Description of problem: Two features required for customer to successfully implement MetalLB in their environment 1. Fix introduced in version 0.11.0 of upstream MetalLB. The customer has an ingress subnet which contains only infrastructure role nodes and is separate from the worker and master role nodes. This allows different security policies to be applied in each. For MetalLB to work in an environment with multiple subnets, it requires https://github.com/metallb/metallb/pull/976. 2. Ability to natively deploy MetalLB in "infra" nodes using nodeSelectors and tolerations. The operator must allow support to configure which nodes the pods are deployed into. Additional info: This requirement is a major blocker for the customer’s Beta release at the end of February.