Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deployment Guide for Azure Kubernetes Services (AKS) Cluster
  3. Troubleshooting
  4. Taint, Toleration, and Node affinity related issues in cpServer
NetBackup™ Deployment Guide for Azure Kubernetes Services (AKS) Cluster

Taint, Toleration, and Node affinity related issues in cpServer

The cpServer control pool pod is in pending state

If one of the following cpServer control pool pod is in pending state, then perform the steps that follow:

flexsnap-agent, flexsnap-api-gateway, flexsnap-certauth, flexsnap-coordinator, flexsnap-idm, flexsnap-nginx, flexsnap-notification, flexsnap-scheduler, flexsnap-, flexsnap-, flexsnap-fluentd-, flexsnap-fluentd

  1. Obtain the pending pod's toleration and affinity status using the following command:

    kubectl get pods <pod name>

  2. Check if the node-affinity and tolerations of pod are matching with:

    • fields listed in cpServer.nodepool.controlpool or  primary.nodeselector in the environment.yaml file.

    • taint and label of node pool, mentioned in cpServer.nodeselector.controlpool or primary.nodeselector in the environment.yaml file.

If all the above fields are correct and matching and still the control pool pod is in pending state, then the issue may be due to all the nodes in nodepool running at maximum capacity and cannot accommodate new pods. In such case the noodpool must be scaled properly.

The cpServer data pool pod is in pending state

If one of the following cpServer data pool pod is in pending state, then perform the steps that follow:

flexsnap-listener,flexsnap-workflow,flexsnap-datamover

  1. Obtain the pending pod's toleration and affinity status using the following command:

    kubectl get pods <pod name>

  2. Check if the node-affinity and tolerations of pod are matching with:

    • fields listed in cpServer.nodepool.datapool in the environment.yaml file.

    • taint and label of node pool, mentioned in cpServer.nodeselector.datapool in the environment.yaml file.

If all the above fields are correct and matching and still the control pool pod is in pending state, then the issue may be due to all the nodes in nodepool running at maximum capacity and cannot accommodate new pods. In such case the noodpool must be scaled properly.

The Snapshot Manager operator (flexsnap-operator) pod is in pending state
  1. Obtain the pending pod's toleration and affinity status using the following command:

    kubectl get pods <pod name>

  2. Check if the node-affinity and tolerations of pod are matching with:

    • fields listed in operator/kustomization.yaml file.

    • taint and label of node pool, mentioned in above values.

If all the above fields are correct and matching and still the control pool pod is in pending state, then the issue may be due to all the nodes in nodepool running at maximum capacity and cannot accommodate new pods. In such case the noodpool must be scaled properly.

Nodes configured with incorrect taint and label

If the nodes are configured with incorrect taint and label values, the the user can edit them using the following command:

az aks nodepool update \ --resource-group <resource_group> \ --cluster-name <cluster_name> \ --name <nodepool_name> \ --node-taints <key>=<value>:<effect> \ --no-wait

az aks nodepool update \ --resource-group <resource_group> \ --cluster-name <cluster_name> \ --name <cluster_name> \ --labels <key>=<value>

Feedback

Was this page helpful?
Previous

Primary pod is in pending state for a long duration

Next

Operations performed on cpServer in environment.yaml file are not reflected

Feedback

Was this page helpful?