ip_unprivileged_port_start

pkg/kubelet/sysctl/safe_sysctls_test.go

			},
			want: []string{
				"kernel.shm_rmid_forced",
				"net.ipv4.ip_local_port_range",
				"net.ipv4.tcp_syncookies",
				"net.ipv4.ping_group_range",
				"net.ipv4.ip_unprivileged_port_start",
			},
		},
		{
			name: "kernelVersion is 3.18.0, return safeSysctls with no kernelVersion limit and net.ipv4.ip_local_reserved_ports",
			getVersion: func() (*version.Version, error) {

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Sun Oct 15 15:05:40 UTC 2023

- 2.6K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

pkg/kubelet/sysctl/safe_sysctls.go

	{
		name: "kernel.shm_rmid_forced",
	}, {
		name: "net.ipv4.ip_local_port_range",
	}, {
		name: "net.ipv4.tcp_syncookies",
	}, {
		name: "net.ipv4.ping_group_range",
	}, {
		name: "net.ipv4.ip_unprivileged_port_start",
	}, {
		name:   "net.ipv4.ip_local_reserved_ports",
		kernel: utilkernel.IPLocalReservedPortsNamespacedKernelVersion,
	}, {
		name:   "net.ipv4.tcp_keepalive_time",

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Fri Oct 27 19:24:34 UTC 2023

- 2.8K bytes

- Viewed (0)

github.com/istio/istio

pkg/kube/inject/testdata/inject/gateway.yaml.injected

        - mountPath: /var/run/secrets/tokens
          name: istio-token
        - mountPath: /etc/istio/pod
          name: istio-podinfo
      securityContext:
        sysctls:
        - name: net.ipv4.ip_unprivileged_port_start
          value: "0"
      volumes:
      - emptyDir: {}
        name: workload-socket
      - emptyDir: {}
        name: credential-socket
      - emptyDir: {}
        name: workload-certs

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Feb 27 16:55:16 UTC 2024

- 5.1K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateway/templates/deployment.yaml

        {{- toYaml .Values.securityContext | nindent 8 }}
      {{- else }}
        # Safe since 1.22: https://github.com/kubernetes/kubernetes/pull/103326
        sysctls:
        - name: net.ipv4.ip_unprivileged_port_start
          value: "0"
      {{- end }}
      {{- with .Values.volumes }}
      volumes:
        {{ toYaml . | nindent 8 }}
      {{- end }}
      containers:
        - name: istio-proxy

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Jun 13 22:42:29 UTC 2024

- 3.8K bytes

- Viewed (0)

github.com/istio/istio

manifests/charts/gateway/values.yaml

  # Define the security context for the pod.
  # If unset, this will be automatically set to the minimum privileges required to bind to port 80 and 443.
  # On Kubernetes 1.22+, this only requires the `net.ipv4.ip_unprivileged_port_start` sysctl.
  securityContext: {}
  containerSecurityContext: {}

  service:
    # Type of service. Set to "None" to disable the service entirely
    type: LoadBalancer
    ports:
    - name: status-port

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri Jun 07 16:51:35 UTC 2024

- 4.4K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/config/kube/gateway/testdata/deployment/kube-gateway-ambient-redirect-infra.yaml

        - mountPath: /var/run/secrets/tokens
          name: istio-token
        - mountPath: /etc/istio/pod
          name: istio-podinfo
      securityContext:
        sysctls:
        - name: net.ipv4.ip_unprivileged_port_start
          value: "0"
      serviceAccountName: default-istio
      volumes:
      - emptyDir: {}
        name: workload-socket
      - emptyDir: {}
        name: credential-socket

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri May 03 19:29:42 UTC 2024

- 6.6K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/config/kube/gateway/testdata/deployment/proxy-config-crd.yaml

        - mountPath: /var/run/secrets/tokens
          name: istio-token
        - mountPath: /etc/istio/pod
          name: istio-podinfo
      securityContext:
        sysctls:
        - name: net.ipv4.ip_unprivileged_port_start
          value: "0"
      serviceAccountName: default-istio
      volumes:
      - emptyDir: {}
        name: workload-socket
      - emptyDir: {}
        name: credential-socket

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri May 03 19:29:42 UTC 2024

- 6.6K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/config/kube/gateway/testdata/deployment/manual-ip.yaml

        - mountPath: /var/run/secrets/tokens
          name: istio-token
        - mountPath: /etc/istio/pod
          name: istio-podinfo
      securityContext:
        sysctls:
        - name: net.ipv4.ip_unprivileged_port_start
          value: "0"
      serviceAccountName: default-istio
      volumes:
      - emptyDir: {}
        name: workload-socket
      - emptyDir: {}
        name: credential-socket

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri May 03 19:29:42 UTC 2024

- 6.6K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/config/kube/gateway/testdata/deployment/manual-sa.yaml

        - mountPath: /var/run/secrets/tokens
          name: istio-token
        - mountPath: /etc/istio/pod
          name: istio-podinfo
      securityContext:
        sysctls:
        - name: net.ipv4.ip_unprivileged_port_start
          value: "0"
      serviceAccountName: custom-sa
      volumes:
      - emptyDir: {}
        name: workload-socket
      - emptyDir: {}
        name: credential-socket

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri May 03 19:29:42 UTC 2024

- 6.6K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/config/kube/gateway/testdata/deployment/multinetwork.yaml

        - mountPath: /var/run/secrets/tokens
          name: istio-token
        - mountPath: /etc/istio/pod
          name: istio-podinfo
      securityContext:
        sysctls:
        - name: net.ipv4.ip_unprivileged_port_start
          value: "0"
      serviceAccountName: default-istio
      volumes:
      - emptyDir: {}
        name: workload-socket
      - emptyDir: {}
        name: credential-socket

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Fri May 03 19:29:42 UTC 2024

- 6.9K bytes

- Viewed (0)

Search Options