search

CrowdStrike / falcon-operator

https://artifacthub.io/packages/olm/falcon-operator/falcon-operator
Apache License 2.0
48 stars 37 forks source link

Tolerate OpenShift infra nodes #459

Closed evanstoner closed 10 months ago

evanstoner commented 10 months ago

Infra nodes can be used in self-managed or SRE-managed OpenShift clusters. They are worker nodes with a node-role.kubernetes.io/infra label and a node-role.kubernetes.io/infra NoSchedule taint. We should tolerate this taint, like we already tolerate master and control-plane, to provide full cluster protection out of the box.

Example in ROSA: https://console-openshift-console.apps.estoner412.r4al.p1.openshiftapps.com/k8s/ns/openshift-machine-api/machine.openshift.io~v1beta1~MachineSet/estoner412-hlwr4-infra-us-west-1a/yaml

Docs: https://docs.openshift.com/container-platform/4.14/machine_management/creating-infrastructure-machinesets.html

redhatrises commented 10 months ago

@evanstoner are you wanting the infra label to be a toleration by default so that it will automatically be added?

evanstoner commented 10 months ago

Yes, tolerate infra label by default. This way we will deploy to all standard tainted node types by default.