search

redhat-et / edge-security-demo

Apache License 2.0
2 stars 6 forks source link

Revocation Scripts for Keylime #11

Closed lukehinds closed 4 years ago

mpeters commented 4 years ago

The following OC commands should work to cordon off the node and have k8s migrate the workload to other nodes:

oc adm cordon mpeters-okd-zxrh5-worker-mrbw7
oc adm drain mpeters-okd-zxrh5-worker-mrbw7 --force=true --ignore-daemonsets --delete-local-data

Then when the node is ready to be put back in circulation

oc adm uncordon mpeters-okd-zxrh5-worker-mrbw7
mpeters commented 4 years ago

https://github.com/redhat-et/edge-security-demo/pull/28