fix(dns): Use capability instead of sysctl

apps/k8s01/dns/dns.yaml

@@ -87,6 +87,8 @@ spec:
             capabilities:
               drop:
                 - ALL
+              add:
+                - NET_BIND_SERVICE
       automountServiceAccountToken: false
       volumes:
         - name: tls-secret
@@ -103,9 +105,6 @@ spec:
         runAsGroup: 1000
         seccompProfile:
           type: RuntimeDefault
-        sysctls:
-          - name: 'net.ipv4.ip_unprivileged_port_start'
-            value: "0"
 ---
 apiVersion: v1
 kind: Service