Merge pull request #27376 from sftim/20210401_tidy_sysctl_task

Tidy sysctl task page for GA
This commit is contained in:
Kubernetes Prow Robot
2021-04-01 13:27:10 -07:00
committed by GitHub
@@ -7,17 +7,19 @@ content_type: task
<!-- overview -->
{{< feature-state for_k8s_version="v1.21" state="stable" >}}
This document describes how to configure and use kernel parameters within a
Kubernetes cluster using the {{< glossary_tooltip term_id="sysctl" >}}
interface.
## {{% heading "prerequisites" %}}
{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}}
{{< include "task-tutorial-prereqs.md" >}}
For some steps, you also need to be able to reconfigure the command line
options for the kubelets running on your cluster.
<!-- steps -->
@@ -165,6 +167,8 @@ to schedule those pods onto the right nodes.
## PodSecurityPolicy
{{< feature-state for_k8s_version="v1.21" state="deprecated" >}}
You can further control which sysctls can be set in pods by specifying lists of
sysctls or sysctl patterns in the `forbiddenSysctls` and/or
`allowedUnsafeSysctls` fields of the PodSecurityPolicy. A sysctl pattern ends