AWS eks documentation change
Summary
Updated documentation for nodeadm uninstall command flags with warnings about force-deleting directories
Security assessment
Adds warnings about potential data loss from force-deleting mounted directories, which relates to data integrity but does not address a specific security vulnerability. The documentation improves safety awareness.
Diff
diff --git a/eks/latest/userguide/hybrid-nodes-nodeadm.md b/eks/latest/userguide/hybrid-nodes-nodeadm.md index ac6de0a02..6528ab420 100644 --- a//eks/latest/userguide/hybrid-nodes-nodeadm.md +++ b//eks/latest/userguide/hybrid-nodes-nodeadm.md @@ -168 +168 @@ Name | Required | Description -`-s`, `--skip` | FALSE | Phases of upgrade to be skipped. It is not recommended to skip any of the phase unless it helps to fix an issue. **Values** `pod-validation` skips checking if all the no pods are running on the node, except daemon sets and static pods. `node-validation` skips checking if the node has been cordoned. `init-validation` skips checking if the node has been initialized successfully before running uninstall. +`-s`, `--skip` | FALSE | Phases of uninstall to be skipped. It is not recommended to skip any of the phases unless it helps to fix an issue. **Values** `pod-validation` skips checking if all the no pods are running on the node, except daemon sets and static pods. `node-validation` skips checking if the node has been cordoned. `init-validation` skips checking if the node has been initialized successfully before running uninstall. @@ -169,0 +170 @@ Name | Required | Description +`-f`, `--force` | FALSE | Force delete additional directories that might contain remaining files from Kubernetes and CNI components. **WARNING** This will delete all contents in default Kubernetes and CNI directories (`/var/lib/cni`, `/etc/cni/net.d`, etc). Do not use this flag if you store your own data in these locations. Starting from nodeadm `v1.0.9`, the `./nodeadm uninstall --skip node-validation,pod-validation --force` command no longer deletes the `/var/lib/kubelet` directory. This is because it may contain Pod volumes and volume-subpath directories that sometimes include the mounted node filesystem. **Safe handling tips** \- Deleting mounted paths can lead to accidental deletion of the actual mounted node filesystem. Before manually deleting the `/var/lib/kubelet` directory, carefully inspect all active mounts and unmount volumes safely to avoid data loss.