From bf86f0c00d0a809253ef03eaebb5f6bd22d9d03c Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Fri, 15 Sep 2023 00:02:10 +0200
Subject: [PATCH] fix(dns): Disable privleged ports
---
apps/k8s01/dns/dns.yaml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/apps/k8s01/dns/dns.yaml b/apps/k8s01/dns/dns.yaml
index bf89d0896..7e6374f7e 100644
--- a/apps/k8s01/dns/dns.yaml
+++ b/apps/k8s01/dns/dns.yaml
@@ -55,6 +55,12 @@ spec:
secret:
secretName: ingress-dns-tls
optional: false
+ securityContext:
+ seccompProfile:
+ type: RuntimeDefault
+ sysctls:
+ - name: 'net.ipv4.ip_unprivileged_port_start'
+ value: "0"
---
apiVersion: v1
kind: Service
--
GitLab