From 7b9fcfd7c684fd91c5c205ab1ec22970217efd9b Mon Sep 17 00:00:00 2001
From: "rongfu.leng" <rongfu.leng@daocloud.io>
Date: Thu, 2 Nov 2023 15:47:33 +0800
Subject: [PATCH] add default enable unprivileged icmp/ports

Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io>
---
 pkg/cri/config/config_unix.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkg/cri/config/config_unix.go b/pkg/cri/config/config_unix.go
index 7829766da..fbd308124 100644
--- a/pkg/cri/config/config_unix.go
+++ b/pkg/cri/config/config_unix.go
@@ -102,5 +102,7 @@ func DefaultConfig() PluginConfig {
 		CDISpecDirs:              []string{"/etc/cdi", "/var/run/cdi"},
 		ImagePullProgressTimeout: time.Minute.String(),
 		DrainExecSyncIOTimeout:   "0s",
+		EnableUnprivilegedPorts:  true,
+		EnableUnprivilegedICMP:   true,
 	}
 }