|
|
@ -9,7 +9,7 @@ spec:
|
|
|
|
serviceAccountName: "{{SA_NAME}}"
|
|
|
|
serviceAccountName: "{{SA_NAME}}"
|
|
|
|
initContainers:
|
|
|
|
initContainers:
|
|
|
|
# In order to run as a proxy we need to enable IP Forwarding inside
|
|
|
|
# In order to run as a proxy we need to enable IP Forwarding inside
|
|
|
|
# the container. The `net.ipv4.ip_forward` sysctl is not whitelisted
|
|
|
|
# the container. The `net.ipv4.ip_forward` sysctl is not allowlisted
|
|
|
|
# in Kubelet by default.
|
|
|
|
# in Kubelet by default.
|
|
|
|
- name: sysctler
|
|
|
|
- name: sysctler
|
|
|
|
image: busybox
|
|
|
|
image: busybox
|
|
|
@ -18,7 +18,7 @@ spec:
|
|
|
|
command: ["/bin/sh"]
|
|
|
|
command: ["/bin/sh"]
|
|
|
|
args:
|
|
|
|
args:
|
|
|
|
- -c
|
|
|
|
- -c
|
|
|
|
- sysctl -w net.ipv4.ip_forward=1 -w net.ipv6.conf.all.forwarding=1
|
|
|
|
- sysctl -w net.ipv4.ip_forward=1 net.ipv6.conf.all.forwarding=1
|
|
|
|
resources:
|
|
|
|
resources:
|
|
|
|
requests:
|
|
|
|
requests:
|
|
|
|
cpu: 1m
|
|
|
|
cpu: 1m
|
|
|
|