Skip to content

Global (anti-)affinity blocks cilium-etcd-operator from deploying on nodes with cilium #12124

@joestringer

Description

@joestringer

In v1.8 YAMLs we have introduced this anti-affinity for cilium pods:

affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: k8s-app
operator: In
values:
- cilium
topologyKey: "kubernetes.io/hostname"

However this applies globally, ie also to the cilium-etcd-operator pods:

{{- if .Values.global.affinity }}
affinity:
{{ toYaml .Values.global.affinity | indent 8 }}
{{- end }}

This latter piece was introduced to help scheduling cilium-etcd-operator on the same nodes as Cilium in PR #9901.

I don't think this is intended; while attempting to deploy managed etcd cilium for clustermesh testing, I had to manually edit the cilium-etcd-operator deployment to drop this affinity constraint.

Metadata

Metadata

Assignees

Labels

area/helmImpacts helm charts and user deployment experiencekind/regressionThis functionality worked fine before, but was broken in a newer release of Cilium.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions