Skip to content

Commit 648fc55

Browse files
committed
Add daemonset note from pr-8125
1 parent dd27db8 commit 648fc55

File tree

1 file changed

+25
-0
lines changed

1 file changed

+25
-0
lines changed

dev_guide/daemonsets.adoc

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,8 +19,33 @@ A daemonset can be used to run replicas of a pod on specific or all nodes in an
1919
Use daemonsets to create shared storage, run a logging pod on every node in
2020
your cluster, or deploy a monitoring agent on every node.
2121

22+
For security reasons, only cluster administrators can create daemonsets.
23+
See xref:../admin_guide/manage_rbac.adoc#admin-guide-granting-users-daemonset-permissions[Granting Users Daemonset Permissions].
24+
2225
For more information on daemonsets, see the link:http://kubernetes.io/docs/admin/daemons/[Kubernetes documentation].
2326

27+
[IMPORTANT]
28+
====
29+
Daemonset scheduling is incompatible with project's default node selector. If
30+
you fail to disable it, the daemonset gets restricted by merging with the
31+
default node selector. This results in frequent pod recreates on the nodes that
32+
got unselected by the merged node selector, which in turn puts unwanted load on
33+
the cluster.
34+
35+
Therefore,
36+
37+
* Before you start using daemonsets, disable the default project-wide xref:../admin_guide/managing_projects.adoc#using-node-selectors[node selector]
38+
in your namespace, by setting the namespace
39+
annotation `openshift.io/node-selector` to an empty string:
40+
+
41+
----
42+
# oc patch namespace myproject -p \
43+
'{"metadata": {"annotations": {"openshift.io/node-selector": ""}}}'
44+
----
45+
* If you are creating a new project, overwrite the default node selector using
46+
`oc adm new-project --node-selector=""`.
47+
====
48+
2449
[[dev-guide-creating-daemonsets]]
2550
== Creating Daemonsets
2651

0 commit comments

Comments
 (0)