How to enable sysctl in RKE2 seeing `forbidden sysctl net ip rancher-users #rke2

Title

boundless-eye-27124

12/14/2022, 2:41 AM

How to enable sysctl in RKE2. seeing

forbidden sysctl: "net.ipv4.tcp_rmem" not allowlisted

error. Already patched psp, still getting the error

kubectl patch psp global-unrestricted-psp --patch '{"spec": {"allowedUnsafeSysctls": ["net.*", "net.core.rmem_max",
"net.core.wmem_max",
"net.ipv4.tcp_rmem",
"net.ipv4.tcp_wmem",
"net.core.somaxconn",
"net.core.netdev_max_backlog",
"net.ipv4.tcp_syncookies",
"net.ipv4.ip_local_port_range",
"net.ipv4.tcp_tw_recycle",
"net.ipv4.tcp_tw_reuse",
"net.ipv4.tcp_congestion_control",
"net.ipv4.tcp_max_syn_backlog",
"net.netfilter.nf_conntrack_tcp_be_liberal",
"net.ipv4.tcp_slow_start_after_idle"]}}'

^^ Patched config

creamy-pencil-82913

12/14/2022, 3:28 AM

If I remember correctly there's also a whitelist in the kubelet that needs to be changed

boundless-eye-27124

12/14/2022, 8:13 PM

thanks, it helped

5 Views

#rke2 Join Slack