Raise the inotify limits of the k3s nodes to 65536 instances and 4194304 watches, except in LXC

2026-10-09 12:55:46 +00:00
parent e9ba272d70
commit 2798853153
1 changed files with 13 additions and 0 deletions
@@ -34,3 +34,16 @@
        regexp: '^\s*- config-dir='
        line: '  - config-dir=/etc/rancher/k3s/kubelet.conf.d'
        insertafter: '^kubelet-arg:'
 # Every pod watching its config files takes inotify instances and watches from
 # the per-user pool. An LXC container inherits these from its host. Only this
 # file is loaded: sysctl --system would also apply distribution defaults such as
 # rp_filter that differ from the live values Cilium relies on.
 - name: Raise the inotify limits
  tags: inotify
  when: ansible_facts['virtualization_type'] != 'lxc'
  ansible.posix.sysctl:
    name: "{{ item.key }}"
    value: "{{ item.value }}"
    sysctl_file: /etc/sysctl.d/90-inotify.conf
  loop: "{{ {'fs.inotify.max_user_instances': 65536, 'fs.inotify.max_user_watches': 4194304} | dict2items }}"