fix(talos): add more sysctls

Signed-off-by: Devin Buhl <[email protected]>
onedr0p · Apr 3, 2024 · 8af8f4f · 8af8f4f
1 parent fe8d23b
commit 8af8f4f
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/kubernetes/main/bootstrap/talos/matchbox/assets/controller.secret.sops.yaml b/kubernetes/main/bootstrap/talos/matchbox/assets/controller.secret.sops.yaml
@@ -80,6 +80,8 @@ machine:
         fs.inotify.max_queued_events: "65536"
         fs.inotify.max_user_instances: "8192"
         fs.inotify.max_user_watches: "524288"
+        net.core.rmem_max: "2500000"
+        net.core.wmem_max: "2500000"
     features:
         rbac: true
         stableHostname: true
@@ -180,8 +182,8 @@ sops:
             R0p5RXZuMUNXVnFyZVNDTmVWRXorR0EKImMXF7/XlFtGimJcBL+Z4y4EgAEJnEpD
             WzSiMe8hB7pzjCXC8PGcRRkGYV46QQRw8yk2p/2bV6ycXkJ+6GKSHg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-02-22T13:02:43Z"
-    mac: ENC[AES256_GCM,data:5tj/0GcwwbHida9eX4TM8nvcSCcNwY/pZ809R2MqGRk4Fu6QPj8iLzHZP8VnNXnaEKn6S0hf62WuMgek/M7p0MK7SuhpkHdwyrsImQD7P0DvHKFzV0B/S/PWsEnZ/quqUSqAr+Z8VyDF7VV9L0SwuAk3vwtcR0fblY+06UAt+yk=,iv:pCD5cmqA2n3/V48Rr0DdMLlqwZCTfjGUPs4aYv5WY6U=,tag:yUvqbvnent/NBauV+rOKSQ==,type:str]
+    lastmodified: "2024-04-02T23:58:38Z"
+    mac: ENC[AES256_GCM,data:m5IaP7icM6aAaZLMPCWdQHZS0KCU2l29ws8eJvO0dQChogvdCftglzJyfHAtfs7GmCJDlM+RhGV0qapokqorx1b0G1bw3zeGn/ljv9BuxO9KyhNcNUBa1FYc7QCwJiDUk85NXiK2UpL4Yfy54T8TDbF53+RGzKt4rABT9AUSADA=,iv:bWczm3vtAtY1AOiink10MN1yCLFPK3d6Xp+iCuk/x8w=,tag:2KVEkDH4m0I74ibR/TVuBw==,type:str]
     pgp: []
     encrypted_regex: ^(token|crt|key|id|secret|secretboxEncryptionSecret|ca)$
     version: 3.8.1
diff --git a/kubernetes/main/bootstrap/talos/matchbox/assets/worker.secret.sops.yaml b/kubernetes/main/bootstrap/talos/matchbox/assets/worker.secret.sops.yaml
@@ -78,6 +78,8 @@ machine:
         fs.inotify.max_queued_events: "65536"
         fs.inotify.max_user_instances: "8192"
         fs.inotify.max_user_watches: "524288"
+        net.core.rmem_max: "2500000"
+        net.core.wmem_max: "2500000"
     features:
         rbac: true
         stableHostname: true
@@ -134,8 +136,8 @@ sops:
             QUE4UkZiRDRJRGRHTTNCemdIYllvTmsKZBAn5SbfQDL1yrU8VUUfJUV/yADU3oVU
             Vn/pmwdPNfcwgucnZVUQVWXzCdZlgvs3vOpgf58NEBrQs36MMlNBJQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-02-22T13:02:50Z"
-    mac: ENC[AES256_GCM,data:GGhOZSNj8iiKGwS4ccWm86hgbYIN1JsiYoWspgzIVbpidhJyfcr9CufEOdWbbgqgvPTmovqPVhA7w9LmbXmVpY21yuEhCRu8rv8Igh78Byv8ltq2FmgA0ffbCg/jmumEtiugwRrSgShK+V5oQYAxsIrnDsJkUjSPCVjrLKK2evQ=,iv:M/pjZBq1UpHTK29ZHFMTP7MHhq5CVPANKHNJzkLm+BU=,tag:AUQMmdSDbG9HHE1B7f4J/g==,type:str]
+    lastmodified: "2024-04-02T23:58:52Z"
+    mac: ENC[AES256_GCM,data:8KOSFd/0dZbm3JLftDUsfdiNRJuBoBRIT/CapOl9xSWlFXb5e8tpZ8kJpZmUuU46lxnvWOQBx+WOsobEhN2xoKUQ4/bSWCZ4gQqlsXSnRNJkNXUqRB4r+WmGzjbKCQpt8R+BTkh3VKOYRrO7fvHAsq6w+b4gAO2Mz7V+AI+5qXc=,iv:3FEhF4DC3CoG0jUnDI2CEMbHtLcQ87ZU1BDEV8kmjW4=,tag:15sNn+3rOBIV1RznkOoB2Q==,type:str]
     pgp: []
     encrypted_regex: ^(token|crt|key|id|secret|secretboxEncryptionSecret|ca)$
     version: 3.8.1