istio-proxy requires NET_ADMIN capability because it need set socket options

2021-06-17T05:18:40.835525Z	warning	envoy connection	Setting IPPROTO_IP/IP_TRANSPARENT option on socket failed: Operation not permitted
2021-06-17T05:18:40.835797Z	warning	envoy config	gRPC config for type.googleapis.com/envoy.config.listener.v3.Listener rejected: Error adding/updating listener(s) virtualOutbound: ListenSocket: Setting socket options failed
virtualInbound: ListenSocket: Setting socket options failed