Hello Flexera Community,

I'm currently deploying the Flexera KRM agent on an OpenShift cluster using the **Helm Chart (v1.0.7)**, and I have a specific requirement to restrict the node component DaemonSet to run only on worker nodes with a specific label (`node-role.kubernetes.io/primary`).

By default, the node DaemonSet deploys to all worker nodes in the cluster. I need to limit this to only a subset of nodes based on a label selector.

I can achieve this by manually patching the DaemonSet after deployment: 

oc patch ds krm-flexera-agent-dev-instance-node -n flexera-agent --type=merge -p \

'{"spec":{"template":{"spec":{"nodeSelector":{"node-role.kubernetes.io/primary":""}}}}}'

This works, but it's not persistent — if the controller reconciles or the DaemonSet is recreated, the patch is lost.

Is there a recommended or supported way to configure `nodeSelector` (or `affinity`/`tolerations`) for the node component DaemonSet through the KRM CRD or Helm values?

Environment Details:

Helm Chart: krm-chart` version **1.0.7** (appVersion 1.8.10)

Platform: OpenShift 4.x

Deployment method: Helm

CRD: agents.flexera.com/v1 (KRM)

Thank you!