From 90c9da9c867f07fb2da614a1dd8d36069a336190 Mon Sep 17 00:00:00 2001 From: Tim Bannister Date: Thu, 1 Apr 2021 18:12:17 +0100 Subject: [PATCH 1/2] Tidy sysctl task page for GA --- .../en/docs/tasks/administer-cluster/sysctl-cluster.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md index 0a0dd8bd1b..5660b590b0 100644 --- a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md +++ b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md @@ -7,17 +7,19 @@ content_type: task +{{< feature-state for_k8s_version="v1.21" state="stable" >}} + This document describes how to configure and use kernel parameters within a Kubernetes cluster using the {{< glossary_tooltip term_id="sysctl" >}} interface. - - ## {{% heading "prerequisites" %}} -{{< include "task-tutorial-prereqs.md" >}} {{< version-check >}} +{{< include "task-tutorial-prereqs.md" >}} +For some steps, you also need to be able to reconfigure the command line +options for the kubelets running on your cluster. From 8f913ba982ef7d1a0868aa85afdb528edcd9732f Mon Sep 17 00:00:00 2001 From: Tim Bannister Date: Thu, 1 Apr 2021 18:15:09 +0100 Subject: [PATCH 2/2] Note PodSecurityPolicy deprecation --- content/en/docs/tasks/administer-cluster/sysctl-cluster.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md index 5660b590b0..f81623982f 100644 --- a/content/en/docs/tasks/administer-cluster/sysctl-cluster.md +++ b/content/en/docs/tasks/administer-cluster/sysctl-cluster.md @@ -167,6 +167,8 @@ to schedule those pods onto the right nodes. ## PodSecurityPolicy +{{< feature-state for_k8s_version="v1.21" state="deprecated" >}} + You can further control which sysctls can be set in pods by specifying lists of sysctls or sysctl patterns in the `forbiddenSysctls` and/or `allowedUnsafeSysctls` fields of the PodSecurityPolicy. A sysctl pattern ends