allowedUnsafeSysctls property
Defines a comma-separated allowlist of unsafe sysctls or sysctl patterns
(ending in *
).
The unsafe namespaced sysctl groups are kernel.shm*
, kernel.msg*
,
kernel.sem
, fs.mqueue.*
, and net.*
. Leaving this allowlist empty
means they cannot be set on Pods. To allow certain sysctls or sysctl
patterns to be set on Pods, list them separated by commas. For example:
kernel.msg*,net.ipv4.route.min_pmtu
. See
https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/ for
more details.
Optional.
Implementation
core.List<core.String>? allowedUnsafeSysctls;