UPSTREAM: <carry>: Add openshift node selector annotation

Cherry-pick manually fix done for catalogd: openshift/operator-framework-operator-controller#307

Author: camilamacedo86

openshift/generate-manifests.sh

@@ -72,7 +72,6 @@ for container_name in "${!IMAGE_MAPPINGS[@]}"; do
   $YQ -i 'select(.kind == "Deployment").spec.template.metadata.annotations += {"target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}"}' "$TMP_KUSTOMIZE_OUTPUT"
   $YQ -i 'select(.kind == "Deployment").spec.template.metadata.annotations += {"openshift.io/required-scc": "privileged"}' "$TMP_KUSTOMIZE_OUTPUT"
   $YQ -i 'select(.kind == "Deployment").spec.template.spec += {"priorityClassName": "system-cluster-critical"}' "$TMP_KUSTOMIZE_OUTPUT"
-  $YQ -i 'select(.kind == "Namespace").metadata.annotations += {"workload.openshift.io/allowed": "management"}' "$TMP_KUSTOMIZE_OUTPUT"
 done
 
 # Loop through any flag updates that need to be made to the manager container

openshift/kustomize/overlays/openshift/olmv1-ns/kustomization.yaml

@@ -11,6 +11,7 @@ resources:
 
 patches:
 - path: patches/manager_namespace_privileged.yaml
+- path: patches/manager_namespace_annotations.yaml
 - target:
     kind: Service
     name: service

openshift/kustomize/overlays/openshift/olmv1-ns/patches/manager_namespace_annotations.yaml

@@ -0,0 +1,8 @@
+$patch: merge
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: system
+  annotations:
+    workload.openshift.io/allowed: "management"
+    openshift.io/node-selector: ""

openshift/manifests/00-namespace-openshift-catalogd.yml

@@ -1,6 +1,9 @@
 apiVersion: v1
 kind: Namespace
 metadata:
+  annotations:
+    openshift.io/node-selector: ""
+    workload.openshift.io/allowed: management
   labels:
     app.kubernetes.io/part-of: olm
     pod-security.kubernetes.io/audit: privileged
@@ -10,5 +13,3 @@ metadata:
     pod-security.kubernetes.io/warn: privileged
     pod-security.kubernetes.io/warn-version: latest
   name: openshift-catalogd
-  annotations:
-    workload.openshift.io/allowed: management