Enabling etcd data corruption detection

cybozu-go · Jan 6, 2025 · 6a50448 · 6a50448
1 parent 9fe3042
commit 6a50448
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/op/etcd/common.go b/op/etcd/common.go
@@ -68,6 +68,11 @@ func BuiltInParams(node *cke.Node, initialCluster []string, state string) cke.Se
 		// https://groups.google.com/a/kubernetes.io/g/dev/c/B7gJs88XtQc/m/rSgNOzV2BwAJ
 		// This flag can detect an inconsistency.
 		"--experimental-initial-corrupt-check",
+
+		// Enabling data corruption detection
+		// https://etcd.io/docs/v3.5/op-guide/data_corruption/
+		"--experimental-compact-hash-check-enabled=true",
+		"--experimental-corrupt-check-time=3h",
 	}
 	if len(initialCluster) > 0 {
 		args = append(args,