code: func allowHostNetwork(pod *v1.Pod) (bool, error) {
  	podSource, err := kubetypes.GetPodSource(pod)
  	if err != nil {
  		return false, err
  	}
  	for _, source := range capabilities.Get().PrivilegedSources.HostNetworkSources {
  		if source == podSource {
  			return true, nil
  		}
  	}
  	return false, nil
  }
docs: // Determined whether the specified pod is allowed to use host networking