add net.ipv4.ip_unprivileged_port_start sysctl(4.11+)

pacoxu · pacoxu · commit 000c366e8640 · 2024-08-06T12:36:45.000+08:00
Signed-off-by: Paco Xu &lt;paco.xu@daocloud.io&gt;
diff --git a/kubernetes/coredns.yaml.sed b/kubernetes/coredns.yaml.sed
@@ -163,6 +163,10 @@ spec:
             port: 8181
             scheme: HTTP
       dnsPolicy: Default
+      securityContext:
+        sysctls:
+        - name: net.ipv4.ip_unprivileged_port_start
+          value: "53"
       volumes:
         - name: config-volume
           configMap:
