successMessage: Container does not have any dangerous capabilities
failureMessage: Container should not have dangerous capabilities
category: Security
target: Container
schema:
  '$schema': http://json-schema.org/draft-07/schema
  type: object
  properties:
    securityContext:
      type: object
      properties:
        capabilities:
          type: object
          properties:
            add:
              type: array
              allOf:
                - not:
                    contains:
                      const: ALL
                - not:
                    contains:
                      const: SYS_ADMIN
                - not:
                    contains:
                      const: NET_ADMIN