You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|`schedule`| Cron expression for how often to scan nodes |`*/1 * * * *`|
79
-
|`annotationSelector.key`/`.value`| Annotation pair that marks pods for rollout |`evict-with-rollout` / `true`|
79
+
|`annotationSelector.key`/`.value`| Annotation pair that marks pods for rollout |`evict-to-rollout` / `true`|
80
80
|`image.repository` / `.tag`| Container image that provides `kubectl` + `jq`|`ghcr.io/hivemindtechnologies/evict-to-rollout/kubectl-jq` / *(empty = use chart `appVersion`)*|
81
81
|`serviceAccount.create`| Whether to create a dedicated SA |`true`|
82
82
|`rbac.create`| Whether to install ClusterRole + binding |`true`|
@@ -126,7 +126,7 @@ For local testing the kind script (`devbox run test`) builds the image and loads
126
126
-**Node termination grace vs schedule**: The CronJob only reacts on its schedule (default 1 minute). Ensure your node termination grace period (e.g., Karpenter’s default 2 minutes) comfortably exceeds `schedule interval + controller runtime`, otherwise the node may terminate before the rollout finishes.
127
127
-**Rolling update strategy required**: Deployments must use the standard rolling update strategy so that a new pod starts before the old pod is deleted. StatefulSets or Deployments using `Recreate` will still experience downtime.
128
128
-**Single replica + PDB**: Remember to pair single-replica workloads with a `PodDisruptionBudget` (`minAvailable: 1` / `maxUnavailable: 0`). Without it, Kubernetes can evict the pod immediately even if the controller is running.
129
-
-**Annotation opt-in**: Only pods whose template contains the configured annotation (default `evict-with-rollout: "true"`) are handled. Forgetting the annotation means eviction proceeds as usual.
129
+
-**Annotation opt-in**: Only pods whose template contains the configured annotation (default `evict-to-rollout: "true"`) are handled. Forgetting the annotation means eviction proceeds as usual.
130
130
-**RBAC scope**: The included ClusterRole grants read access to nodes/pods and patch access to deployments. Tighten or namespace-scope it if your environment requires stricter permissions.
131
131
132
132
Missing something? [Open an issue](https://github.com/HivemindTechnologies/evict-to-rollout/issues/new) with details so we can cover your use-case.
0 commit comments