e> capabilities allowed. The initialization containers of the Envoy
proxies require these capabilities.</p><p>To check if the <code>NET_ADMIN</code> and <code>NET_RAW</code> capabilities are allowed for your pods, you need to check if their
<a href=https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/>service account</a>
can use a pod security policy that allows the <code>NET_ADMIN</code> and <code>NET_RAW</code> capabilities.
If you haven&rsquo;t specified a service account in