What does this annotation mean?

Can anyone tell me what this annotation on an object means? It suggests to me that you can't patch this object, but I'm not sure. Is it safe to change to false?

release.openshift.io/create-only: "true"

Posted Jul 16, 2020, 9:59 PM UTC

13
bonkstok•

From https://github.com/openshift/cluster-version-operator/blob/master/docs/dev/operators.md

"cases where the contents of a resource are not managed, but the presence is required for usability. Today the only known use-case is config.openshift.io, so that oc edit foo.config.openshift.io "just works".

To do this, you can set .metadata.annotations["release.openshift.io/create-only"]="true"."

Does that help?

6
adambkaplan•

There are other cases where the cluster-version-operator creates objects with this annotation, notably ConfigMaps that have the config.openshift.io/inject-trusted-cabundle: "true" label [1]. A separate controller populates the ConfigMap with the cluster-wide trust bundle, therefore we don't want the CVO to reconcile and delete the injected data.

[1] https://github.com/openshift/cluster-image-registry-operator/blob/master/manifests/04-ca-trusted.yaml

2
devnullifyOP•

Yes, thanks

1