Prevent DRA driver and sandboxWorkloads from both being enabled

Signed-off-by: Christopher Desiniotis <cdesiniotis@nvidia.com>

Author: cdesiniotis

controllers/clusterpolicy_validator.go

@@ -39,5 +39,9 @@ func validateDRA(clusterpolicy *gpuv1.ClusterPolicy, draSupported bool) error {
 		return fmt.Errorf("the NVIDIA device plugin and the NVIDIA DRA driver for GPUs cannot both be enabled in ClusterPolicy")
 	}
 
+	if clusterpolicy.Spec.SandboxWorkloads.IsEnabled() && clusterpolicy.Spec.DRADriver.IsEnabled() {
+		return fmt.Errorf("sandboxWorkloads and the NVIDIA DRA driver for GPUs cannot both be enabled in ClusterPolicy")
+	}
+
 	return nil
 }

deployments/gpu-operator/templates/validation.yaml

@@ -12,3 +12,9 @@
 {{- $error = printf "%s\nCannot enable the NVIDIA DRA Driver for GPUs on a Kubernetes cluster that does not support DRA" $error }}
 {{- fail $error }}
 {{- end}}
+
+{{- if and ($draEnabled) (eq .Values.sandboxWorkloads.enabled true) }}
+{{- $error := "" }}
+{{- $error = printf "%s\nThe NVIDIA DRA Driver for GPUs and 'sandboxWorkloads' cannot both be enabled" $error }}
+{{- fail $error }}
+{{- end}}