cloudflare / cloudflare/helm-charts
Missing sysctls on podSecurityContext. "The user running cloudflared process has a GID (group ID) that is not within ping_group_range"
Open
- Dominant language
- Smarty
- Stars
- 141
- Forks
- 96
- PR merge metrics
- No merged PRs in 30d
Description
When executing the helm charts with default params, it says that it has not set a proper sysctls group id set, so it is unable to make pings to validate the tunnel, and the tunnel gets dropped constantly. If anybody had issues with this, the solution is manually set the values for the security context.
- name: "podSecurityContext.sysctls[0].name"
value: "net.ipv4.ping_group_range"
- name: "podSecurityContext.sysctls[0].value"
value: "65532 65532"
Contributor guide
Assessment
This issue has not been assessed yet.