fix: tolerate control-plane taint when pinning Flux to cp1
Flux bootstrap patches the controllers onto k8s-cluster-cp-1, but the control-plane node is tainted NoSchedule. Add the matching toleration in both the checked-in patch manifest and the bootstrap workflow so the controllers can actually schedule and roll out on cp-1.
This commit is contained in:
@@ -214,11 +214,12 @@ jobs:
|
||||
kubectl apply -f clusters/prod/flux-system/gitrepository-platform.yaml
|
||||
kubectl apply -f clusters/prod/flux-system/kustomization-infrastructure.yaml
|
||||
kubectl apply -f clusters/prod/flux-system/kustomization-apps.yaml
|
||||
# Patch Flux controllers to run on cp-1 only
|
||||
kubectl -n flux-system patch deployment source-controller --type='merge' -p='{"spec":{"template":{"spec":{"nodeSelector":{"kubernetes.io/hostname":"k8s-cluster-cp-1"}}}}}'
|
||||
kubectl -n flux-system patch deployment kustomize-controller --type='merge' -p='{"spec":{"template":{"spec":{"nodeSelector":{"kubernetes.io/hostname":"k8s-cluster-cp-1"}}}}}'
|
||||
kubectl -n flux-system patch deployment helm-controller --type='merge' -p='{"spec":{"template":{"spec":{"nodeSelector":{"kubernetes.io/hostname":"k8s-cluster-cp-1"}}}}}'
|
||||
kubectl -n flux-system patch deployment notification-controller --type='merge' -p='{"spec":{"template":{"spec":{"nodeSelector":{"kubernetes.io/hostname":"k8s-cluster-cp-1"}}}}}'
|
||||
# Patch Flux controllers to run on cp-1 and tolerate the control-plane taint
|
||||
PATCH='{"spec":{"template":{"spec":{"nodeSelector":{"kubernetes.io/hostname":"k8s-cluster-cp-1"},"tolerations":[{"key":"node-role.kubernetes.io/control-plane","operator":"Exists","effect":"NoSchedule"}]}}}}'
|
||||
kubectl -n flux-system patch deployment source-controller --type='merge' -p="$PATCH"
|
||||
kubectl -n flux-system patch deployment kustomize-controller --type='merge' -p="$PATCH"
|
||||
kubectl -n flux-system patch deployment helm-controller --type='merge' -p="$PATCH"
|
||||
kubectl -n flux-system patch deployment notification-controller --type='merge' -p="$PATCH"
|
||||
kubectl -n flux-system rollout status deployment/source-controller --timeout=180s
|
||||
kubectl -n flux-system rollout status deployment/kustomize-controller --timeout=180s
|
||||
kubectl -n flux-system rollout status deployment/helm-controller --timeout=180s
|
||||
|
||||
Reference in New Issue
Block a user