Mirrord pod seems to force the nodeName, but what to do if our cluster policies forbid it ?

[averyazov]

Hello,
I'm trying to use mirrord in my openshift cluster, which has some corporate policies forbidding the nodeName setting :

---

Constraint details

The control plane nodes are nodes where only control plane components should run (i.e. etcd, controller-manager, api-server...). Application workloads should run on worker nodes.

This Constraint denies the use of nodeName which can be used to specify on which node the workload should run, bypassing the scheduling and taints.

This Constraint also prevent the use of the toleration for nodes with master or control-plane role.

It is applied to:

  - apiGroups: [""]
    kinds: ["Pod"] 

---

Is there any way to avoid setting nodeName for the mirrord pod ?
Could using the ephemeralContainer mode avoid this issue ?

Thanks and regards.