-
Notifications
You must be signed in to change notification settings - Fork 49
Description
This method is removing the PODs handled by a DaemonSet manually:
https://github.com/CrowdStrike/falcon-operator/blob/main/pkg/k8s_utils/daemonset.go#L14
Instead of doing so, falcon-operator should trust on the Daemonset configuration updateStrategy. Perhaps it is possible to modify the Daemonset template to include a more aggressive policy to force kubernetes to perform such action instead of doing it by hand. Restarting 100 pods at a time might be aggressive enough.
We are having a problem that might be related to this: everytime we upgrade the falcon docker image, almost every pod gets corrupted, requiring us to manually remove the /opt/CrowdStrike folder on every node.
More information: https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/