Improve stability of Calico upgrades

This commit is contained in:
2026-08-23 13:30:51 +03:00
parent 31f3ea0376
commit 7216e85889

View File

@@ -48,6 +48,13 @@ data:
- requiredDuringSchedulingIgnoredDuringExecution - requiredDuringSchedulingIgnoredDuringExecution
RemovePodsViolatingNodeTaints: RemovePodsViolatingNodeTaints:
enabled: true enabled: true
params:
# calico-node flips NetworkUnavailable while it restarts, which the
# node lifecycle controller turns into a NoSchedule taint. Without
# this exclusion a rolling CNI upgrade evicts every pod in the
# cluster (81 pods on 2026-08-23) for a taint that lasts seconds.
excludedTaints:
- node.kubernetes.io/network-unavailable
RemovePodsViolatingTopologySpreadConstraint: RemovePodsViolatingTopologySpreadConstraint:
enabled: true enabled: true
params: params: