doctl is the main DigitalOcean CLI. While I have been able to get
doctl working smoothly in strict confinement for our other offerings, the sane solution to interacting with k8s is to use classic confinement until there’s a defined interface for k8s configuration for use with
kubectl. More detail on the issue here.
Once there’s a solution in place for interacting with k8s config, we will be happy to switch back to strict confinement.