diff --git a/apps-kustomized/cert-manager-webhook-dnsimple/args.yaml b/apps-kustomized/cert-manager-webhook-dnsimple/args.yaml
index 1c818cc..331816a 100644
--- a/apps-kustomized/cert-manager-webhook-dnsimple/args.yaml
+++ b/apps-kustomized/cert-manager-webhook-dnsimple/args.yaml
@@ -10,3 +10,9 @@ spec:
         sysctls:
         - name: "net.ipv4.ip_unprivileged_port_start"
           value: "0"
+        securityContext:
+          capabilities:
+            drop:
+            - "ALL"
+            add:
+            - "NET_BIND_SERVICE"