feat(snc): add --profile flag with virtualization addon support

Add a profile system to the OpenShift SNC command that allows
installing addons on the cluster after deployment. The first
supported profile is 'virtualization' which installs the OCP
Virtualization (CNV) operator and enables nested virtualization
on the compute instance.

Signed-off-by: Jose Angel Morena <jmorenas@redhat.com>

Author: jangel97

cmd/mapt/cmd/aws/services/snc.go

@@ -22,6 +22,9 @@ const (
 	pullSecretFileDesc          = "file path of image pull secret (download from https://console.redhat.com/openshift/create/local)"
 	disableClusterReadiness     = "disable-cluster-readiness"
 	disableClusterReadinessDesc = "If this flag is set it will skip the checks for the cluster readiness. In this case the kubeconfig can not be generated"
+
+	sncProfile     = "profile"
+	sncProfileDesc = "comma separated list of profiles to apply on the SNC cluster. Profiles available: virtualization"
 )
 
 func GetOpenshiftSNCCmd() *cobra.Command {
@@ -51,6 +54,14 @@ func createSNC() *cobra.Command {
 			if err := viper.BindPFlags(cmd.Flags()); err != nil {
 				return err
 			}
+			if err := viper.BindPFlags(cmd.InheritedFlags()); err != nil {
+				return err
+			}
+			profiles := viper.GetStringSlice(sncProfile)
+			computeReq := params.ComputeRequestArgs()
+			if sncApi.ProfilesRequireNestedVirt(profiles) {
+				computeReq.NestedVirt = true
+			}
 			if _, err := openshiftsnc.Create(
 				&maptContext.ContextArgs{
 					Context:       cmd.Context(),
@@ -62,13 +73,14 @@ func createSNC() *cobra.Command {
 					Tags:          viper.GetStringMapString(params.Tags),
 				},
 				&sncApi.SNCArgs{
-					ComputeRequest:          params.ComputeRequestArgs(),
+					ComputeRequest:          computeReq,
 					Spot:                    params.SpotArgs(),
 					Version:                 viper.GetString(ocpVersion),
 					DisableClusterReadiness: viper.IsSet(disableClusterReadiness),
 					Arch:                    viper.GetString(params.LinuxArch),
 					PullSecretFile:          viper.GetString(pullSecretFile),
-					Timeout:                 viper.GetString(params.Timeout)}); err != nil {
+					Timeout:                 viper.GetString(params.Timeout),
+					Profiles:                profiles}); err != nil {
 				return err
 			}
 			return nil
@@ -82,6 +94,7 @@ func createSNC() *cobra.Command {
 	flagSet.StringP(pullSecretFile, "", "", pullSecretFileDesc)
 	flagSet.StringP(params.Timeout, "", "", params.TimeoutDesc)
 	flagSet.StringToStringP(params.Tags, "", nil, params.TagsDesc)
+	flagSet.StringSliceP(sncProfile, "", []string{}, sncProfileDesc)
 	params.AddComputeRequestFlags(flagSet)
 	params.AddSpotFlags(flagSet)
 	c.PersistentFlags().AddFlagSet(flagSet)

docs/aws/openshift-snc.md

@@ -40,10 +40,41 @@ After the AMI is published and accessible by the account, we can use the followi
         --spot \
         --version 4.19.0 \
         --project-name mapt-snc \
-        --backed-url file:///Users/tester/workspace \
+        --backed-url file:///home/tester/workspace \
         --conn-details-output /tmp/snc \
-        --pull-secret-file /Users/tester/Downloads/pull-secret
+        --pull-secret-file /home/tester/Downloads/pull-secret
 ```
 
 After the above command succeeds the `kubeconfig` to access the deployed cluster will be available in `/tmp/snc/kubeconfig`
 
+## Profiles
+
+Profiles are optional addons that are installed on the SNC cluster after it is ready. Use the `--profile` flag to enable one or more profiles:
+
+```
+mapt aws openshift-snc create \
+    --spot \
+    --version 4.21.0 \
+    --project-name mapt-snc \
+    --backed-url file:///home/tester/workspace \
+    --conn-details-output /tmp/snc \
+    --pull-secret-file /home/tester/Downloads/pull-secret \
+    --profile virtualization
+```
+
+Multiple profiles can be specified as a comma-separated list (e.g., `--profile virtualization,serverless`).
+
+### Available profiles
+
+| Profile | Description |
+|---------|-------------|
+| `virtualization` | Installs [OpenShift Virtualization](https://docs.openshift.com/container-platform/latest/virt/about_virt/about-virt.html) (CNV) on the cluster, enabling virtual machines to run on the single-node cluster. When this profile is selected, nested virtualization is automatically enabled on the cloud instance. Because standard Nitro-based instances do not expose `/dev/kvm`, a bare metal instance is required.|
+
+
+### Adding new profiles
+
+To add a new profile:
+
+1. Create `profile_<name>.go` under `pkg/target/service/snc/` — Go file with a `deploy<Name>()` function that uses the Pulumi Kubernetes provider to create the required resources (Namespace, OperatorGroup, Subscription, CRs, etc.)
+2. Register the profile name in `profiles.go` by adding it to `validProfiles` and the `DeployProfile()` switch
+

go.mod

@@ -36,6 +36,8 @@ require (
 	github.com/pulumi/pulumi-gitlab/sdk/v8 v8.11.0
 	github.com/pulumi/pulumi-tls/sdk/v5 v5.3.0
 	golang.org/x/exp v0.0.0-20260218203240-3dfff04db8fa
+	k8s.io/apimachinery v0.35.2
+	k8s.io/client-go v0.35.2
 )
 
 require (
@@ -101,7 +103,9 @@ require (
 	github.com/clipperhouse/uax29/v2 v2.7.0 // indirect
 	github.com/cloudflare/circl v1.6.3 // indirect
 	github.com/cyphar/filepath-securejoin v0.6.1 // indirect
+	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
+	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
@@ -125,6 +129,7 @@ require (
 	github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
 	github.com/muesli/cancelreader v0.2.2 // indirect
 	github.com/muesli/termenv v0.16.0 // indirect
+	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
 	github.com/pgavlin/fx v0.1.6 // indirect
 	github.com/pjbgf/sha1cd v0.5.0 // indirect
@@ -138,6 +143,7 @@ require (
 	github.com/spf13/afero v1.15.0 // indirect
 	github.com/spf13/cast v1.10.0 // indirect
 	github.com/subosito/gotenv v1.6.0 // indirect
+	github.com/x448/float16 v0.8.4 // indirect
 	github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
 	github.com/zclconf/go-cty v1.18.0 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
@@ -151,11 +157,22 @@ require (
 	go.opentelemetry.io/otel/trace v1.40.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.9.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
+	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
+	golang.org/x/oauth2 v0.34.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
+	golang.org/x/time v0.9.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
+	k8s.io/klog/v2 v2.130.1 // indirect
+	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
+	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
+	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
+	sigs.k8s.io/randfill v1.0.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
+	sigs.k8s.io/yaml v1.6.0 // indirect
 )
 
 require (