message: drop NET_RAW capability from maintenance container
diff: @@ -39,6 +39,9 @@ spec:
  securityContext:
  runAsNonRoot: true
  readOnlyRootFilesystem: true
  + capabilities:
  + drop:
  + - NET_RAW
  volumeMounts:
  - name: tmp
  mountPath: /tmp
  