Merge pull request #29841 from pacoxu/patch-7

Add safe sysctl net.ipv4.ip_unprivileged_port_start
2021-12-05 17:46:32 -08:00
parent 1664e4e4c4 39d0870882
commit 246d261529
1 changed files with 1 additions and 0 deletions
@@ -60,6 +60,7 @@ The following sysctls are supported in the _safe_ set:
 - `net.ipv4.ip_local_port_range`,
 - `net.ipv4.tcp_syncookies`,
 - `net.ipv4.ping_group_range` (since Kubernetes 1.18).
+- `net.ipv4.ip_unprivileged_port_start` (since Kubernetes 1.22).

 {{< note >}}
 The example `net.ipv4.tcp_syncookies` is not namespaced on Linux kernel version 4.4 or lower.