From 2c0e7245b65dc4cd0ebf6aa48f631caff115158a Mon Sep 17 00:00:00 2001
From: James Allenby <JamesAllenby@protonmail.com>
Date: Mon, 29 Jun 2026 01:43:01 +0100
Subject: [PATCH] fix: remove taint from control-plane nodes

---
 ansible/roles/kubernetes_control_plane/tasks/main.yaml    | 3 +++
 ansible/roles/kubernetes_control_plane/tasks/untaint.yaml | 7 +++++++
 2 files changed, 10 insertions(+)
 create mode 100644 ansible/roles/kubernetes_control_plane/tasks/untaint.yaml

diff --git a/ansible/roles/kubernetes_control_plane/tasks/main.yaml b/ansible/roles/kubernetes_control_plane/tasks/main.yaml
index df82f64..7a1512e 100644
--- a/ansible/roles/kubernetes_control_plane/tasks/main.yaml
+++ b/ansible/roles/kubernetes_control_plane/tasks/main.yaml
@@ -49,6 +49,9 @@
   args:
     creates: $HOME/.kube/config
 
+- name: Untaint control planes
+  ansible.builtin.import_tasks: untaint.yaml
+
 - name: Install Kubernetes CLI
   ansible.builtin.apt:
     pkg:
diff --git a/ansible/roles/kubernetes_control_plane/tasks/untaint.yaml b/ansible/roles/kubernetes_control_plane/tasks/untaint.yaml
new file mode 100644
index 0000000..3cd04be
--- /dev/null
+++ b/ansible/roles/kubernetes_control_plane/tasks/untaint.yaml
@@ -0,0 +1,7 @@
+- name: Remove control plane NoSchedule taint from all nodes
+  kubernetes.core.k8s_taint:
+    state: absent
+    name: "{{ inventory_hostname_short }}"
+    taints:
+      - key: node-role.kubernetes.io/control-plane
+        effect: NoSchedule