help test_sysctl not revert a bad value for net.ipv4.conf.all.rp_filt…

…er (#1409)
charmed-kubernetes · Aug 21, 2023 · d2c49fe · d2c49fe
1 parent a626fb7
commit d2c49fe
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/jobs/validate/cilium-spec b/jobs/validate/cilium-spec
@@ -28,11 +28,13 @@ applications:
     options:
       channel: $SNAP_VERSION
       allow-privileged: "true"
+      sysctl: $SYSCTL
   kubernetes-worker:
     constraints: $constraints
     channel: $JUJU_DEPLOY_CHANNEL
     options:
       channel: $SNAP_VERSION
+      sysctl: $SYSCTL
   calico: null
   containerd:
     options:
@@ -50,6 +52,7 @@ EOF
 # ENV
 ###############################################################################
 SNAP_VERSION=${1:-1.26/stable}
+SYSCTL='"{net.ipv4.conf.all.forwarding: 1, net.ipv4.conf.all.rp_filter: 0, net.ipv4.neigh.default.gc_thresh1: 128, net.ipv4.neigh.default.gc_thresh2: 28672, net.ipv4.neigh.default.gc_thresh3: 32768, net.ipv6.neigh.default.gc_thresh1: 128, net.ipv6.neigh.default.gc_thresh2: 28672, net.ipv6.neigh.default.gc_thresh3: 32768, fs.inotify.max_user_instances: 8192, fs.inotify.max_user_watches: 1048576, kernel.panic: 10, kernel.panic_on_oops: 1, vm.overcommit_memory: 1}"'
 SERIES=${2:-jammy}
 JUJU_DEPLOY_BUNDLE=charmed-kubernetes
 JUJU_DEPLOY_CHANNEL=${3:-edge}