Skip to content

Commit ca52208

Browse files
authored
Merge pull request #51454 from kelbrown20/BZ2076179-forbiddensysctls
BZ2076179 - ForbiddenSysctls is not a in KubletConfig
2 parents 7690ed5 + 9a04019 commit ca52208

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

modules/nodes-containers-sysctls-unsafe.adoc

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,9 +12,8 @@ situations such as high performance or real-time application tuning.
1212
If you want to use unsafe sysctls, a cluster administrator must enable them
1313
individually for a specific type of node. The sysctls must be namespaced.
1414

15-
You can further control which sysctls can be set in pods by specifying lists of sysctls or sysctl patterns in the `forbiddenSysctls` and `allowedUnsafeSysctls` fields of the Security Context Constraints.
15+
You can further control which sysctls are set in pods by specifying lists of sysctls or sysctl patterns in the `allowedUnsafeSysctls` field of the Security Context Constraints.
1616

17-
- The `forbiddenSysctls` option excludes specific sysctls.
1817
- The `allowedUnsafeSysctls` option controls specific needs such as high performance or real-time application tuning.
1918
2019
[WARNING]

0 commit comments

Comments
 (0)