use sysctl instead of capability because of k8s limitation, 1.6.3 (#97)

to avoid kubernetes/kubernetes#56374

mirrord-operator/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.6.2
+version: 1.6.3
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

mirrord-operator/templates/deployment.yaml

@@ -111,10 +111,9 @@ spec:
         securityContext:
           allowPrivilegeEscalation: false
           privileged: false
-          capabilities:
-            # allow 443 port binding
-            add:
-            - "NET_BIND_SERVICE"
+          sysctls:
+            - name: net.ipv4.ip_unprivileged_port_start
+              value: "443"
         volumeMounts:
         {{- if or (index .Values.tls.data "tls.key") .Values.tls.certManager.enabled }}
         - mountPath: /tls