[question] How can I override Kyverno policies for Signadot sidecar

[arjun-sd]

The sidecar needs this permission which is prohibited by default:

 securityContext:
      capabilities:
        add:
        - NET_ADMIN
      privileged: true

[foxish]

I think the ideal case would be to add a policy exception to Kyverno to allow for NET_ADMIN which Signadot needs for routing.