karpenter_node_taints

Description

The karpenter_node_taints parameter adds custom Kubernetes taints to Karpenter workload nodes. Taints prevent pods without matching tolerations from scheduling on these nodes.

Default Value

The default value is empty (no custom taints).

Setting the Parameter

$ convox rack params set karpenter_node_taints=dedicated=workload:NoSchedule -r rackName
Setting parameters... OK

Additional Information

• Format: Comma-separated key=value:Effect or key:Effect entries.
• Validation: Effect must be NoSchedule, PreferNoSchedule, or NoExecute. Keys and values must not contain double quotes.
• convox.yml does not have a tolerations field. For GPU taints (nvidia.com/gpu), Kubernetes auto-adds matching tolerations to pods that request GPU resources via scale.gpu. For non-GPU taints, tolerations must be added through an external mechanism (e.g., a mutating admission webhook). See Using Taints to Protect Nodes for details.
• Node-level DaemonSets (fluentd, aws-node, kube-proxy, etc.) are not affected by custom taints — they use broad tolerations and will continue to run on tainted nodes.

See Also

• Karpenter for the full Karpenter configuration reference
• karpenter_node_labels