Skip to content

Do not remove PODs manually #724

@magmax

Description

@magmax

This method is removing the PODs handled by a DaemonSet manually:

https://github.com/CrowdStrike/falcon-operator/blob/main/pkg/k8s_utils/daemonset.go#L14

Instead of doing so, falcon-operator should trust on the Daemonset configuration updateStrategy. Perhaps it is possible to modify the Daemonset template to include a more aggressive policy to force kubernetes to perform such action instead of doing it by hand. Restarting 100 pods at a time might be aggressive enough.

We are having a problem that might be related to this: everytime we upgrade the falcon docker image, almost every pod gets corrupted, requiring us to manually remove the /opt/CrowdStrike folder on every node.

More information: https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions