k8s docker --device --cap-add 的yaml配置

支持docker run --cap-add的yaml写法

      containers:
        - name: net
          image: nath:1
          securityContext:
            capabilities:
              add: # 添加
              - NET_ADMIN

支持docker run --device 的yaml写法

      containers:
        - name: net
          image: nath:1
          securityContext:
            privileged: true
          args: ["--device","/dev/tun"]