updated cluster template enable/disable kyverno

installer/cluster_aws.tpl

@@ -6,13 +6,13 @@
 root:
   useLocalValues: true
   clusterValues:
-    - orch-configs/profiles/enable-platform.yaml
+    ${PLATFORM_PROFILE}
     ${O11Y_ENABLE_PROFILE}
-    - orch-configs/profiles/enable-kyverno.yaml
+    ${KYVERNO_PROFILE}
     ${AO_PROFILE}
     ${CO_PROFILE}
     ${EDGEINFRA_PROFILE}
-    - orch-configs/profiles/enable-full-ui.yaml
+    ${UI_PROFILE}
     - orch-configs/profiles/enable-aws.yaml
     ${SRE_PROFILE}
     - orch-configs/profiles/proxy-none.yaml

installer/generate_cluster_yaml.sh

@@ -30,7 +30,7 @@ elif [ "$DEPLOY_TYPE" = "onprem" ]; then
     source "$(dirname "$0")/${DEPLOY_TYPE}.env"
 
     # Validate ORCH_INSTALLER_PROFILE
-    if [[ "$ORCH_INSTALLER_PROFILE" =~ ^(onprem|onprem-oxm)$ ]]; then
+    if [[ "$ORCH_INSTALLER_PROFILE" =~ ^(onprem|onprem-oxm|onprem-vpro)$ ]]; then
         TEMPLATE_FILE="./cluster_onprem.tpl"
         OUTPUT_FILE="${ORCH_INSTALLER_PROFILE}.yaml"
 
@@ -52,13 +52,14 @@ else
     exit 1
 fi
 
+
 # -----------------------------------------------------------------------------
 # Default profiles
 # -----------------------------------------------------------------------------
 export PLATFORM_PROFILE='- orch-configs/profiles/enable-platform.yaml'
 export KYVERNO_PROFILE='- orch-configs/profiles/enable-kyverno.yaml'
 export EDGEINFRA_PROFILE='- orch-configs/profiles/enable-edgeinfra.yaml'
-export FULL_UI_PROFILE='- orch-configs/profiles/enable-full-ui.yaml'
+export UI_PROFILE='- orch-configs/profiles/enable-full-ui.yaml'
 export SRE_PROFILE='- orch-configs/profiles/enable-sre.yaml'
 export PROXY_NONE_PROFILE='- orch-configs/profiles/proxy-none.yaml'
 export PROFILE_FILE_NAME='- orch-configs/profiles/profile-onprem.yaml'
@@ -68,6 +69,19 @@ export ARTIFACT_RS_PROFILE='- orch-configs/profiles/artifact-rs-production-noaut
 export OSRM_MANUAL_PROFILE='- orch-configs/profiles/enable-osrm-manual-mode.yaml'
 export RESOURCE_DEFAULT_PROFILE='- orch-configs/profiles/resource-default.yaml'
 
+if [[ "${ORCH_INSTALLER_PROFILE:-}" == "onprem-vpro" || "${ORCH_INSTALLER_PROFILE:-}" == "aws-vpro" ]]; then
+  export DISABLE_AO_PROFILE=true
+  export DISABLE_CO_PROFILE=true
+  export DISABLE_O11Y_PROFILE=true
+  export DISABLE_KYVERNO_PROFILE=true
+  export DISABLE_UI_PROFILE=true
+  export SRE_TLS_ENABLED=false
+  export SINGLE_TENANCY_PROFILE=false
+  export EMAIL_PROFILE='#- orch-configs/profiles/alerting-emails.yaml'
+  export PLATFORM_PROFILE='- orch-configs/profiles/enable-platform-vpro.yaml'
+  export EDGEINFRA_PROFILE='- orch-configs/profiles/enable-edgeinfra-vpro.yaml'
+fi
+
 # -----------------------------------------------------------------------------
 # Default environment variables
 # -----------------------------------------------------------------------------
@@ -150,12 +164,24 @@ else
     export CO_PROFILE="- orch-configs/profiles/enable-cluster-orch.yaml"
 fi
 
+if [ "${DISABLE_KYVERNO_PROFILE:-false}" = "true" ]; then
+    export KYVERNO_PROFILE="#- orch-configs/profiles/enable-kyverno.yaml"
+else
+    export KYVERNO_PROFILE="- orch-configs/profiles/enable-kyverno.yaml"
+fi
+
 if [ "${SINGLE_TENANCY_PROFILE:-false}" = "true" ]; then
     export SINGLE_TENANCY_PROFILE="- orch-configs/profiles/enable-singleTenancy.yaml"
 else
     export SINGLE_TENANCY_PROFILE="#- orch-configs/profiles/enable-singleTenancy.yaml"
 fi
 
