Add KILL capability to CSPM container

lebauce · lebauce · commit 5fc2d200d4a4 · 2026-04-24T14:34:03.000+02:00
diff --git a/internal/controller/datadogagent/feature/cspm/feature.go b/internal/controller/datadogagent/feature/cspm/feature.go
@@ -252,6 +252,7 @@ func (f *cspmFeature) ManageNodeAgent(managers feature.PodTemplateManagers, prov
 	capabilities := []corev1.Capability{
 		"AUDIT_CONTROL",
 		"AUDIT_READ",
+		"KILL",
 	}
 	managers.SecurityContext().AddCapabilitiesToContainer(capabilities, targetContainer)
 

Original file line number	Diff line number	Diff line change
`@@ -252,6 +252,7 @@ func (f *cspmFeature) ManageNodeAgent(managers feature.PodTemplateManagers, prov`
`252`	`252`	`capabilities := []corev1.Capability{`
`253`	`253`	`"AUDIT_CONTROL",`
`254`	`254`	`"AUDIT_READ",`
	`255`	`+ "KILL",`
`255`	`256`	`}`
`256`	`257`	`managers.SecurityContext().AddCapabilitiesToContainer(capabilities, targetContainer)`
`257`	`258`