The symptom is: create fsnotify watcher: too many open files (When trying to follow logs with e.g. kubectl logs or stern.) I think this is a kubelet resource issue so the sysctl needs to be adjusted on every node - hence a DaemonSet.