set necessary sysctl stuff

ansible/roles/rke_configuration/tasks/main.yml

@@ -28,6 +28,24 @@
   when: rke_version.stdout != rke.version
   become: true
 
+# https://rancher.com/docs/rancher/v2.x/en/security/hardening-2.3.3/#1-1-rancher-rke-kubernetes-cluster-host-configuration
+- name: Configure sysctl for kubelet
+  sysctl:
+    name: "{{ item.name }}"
+    value: "{{ item.value }}"
+  loop:
+    - name: vm.overcommit_memory
+      value: 1
+    - name: vm.panic_on_oom
+      value: 0
+    - name: kernel.panic
+      value: 10
+    - name: kernel.panic_on_oops
+      value: 1
+    - name: kernel.keys.root_maxkeys
+      value: 1000000
+    - name: kernel.keys.root_maxbytes
+      value: 25000000
 
 - name: Deploy rke cluster configuration file
   tags: