From 9967a65233f8c87751fea24bb23667f563a71e91 Mon Sep 17 00:00:00 2001 From: ccamposr Date: Wed, 18 Mar 2026 09:25:43 +0100 Subject: [PATCH] Fix Tempest privileged mode missing NET_ADMIN and NET_RAW capabilities Tempest PodCapabilities was an empty slice, so setting privileged: true on a Tempest CR had no effect on Linux capabilities. All other frameworks (AnsibleTest, Tobiko, HorizonTest) already included NET_ADMIN and NET_RAW. OSPRH-27830 Co-Authored-By: Claude Opus 4.6 --- internal/tempest/const.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/tempest/const.go b/internal/tempest/const.go index 14f38c2b..1f3c3105 100644 --- a/internal/tempest/const.go +++ b/internal/tempest/const.go @@ -25,5 +25,5 @@ var ( TempestPropagation = []storage.PropagationType{Tempest} // PodCapabilities defines the Linux capabilities for Tempest pods - PodCapabilities = []corev1.Capability{} + PodCapabilities = []corev1.Capability{"NET_ADMIN", "NET_RAW"} )