containerd: Enable enable_unprivileged_ports and enable_unprivileged_icmp by default

Signed-off-by: Olli Janatuinen <olli.janatuinen@gmail.com>
3 years ago · 2968a83bc0
1 changed files with 2 additions and 0 deletions
--- a/pkg/agent/templates/templates_linux.go
+++ b/pkg/agent/templates/templates_linux.go
@ -15,6 +15,8 @@ const ContainerdConfigTemplate = `
  stream_server_address = "127.0.0.1"
  stream_server_port = "10010"
  enable_selinux = {{ .NodeConfig.SELinux }}
+  enable_unprivileged_ports = true
+  enable_unprivileged_icmp = true

 {{- if .DisableCgroup}}
  disable_cgroup = true