gardener / gardener

Homogeneous Kubernetes clusters at scale on any infrastructure using hosted control planes.

Home Page:https://gardener.cloud

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add Patch cluster role for DWD prober

unmarshall opened this issue · comments

How to categorize this issue?

/area control-plane
/kind bug

What happened:
In DWD we patch Scale subresource of Deployments with an annotation. See here. This requires a cluster role for the prober to allow patching Deployment/Scale subresource across shoot namespaces. The cluster role that is currently configured lacks this role.
A Canary Issue-4364 reported a problem where DWD was unable to scale down MCM, CA and KCM and thus could not prevent nodes from being stopped resulting in a down time for the customer.

What you expected to happen:
On AWS where kube-proxy path optimisation is not in play, DWD should have been able to prevent KCM marking nodes as Unknown and MCM subsequently replacing these nodes.