DaemonSet "iptables-alerter" is suppose to run on all nodes, based on discussion [1]. However, the DaemonSet is not configure to tolerant any taints. If I set up a special MachineSet with taint, those nodes will not get the "iptables-alerter" pods running.

[1]: https://redhat-internal.slack.com/archives/CFFSAHWHF/p1723230550938349?thread_ts=1723213664.230299&cid=CFFSAHWHF

    

4.16
    

Create a machineset with taint
    

    1. Create a new MachineSet with taint set 
      taints:
        - effect: NoSchedule
          key: node-role.kubernetes.io/infra
          value: reserved
    2. Observe the Pods on the Node

    

"iptables-alerter" is not scheduled to the Node.
    

"iptables-alerter" is running on the Node.