add NET_RAW to allow pods to ping

Signed-off-by: Sebastian Sch <[email protected]>
k8snetworkplumbingwg · Jan 28, 2024 · eaa81ce · eaa81ce
1 parent 48808ae
commit eaa81ce
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/test/util/pod/pod.go b/test/util/pod/pod.go
@@ -29,7 +29,11 @@ func GetDefinition() *corev1.Pod {
 		Spec: corev1.PodSpec{
 			TerminationGracePeriodSeconds: pointer.Int64Ptr(0),
 			Containers: []corev1.Container{{Name: "test",
-				Image:   images.Test(),
+				Image: images.Test(),
+				SecurityContext: &corev1.SecurityContext{
+					Capabilities: &corev1.Capabilities{
+						Add: []corev1.Capability{"NET_RAW"},
+					}},
 				Command: []string{"/bin/bash", "-c", "sleep INF"}}}}}
 
 	return podObject