<p>I'm using k8s v 1.7. Following the guide in <a href="https://kubernetes.io/docs/concepts/cluster-administration/sysctl-cluster/" rel="nofollow noreferrer">docs</a>, my deployment has the following in its spec:</p>

<pre><code>annotations:
  security.alpha.kubernetes.io/unsafe-sysctls: net.core.somaxconn=16384
</code></pre>

<p>But when applying that using <code>kubectl</code>, I get the following error:</p>

<pre><code>forbidden sysctl: "net.core.somaxconn" not whitelisted
</code></pre>

<p>Now the docs say I should run something like this in the node:</p>

<pre><code>kubelet --experimental-allowed-unsafe-sysctls 'net.core.somaxconn'
</code></pre>

<p>But I don't know where to run that command. I tried inside <code>minikube ssh</code> but <code>kubelet</code> doesn't seem to be installed.</p>

<p>I'm looking for something like:</p>

<pre><code>minikube start --extra-config='allow net.core.somaxconn'
</code></pre>

<p>I tried with this and it seemed to work</p>

<pre><code>minikube start --extra-config=kubelet.AllowedUnsafeSysctls=net.core.somaxconn
</code></pre>

<p>Extracted from here: <a href="https://github.com/kubernetes/kubernetes/blob/master/cmd/kubelet/app/options/options.go" rel="nofollow noreferrer">https://github.com/kubernetes/kubernetes/blob/master/cmd/kubelet/app/options/options.go</a></p>
