diff --git a/roles/ceph-iscsi-gw/templates/rbd-target-api.service.j2 b/roles/ceph-iscsi-gw/templates/rbd-target-api.service.j2
index 39cf012bd..3f2f594f0 100644
--- a/roles/ceph-iscsi-gw/templates/rbd-target-api.service.j2
+++ b/roles/ceph-iscsi-gw/templates/rbd-target-api.service.j2
@@ -28,7 +28,6 @@ ExecStart=/usr/bin/{{ container_binary }} run --rm \
   {% endif -%}
   -v /etc/localtime:/etc/localtime:ro \
   --privileged \
-  --cap-add=ALL \
   --net=host \
   -v /dev:/dev \
   -v /dev/log:/dev/log \
diff --git a/roles/ceph-iscsi-gw/templates/rbd-target-gw.service.j2 b/roles/ceph-iscsi-gw/templates/rbd-target-gw.service.j2
index aeec12488..ef56edb3c 100644
--- a/roles/ceph-iscsi-gw/templates/rbd-target-gw.service.j2
+++ b/roles/ceph-iscsi-gw/templates/rbd-target-gw.service.j2
@@ -28,7 +28,6 @@ ExecStart=/usr/bin/{{ container_binary }} run --rm \
   {% endif -%}
   -v /etc/localtime:/etc/localtime:ro \
   --privileged \
-  --cap-add=ALL \
   --net=host \
   -v /dev:/dev \
   -v /dev/log:/dev/log \
diff --git a/roles/ceph-iscsi-gw/templates/tcmu-runner.service.j2 b/roles/ceph-iscsi-gw/templates/tcmu-runner.service.j2
index c48616e30..b488acf1e 100644
--- a/roles/ceph-iscsi-gw/templates/tcmu-runner.service.j2
+++ b/roles/ceph-iscsi-gw/templates/tcmu-runner.service.j2
@@ -29,7 +29,6 @@ ExecStart=/usr/bin/{{ container_binary }} run --rm \
   -v /etc/localtime:/etc/localtime:ro \
   --privileged \
   --net=host \
-  --cap-add=ALL \
   -v /dev:/dev \
   -v /lib/modules:/lib/modules \
   -v /etc/ceph:/etc/ceph \