diff --git a/k8s-tcp-keepalive.tf b/k8s-tcp-keepalive.tf index 11464d6..ab3c282 100644 --- a/k8s-tcp-keepalive.tf +++ b/k8s-tcp-keepalive.tf @@ -8,8 +8,8 @@ resource "kubernetes_pod_security_policy" "tcp_keepalive" { allow_privilege_escalation = false allowed_unsafe_sysctls = [ - "net.ipv4.tcp_keepalive_time" - "net.ipv4.tcp_keepalive_intvl" + "net.ipv4.tcp_keepalive_time", + "net.ipv4.tcp_keepalive_intvl", "net.ipv4.tcp_keepalive_probes" ] diff --git a/variables.tf b/variables.tf index ec3f672..93b07cd 100644 --- a/variables.tf +++ b/variables.tf @@ -800,6 +800,7 @@ variable "hms_rw_datanucleus_connection_pool_config" { description = "A map of env vars supported by Apiary docker image that can configure the chosen Datanucleus connection pool" type = map(any) default = {} +} variable "tcp_keepalive_time" { description = "Sets net.ipv4.tcp_keepalive_time (seconds)."