From 60d446fe3db0b1c5592643e27dc8b8edfef8946d Mon Sep 17 00:00:00 2001
From: Matthew Cary <mattcary@google.com>
Date: Tue, 1 Jun 2021 21:53:46 +0000
Subject: [PATCH] Drop end of sunrpc port range to avoid port conflicts.

Change-Id: I1561fe447f50d9ac835094b3cceba62ea74dfd81
---
 cluster/gce/gci/node.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/cluster/gce/gci/node.yaml b/cluster/gce/gci/node.yaml
index 75ec93c27e2..8b173dabbcf 100644
--- a/cluster/gce/gci/node.yaml
+++ b/cluster/gce/gci/node.yaml
@@ -117,6 +117,13 @@ write_files:
       [Install]
       WantedBy=multi-user.target
 
+  - path: /etc/modprobe.d/sunrpc.conf
+    permissions: 0644
+    owner: root
+    # The GKE metadata server uses ports 987-989, so the sunrpc range should be restricted to be below.
+    content: |
+      options sunrpc max_resvport=986
+
 runcmd:
  - systemctl daemon-reload
  - systemctl enable kube-node-installation.service