The OSD blkdevmapper init container relies on the MKNOD capability, which it does not actually request. As a result, deployments fail on Kubernetes clusters that do not happen to assign this capability to all containers by default. Solve this by updating the container spec securityContext to explicitly request the capability it relies on. Closes: https://github.com/rook/rook/issues/9156 Signed-off-by: Omar Pakker <Omar007@users.noreply.github.com>