kubernetes-1.20: constrain ip_local_port_range

Constrains ephemeral ports for k8s-1.20 variants
etungsten · Apr 23, 2021 · 7b5e0a8 · 7b5e0a8
1 parent 40b4d4f
commit 7b5e0a8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/packages/kubernetes-1.20/kubelet-sysctl.conf b/packages/kubernetes-1.20/kubelet-sysctl.conf
@@ -1,2 +1,5 @@
 # Overcommit handling mode - 1: Always overcommit
 vm.overcommit_memory = 1
+
+# This is generally considered a safe ephemeral port range
+net.ipv4.ip_local_port_range = 32768 60999