Missing classificiation for Machine Images and Firewall Images

[robertvolkmann]

As a platform engineer, I want to be able to test images without impacting the current running systems. Currently, every image listed in the cloud profile is a candidate for an image upgrade during the maintenance window.

[majst01]

Testing of Images must be done in a pre production stage

[robertvolkmann]

Not every customer has a pre production setup. Gardener supports a mechanism to test new K8s patch versions too.

[majst01]

but we release images only after a successful Integration test

[mwennrich]

At least for machine images there is already the possibility to classify an image as preview:

$ k explain cloudprofile.spec.machineImages.versions.classification
GROUP:      core.gardener.cloud
KIND:       CloudProfile
VERSION:    v1beta1

FIELD: classification <string>

DESCRIPTION:
    Classification defines the state of a version (preview, supported, deprecated)

[Gerrit91]

Can't this be configured through the CloudProfile deployment and should be part of metal-roles? What does the GEPM need to do here?