aks-baseline
aks-baseline copied to clipboard
mspnp
feat (cluster): [day2-ops] node update configuration
- remove Kubernetes Reboot Daemon (Kured)
- enable node update channel for K9s version automatic upgrades
- enable node os level update channel for OS security automatic upgrades
- add some initial guidance to the docs
Some explanation: I could not get it to deploy as-is and had to make those two changes in cluster-stamp.bicep
Apparently there's a known bug with the configuration of "SecurityPatch & node-image" so we will need to go with "NodeImage & node-image"
Here's some context on the bug: https://learn.microsoft.com/en-us/azure/aks/auto-upgrade-node-os-image#node-channel-known-bugs
"Currently, when you set the cluster auto-upgrade channel to node-image, it also automatically sets the node OS auto-upgrade channel to NodeImage. You can't change node OS auto-upgrade channel value if your cluster auto-upgrade channel is node-image. In order to set the node OS auto-upgrade channel value, check the cluster auto-upgrade channel value isn't node-image."
I know a handful of other changes were made to support the preview feature SecurityPatch but those may not be necessary now.
@ferantivero Looking good! Can you add some guidance / an example of a maintenance window for the updates? Thanks
For reference: https://learn.microsoft.com/en-us/azure/architecture/operator-guides/aks/aks-upgrade-practices#automatic-node-image-upgrades https://learn.microsoft.com/en-us/azure/aks/planned-maintenance#creating-a-maintenance-window
@ferantivero Looking good! Can you add some guidance / an example of a maintenance window for the updates? Thanks
For reference: https://learn.microsoft.com/en-us/azure/architecture/operator-guides/aks/aks-upgrade-practices#automatic-node-image-upgrades https://learn.microsoft.com/en-us/azure/aks/planned-maintenance#creating-a-maintenance-window
sure thing @skabou, we added both k8s and os level maint config windows.
done | from 1c82e86873cd92608943cf8afc8925769a0e50ae
Approved with some text suggestions
really appreciate all contribs @skabou, accepted them all.