I'm curious about whether all DaemonSets and static pods— which I understand need to run on every node in a cluster— should include tolerations for all types of taints. Ideally, I think that if a vendor provides a DaemonSet or static pod, it should come with that capability. However, I've run into issues applying this idea to specific OpenShift cluster DaemonSet pods like `iptables-alerter` and `ingress-canary`. Also, just to note, I don't have a Red Hat subscription to check further info.
2 Answers
Your understanding isn't too far off! DaemonSets are essential but they often have a specific purpose. While they may seem mandatory, not all of them need to operate on every node. Taints and tolerations help you manage resource allocation more effectively, allowing you to restrict certain business app pods to designated nodes. If you're unsure about the specific DaemonSets like `iptables-alerter`, it might help to look at their documentation to see what they actually require.
Actually, the whole idea of taint and toleration is to control which pods can run on certain nodes. Not every pod needs to tolerate every taint—it's more about your specific use case! If you’re using DaemonSets, they're usually essential for certain node tasks, but not all DaemonSets require tolerations for all taints. It really depends on what those particular pods are doing on your cluster.

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures