https://rancher.com/ logo
Title
b

boundless-eye-27124

12/14/2022, 2:41 AM
How to enable sysctl in RKE2. seeing
forbidden sysctl: "net.ipv4.tcp_rmem" not allowlisted
error. Already patched psp, still getting the error
kubectl patch psp global-unrestricted-psp --patch '{"spec": {"allowedUnsafeSysctls": ["net.*", "net.core.rmem_max",
"net.core.wmem_max",
"net.ipv4.tcp_rmem",
"net.ipv4.tcp_wmem",
"net.core.somaxconn",
"net.core.netdev_max_backlog",
"net.ipv4.tcp_syncookies",
"net.ipv4.ip_local_port_range",
"net.ipv4.tcp_tw_recycle",
"net.ipv4.tcp_tw_reuse",
"net.ipv4.tcp_congestion_control",
"net.ipv4.tcp_max_syn_backlog",
"net.netfilter.nf_conntrack_tcp_be_liberal",
"net.ipv4.tcp_slow_start_after_idle"]}}'
^^ Patched config
c

creamy-pencil-82913

12/14/2022, 3:28 AM
If I remember correctly there's also a whitelist in the kubelet that needs to be changed
b

boundless-eye-27124

12/14/2022, 8:13 PM
thanks, it helped