Cortex cloud: Unable to run KSPM pods on nodes with taints configured-How to add Tolerations for KSPM pods?
164
Created On 06/02/26 08:31 AM - Last Modified 06/02/26 08:38 AM
Objective
How to add Tolerations to KSPM pods so that they can be deployed in nodes with taints configured?
Environment
**Product_versions**
• Cortex Cloud KSPM
• Konnector Helm chart
• k8s-connector-release sub-chart
**Network Config**
• Kubernetes
Procedure
We can apply our workload tolerations for multiple taints. The easiest way to do it is to update the client's values.yaml(ex:K8s-security-profile-panw-2-Jun-26-2PM.values.yaml) that we use to instal from the UI. Once modified, the pods should be installed on the nodes with taints configured on them.
Add tolerations section under the global section:
global:
distribution:
...
namespace: panw
tolerations:
- operator: "Exists"
effect: "NoSchedule"
- operator: "Exists"
effect: "PreferNoSchedule"
- operator: "Exists"
effect: "NoExecute"
...
konnector-template:
...
|
For Example:
Additional Information
N/A