Skip to content

Commit a3bef58

Browse files
Merge pull request #235173 from mattmcinnes/patch-68
[Doc-a-thon] Updating node-updates-kured.md
2 parents d7e8f4c + c31e098 commit a3bef58

File tree

1 file changed

+9
-8
lines changed

1 file changed

+9
-8
lines changed

articles/aks/node-updates-kured.md

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,8 @@ title: Handle Linux node reboots with kured
33
titleSuffix: Azure Kubernetes Service
44
description: Learn how to update Linux nodes and automatically reboot them with kured in Azure Kubernetes Service (AKS)
55
ms.topic: article
6-
ms.date: 02/28/2019
6+
ms.reviewer: mattmcinnes
7+
ms.date: 04/19/2023
78

89

910
#Customer intent: As a cluster administrator, I want to know how to automatically apply Linux updates and reboot nodes in AKS for security and/or compliance
@@ -26,7 +27,7 @@ You need the Azure CLI version 2.0.59 or later installed and configured. Run `az
2627

2728
## Understand the AKS node update experience
2829

29-
In an AKS cluster, your Kubernetes nodes run as Azure virtual machines (VMs). These Linux-based VMs use an Ubuntu or Mariner image, with the OS configured to automatically check for updates every day. If security or kernel updates are available, they are automatically downloaded and installed.
30+
In an AKS cluster, your Kubernetes nodes run as Azure virtual machines (VMs). These Linux-based VMs use an Ubuntu or Mariner image, with the OS configured to automatically check for updates every day. If security or kernel updates are available, they're automatically downloaded and installed.
3031

3132
![AKS node update and reboot process with kured](media/node-updates-kured/node-reboot-process.png)
3233

@@ -36,13 +37,13 @@ You can use your own workflows and processes to handle node reboots, or use `kur
3637

3738
### Node image upgrades
3839

39-
Unattended upgrades apply updates to the Linux node OS, but the image used to create nodes for your cluster remains unchanged. If a new Linux node is added to your cluster, the original image is used to create the node. This new node will receive all the security and kernel updates available during the automatic check every day but will remain unpatched until all checks and restarts are complete.
40+
Unattended upgrades apply updates to the Linux node OS, but the image used to create nodes for your cluster remains unchanged. If a new Linux node is added to your cluster, the original image is used to create the node. This new node receives all the security and kernel updates available during the automatic check every day but remains unpatched until all checks and restarts are complete.
4041

41-
Alternatively, you can use node image upgrade to check for and update node images used by your cluster. For more details on node image upgrade, see [Azure Kubernetes Service (AKS) node image upgrade][node-image-upgrade].
42+
Alternatively, you can use node image upgrade to check for and update node images used by your cluster. For more information on node image upgrade, see [Azure Kubernetes Service (AKS) node image upgrade][node-image-upgrade].
4243

4344
### Node upgrades
4445

45-
There is an additional process in AKS that lets you *upgrade* a cluster. An upgrade is typically to move to a newer version of Kubernetes, not just apply node security updates. An AKS upgrade performs the following actions:
46+
There's another process in AKS that lets you *upgrade* a cluster. An upgrade is typically to move to a newer version of Kubernetes, not just apply node security updates. An AKS upgrade performs the following actions:
4647

4748
* A new node is deployed with the latest security updates and Kubernetes version applied.
4849
* An old node is cordoned and drained.
@@ -69,7 +70,7 @@ kubectl create namespace kured
6970
helm install my-release kubereboot/kured --namespace kured --set controller.nodeSelector."kubernetes\.io/os"=linux
7071
```
7172

72-
You can also configure additional parameters for `kured`, such as integration with Prometheus or Slack. For more information about additional configuration parameters, see the [kured Helm chart][kured-install].
73+
You can also configure extra parameters for `kured`, such as integration with Prometheus or Slack. For more information about configuration parameters, see the [kured Helm chart][kured-install].
7374

7475
## Update cluster nodes
7576

@@ -83,7 +84,7 @@ If updates were applied that require a node reboot, a file is written to */var/r
8384

8485
## Monitor and review reboot process
8586

86-
When one of the replicas in the DaemonSet has detected that a node reboot is required, a lock is placed on the node through the Kubernetes API. This lock prevents additional pods being scheduled on the node. The lock also indicates that only one node should be rebooted at a time. With the node cordoned off, running pods are drained from the node, and the node is rebooted.
87+
When one of the replicas in the DaemonSet has detected that a node reboot is required, a lock is placed on the node through the Kubernetes API. This lock prevents more pods from being scheduled on the node. The lock also indicates that only one node should be rebooted at a time. With the node cordoned off, running pods are drained from the node, and the node is rebooted.
8788

8889
You can monitor the status of the nodes using the [kubectl get nodes][kubectl-get-nodes] command. The following example output shows a node with a status of *SchedulingDisabled* as the node prepares for the reboot process:
8990

@@ -92,7 +93,7 @@ NAME STATUS ROLES AGE VERSIO
9293
aks-nodepool1-28993262-0 Ready,SchedulingDisabled agent 1h v1.11.7
9394
```
9495

95-
Once the update process is complete, you can view the status of the nodes using the [kubectl get nodes][kubectl-get-nodes] command with the `--output wide` parameter. This additional output lets you see a difference in *KERNEL-VERSION* of the underlying nodes, as shown in the following example output. The *aks-nodepool1-28993262-0* was updated in a previous step and shows kernel version *4.15.0-1039-azure*. The node *aks-nodepool1-28993262-1* that hasn't been updated shows kernel version *4.15.0-1037-azure*.
96+
Once the update process is complete, you can view the status of the nodes using the [kubectl get nodes][kubectl-get-nodes] command with the `--output wide` parameter. This output lets you see a difference in *KERNEL-VERSION* of the underlying nodes, as shown in the following example output. The *aks-nodepool1-28993262-0* was updated in a previous step and shows kernel version *4.15.0-1039-azure*. The node *aks-nodepool1-28993262-1* that hasn't been updated shows kernel version *4.15.0-1037-azure*.
9697

9798
```output
9899
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME

0 commit comments

Comments
 (0)