Add support for OpenShift management workload partitioning

Add annotations for OpenShift management workload partitioning. Administrators can opt into the feature by annotating the namespace with workload.openshift.io/allowed: management. Otherwise, these annotations will have no effect. Signed-off-by: Andreas Karis <ak.karis@gmail.com>
intel · May 7, 2024 · 1ccb60f · 1ccb60f
1 parent f6f601e
commit 1ccb60f
Show file tree

Hide file tree

Showing 5 changed files with 16 additions and 0 deletions.
diff --git a/assets/100-labeler.yaml b/assets/100-labeler.yaml
@@ -96,6 +96,9 @@ data:
           app: accelerator-discovery
       template:
         metadata:
+          annotations:
+            target.workload.openshift.io/management: |
+              {"effect": "PreferredDuringScheduling"}
           labels:
             app: accelerator-discovery
           name: accelerator-discovery

diff --git a/assets/200-device-plugin.yaml b/assets/200-device-plugin.yaml
@@ -141,6 +141,9 @@ data:
           app: sriov-device-plugin-daemonset
       template:
         metadata:
+          annotations:
+            target.workload.openshift.io/management: |
+              {"effect": "PreferredDuringScheduling"}
           labels:
             app: sriov-device-plugin-daemonset
         spec:

diff --git a/assets/300-daemon.yaml b/assets/300-daemon.yaml
@@ -169,6 +169,8 @@ data:
           # a failure.  This annotation works in tandem with the toleration below.
           annotations:
             scheduler.alpha.kubernetes.io/critical-pod: ""
+            target.workload.openshift.io/management: |
+              {"effect": "PreferredDuringScheduling"}
           labels:
             app: sriov-fec-daemonset
         spec:

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -24,6 +24,8 @@ spec:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: manager
+        target.workload.openshift.io/management: |
+          {"effect": "PreferredDuringScheduling"}
       labels:
         control-plane: controller-manager
     spec:

diff --git a/spec/openshift-deployment.md b/spec/openshift-deployment.md
@@ -21,6 +21,12 @@ Create the project:
 ```shell
 [user@ctrl1 /home]# oc new-project vran-acceleration-operators
 ```
+
+**Optional:** Annotate the project to enable management workload partitioning:
+```
+oc annotate namespace vran-acceleration-operators workload.openshift.io/allowed=management
+```
+
 Execute following commands on cluster:
 
 Create an operator group and the subscriptions (all the commands are run in the `vran-acceleration-operators` namespace):