Changes in node-exporter daemonset are persistent and does not get revert back to default configuration

Solution Verified - Updated -

Issue

  • Suppose, the value TLS_RSA_WITH_AES_128_CBC_SHA256 is deleted from tls-cipher-suites argument mentioned in kube-rbac-proxy container spec.
# oc edit ds node-exporter

- --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  • After deletion and saving the changes, node-exporter pods were rolled out with the above configuration. As observed, the node-exporter daemonset never changed and reconciling to the default configuration never happened and the change made to daemonset is persistent.

Environment

  • OpenShift Container Platform
    • v3.11

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content