+if [ "${DISABLE_UI_PROFILE:-false}" = "true" ]; then
+    export UI_PROFILE='#- orch-configs/profiles/enable-full-ui.yaml'
+else
+    export UI_PROFILE='- orch-configs/profiles/enable-full-ui.yaml'
+fi
+
 # -----------------------------------------------------------------------------
 # Explicit proxy configuration
 # -----------------------------------------------------------------------------
@@ -200,7 +226,7 @@ if [ "$DEPLOY_TYPE" = "onprem" ]; then
     fi
 
     case "${ORCH_INSTALLER_PROFILE}" in
-        onprem)
+        onprem|onprem-vpro)
             echo "📦 Profile: Standard On-Prem Deployment"
             export PROFILE_FILE_NAME='- orch-configs/profiles/profile-onprem.yaml'
             ;;

on-prem-installers/onprem/cluster_onprem.tpl

@@ -7,13 +7,13 @@
 root:
   useLocalValues: false
   clusterValues:
-    - orch-configs/profiles/enable-platform.yaml
+    ${PLATFORM_PROFILE}
     ${O11Y_ENABLE_PROFILE}
-    - orch-configs/profiles/enable-kyverno.yaml
+    ${KYVERNO_PROFILE}
     ${AO_PROFILE}
     ${CO_PROFILE}
     ${EDGEINFRA_PROFILE}
-    - orch-configs/profiles/enable-full-ui.yaml
+    ${UI_PROFILE}
     ${ONPREM_PROFILE}
     ${SRE_PROFILE}
     - orch-configs/profiles/proxy-none.yaml

orch-configs/profiles/enable-edgeinfra-vpro.yaml

@@ -0,0 +1,121 @@
+# SPDX-FileCopyrightText: 2025 Intel Corporation
+#
+# SPDX-License-Identifier: Apache-2.0
+
+# Includes Edge Infrastructure Manager and UI
+# Use either this or enable-full
+
+# This enables Edge Infrastructure Manager to support 100 edge nodes.
+
+argo:
+  enabled:
+    infra-core: true
+    infra-managers: true
+    infra-external: true
+    infra-onboarding: true
+    web-ui-infra: false
+    copy-keycloak-admin-to-infra: true
+  infra-core:
+    tenant-config:
+      enabled: false
+    api:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+    exporter:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+    inventory:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+    tenant-controller:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+  infra-managers:
+    host-manager:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+    maintenance-manager:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+    telemetry-manager:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+    os-resource-manager:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+    networking-manager:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+  infra-onboarding:
+    onboarding-manager:
+      enabled: true
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+    dkam:
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+    pxe-server:
+      enabled: false
+      resources:
+        requests:
+          memory: "16Mi"
+          cpu: "10m"
+        limits:
+          memory: "64Gi"
+          cpu: "64"
+  infra-external: {}

orch-configs/profiles/enable-platform-vpro.yaml

@@ -0,0 +1,47 @@
+# SPDX-FileCopyrightText: 2025 Intel Corporation
+#
+# SPDX-License-Identifier: Apache-2.0
+
+# Includes Platform
+# Always enable this
+
+argo:
+  enabled:
+    auth-service: true
+    ingress-nginx: true
+    cert-manager: true
+    certificate-file-server: true
+    copy-app-gitea-cred-to-fleet: true
+    copy-ca-cert-boots-to-gateway: true
+    copy-ca-cert-boots-to-infra: true
+    copy-ca-cert-gateway-to-cattle: true
+    copy-ca-cert-gateway-to-infra: true
+    copy-ca-cert-gitea-to-app: true
+    copy-ca-cert-gitea-to-cluster: true
+    copy-cluster-gitea-cred-to-fleet: true
+    external-secrets: true
+    istio-base: true
+    istio-policy: true
+    istiod: true
+    kiali: true
+    metadata-broker: true
+    multitenant_gateway: true
+    nginx-ingress-pxe-boots: true
+    platform-autocert: true
+    platform-keycloak: true
+    prometheus-crd: true
+    reloader: true
+    rs-proxy: true
+    secrets-config: true
+    secret-wait-tls-orch: true
+    secret-wait-tls-boots: true
+    self-signed-cert: true
+    traefik-extra-objects: true
+    traefik-pre: true
+    traefik: true
+    traefik-boots: false
+    traefik-boots-extra-objects: true
+    vault: true
+    namespace-resource-quota: true
+    k8s-metrics-server: true
+    token-fs: true