GCP - ConfidentialCompute with onHostMaintenance Migrate

[WTFKr0]

Context

Provisionning Machines on GCP Provider
With confidential compute enabled
Try to set onHostMaintenance to Migrate

Current Issue

Today the webhook refused this case, as it is forbidden by default on GCP.

But an exception exists on n2d series
See this doc for information : https://cloud.google.com/confidential-computing/confidential-vm/docs/troubleshoot-live-migration

Resolution

Add an exception on the webhhook for the n2d series VM, and accept the Migrate onHostMaintenance

Environment

This issue is present on Openshift 4.16, 4.18 and 4.19 for sure

[openshift-bot]

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

[openshift-bot]

Stale issues rot after 30d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle rotten
/remove-lifecycle stale