nodeSelector or affinity to run pods scans and tolerations

[adonaicosta]

Feature Description

Need to run scans in specific node pool and set tolerations when required

What alternatives have you considered?

In openshift you can set annotation in namespace zora-system, e.g.

oc annotate namespace zora-system 'scheduler.alpha.kubernetes.io/defaultTolerations'='[{"value": "reserved", "effect": "NoSchedule", "key": "infra"},{"value": "reserved", "effect": "NoExecute", "key": "infra"}]'

oc patch namespace zora-system -p '{"metadata":{"annotations":{"openshift.io/node-selector":"env=infra"}}

But vanilla or cloud kubernetes is not possible

[hmizael]

In Kubernetes it is also possible to:

apiVersion: v1
kind: Namespace
metadata:
  name: apps-that-need-nodes-exclusively
  annotations:
    scheduler.alpha.kubernetes.io/node-selector: name-of-node-selector
    scheduler.alpha.kubernetes.io/defaultTolerations: '[{"operator": "Exists", "effect": "NoSchedule", "key": "dedicated-node"}]'