Add sysctl exemptions to controller PSP
I would like to be able to support this construction in my DaemonSet, I have coontrol over the host and this is the easiest way yo bump the socket properties.
```yaml
securityContext:
sysctls:
- name: net.core.somaxconn
value: "8192"
```
This commit is contained in:
parent
c0035d29c3
commit
1d54d8b565
6 changed files with 38 additions and 6 deletions
|
|
@ -9,6 +9,12 @@ metadata:
|
|||
spec:
|
||||
allowedCapabilities:
|
||||
- NET_BIND_SERVICE
|
||||
{{- if .Values.controller.sysctls }}
|
||||
allowedUnsafeSysctls:
|
||||
{{- range $sysctl, $value := .Values.controller.sysctls }}
|
||||
- {{ $sysctl }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
privileged: false
|
||||
allowPrivilegeEscalation: true
|
||||
# Allow core volume types.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue