GKE Autopilot – Modify daemonsets in kube-system o…
I’m experiencing out of memory issues with the kube-system/image-package-extractor, but when I try to update the request/limits for it I receive a denial. Does anyone know how to resolve this situation with Autopilot, or do I need to use GKE Standard instead?
Below are the commands I’m running on my autopilot cluster:
kubectl edit ds image-package-extractor –namespace=kube-system
error: daemonsets.apps “image-package-extractor” could not be patched: daemonsets.apps “image-package-extractor” is forbidden: User “jk” cannot patch resource “daemonsets” in API group “apps” in the namespace “kube-system”: GKE Warden authz [denied by managed-namespaces-limitation]: the namespace “kube-system” is managed and the request’s verb “patch” is denied
You can run `kubectl replace -f /tmp/kubectl-edit-751860510.yaml` to try this update again.
kubectl replace -f /tmp/kubectl-edit-751860510.yaml
Error from server (Forbidden): error when replacing “/tmp/kubectl-edit-751860510.yaml”: daemonsets.apps “image-package-extractor” is forbidden: User “jk” cannot update resource “daemonsets” in API group “apps” in the namespace “kube-system”: GKE Warden authz [denied by managed-namespaces-limitation]: the namespace “kube-system” is managed and the request’s verb “update” is denied
Read more here: Source link