Linux capabilities cannot be added to Pod templates.  The closest thing is to use privileged mode.

I also tried setting the capabilities via yaml override, but I cannot get the resulting yaml to pick up the override values for securityContext:

spec:
  containers:
    - name: jnlp
      securityContext:
        capabilities:
          add:
            - SYS_ADMIN
            - DAC_READ_SEARCH