kubectl drain --ignore-daemonsets needs to GET each pod's owner reference (DaemonSet/StatefulSet/ReplicaSet/Deployment) to classify which pods can be drained vs ignored. Without these RBAC verbs, drain bails with 'cannot delete daemonsets ... is forbidden' for every daemonset-managed pod on the node. |
||
|---|---|---|
| .. | ||
| scripts | ||
| job-template.yaml | ||
| main.tf | ||
| terragrunt.hcl | ||