diff --git a/roles/kubernetes/preinstall/tasks/0080-system-configurations.yml b/roles/kubernetes/preinstall/tasks/0080-system-configurations.yml
index a1c5e97ce9584bf2dfda05960bc1559836bb7bbc..720e7337b6b47d69e64cc09802ea4ee16ef3ce15 100644
--- a/roles/kubernetes/preinstall/tasks/0080-system-configurations.yml
+++ b/roles/kubernetes/preinstall/tasks/0080-system-configurations.yml
@@ -113,9 +113,12 @@
     state: present
     reload: yes
   with_items:
-    - { name: vm.overcommit_memory, value: 1 }
+    - { name: kernel.keys.root_maxbytes, value: 25000000 }
+    - { name: kernel.keys.root_maxkeys, value: 1000000 }
     - { name: kernel.panic, value: 10 }
     - { name: kernel.panic_on_oops, value: 1 }
+    - { name: vm.overcommit_memory, value: 1 }
+    - { name: vm.panic_on_oom, value: 0 }
   when: kubelet_protect_kernel_defaults|bool
 
 - name: Check dummy module