rke2: taint control-plane nodes NoSchedule (#517)

2026-08-08 23:19:12 +10:00
parent ff1a30823c
commit 62dff97c98
1 changed files with 3 additions and 0 deletions
@@ -30,6 +30,9 @@ rke2::config_hash:
    - '--node-monitor-period=4s'
  protect-kernel-defaults: true
  disable-kube-proxy: false
+  # taint the control-plane/etcd nodes so only tolerating workloads schedule here
+  node-taint:
+    - "node-role.kubernetes.io/control-plane=true:NoSchedule"

 # configure consul service
 consul::services: