github.com/kata-containers/tests@v0.0.0-20240307153542-772105b56064/integration/kubernetes/runtimeclass_workloads/pod-sysctl.yaml (about)

     1  #
     2  # Copyright (c) 2019 Intel Corporation
     3  #
     4  # SPDX-License-Identifier: Apache-2.0
     5  #
     6  apiVersion: v1
     7  kind: Pod
     8  metadata:
     9    name: sysctl-test
    10  spec:
    11    terminationGracePeriodSeconds: 0
    12    runtimeClassName: kata
    13    securityContext:
    14      sysctls:
    15      - name: kernel.shm_rmid_forced
    16        value: "0"
    17    containers:
    18    - name: test
    19      securityContext:
    20        privileged: true
    21      image: quay.io/prometheus/busybox:latest
    22      command: ["tail", "-f", "/dev/null"]
    23    initContainers:
    24    - name: init-sys
    25      securityContext:
    26        privileged: true
    27      image: quay.io/prometheus/busybox:latest
    28      command: ['sh', '-c', 'echo "64000" > /proc/sys/vm/max_map_count']