diff --git a/kube/deploy/apps/nfs-web/app/hr.yaml b/kube/deploy/apps/nfs-web/app/hr.yaml
index 2fe86b31..840351e9 100644
--- a/kube/deploy/apps/nfs-web/app/hr.yaml
+++ b/kube/deploy/apps/nfs-web/app/hr.yaml
@@ -34,6 +34,7 @@ spec:
               allowPrivilegeEscalation: false
               capabilities:
                 drop: ["ALL"]
+                add: ["CAP_NET_BIND_SERVICE"]
             resources:
               requests:
                 cpu: 10m