add current profile annotations to CVO manifests

manifests/00-ns.yaml

@@ -2,6 +2,7 @@ apiVersion: v1
 kind: Namespace
 metadata:
   annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
     openshift.io/node-selector: ""
   name: openshift-cluster-machine-approver
   labels:

manifests/0000_90_cluster-machine-approver_01_prometheusrole.yaml

@@ -3,6 +3,8 @@ kind: Role
 metadata:
   name: prometheus-k8s
   namespace: openshift-cluster-machine-approver
+  annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
 rules:
 - apiGroups:
   - ""

manifests/0000_90_cluster-machine-approver_02_prometheusrolebinding.yaml

@@ -3,6 +3,8 @@ kind: RoleBinding
 metadata:
   name: prometheus-k8s
   namespace: openshift-cluster-machine-approver
+  annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

manifests/0000_90_cluster-machine-approver_03_servicemonitor.yaml

@@ -5,6 +5,8 @@ metadata:
     app: machine-approver
   name: cluster-machine-approver
   namespace: openshift-cluster-machine-approver
+  annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
 spec:
   endpoints:
     - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token

manifests/0000_90_cluster-machine-approver_04_alertrules.yaml

@@ -8,6 +8,7 @@ metadata:
   namespace: openshift-cluster-machine-approver
   annotations:
     exclude.release.openshift.io/internal-openshift-hosted: "true"
+    include.release.openshift.io/self-managed-high-availability: "true"
 spec:
   groups:
     - name: cluster-machine-approver.rules

manifests/01-rbac.yaml

@@ -4,13 +4,17 @@ kind: ServiceAccount
 metadata:
   namespace: openshift-cluster-machine-approver
   name: machine-approver-sa
+  annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: machine-approver
   namespace: openshift-config-managed
+  annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
 rules:
 - apiGroups:
   - ""
@@ -27,6 +31,8 @@ kind: RoleBinding
 metadata:
   name: machine-approver
   namespace: openshift-config-managed
+  annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -41,6 +47,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: system:openshift:controller:machine-approver
+  annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
 rules:
 - apiGroups:
   - certificates.k8s.io
@@ -114,6 +122,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: system:openshift:controller:machine-approver
+  annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

manifests/02-kube-rbac-proxy-config.yaml

@@ -4,6 +4,8 @@ kind: ConfigMap
 metadata:
   name: kube-rbac-proxy
   namespace: openshift-cluster-machine-approver
+  annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
 data:
   config-file.yaml: |+
     authorization:

manifests/03-metrics-service.yaml

@@ -4,6 +4,7 @@ metadata:
   name: machine-approver
   namespace: openshift-cluster-machine-approver
   annotations:
+    include.release.openshift.io/self-managed-high-availability: "true"
     service.alpha.openshift.io/serving-cert-secret-name: machine-approver-tls
   labels:
     app: machine-approver

manifests/04-deployment.yaml

@@ -8,6 +8,7 @@ metadata:
     machine-approver: "true"
   annotations:
     exclude.release.openshift.io/internal-openshift-hosted: "true"
+    include.release.openshift.io/self-managed-high-availability: "true"
 spec:
   strategy:
     type: Recreate

manifests/05-clusteroperator.yaml

@@ -4,6 +4,7 @@ metadata:
   name: machine-approver
   annotations:
     exclude.release.openshift.io/internal-openshift-hosted: "true"
+    include.release.openshift.io/self-managed-high-availability: "true"
 spec: {}
 status:
   versions: