Add protectKernelDefaults option (default true) to kubelet config file (#6611)

This commit is contained in:
Florian Ruynat
2020-09-03 16:41:41 +02:00
committed by GitHub
parent c1ba8e1b3a
commit f1566cb8c2
3 changed files with 19 additions and 0 deletions

View File

@@ -397,6 +397,9 @@ kubelet_rotate_certificates: true
# kubelet can also request a new server certificate from the Kubernetes API
kubelet_rotate_server_certificates: false
# If set to true, kubelet errors if any of kernel tunables is different than kubelet defaults
kubelet_protect_kernel_defaults: true
## List of key=value pairs that describe feature gates for
## the k8s cluster.
kube_feature_gates: []