2 Commits

Author	SHA1	Message	Date
Alexey Palazhchenko	fc35c82f69	feat: don't drop capabilities if kexec is disabled ... It is needed for advanced use cases like Docker-in-Docker, our CI, etc. Signed-off-by: Alexey Palazhchenko <alexey.palazhchenko@talos-systems.com> (cherry picked from commit 423861cf9f99eaf034a4f0cb243d73d1275c3f38)	2021-10-25 18:05:34 +03:00
Artem Chernyshev	e08b4f8f9e	feat: implement sysctl controllers ... Fixed: https://github.com/talos-systems/talos/issues/3686 Replaced sequencer tasks for KSPP and Kubernetes required sysctl props by the ones set by controllers. KernelParam flow includes of 3 controllers and 2 resources: - `KernelParamConfigController` - handles user sysctls coming from v1alpha1 config. - `KernelParamDefaultsController` - handles our built-in KSPP and K8s required sysctls. - `KernelParamSpecController` - consumes `KernelParamSpec`s created by the previous two controllers, applies them and updates the corresponding `KernelParamStatus`. Signed-off-by: Artem Chernyshev <artem.0xD2@gmail.com>	2021-08-10 13:21:49 -07:00