Add osc operator

Signed-off-by: xiangchun Fu <xfu@redhat.com>

internal/cluster/statemachine.go

@@ -124,6 +124,7 @@ func NewClusterStateMachine(th TransitionHandler) stateswitch.StateMachine {
 		If(IsLvmRequirementsSatisfied),
 		If(IsMceRequirementsSatisfied),
 		If(IsMtvRequirementsSatisfied),
+		If(IsOscRequirementsSatisfied),
 		If(isNetworkTypeValid),
 		If(NetworksSameAddressFamilies),
 		If(IsNodeFeatureDiscoveryRequirementsSatisfied),

internal/cluster/validation_id.go

@@ -34,6 +34,7 @@ const (
 	IsLvmRequirementsSatisfied                  = ValidationID(models.ClusterValidationIDLvmRequirementsSatisfied)
 	IsMceRequirementsSatisfied                  = ValidationID(models.ClusterValidationIDMceRequirementsSatisfied)
 	IsMtvRequirementsSatisfied                  = ValidationID(models.ClusterValidationIDMtvRequirementsSatisfied)
+	IsOscRequirementsSatisfied                  = ValidationID(models.ClusterValidationIDOscRequirementsSatisfied)
 	PlatformRequirementsSatisfied               = ValidationID(models.ClusterValidationIDPlatformRequirementsSatisfied)
 	IsNodeFeatureDiscoveryRequirementsSatisfied = ValidationID(models.ClusterValidationIDNodeFeatureDiscoveryRequirementsSatisfied)
 	IsNvidiaGPURequirementsSatisfied            = ValidationID(models.ClusterValidationIDNvidiaGpuRequirementsSatisfied)
@@ -59,6 +60,7 @@ func (v ValidationID) Category() (string, error) {
 		IsLvmRequirementsSatisfied,
 		IsMceRequirementsSatisfied,
 		IsMtvRequirementsSatisfied,
+		IsOscRequirementsSatisfied,
 		IsNodeFeatureDiscoveryRequirementsSatisfied,
 		IsNvidiaGPURequirementsSatisfied,
 		IsPipelinesRequirementsSatisfied,

internal/featuresupport/feature_support_level.go

@@ -35,6 +35,7 @@ var featuresList = map[models.FeatureSupportLevelID]SupportLevelFeature{
 	models.FeatureSupportLevelIDMCE:                  (&MceFeature{}).New(),
 	models.FeatureSupportLevelIDODF:                  (&OdfFeature{}).New(),
 	models.FeatureSupportLevelIDMTV:                  (&MtvFeature{}).New(),
+	models.FeatureSupportLevelIDOSC:                  (&OSCFeature{}).New(),
 	models.FeatureSupportLevelIDNODEFEATUREDISCOVERY: (&NodeFeatureDiscoveryFeature{}).New(),
 	models.FeatureSupportLevelIDNVIDIAGPU:            (&NvidiaGPUFeature{}).New(),
 	models.FeatureSupportLevelIDPIPELINES:            (&PipelinesFeature{}).New(),

internal/featuresupport/features_olm_operators.go

@@ -590,3 +590,57 @@ func (f *OpenShiftAIFeature) getFeatureActiveLevel(cluster *common.Cluster, _ *m
 	}
 	return activeLevelNotActive
 }
+
+// OSCFeature
+type OSCFeature struct{}
+
+func (feature *OSCFeature) New() SupportLevelFeature {
+	return &OSCFeature{}
+}
+
+func (feature *OSCFeature) getId() models.FeatureSupportLevelID {
+	return models.FeatureSupportLevelIDOSC
+}
+
+func (feature *OSCFeature) GetName() string {
+	return "OpenShift Sandboxed Containers"
+}
+
+func (feature *OSCFeature) getSupportLevel(filters SupportLevelFilters) models.SupportLevel {
+	if !isFeatureCompatibleWithArchitecture(feature, filters.OpenshiftVersion, swag.StringValue(filters.CPUArchitecture)) {
+		return models.SupportLevelUnavailable
+	}
+
+	if filters.PlatformType != nil && (*filters.PlatformType == models.PlatformTypeVsphere || *filters.PlatformType == models.PlatformTypeNutanix || *filters.PlatformType == models.PlatformTypeNone) {
+		return models.SupportLevelUnavailable
+	}
+
+	if isNotSupported, err := common.BaseVersionLessThan("4.17", filters.OpenshiftVersion); isNotSupported || err != nil {
+		return models.SupportLevelUnavailable
+	}
+
+	return models.SupportLevelSupported
+}
+
+func (feature *OSCFeature) getIncompatibleArchitectures(_ *string) *[]models.ArchitectureSupportLevelID {
+	incompatibleArchitecture := []models.ArchitectureSupportLevelID{
+		models.ArchitectureSupportLevelIDARM64ARCHITECTURE,
+		models.ArchitectureSupportLevelIDS390XARCHITECTURE,
+		models.ArchitectureSupportLevelIDPPC64LEARCHITECTURE,
+	}
+	return &incompatibleArchitecture
+}
+
+func (feature *OSCFeature) getIncompatibleFeatures(string) *[]models.FeatureSupportLevelID {
+	return &[]models.FeatureSupportLevelID{
+		models.FeatureSupportLevelIDNUTANIXINTEGRATION,
+		models.FeatureSupportLevelIDVSPHEREINTEGRATION,
+	}
+}
+
+func (feature *OSCFeature) getFeatureActiveLevel(cluster *common.Cluster, _ *models.InfraEnv, clusterUpdateParams *models.V2ClusterUpdateParams, _ *models.InfraEnvUpdateParams) featureActiveLevel {
+	if isOperatorActivated("OSC", cluster, clusterUpdateParams) && isOperatorActivated("cnv", cluster, clusterUpdateParams) {
+		return activeLevelActive
+	}
+	return activeLevelNotActive
+}

internal/featuresupport/features_platforms.go

@@ -183,6 +183,7 @@ func (feature *NutanixIntegrationFeature) getIncompatibleFeatures(string) *[]mod
 		models.FeatureSupportLevelIDCNV,
 		models.FeatureSupportLevelIDPLATFORMMANAGEDNETWORKING,
 		models.FeatureSupportLevelIDMTV,
+		models.FeatureSupportLevelIDOSC,
 	}
 }
 
