diff --git a/manifests/base/maintenance.yaml b/manifests/base/maintenance.yaml
index befeaa09c..08253d859 100644
--- a/manifests/base/maintenance.yaml
+++ b/manifests/base/maintenance.yaml
@@ -39,6 +39,9 @@ spec:
           securityContext:
             runAsNonRoot: true
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+                - NET_RAW
           volumeMounts:
             - name: tmp
               mountPath: /tmp