# Modify psp in existing deployment

**URL:** https://discuss.kubernetes.io/t/modify-psp-in-existing-deployment/25282
**Category:** General Discussions
**Created:** [September 1, 2023, 11:02am UTC](https://discuss.kubernetes.io/t/modify-psp-in-existing-deployment/25282 "2023-09-01T11:02:15Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Nitish](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/nitish/32/13176_2.png) [@Nitish](https://discuss.kubernetes.io/u/Nitish)
#### Post date: [September 1, 2023, 11:02am UTC](https://discuss.kubernetes.io/t/modify-psp-in-existing-deployment/25282/1 "2023-09-01T11:02:15Z")

</div>

Asking for help? Comment out what you need so we can get more information to help you!

### Cluster information:

Kubernetes version: 1.21  
Installation method: helm  
Host OS: Red Hat Enterprise Linux Server 7.9

```
    securityContext:
      sysctls:
        - name: kernel.pid_max
          value: "65000"
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      readOnlyRootFilesystem: false

```

deployments.apps “regression-eirapp” was not valid:

# \* : Invalid value: “The edited file failed validation”: ValidationError(Deployment.spec.template.spec.containers[0].securityContext): unknown field “sysctls” in io.k8s.api.core.v1.SecurityContext

PSP Sample  
spec:  
allowPrivilegeEscalation: false  
allowedUnsafeSysctls:

- net.sctp.rcvbuf\_policy
- net.sctp.sndbuf\_policy
- net.sctp.sack\_timeout
- kernel.pid\_max

Not sure what is happening.

---

<div class="post-metadata">

### Author: ![Nitish](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/nitish/32/13176_2.png) [@Nitish](https://discuss.kubernetes.io/u/Nitish)
#### Post date: [September 6, 2023, 8:01am UTC](https://discuss.kubernetes.io/t/modify-psp-in-existing-deployment/25282/2 "2023-09-06T08:01:59Z")

</div>

Where we can find list of allowedUnsafeSysctls?