You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Accept nodes with SLA >= 900 (SLA = 900 OR SLA > 900)
170
+
- key: node.kubernetes.io/sla
171
+
operator: Equal
172
+
value: "900"
173
+
effect: NoSchedule
174
+
- key: node.kubernetes.io/sla
175
+
operator: Gt
176
+
value: "900"
177
+
effect: NoSchedule
178
+
---
162
179
# Critical workload will not be scheduled until a suitable high reliability node has capacity
163
180
apiVersion: v1
164
181
kind: Pod
@@ -396,6 +413,8 @@ spec:
396
413
397
414
- Invalid taints meant to be used with the new comparison operators (e.g., `node.kubernetes.io/sla=95.5` and `node.kubernetes.io/version=1`) are not detected at admission time.
398
415
416
+
- **Taint Misconfiguration Risk**: When nodes have taints with non-numeric values (e.g., `node.kubernetes.io/sla=high` instead of `node.kubernetes.io/sla=950`) that are intended for use with numeric operators, the misconfiguration is only detected during pod scheduling attempts, not at taint creation time. This can lead to scheduling failures that are difficult to diagnose.
417
+
399
418
### Risks and Mitigations
400
419
401
420
#### Scheduler Performance Regression
@@ -431,6 +450,16 @@ spec:
431
450
- API validation rejects pods with unparseable values rather than silently failing
432
451
- Clear error messages help users identify and fix configuration issues
433
452
453
+
#### Taint Misconfiguration Detection
454
+
455
+
**Risk**: Node taints intended for numeric comparison may contain non-numeric values (e.g., `node.kubernetes.io/sla=high` instead of `node.kubernetes.io/sla=950`), causing scheduling failures that are only detected during pod placement attempts rather than at taint creation time.
456
+
457
+
**Mitigation**:
458
+
459
+
- Clear documentation and examples showing proper numeric taint configuration
460
+
- Enhanced error messages in scheduling events that clearly indicate parsing failures
461
+
- Monitoring and alerting on scheduling failures due to taint parsing errors
0 commit comments