Only set sysctls for infra containers

pkg/kubelet/dockertools/docker_manager.go

@@ -687,6 +687,7 @@ func (dm *DockerManager) runContainer(
 	}
 
 	// Set sysctls if requested
+	if container.Name == PodInfraContainerName {
 		sysctls, unsafeSysctls, err := api.SysctlsFromPodAnnotations(pod.Annotations)
 		if err != nil {
 			dm.recorder.Eventf(ref, api.EventTypeWarning, events.FailedToCreateContainer, "Failed to create docker container %q of pod %q with error: %v", container.Name, format.Pod(pod), err)
@@ -701,6 +702,7 @@ func (dm *DockerManager) runContainer(
 				hc.Sysctls[c.Name] = c.Value
 			}
 		}
+	}
 
 	// If current api version is newer than docker 1.10 requested, set OomScoreAdj to HostConfig
 	result, err := dm.checkDockerAPIVersion(dockerV110APIVersion)