How to set capabilities for a container in cdk8s?

In YAML I'd do this:

securityContext:
    capabilities:
        add:
            - NET_ADMIN

Example in k8: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-capabilities-for-a-container

How do I achieve this with ckd8s?