chore: update ip-masq-agent security context (#144)

parts/k8s/addons/ip-masq-agent.yaml

@@ -49,7 +49,9 @@ spec:
         args:
           - --enable-ipv6={{ContainerConfig "enable-ipv6"}}
         securityContext:
-          privileged: true
+          privileged: false
+          capabilities:
+            add: ["NET_ADMIN", "NET_RAW"]
         volumeMounts:
           - name: azure-ip-masq-agent-config-volume
             mountPath: /etc/config

pkg/engine/templates_generated.go

@@ -13494,7 +13494,9 @@ spec:
         args:
           - --enable-ipv6={{ContainerConfig "enable-ipv6"}}
         securityContext:
-          privileged: true
+          privileged: false
+          capabilities:
+            add: ["NET_ADMIN", "NET_RAW"]
         volumeMounts:
           - name: azure-ip-masq-agent-config-volume
             mountPath: /etc/config