From 24f248b02f39ac8d005fc675553766c2f49abea4 Mon Sep 17 00:00:00 2001 From: Ganesh Maharaj Mahalingam Date: Sat, 18 May 2019 10:22:46 -0700 Subject: [PATCH] Set reverse path forwarding to strict. Calico requires the default reverse path forwarding to be either 0 (no validation) or 1 (strict validation). The default value of 2 (loose validation) prevents calico from completing the setup and the pod is always stuck getting ready. Signed-off-by: Ganesh Maharaj Mahalingam --- clr-k8s-examples/setup_system.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/clr-k8s-examples/setup_system.sh b/clr-k8s-examples/setup_system.sh index 79c5451..25d5d86 100755 --- a/clr-k8s-examples/setup_system.sh +++ b/clr-k8s-examples/setup_system.sh @@ -22,6 +22,7 @@ fi sudo mkdir -p /etc/sysctl.d/ cat < /etc/sysctl.d/60-k8s.conf" net.ipv4.ip_forward=1 +net.ipv4.conf.default.rp_filter=1 EOT sudo systemctl restart systemd-sysctl