[stable/kiam] KIAM Agent: Using CAP_NET_ADMIN instead privileged container (#12017)

* KIAM Agent: Using CAP_NET_ADMIN instead privileged container

Signed-off-by: danmx <daniel@iziourov.info>

* Incrementing version

Signed-off-by: Matt Farina <matt@mattfarina.com>

stable/kiam/Chart.yaml

@@ -1,5 +1,5 @@
 name: kiam
-version: 2.2.1
+version: 2.2.2
 appVersion: 3.2
 description: Integrate AWS IAM with Kubernetes
 keywords:

stable/kiam/templates/agent-daemonset.yaml

@@ -65,7 +65,8 @@ spec:
         - name: {{ template "kiam.name" . }}-{{ .Values.agent.name }}
         {{- if .Values.agent.host.iptables }}
           securityContext:
-            privileged: true
+            capabilities:
+              add: ["NET_ADMIN"]
         {{- end }}
           image: "{{ .Values.agent.image.repository }}:{{ .Values.agent.image.tag }}"
           imagePullPolicy: {{ .Values.agent.image.pullPolicy }}