diff --git a/apps/k8s01/dns/dns.yaml b/apps/k8s01/dns/dns.yaml
index d3d8d00f541fee618f364d42a58e2b38ad45eb56..0a959b1a1b40641b44c136d4c0efdafddbf62e02 100644
--- a/apps/k8s01/dns/dns.yaml
+++ b/apps/k8s01/dns/dns.yaml
@@ -87,6 +87,8 @@ spec:
             capabilities:
               drop:
                 - ALL
+              add:
+                - NET_BIND_SERVICE
       automountServiceAccountToken: false
       volumes:
         - name: tls-secret
@@ -103,9 +105,6 @@ spec:
         runAsGroup: 1000
         seccompProfile:
           type: RuntimeDefault
-        sysctls:
-          - name: 'net.ipv4.ip_unprivileged_port_start'
-            value: "0"
 ---
 apiVersion: v1
 kind: Service