New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
k8s 1.11.3 sysctl can't work for deployment #69213
Comments
@slpcat specifying it with Pod(s) work fine? |
Also, please share the full yaml file |
yes, it works with POD and in pod: but deployment can't work apiVersion: apps/v1 |
/assign |
@slpcat I have test your example in v1.13.0-alpha and no error occurs. |
in my test 1.11.3 and 1.12.0 can‘t work, I don’t have v1.13.0-alpha |
it can work now , this is the yaml |
It does not work for me.
I have to use privileged and go in manually to change it. |
So I've hit this issue recently and it's not solved, please reopen the issue as it's blocking allot of people can costing allot of money on a client. |
Any update here? If I set the sysctls value it's still not working:
Of course my kubelet allows However yet ip_forward is still 0:
Running on v1.16.3:
What's going wrong here? |
Created #87198 for my behaviour |
Is this a BUG REPORT or FEATURE REQUEST?:
/kind bug
/sig node
apiVersion: apps/v1
kind: Deployment
metadata:
name: example-web
namespace: default
labels:
app: example-web
..........
securityContext:
capabilities: {}
privileged: false
sysctls:
- name: kernel.msgmax
value: "65536"
- name: net.ipv4.tcp_syncookies
value: "0"
- name: net.ipv4.ip_local_port_range
value: "1024 65535"
- name: net.core.somaxconn
value: "65535"
kubectl create --dry-run -f example-deploy2.yml
error: error validating "example-deploy2.yml": error validating data: ValidationError(Deployment.spec.template.spec.containers[0].securityContext): unknown field "sysctls" in io.k8s.api.core.v1.SecurityContext; if you choose to ignore these errors, turn validation off with --validate=false
The text was updated successfully, but these errors were encountered: