containerd: Enable enable_unprivileged_ports and enable_unprivileged_icmp by default

Signed-off-by: Olli Janatuinen <olli.janatuinen@gmail.com>

containerd: Enable enable_unprivileged_ports and enable_unprivileged_icmp by default
2968a83b · Olli Janatuinen · Brad Davidson · 31b8224f · 2968a83b
Commit 2968a83b authored May 04, 2022 by Olli Janatuinen Committed by Brad Davidson Jun 15, 2022
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

templates_linux.go pkg/agent/templates/templates_linux.go +2 -0

No files found.
--- a/pkg/agent/templates/templates_linux.go
+++ b/pkg/agent/templates/templates_linux.go
@@ -15,6 +15,8 @@ const ContainerdConfigTemplate = `
  stream_server_address = "127.0.0.1"
  stream_server_port = "10010"
  enable_selinux = {{ .NodeConfig.SELinux }}
+  enable_unprivileged_ports = true
+  enable_unprivileged_icmp = true
 {{- if .DisableCgroup}}
  disable_cgroup = true