kubevirt / hyperconverged-cluster-operator / 23588631420

80%

push

github

Accelerated Infrastructure Enablement Webhook Deployment (#4054)

* Add AIE webhook operand with ConfigMap-based configuration

Add the AIE (Accelerated Infrastructure Enablement) webhook as an HCO
operand, gated behind the deployAIEWebhook feature gate. When enabled,
HCO deploys a mutating webhook that intercepts virt-launcher Pod
creation and replaces the compute container image based on configurable
rules.

Webhook rule configuration lives in a user-editable ConfigMap
(kubevirt-aie-launcher-config) rather than the HCO CR, since the AIE
webhook is a single-release solution that will be replaced by
virt-operator in v1.9.0. This minimises CRD changes and future cleanup.
HCO creates the ConfigMap with an empty rules default and skips data
reconciliation so user edits are preserved.

TLS certificates are expected to be provisioned externally (e.g. via
cert-manager or OpenShift service-ca annotations) rather than managed
by HCO directly.

Operand resources created when the feature gate is enabled:
- ServiceAccount, ClusterRole, ClusterRoleBinding
- Deployment (image from AIE_WEBHOOK_IMAGE env var)
- Service (port 443)
- MutatingWebhookConfiguration
- ConfigMap with default empty rules

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Lee Yarwood <lyarwood@redhat.com>

* Regenerate manifests

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Lee Yarwood <lyarwood@redhat.com>

---------

Signed-off-by: Lee Yarwood <lyarwood@redhat.com>

360 of 442 new or added lines in 10 files covered. (81.45%)

10388 of 12976 relevant lines covered (80.06%)

2.05 hits per line