ouhtml-orchestra-login-portal security context capabilities invalid value

[GansoMQZ]

Warning FailedCreate 3m20s (x17 over 8m48s) replicaset-controller Error creating: pods "ouhtml-orchestra-login-portal-69f48df4c-" is forbidden: PodSecurityPolicy: unable to admit pod: [spec.containers[0].securityContext.capabilities.add: Invalid value: "NET_BIND_SERVICE": capability may not be added spec.containers[0].securityContext.capabilities.add: Invalid value: "NET_BIND_SERVICE": capability may not be added]``

[mlbiam]

PodSecurityPolicy? I think you can use https://github.com/sysdiglabs/kube-psp-advisor to generate a PodSecurityPolicy based on the Deployment.