The running `oc adm node-image create` the created namespace contains the restricted PSA label, but the pod needs to run with the escalated privileges. 

/// error
error: cannot create pod: pods "node-joiner-ts2vl" is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "node-joiner" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "node-joiner" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "node-joiner" must set securityContext.runAsNonRoot=true)

    

Openshift Container Platfrom 4.20
Openshift Container Platfrom 4.21
    

    1.
    2.
    3.