diff --git a/helmfile.d/charts/node-local-dns/templates/node-local-dns.yaml b/helmfile.d/charts/node-local-dns/templates/node-local-dns.yaml
index be00b82f4..d0a53e2b4 100644
--- a/helmfile.d/charts/node-local-dns/templates/node-local-dns.yaml
+++ b/helmfile.d/charts/node-local-dns/templates/node-local-dns.yaml
@@ -145,11 +145,13 @@ spec:
         operator: "Exists"
       containers:
       - name: node-cache
-        image: registry.k8s.io/dns/k8s-dns-node-cache:1.23.1
+        image: registry.k8s.io/dns/k8s-dns-node-cache:1.25.0
         resources: {{- toYaml .Values.resources | nindent 10 }}
         args: [ "-localip", "{{ .Values.localIP }},{{ .Values.clusterDNS }}", "-conf", "/etc/Corefile", "-upstreamsvc", "kube-dns-upstream"]
         securityContext:
-          privileged: true
+          capabilities:
+            add:
+              - NET_ADMIN
         ports:
         - containerPort: 53
           name: dns