Bug 1847197
| Summary: | openshift-dns daemonset doesn't include toleration to run on nodes with taints | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Miciah Dashiel Butler Masters <mmasters> |
| Component: | Networking | Assignee: | Miciah Dashiel Butler Masters <mmasters> |
| Networking sub component: | DNS | QA Contact: | Hongan Li <hongli> |
| Status: | CLOSED ERRATA | Docs Contact: | |
| Severity: | high | ||
| Priority: | medium | CC: | adeshpan, aiyengar, amcdermo, aos-bugs, bbennett, ddelcian, decarr, dmace, eparis, fandrade, jmalde, mas-hatada, mjoseph, mmasters, mvardhan, obockows, rahmed, resantos, rh-container, rhowe, susuresh, vfarias, wkulhane, yhe |
| Version: | 4.2.z | ||
| Target Milestone: | --- | ||
| Target Release: | 4.4.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: |
Cause: The DNS operator was changed in OpenShift 4.2.13 to remove a blanket toleration for all taints from the operator's operand. This change was made in order to prevent the operand from being scheduled to a node before the node's networking was ready.
Consequence: Adding arbitrary taints to nodes could cause problems related to the DNS operator's operand. For one, adding a NoSchedule taint to nodes could lead to alerts' being raised for operand pods that were already running on the newly tainted nodes. For another, taints could prevent the operand from running on a node. The operand needs to run on every node in order to add the cluster image registry's host name and address to the node host's /etc/hosts file. Without this entry in /etc/hosts, the node's container runtime could fail to pull images from the image registry, breaking upgrades and user workloads.
Fix: The toleration for all taints has been restored for the DNS operator's operand. The operand also has a node selector to ensure that it runs only on Linux nodes.
Result: The operand runs on, and it updates /etc/hosts on, all Linux node hosts. "Missing CNI default network" events may be observed when the operand starts on a node that is still initializing, but such errors are transient and can be ignored.
|
Story Points: | --- |
| Clone Of: | 1813479 | Environment: | |
| Last Closed: | 2020-08-04 14:16:01 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1813479 | ||
| Bug Blocks: | 1723620, 1859685 | ||
|
Description
Miciah Dashiel Butler Masters
2020-06-15 21:18:56 UTC
A PR is posted and awaiting review. We'll try to get it merged next sprint. *** Bug 1850464 has been marked as a duplicate of this bug. *** The fix to the master branch has merged. We'll work on the 4.4 backport in the upcoming sprint. Verified with 4.4.0-0.nightly-2020-07-24-031753 and the issue has been fixed. The dns pod can be running on nodes with a taint. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.4.15 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:3128 |