeSelector and Tolerances Support for Central CR

      • Find a place for the new fields. Perhaps something like spec.deploymentDefaults would be a better home than top-level spec? Think of a name generic enough to:
        • allow adding additional fields in the future (e.g. DeploymentSpec currently also contains hostAliases which could also use such default top-level setting)
        • be consistent with SecuredCluster if we also add such fields to it (now or eventually)
      • Add the new fields to the schema
        • nodeSelector
        • tolerations
        • pinToNodes: {None|InfraRole}
          • the former value is the default and is a no-op
          • the latter acts as the following default for the other ones:
                nodeSelector:
                  node-role.kubernetes.io/infra: ""
                tolerations:
                - key: node-role.kubernetes.io/infra
                  value: reserved
                  effect: NoSchedule
                - key: node-role.kubernetes.io/infra
                  value: reserved
                  effect: NoExecute
          • background discussion
      • Change translator code to take them into account in addition to the component-specific deployment specs; add tests
      • [Optional] For consistency also do something similar to SecuredCluster schema/translator
      • Provide a high-level description for docs team

              Unassigned Unassigned
              syethadk@redhat.com Sukumar Yethadka
              ACS Install
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: