From 3e343682a967c908d9527508a47b18eaa90acf8c Mon Sep 17 00:00:00 2001 From: lakshmi Date: Wed, 10 May 2023 14:50:34 +0530 Subject: [PATCH] Revise details for control plane taints/labels --- .../reference/labels-annotations-taints/_index.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/content/en/docs/reference/labels-annotations-taints/_index.md b/content/en/docs/reference/labels-annotations-taints/_index.md index aa0bff0252..8cd6690af5 100644 --- a/content/en/docs/reference/labels-annotations-taints/_index.md +++ b/content/en/docs/reference/labels-annotations-taints/_index.md @@ -1114,15 +1114,19 @@ used to determine if the user has applied settings different from the kubeadm de Used on: Node -Label that kubeadm applies on the control plane nodes that it manages. If this label set, [EndpointSlice controller](/docs/concepts/services-networking/topology-aware-routing/#implementation-control-plane) ignores that node. +A marker label to indicate that the node is used to run {{< glossary_tooltip text="control plane" term_id="control-plane" >}} components. The kubeadm tool applies this label to the control plane nodes that it manages. Other cluster management tools typically also set this taint. + +You can label control plane nodes with this label to make it easier to schedule Pods only onto these nodes, or to avoid running Pods on the control plane. If this label set, [EndpointSlice controller](/docs/concepts/services-networking/topology-aware-routing/#implementation-control-plane) ignores that node. ### node-role.kubernetes.io/control-plane {#node-role-kubernetes-io-control-plane-taint} Used on: Node +Taint that kubeadm applies on control plane nodes to restrict placing pods and allow only specific pods to schedule on them. + Example: `node-role.kubernetes.io/control-plane:NoSchedule` -Taint that kubeadm applies on control plane nodes to allow only critical workloads to schedule on them. If this taint set, EndpointSlice controller ignores that node. +If this Taint applied, control plane nodes allow only critical workloads to schedule on them. You can manually remove this taint with `node-role.kubernetes.io/control-plane:NoSchedule-` ### node-role.kubernetes.io/master (deprecated) {#node-role-kubernetes-io-master-taint} @@ -1133,6 +1137,3 @@ Example: `node-role.kubernetes.io/master:NoSchedule` Taint that kubeadm previously applied on control plane nodes to allow only critical workloads to schedule on them. Replaced by [`node-role.kubernetes.io/control-plane`](#node-role-kubernetes-io-control-plane-taint); kubeadm no longer sets or uses this deprecated taint. -{{< note >}} -The EndpointSlice controller ignores nodes with the `node-role.kubernetes.io/control-plane` or `node-role.kubernetes.io/master` label set. -{{< /note >}}