Skip to content

Commit 4dceb99

Browse files
fix: schedule testkube MongoDB on non-FIPS nodes (#1639)
MongoDB 8.0.15 core dumps on FIPS-enabled Azure Linux (Mariner) nodes due to crypto incompatibility. Add nodeAffinity rule to exclude nodes with kubernetes.azure.com/fips_enabled label so MongoDB schedules on non-FIPS Ubuntu/Azure Linux nodes instead.
1 parent 1626f8f commit 4dceb99

1 file changed

Lines changed: 8 additions & 1 deletion

File tree

test/testkube/helm-testkube-values.yaml

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -117,9 +117,16 @@ mongodb:
117117
tag: 8.2.5
118118
# -- MongoDB image pull Secret
119119
pullSecrets: []
120-
nodeSelector:
120+
nodeSelector:
121121
kubernetes.io/os: linux
122122
kubernetes.io/arch: amd64
123+
affinity:
124+
nodeAffinity:
125+
requiredDuringSchedulingIgnoredDuringExecution:
126+
nodeSelectorTerms:
127+
- matchExpressions:
128+
- key: kubernetes.azure.com/fips_enabled
129+
operator: DoesNotExist
123130
# ref: https://cloud.google.com/kubernetes-engine/docs/how-to/prepare-arm-workloads-for-deployment#node-affinity-multi-arch-arm
124131
# -- Uncomment to schedule a multi-arch image to any available architecture type in a GGP Standard k8s cluster.
125132
# tolerations:

0 commit comments

Comments
 (0)