deploy: catch-all toleration so DS schedules on not-ready nodes

Replaces the explicit toleration list with `operator: Exists`. The previous
list lacked node.kubernetes.io/not-ready:NoSchedule, so during a fresh
control-plane join the CNI agent couldn't schedule until the node became
Ready — but the node can't become Ready without the CNI. Surfaced during
host001/host002 PERC migration rebuild.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

deploy/daemonset.yaml

@@ -41,15 +41,10 @@ spec:
       nodeSelector:
         flock.fritzlab.net/agent: ""
       tolerations:
-        - key: node-role.kubernetes.io/control-plane
+        # CNI must schedule on a fresh node before it becomes Ready —
-          operator: Exists
+        # the node has not-ready:NoSchedule until flock installs the CNI conflist.
-          effect: NoSchedule
+        # Catch-all tolerates all taints so the agent always runs.
-        - key: node.kubernetes.io/not-ready
+        - operator: Exists
-          operator: Exists
-          effect: NoExecute
-        - key: node.kubernetes.io/unreachable
-          operator: Exists
-          effect: NoExecute
       initContainers:
         - name: install-cni
           image: code.fritzlab.net/fritzlab/flock:latest

deploy/install.yaml

@@ -182,19 +182,10 @@ spec:
       nodeSelector:
         flock.fritzlab.net/agent: ""
       tolerations:
-        - key: fritzlab.net/cni-test
+        # CNI must schedule on a fresh node before it becomes Ready —
-          operator: Equal
+        # the node has not-ready:NoSchedule until flock installs the CNI conflist.
-          value: "true"
+        # Catch-all tolerates all taints so the agent always runs.
-          effect: NoSchedule
+        - operator: Exists
-        - key: node-role.kubernetes.io/control-plane
-          operator: Exists
-          effect: NoSchedule
-        - key: node.kubernetes.io/not-ready
-          operator: Exists
-          effect: NoExecute
-        - key: node.kubernetes.io/unreachable
-          operator: Exists
-          effect: NoExecute
       initContainers:
         - name: install-cni
           image: code.fritzlab.net/fritzlab/flock:latest