DaemonSet: Avoid Virtual Kubelet Nodes

[guettli]

parca-agent runs hostNetwork/hostPID with a tolerate-all toleration, so as a DaemonSet it also lands on virtual nodes (virtual-kubelet / Liqo). On those there's no real host to profile, and in our case (Liqo) the pod just sits in OffloadingBackOff forever.

Is there a blessed way to exclude such nodes — a documented nodeAffinity, or a label parca-agent already respects? I'm currently planning:

affinity:
  nodeAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      nodeSelectorTerms:
        - matchExpressions:
            - key: type            # e.g. liqo.io/type / virtual-kubelet.io/provider
              operator: NotIn
              values: ["virtual-node"]

Does that match your recommendation, or is there a more general selector you'd suggest (so it covers KWOK / other virtual-kubelet providers too)?

Environment: parca-agent as a DaemonSet, k3s v1.36.1, nodes offloaded via Liqo v1.2.0.