fix(psp): Update osm-psp capabilities
@@ -14,8 +14,8 @@ spec:
allowPrivilegeEscalation: false
# This is redundant with non-root + disallow privilege escalation,
# but we can provide it for defense in depth.
- allowedCapabilities:
- - NET_ADMIN
+ requiredDropCapabilities:
+ - ALL
# Allow core volume types.
volumes:
- 'configMap'
