The latest changes introduced into KUD that enable policies into KUD prevent the successful creation of the darkstat component of vsp package of the firewall.

"eth1: You don't have permission to capture on that device"

Change was introduced in

https://gerrit.onap.org/r/c/multicloud/k8s/+/115214

and since this moment KUD, without modifications, cannot be used to instantiate vFW CNF use case. The workaround is to run 'kubectl edit psp restricted' and to remove NET_RAW capability from there.