diff --git a/apps/k8s01/dns/dns.yaml b/apps/k8s01/dns/dns.yaml
index bf89d08960993f01ed72e5fbe26e30267fee8583..7e6374f7ecb28947dc39764042c6bbbeb04aeb1a 100644
--- a/apps/k8s01/dns/dns.yaml
+++ b/apps/k8s01/dns/dns.yaml
@@ -55,6 +55,12 @@ spec:
           secret:
             secretName: ingress-dns-tls
             optional: false
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+        sysctls:
+          - name: 'net.ipv4.ip_unprivileged_port_start'
+            value: "0"
 ---
 apiVersion: v1
 kind: Service