# Fix to Apply:
# select(di==0).spec.containers[0].securityContext.capabilities.drop += ["NET_RAW"]

apiVersion: v1
kind: Pod
metadata:
  name: insert_list
spec:
  containers:
  - name: nginx_container
    image: nginx
    securityContext:
      capabilities:
        drop:
          - NET_RAW