Cortex cloud: Unable to run KSPM pods on nodes with taints configured-How to add Tolerations for KSPM pods?

Cortex cloud: Unable to run KSPM pods on nodes with taints configured-How to add Tolerations for KSPM pods?

164
Created On 06/02/26 08:31 AM - Last Modified 06/02/26 08:38 AM


Objective


How to add Tolerations to KSPM pods so that they can be deployed in nodes with taints configured?



Environment


**Product_versions**
• Cortex Cloud KSPM
• Konnector Helm chart
• k8s-connector-release sub-chart
**Network Config**
• Kubernetes


Procedure


We can apply our workload tolerations for multiple taints. The easiest way to do it is to update the client's values.yaml(ex:K8s-security-profile-panw-2-Jun-26-2PM.values.yaml) that we use to  instal from the UI.  Once modified, the pods should be installed on the nodes with taints configured on them.

Add tolerations section under the global section:

global:
  distribution:
  ...
  namespace: panw
  tolerations:
    - operator: "Exists"      
      effect: "NoSchedule"    
    - operator: "Exists"      
      effect: "PreferNoSchedule"    
    - operator: "Exists"      
      effect: "NoExecute"
   ...
konnector-template:
... 

 

For Example:



Additional Information


N/A

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000kBhrKAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail