CAP_NET_ADMIN and either CAP_SYS_ADMIN or CAP_BPF capabilities are needed for Cilium datapath integration.
Envoy with additional cilium plugins
From cilium-envoy-fips-1.18 1.18.16-r0 (enterprise-packages), captured 2026-11-08 by running cilium-envoy-starter --help (exit 1) · terse output. permalink
CAP_NET_ADMIN and either CAP_SYS_ADMIN or CAP_BPF capabilities are needed for Cilium datapath integration.