CAP_NET_ADMIN and either CAP_SYS_ADMIN or CAP_BPF capabilities are needed for Cilium datapath integration.
Envoy proxy with cilium plugins (lockstep with cilium-1.19)
From cilium-1.19-envoy 1.19.4-r5 (os), captured 2026-11-05 by running cilium-envoy-starter --help (exit 1) · terse output. permalink
CAP_NET_ADMIN and either CAP_SYS_ADMIN or CAP_BPF capabilities are needed for Cilium datapath integration.