add default enable unprivileged icmp/ports

Signed-off-by: rongfu.leng <rongfu.leng@daocloud.io>
2023-11-02 15:47:33 +08:00 · 2023-11-02 15:47:33 +08:00 · 7b9fcfd7c6
commit 7b9fcfd7c6
parent 5149050d6b
1 changed files with 2 additions and 0 deletions
--- a/pkg/cri/config/config_unix.go
+++ b/pkg/cri/config/config_unix.go
@ -102,5 +102,7 @@ func DefaultConfig() PluginConfig {
 		CDISpecDirs:              []string{"/etc/cdi", "/var/run/cdi"},
 		ImagePullProgressTimeout: time.Minute.String(),
 		DrainExecSyncIOTimeout:   "0s",
+		EnableUnprivilegedPorts:  true,
+		EnableUnprivilegedICMP:   true,
 	}
 }