Backport of Changelog for #3498 into release/1.1.x (#3523)

backport of commit 9dd57eb Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
hashicorp · Jan 26, 2024 · bd9720f · bd9720f
1 parent 9ffee90
commit bd9720f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.changelog/3498.txt b/.changelog/3498.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cni: When CNI is enabled, set ReadOnlyRootFilesystem=true and AllowPrivilegeEscalation=false for mesh pod init containers and AllowPrivilegeEscalation=false for consul-dataplane containers (ReadOnlyRootFilesystem was already true for consul-dataplane containers).
+```