Kyverno Policy for removing smarter-devices/fuse resource when running on DWS.

policy.yaml

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: mutate-dws-pod-template
  annotations:
    policies.kyverno.io/title: Remove incompatible resources from PodTemplates
    policies.kyverno.io/category: Other
    policies.kyverno.io/severity: low
    kyverno.io/kyverno-version: 1.10.1
    policies.kyverno.io/minversion: 1.6.0
    kyverno.io/kubernetes-version: "1.23"
    policies.kyverno.io/subject: PodTemplate
    policies.kyverno.io/description: >-
      Removes unsupported resource requests from PodTemplate manifests to allow submission to DWS queue.
spec:
  mutateExistingOnPolicyUpdate: false
  background: false
  failurePolicy: Ignore
  rules:
  - name: mutate-remove-unsupported-resources
    match:
      resources:
        kinds:
          - PodTemplate
        namespaceSelector:
          matchExpressions:
          - key: role
            operator: In
            values:
            - kueue-jobs
    mutate:
      foreach:
        - list: "request.object.template.spec.containers"
          patchesJson6902: |-
            - path: /template/spec/containers/{{elementIndex}}/resources/requests/smarter-devices~1fuse
              op: remove
            - path: /template/spec/containers/{{elementIndex}}/resources/limits/smarter-devices~1fuse
              op: remove