@@ -236,6 +237,7 @@ func (feature *VsphereIntegrationFeature) getIncompatibleFeatures(openshiftVersi
 		models.FeatureSupportLevelIDPLATFORMMANAGEDNETWORKING,
 		models.FeatureSupportLevelIDCNV,
 		models.FeatureSupportLevelIDMTV,
+		models.FeatureSupportLevelIDOSC,
 	}
 
 	if isNotSupported, err := common.BaseVersionLessThan("4.13", openshiftVersion); isNotSupported || err != nil {

internal/host/statemachine.go

@@ -939,6 +939,7 @@ func NewHostStateMachine(sm stateswitch.StateMachine, th TransitionHandler) stat
 		If(AreLvmRequirementsSatisfied),
 		If(AreMceRequirementsSatisfied),
 		If(AreMtvRequirementsSatisfied),
+		If(AreOscRequirementsSatisfied),
 		If(HasSufficientNetworkLatencyRequirementForRole),
 		If(HasSufficientPacketLossRequirementForRole),
 		If(HasDefaultRoute),

internal/host/validation_id.go

@@ -35,6 +35,7 @@ const (
 	AreLvmRequirementsSatisfied                    = validationID(models.HostValidationIDLvmRequirementsSatisfied)
 	AreMceRequirementsSatisfied                    = validationID(models.HostValidationIDMceRequirementsSatisfied)
 	AreMtvRequirementsSatisfied                    = validationID(models.HostValidationIDMtvRequirementsSatisfied)
+	AreOscRequirementsSatisfied                    = validationID(models.HostValidationIDOscRequirementsSatisfied)
 	SufficientOrUnknownInstallationDiskSpeed       = validationID(models.HostValidationIDSufficientInstallationDiskSpeed)
 	HasSufficientNetworkLatencyRequirementForRole  = validationID(models.HostValidationIDSufficientNetworkLatencyRequirementForRole)
 	HasSufficientPacketLossRequirementForRole      = validationID(models.HostValidationIDSufficientPacketLossRequirementForRole)
@@ -112,7 +113,8 @@ func (v validationID) category() (string, error) {
 		ArePipelinesRequirementsSatisfied,
 		AreServiceMeshRequirementsSatisfied,
 		AreServerLessRequirementsSatisfied,
-		AreOpenShiftAIRequirementsSatisfied:
+		AreOpenShiftAIRequirementsSatisfied,
+		AreOscRequirementsSatisfied:
 		return "operators", nil
 	}
 	return "", common.NewApiError(http.StatusInternalServerError, errors.Errorf("Unexpected validation id %s", string(v)))

internal/operators/builder.go

@@ -12,6 +12,7 @@ import (
 	"github.com/openshift/assisted-service/internal/operators/nvidiagpu"
 	"github.com/openshift/assisted-service/internal/operators/odf"
 	"github.com/openshift/assisted-service/internal/operators/openshiftai"
+	"github.com/openshift/assisted-service/internal/operators/osc"
 	"github.com/openshift/assisted-service/internal/operators/pipelines"
 	"github.com/openshift/assisted-service/internal/operators/serverless"
 	"github.com/openshift/assisted-service/internal/operators/servicemesh"
@@ -54,6 +55,7 @@ func NewManager(log logrus.FieldLogger, manifestAPI manifestsapi.ManifestsAPI, o
 		servicemesh.NewServiceMeshOperator(log),
 		serverless.NewServerLessOperator(log),
 		openshiftai.NewOpenShiftAIOperator(log),
+		osc.NewOscOperator(log),
 	)
 }
 

internal/operators/osc/config.go

@@ -0,0 +1,25 @@
+package osc
+
+const (
+	Name                   = "osc"
+	FullName               = "OpenShift Sandboxed Containers"
+	Namespace              = "openshift-sandboxed-containers-operator"
+	Subscription           = "osc-operator"
+	Source                 = "redhat-operators"
+	SourceName             = "osc-operator"
+	OscMinOpenshiftVersion = "4.17.0"
+	LayeredImageDeployment = "true"
+	LayeredImageUrl        = "quay.io/fidencio/rhcos-layer/ocp-4.16:tdx-20241003-1327"
+	KernelArgs             = "kvm_intel.tdx=1"
+	// Memory value provided in GiB
+	MasterMemory int64 = 1
+	MasterCPU    int64 = 1
+	// Memory value provided in GIB
+	WorkerMemory int64 = 1
+	WorkerCPU    int64 = 1
+)
+
+type Config struct {
+	OscCPUPerHost       int64 `envconfig:"Osc_CPU_PER_HOST" default:"1"`
+	OscMemoryPerHostMiB int64 `envconfig:"Osc_MEMORY_PER_HOST_MIB" default:"1024"`
+}