Skip to content

Commit e052170

Browse files
sbocinecderekbit
authored andcommitted
fix: use diskPressure instead wildcard default helperPod toleration
The wildcard toleration ('- operator: Exists') is extremly permissive. Setting is as a default defeats purpose of allowing to set extra tolerations as part of the helperPod config. Use "node.kubernetes.io/disk-pressure" toleration instead as it is already used in many examples and documentation across the codebase.
1 parent ec124be commit e052170

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

provisioner.go

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -605,7 +605,9 @@ func (p *LocalPathProvisioner) createHelperPod(action ActionType, cmd []string,
605605
}
606606
lpvTolerations := []v1.Toleration{
607607
{
608+
Key: v1.TaintNodeDiskPressure,
608609
Operator: v1.TolerationOpExists,
610+
Effect: v1.TaintEffectNoSchedule,
609611
},
610612
}
611613
helperPod := p.helperPod.DeepCopy()

0 commit comments

Comments
 (0)