config.example.yaml

# Vigil Controller Configuration
# Copy to config.local.yaml for local development (gitignored).

# The taint key to watch for and remove
taintKey: "node.nextdoor.com/initializing"

# The taint effect to match
taintEffect: "NoSchedule"

# All known temporary startup taint keys used in the cluster.
#
# Vigil only removes the taint specified by taintKey above. However, new nodes
# often have additional temporary taints set by other controllers (CSI drivers,
# CNI plugins, etc.). Those taints are removed by their respective controllers,
# not by Vigil.
#
# This list is used only for DaemonSet discovery: Vigil strips these taints
# before evaluating which DaemonSets should run on a node in steady state.
# Without this, DaemonSets that don't tolerate these temporary taints would be
# incorrectly excluded from the expected set.
#
# Must include taintKey itself plus any other startup taints in the cluster.
knownStartupTaintKeys:
  - "node.nextdoor.com/initializing"
  - "cni.istio.io/not-ready"
  - "ebs.csi.aws.com/agent-not-ready"
  - "efs.csi.aws.com/agent-not-ready"

# Maximum time to wait before removing taint anyway (seconds)
timeoutSeconds: 120

# DaemonSets to exclude from readiness checks
excludeDaemonSets:
  # Exclude by explicit namespace/name
  byName: []
  # - namespace: kube-system
  #   name: slow-daemonset