GKE Autopilot – Modify daemonsets in kube-system o…

I’m experiencing out of memory issues with the kube-system/image-package-extractor, but when I try to update the request/limits for it I receive a denial. Does anyone know how to resolve this situation with Autopilot, or do I need to use GKE Standard instead? 

Below are the commands I’m running on my autopilot cluster:

kubectl edit ds image-package-extractor –namespace=kube-system
error: daemonsets.apps “image-package-extractor” could not be patched: daemonsets.apps “image-package-extractor” is forbidden: User “jk” cannot patch resource “daemonsets” in API group “apps” in the namespace “kube-system”: GKE Warden authz [denied by managed-namespaces-limitation]: the namespace “kube-system” is managed and the request’s verb “patch” is denied

You can run `kubectl replace -f /tmp/kubectl-edit-751860510.yaml` to try this update again.

kubectl replace -f /tmp/kubectl-edit-751860510.yaml
Error from server (Forbidden): error when replacing “/tmp/kubectl-edit-751860510.yaml”: daemonsets.apps “image-package-extractor” is forbidden: User “jk” cannot update resource “daemonsets” in API group “apps” in the namespace “kube-system”: GKE Warden authz [denied by managed-namespaces-limitation]: the namespace “kube-system” is managed and the request’s verb “update” is denied

Read more here: Source link