Merge pull request #22 from grokspawn/annotations-add

UPSTREAM: <carry>: add namespace management annotation

Author: openshift-merge-robot

openshift/generate-manifests.sh

@@ -57,6 +57,7 @@ for container_name in "${!IMAGE_MAPPINGS[@]}"; do
   $YQ -i "(select(.kind == \"Deployment\")|.spec.template.spec.containers[]|select(.name==\"$container_name\")|.image) = \"$placeholder\"" "$TMP_KUSTOMIZE_OUTPUT"
   $YQ -i 'select(.kind == "Deployment").spec.template.metadata.annotations += {"target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}"}' "$TMP_KUSTOMIZE_OUTPUT"
   $YQ -i 'select(.kind == "Deployment").spec.template.spec += {"priorityClassName": "system-cluster-critical"}' "$TMP_KUSTOMIZE_OUTPUT"
+  $YQ -i 'select(.kind == "Namespace").metadata.annotations += {"workload.openshift.io/allowed": "management"}' "$TMP_KUSTOMIZE_OUTPUT"
 done
 
 # Use yq to split the single yaml file into 1 per document.

openshift/manifests/00-namespace-openshift-operator-controller.yml

@@ -12,3 +12,5 @@ metadata:
     pod-security.kubernetes.io/enforce: restricted
     pod-security.kubernetes.io/enforce-version: latest
   name: openshift-operator-controller
+  annotations:
+    workload.openshift.io/allowed: management