Node Patching

We support 2 different operating systems in our kubernetes clusters; Linux and Windows. How we manage these for patching will be different as the tooling available is drastically different.

Linux Node Patching

For a linux node patching we will use Kured, Kubernetes Reboot Daemon. This a CNCF project which is in Sandbox.

Using our default configuration, this will check every 60 minutes between 09:00 and 16:00 on weekdays for the presence of a /var/run/reboot-requried file. This file indicates that there are packages that require a reboot to update. On RHEL (or its derivatives) we will use a sentinel command instead. Otherwise, it works in the same way.

Windows Node Patching

To be defined...