unkin/puppet-prod
4
0
Fork 0
Code Issues 15 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

rke2: taint control-plane nodes NoSchedule (#517)

Browse Source
This commit was merged in pull request #517.
This commit is contained in:
Ben Vincent
2026-08-08 23:19:12 +10:00
parent ff1a30823c
commit 62dff97c98
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hieradata/roles/infra/k8s/control.yaml
+3
View File
@@ -30,6 +30,9 @@ rke2::config_hash:
- '--node-monitor-period=4s' - '--node-monitor-period=4s'
protect-kernel-defaults: true protect-kernel-defaults: true
disable-kube-proxy: false disable-kube-proxy: false
# taint the control-plane/etcd nodes so only tolerating workloads schedule here
node-taint:
- "node-role.kubernetes.io/control-plane=true:NoSchedule"
# configure consul service # configure consul service
consul::services: consul::services: