Improve stability of Calico upgrades

2026-08-23 13:30:51 +03:00
parent 31f3ea0376
commit 7216e85889
1 changed files with 7 additions and 0 deletions
--- a/kube-system/descheduler.yaml
+++ b/kube-system/descheduler.yaml
@@ -48,6 +48,13 @@ data:
          - requiredDuringSchedulingIgnoredDuringExecution
      RemovePodsViolatingNodeTaints:
        enabled: true
+        params:
+          # calico-node flips NetworkUnavailable while it restarts, which the
+          # node lifecycle controller turns into a NoSchedule taint. Without
+          # this exclusion a rolling CNI upgrade evicts every pod in the
+          # cluster (81 pods on 2026-08-23) for a taint that lasts seconds.
+          excludedTaints:
+          - node.kubernetes.io/network-unavailable
      RemovePodsViolatingTopologySpreadConstraint:
        enabled: true
        params: