fix: provide an option to ignore sysctl errors about unknown keys (#12514)

* fix: provide an option to ignore sysctl errors about unknown keys

* fix: rename sysctl_ignoreerrors and remove useless var definitions
This commit is contained in:
David Bidorff
2025-09-01 16:07:14 +02:00
committed by GitHub
parent eb26449e80
commit fe7592dd0c
6 changed files with 15 additions and 0 deletions

View File

@@ -76,6 +76,7 @@
value: "1"
state: present
reload: true
ignoreerrors: "{{ sysctl_ignore_unknown_keys }}"
when: ipv4_stack | bool
- name: Enable ipv6 forwarding
@@ -85,6 +86,7 @@
value: "1"
state: present
reload: true
ignoreerrors: "{{ sysctl_ignore_unknown_keys }}"
when: ipv6_stack | bool
- name: Check if we need to set fs.may_detach_mounts
@@ -103,6 +105,7 @@
value: 1
state: present
reload: true
ignoreerrors: "{{ sysctl_ignore_unknown_keys }}"
when: fs_may_detach_mounts.stat.exists | d(false)
- name: Ensure kubelet expected parameters are set
@@ -112,6 +115,7 @@
value: "{{ item.value }}"
state: present
reload: true
ignoreerrors: "{{ sysctl_ignore_unknown_keys }}"
with_items:
- { name: kernel.keys.root_maxbytes, value: 25000000 }
- { name: kernel.keys.root_maxkeys, value: 1000000 }
@@ -135,6 +139,7 @@
value: "{{ item.value }}"
state: present
reload: true
ignoreerrors: "{{ sysctl_ignore_unknown_keys }}"
with_items: "{{ additional_sysctl }}"
- name: Disable fapolicyd service