Moritz Wanzenböck

You are right, most of them are excessive. We use kubebuilder to generate these RBAC from annotations in the code, and the default is to create cluster-scoped resources there. This...

> Does linstor/drbd supports operating two separate instances in the same subnet ? Sure, we don't do anything fancy with network. For LINSTOR/DRBD there are just the other cluster nodes...

This is probably related to SecureBoot. I expect the nodes where you get the error, running `mokutil --sb-state` will report `SecureBoot enabled`. When Linux is started with SecureBoot, it will...

Your system seems to be overloaded, or you have set a restrictive resource limit: ``` [8.513s][warning][os,thread] Failed to start thread "Unknown thread" - pthread_create failed (EAGAIN) for attributes: stacksize: 1024k,...

The machine/hardware itself seems fine. Did you set any ``` resources: limits: ... ``` on the Pod, or were they set automatically? Could you check the Pod YAML? What seems...

You can check `/proc/stat` to get the number of processes running. But I guess this would not be the issue here. Perhaps a too low ulimit is set. Can you...

I guess the apiserver is not optmized for many CRDs? I wonder what it is actually doing that takes so long...

> 20% more CRDs slow down service in order of magnitude Does this happen with all CRDs? In any case, this sounds like a Kubernetes issue to me.

Simplest would be: * Add the new node * Run `kubectl cordon ` * Run `linstor node evacuate `, wait for all resource to sync up. * Delete the node...

Currently, the Operator is the one registering the Satellites. So it can only really use what Kubernetes exposes on the Pod (perhaps also on the K8s Node resource). So we...