From d711a0c83ff1666e6bb5d330178ef73794974cbe Mon Sep 17 00:00:00 2001
From: Xinghong Fang <javefang@users.noreply.github.com>
Date: Mon, 8 Apr 2019 10:24:26 +0100
Subject: [PATCH] [nodelocaldns] expand tolerations on the daemonset (#4451)

---
 .../ansible/templates/nodelocaldns-daemonset.yml.j2         | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/roles/kubernetes-apps/ansible/templates/nodelocaldns-daemonset.yml.j2 b/roles/kubernetes-apps/ansible/templates/nodelocaldns-daemonset.yml.j2
index c7b28d276..204a2838b 100644
--- a/roles/kubernetes-apps/ansible/templates/nodelocaldns-daemonset.yml.j2
+++ b/roles/kubernetes-apps/ansible/templates/nodelocaldns-daemonset.yml.j2
@@ -26,8 +26,10 @@ spec:
       hostNetwork: true
       dnsPolicy: Default  # Don't use cluster DNS.
       tolerations:
-      - key: node-role.kubernetes.io/master
-        effect: NoSchedule
+      - effect: NoSchedule
+        operator: "Exists"
+      - effect: NoExecute
+        operator: "Exists"
       - key: "CriticalAddonsOnly"
         operator: "Exists"
       containers: