You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+53Lines changed: 53 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -259,6 +259,59 @@ spec:
259
259
260
260
> **NOTE**: Currently only `mellanox` plugin can be disabled.
261
261
262
+
### Parallel draining
263
+
264
+
It is possible to drain more than one node at a time using this operator.
265
+
266
+
The configuration is done via the SriovNetworkNodePool, selecting a number of nodes using the node selector and how many
267
+
nodes in parallel from the pool the operator can drain in parallel. maxUnavailable can be a number or a percentage.
268
+
269
+
> **NOTE**: every node can only be part of one pool, if a node is selected by more than one pool, then it will not be drained
270
+
271
+
> **NOTE**: If a node is not part of any pool it will have a default configuration of maxUnavailable 1
272
+
273
+
**Example**:
274
+
275
+
```yaml
276
+
apiVersion: sriovnetwork.openshift.io/v1
277
+
kind: SriovNetworkPoolConfig
278
+
metadata:
279
+
name: worker
280
+
namespace: sriov-network-operator
281
+
spec:
282
+
maxUnavailable: 2
283
+
nodeSelector:
284
+
matchLabels:
285
+
node-role.kubernetes.io/worker: ""
286
+
```
287
+
288
+
### Resource Injector Policy
289
+
290
+
By default, the Resource injector webhook has a failed policy of ignored, this was implemented to not block pod creation
291
+
in case the webhook is not available.
292
+
293
+
with a feature introduced in Kubernetes 1.28(Beta) called [MatchConditions](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-matchconditions)
294
+
we can move the webhook failed policy to be Fail. In this case the operator configured the Mutating webhook for the resource
295
+
injector only on pods with the secondary network annotation of `k8s.v1.cni.cncf.io/networks`.
296
+
It's possible to enable the feature with a FeatureGate via the SriovOperatorConfig object
0 commit comments