Node selector

To run a DaemonSet only on some nodes, nodeSelector is written in the template; only nodes carrying those labels count as eligible:

kubectl label node worker-2 disk=ssd

    spec:
      nodeSelector:
        disk: ssd
      containers:
        - name: ssd-izleyici
          image: ssd-izleyici:1.0

For more flexible conditions (e.g. "gpu=a100 or gpu=h100"), affinity.nodeAffinity is used.

Some nodes are marked with a taint and repel pods without a toleration (e.g. the control-plane node). DaemonSets that must be on every node, like a log collector, add tolerations for these taints:

$ kubectl describe node control-plane | grep Taints
Taints: node-role.kubernetes.io/control-plane:NoSchedule

    spec:
      tolerations:
        - key: node-role.kubernetes.io/control-plane
          operator: Exists
          effect: NoSchedule