confidential issue 28 changes

General MR

Summary

For packages that violate require-drop-all-capabilities, add drop all in the container securityContext for containers in the package's podSpec.

capabilities:
  drop:
    - ALL

Kyverno Policies enforced

Dependency on this MR, minio requires enforce to be set in the Kyverno Policies

big-bang/bigbang!3964 (diffs)

Relevant logs/screenshots

No errors found:

Here are the events after deletes minio and minio-operator logs, looks like normal behavior:

Linked Issue

issue

Upgrade Notices

N/A