Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update kubernetes.mdx #19428

Merged
merged 2 commits into from
Feb 5, 2025
Merged

Update kubernetes.mdx #19428

merged 2 commits into from
Feb 5, 2025

Conversation

imuneeeb
Copy link
Contributor

@imuneeeb imuneeeb commented Jan 24, 2025

Summary

This PR updates the Cloudflare Zero Trust Kubernetes Deployment Manifests to address the warning:
WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a group the user is already in by modifying /proc/sys/net/ipv4/ping_group_range. Otherwise cloudflared will not be able to ping this network error="Group ID 65532 is not between ping group 1 to 0"

The change adds a securityContext with a sysctls configuration to explicitly set net.ipv4.ping_group_range to "65532 65532".
This configuration ensures that the warning no longer appears when running the deployment.

Screenshots (optional)

N/A

Documentation checklist

  • The documentation style guide has been adhered to.
  • If a larger change - such as adding a new page - an issue has been opened in relation to any incorrect or out-of-date information that this PR fixes.
  • Files which have changed name or location have been allocated redirects.

@imuneeeb imuneeeb requested review from ranbel and a team as code owners January 24, 2025 20:57
@imuneeeb
Copy link
Contributor Author

@ranbel Kindly have a look

@ranbel
Copy link
Contributor

ranbel commented Jan 31, 2025

Hi @imuneeeb, thanks for the PR! I've asked the Tunnel team to review it.

@ranbel
Copy link
Contributor

ranbel commented Feb 5, 2025

While we haven't tested this specific configuration, the PR looks fine.

@ranbel ranbel enabled auto-merge (squash) February 5, 2025 21:22
@ranbel ranbel merged commit 91ee0f4 into cloudflare:production Feb 5, 2025
6 checks passed
@workers-devprod workers-devprod added the contribution [Holopin] Recognizes a docs contribution, big or small label Feb 5, 2025
Copy link

holopin-bot bot commented Feb 5, 2025

Congratulations @imuneeeb, the maintainer of this repository has issued you a holobyte! Here it is: https://holopin.io/holobyte/cm6sf8blj134900ciefo4akeop

This badge can only be claimed by you, so make sure that your GitHub account is linked to your Holopin account. You can manage those preferences here: https://holopin.io/account.
Or if you're new to Holopin, you can simply sign up with GitHub, which will do the trick!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
contribution [Holopin] Recognizes a docs contribution, big or small product:cloudflare-one size/xs
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants