Skip to content

Add placement tolerations check to ocp-best-practices policy set - #2

Merged
ch-stark merged 1 commit into
mainfrom
add-ocp-best-practices-placement-tolerations
Jul 11, 2026
Merged

Add placement tolerations check to ocp-best-practices policy set#2
ch-stark merged 1 commit into
mainfrom
add-ocp-best-practices-placement-tolerations

Conversation

@ch-stark

Copy link
Copy Markdown
Owner

Summary

Ports open-cluster-management-io/policy-collection#556 into the consolidated ocp-best-practices policy set:

  • Adds hub-targeted openshift-best-practices-hub policy set with input/hub-placement.yaml
  • Adds policy-placement-tolerations (critical, inform) to ensure all hub Placements include unreachable and unavailable tolerations
  • Adds explicit policySets: [openshift-best-practices] on existing spoke policies so they are not pulled into the hub set via policyDefaults

Differences from upstream PR

  • Hub placement name fixed: placement-openshift-best-practices-hub (upstream PR copies placement-openshift-plus-hub from openshift-plus)
  • Path: policies/policy-sets/community/ocp-best-practices/ (consolidation layout vs upstream policygenerator/...)

Relationship to existing consolidation policy

policies/acm-configs/ensure-placement-toleration/ already enforces placement tolerations fleet-wide (enforce, env-bound-hub-placement). This change adds the same check as an inform policy inside the ocp-best-practices community policy set bundle, matching upstream intent.

Test plan

  • ./build/validate-policies.sh passes
  • ocp-best-practices kustomize build generates 18 valid resources (was 15)
  • Deploy to dev hub and confirm policy-placement-tolerations reports on Placements missing tolerations
  • Confirm spoke policies remain on openshift-best-practices only (not hub set)

Made with Cursor

Ports open-cluster-management-io/policy-collection#556: hub-targeted
policy-placement-tolerations, openshift-best-practices-hub policy set,
and explicit policySets overrides for existing spoke policies.

Co-authored-by: Cursor <cursoragent@cursor.com>

@ch-stark ch-stark left a comment

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK

@ch-stark
ch-stark merged commit d8815ac into main Jul 11, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant