This message was deleted.

Its not that you need to add a PSP, it’s that the PSP in use for that pod doesn’t allow the capabilities it requested.

Ok but is this a general psp from Rancher? How do I identify?

look at the PodSecurityPolicy objects on your cluster?

You were right. It was the PSP at Rancher cluster level. I was looking at RKE2 level. Solved. Thank you.