advanced · ~12 min

Kernel patch

hackademy-worker needs a kernel patch. Everything on it must move — except logger, which records the node's own logs during the patch and is pinned there on purpose.

kubectl drain evicts every pod but DaemonSets, logger included. A NoExecute taint is finer: it evicts only the pods that don't tolerate it, and logger's manifest (logger.yaml) already tolerates maintenance taints.

Objectives

No web pod left on hackademy-worker
web still serving: 4 ready pods
logger never moved: the same pod, still on hackademy-worker
Bonus: Watch the evictions in the events

Best on a computer with a keyboard. It works on a phone, with shortcuts under the terminal.