-
Notifications
You must be signed in to change notification settings - Fork 1.9k
Updating imagecontentsourcepolicy should not trigger a node drain #57440
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
🤖 Build preview is available at: Build log: https://circleci.com/gh/ocpdocs-previewbot/openshift-docs/11541 |
|
Thanks Michael for updating this section. |
|
@mike-nguyen You reviewed the addition of these conditions. Are you willing and able to take a look at the slight modifications? |
|
@mburke5678 I haven't worked on the MCO for quite some time. @rioliu-rh can you have the appropriate QE contact review this? |
|
/cc @xiuwang |
| ** Changes to the global pull secret or pull secret in the `openshift-config` namespace. | ||
| ** Automatic rotation of the `/etc/kubernetes/kubelet-ca.crt` certificate authority (CA) by the Kubernetes API Server Operator. | ||
|
|
||
| * When the MCO detects changes to the `/etc/containers/registries.conf` file, such as adding or editing an `ImageDigestMirrorSet` or `ImageTagMirrorSet` object, it drains the corresponding nodes, applies the changes, and uncordons the nodes.The node drain does not happen for the following changes: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@mburke5678 ImageDigestMirrorSet and ImageTagMirrorSet are new resource to us. we need to verify the behavior mentioned in the doc
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have verified the behavior today:
-
ImageDigestMirrorSetapplies the mirrors withpull-from-mirror = "digest-only"and the drain operation is skipped. -
ImageTagMirrorSetapplies the mirrors withpull-from-mirror = "tag-only"and it performs a drain operation as expected.
|
It looks good to me. |
snarayan-redhat
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks great!
|
/cherrypick enterprise-4.8 |
|
@mburke5678: #57440 failed to apply on top of branch "enterprise-4.8": DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/cherrypick enterprise-4.13 |
|
@mburke5678: new pull request created: #57716 DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Update the list of MC changes that do not trigger an MCO reboot of the nodes.
https://issues.redhat.com/browse/RFE-2883
Converted the list of conditions that do not trigger a node reboot to a snippet. Updated the list of
registries.confchanges based on MCO internal docs.Previews:
Disabling the Machine Config Operator from automatically rebooting
About the Machine Config Operator
QE review: