# Fix to Apply:
# select(di==0).spec.containers[0].securityContext.capabilities.drop[0] |= "SYS_ADM"
# select(di==0).spec.containers[0].securityContext.capabilities.add[0] |= "NET_RAW"


apiVersion: v1
kind: Pod
metadata:
  name: insert_list
spec:
  containers:
  - name: nginx1
    image: nginx
    securityContext:
      capabilities:
        drop:
        - "NET_RAW"
        add: ["SYS_ADM"]