=== C1: values가 pod-level securityContext를 노출하는가 === # Define the security context for the pod. # If unset, this will be automatically set to the minimum privileges required to bind to port 80 and 443. # On Kubernetes 1.22+, this only requires the `net.ipv4.ip_unprivileged_port_start` sysctl. securityContext: {} containerSecurityContext: {} === C2: 미설정 시 ip_unprivileged_port_start=0 자동 주입 === securityContext: # Safe since 1.22: https://github.com/kubernetes/kubernetes/pull/103326 sysctls: - name: net.ipv4.ip_unprivileged_port_start value: "0" containers: === C3: values 지정 시 자동 기본이 통째 대체되는가 (merge 아님) === securityContext: sysctls: - name: net.ipv4.tcp_tw_reuse value: "1" containers: