Enhance OpenShift Interface-Specific sysctl Support

Feature Overview (aka. Goal Summary)

Update OpenShift product documentation with additional interface-specific sysctl settings that can be supported (caveats may apply).

Goals (aka. expected user outcomes)

Documentation enhancements to the Using sysctls in containers product documentation page to include additional interface-specific sysctl configurations that are in the allow list, and any constraints / concerns / limitations there might be with any of the sysctls that are allowed.

Requirements (aka. Acceptance Criteria):

Clarify support (including caveats) for the following additional sysctls:

• net.ipv4.ip_local_port_range
• net.ipv6.conf.all.disable_ipv6
• net.ipv6.conf.all.accept_ra
• net.ipv6.conf.default.accept_ra
• net.ipv4.conf.all.disable_policy
• net.ipv4.conf.default.disable_policy
• net.ipv6.conf.all.disable_policy
• net.ipv6.conf.default.disable_policy
• net.ipv4.conf.all.rp_filter
• net.ipv4.conf.default.rp_filter

Use Cases (Optional):

Questions to Answer (Optional):

• Which sysctls need clarification or caveats articulated, especially with regard to use of interface-specific sysctls to apply to eth0

Out of Scope

• No development will be undertaken to allow a sysctl to be applied to eth0, where it would normally be forbidden.

Background

• Customer Considerations

Documentation Considerations

Interoperability Considerations

*