-
Notifications
You must be signed in to change notification settings - Fork 6.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add protectKernelDefaults option (default true) to kubelet config file #6611
Add protectKernelDefaults option (default true) to kubelet config file #6611
Conversation
not sure kubelet likes this setting. You'll need the kubelet logs to check what's wrong with it |
Damn, will check, switching this to WIP |
710c5cd
to
1d1f228
Compare
1d1f228
to
5404d85
Compare
5404d85
to
9674618
Compare
/approve |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: floryut, Miouge1 The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/lgtm |
need to remove the draft status to get merged |
weird, it is not but the WIP label wasn't remove |
* 'master' of https://github.com/kubernetes-sigs/kubespray: Add protectKernelDefaults option (default true) to kubelet config file (kubernetes-sigs#6611) Rotate kubelet server certificate. (kubernetes-sigs#6453) Add snapshot-controller for CSI drivers and snapshot CRDs, add a default volumesnapshotclass when running cinder CSI (kubernetes-sigs#6537) Calico: update crds to v1 and cr (kubernetes-sigs#6360) Fix E306 in roles/network_plugin (kubernetes-sigs#6516)
What type of PR is this?
/kind feature
What this PR does / why we need it:
Fix one of the kube-bench error
Which issue(s) this PR fixes:
Partial #6595
Special notes for your reviewer:
4.2.6 Ensure that the --protect-kernel-defaults argument is set to true
Does this PR introduce a user-facing change?: