Commits on Mar 31, 2020

1. Change default kube-system DaemonSet tolerations …

   * Change kube-proxy, flannel, and calico-node DaemonSet
   tolerations to tolerate `node.kubernetes.io/not-ready`
   and `node-role.kubernetes.io/master` (i.e. controllers)
   explicitly, rather than tolerating all taints
   * kube-system DaemonSets will no longer tolerate custom
   node taints by default. Instead, custom node taints must
   be enumerated to opt-in to scheduling/executing the
   kube-system DaemonSets
   * Consider setting the daemonset_tolerations variable
   of terraform-render-bootstrap at a later date
   
   Background: Tolerating all taints ruled out use-cases
   where certain nodes might legitimately need to keep
   kube-proxy or CNI networking disabled
   Related: poseidon/terraform-render-bootstrap#179

   

   dghubble committed Mar 31, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for bac5acb
   • Browse repository at this point

   Copy the full SHA

   bac5acb View commit details

   Browse the repository at this point in the history