linux-capabilities

      convenient list of capabilties for drop: and add: in securityContext deployment yaml  

              - AUDIT_CONTROL 
              - AUDIT_READ
              - AUDIT_WRITE
              - BLOCK_SUSPEND
              - BPF
              - CHECKPOINT_RESTORE
              - CHOWN
              - DAC_OVERRIDE    ==== DROP this an quarkus fails 
              - DAC_READ_SEARCH
              - FOWNER
              - FSETID
              - IPC_LOCK
              - IPC_OWNER
              - KILL
              - LEASE
              - LINUX_IMMUTABLE
              - MAC_ADMIN
              - MAC_OVERRIDE
              - MKNOD
              - NET_ADMIN
              - NET_BIND_SERVICE
              - NET_BROADCAST
              - NET_RAW
              - PERFMON
              - SETGID
              - SETFCAP 
              - SETPCAP 
              - SETUID
              - SYS_ADMIN 
              - SYS_BOOT
              - SYS_CHROOT
              - SYS_MODULE
              - SYS_NICE
              - SYS_PACCT
              - SYS_PTRACE
              - SYS_RAWIO
              - SYS_RESOURCE 
              - SYS_TIME
              - SYS_TTY_CONFIG
              - SYSLOG 
              - WAKE_ALARM