chore: update dataplane HTTP port 10080→80, remove sysctl

- Update containerPort and configs in kustomize overlays and base
- Remove redundant ip_unprivileged_port_start sysctl
- NET_BIND_SERVICE capability already handles low-port binding

Author: mahmut-Abi

deploy/kubernetes/base/dataplane.yaml

@@ -37,8 +37,6 @@ spec:
         runAsGroup: 65532
         fsGroup: 65532
         sysctls:
-          - name: net.ipv4.ip_unprivileged_port_start
-            value: "0"
         seccompProfile:
           type: RuntimeDefault
       topologySpreadConstraints:
@@ -69,7 +67,7 @@ spec:
             - "/etc/nantian-gw/config.yaml"
           ports:
             - name: http
-              containerPort: 10080
+              containerPort: 80
             - name: https
               containerPort: 443
             - name: admin

deploy/kubernetes/overlays/kind-conformance/dataplane-config.yaml

@@ -16,7 +16,7 @@ accessLog:
   path: "stdout"
   format: "%START_TIME% %CLIENT_IP% %HOST% %METHOD% %PATH% %ROUTE_NAME% %BACKEND% %STATUS% %LATENCY_MS%"
 runtime:
-  httpListenAddr: "0.0.0.0:10080"
+  httpListenAddr: "0.0.0.0:80"
   enableIpv6: true
   enableHttp3: false
   tlsMinVersion: "1.2"

deploy/kubernetes/overlays/production/dataplane-config.yaml

@@ -23,7 +23,7 @@ accessLog:
   sampleRate: 0.01
   routeAnnotationPrefix: "gateway.nantian.dev/access-log-"
 runtime:
-  httpListenAddr: "0.0.0.0:10080"
+  httpListenAddr: "0.0.0.0:80"
   enableIpv6: true
   enableHttp3: false
   tlsMinVersion: "1.2"