Skip to content

Commit c1cf61c

Browse files
amaanx86joestringer
authored andcommitted
docs: add uninstall warning for 05-cilium.conflist node cleanup
helm uninstall does not remove host path files written by the Cilium DaemonSet. The 05-cilium.conflist file remains on each node and blocks new pod creation with a cilium.sock connection error. Document the manual cleanup step required after uninstall. Signed-off-by: Amaan Ul Haq Siddiqui <[email protected]>
1 parent 9f20d12 commit c1cf61c

1 file changed

Lines changed: 28 additions & 0 deletions

File tree

Documentation/installation/cni-chaining-oracle-oke.rst

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,6 +114,34 @@ Use the following to identify pods that need restarting:
114114
done
115115
done
116116
117+
Uninstall
118+
=========
119+
120+
.. code-block:: shell-session
121+
122+
$ helm uninstall cilium -n kube-system
123+
124+
.. warning::
125+
126+
``helm uninstall`` removes Kubernetes resources but does not clean up files
127+
written to node host paths. The ``/etc/cni/net.d/05-cilium.conflist`` file
128+
remains on every node after uninstall. Because it sorts before
129+
``10-oci.conflist``, the kubelet continues to use it for new pod creations.
130+
With the Cilium agent gone, ``cilium-cni`` cannot reach its socket and
131+
**new pods will be stuck in ContainerCreating** with the error
132+
``dial unix /var/run/cilium/cilium.sock: connect: no such file or directory``.
133+
Existing running pods are not affected since CNI is only called at pod
134+
creation time.
135+
136+
After uninstalling, SSH into each node and remove the file:
137+
138+
.. code-block:: shell-session
139+
140+
$ sudo rm -f /etc/cni/net.d/05-cilium.conflist
141+
142+
OKE's ``vcn-native-ip-cni`` DaemonSet will then handle all new pod
143+
networking via ``10-oci.conflist``.
144+
117145
.. include:: k8s-install-validate.rst
118146

119147
.. include:: next-steps.rst

0 commit comments

Comments
 (0)