Merge 9dd57eb into backport/lkysow/read-only-root-changelog/immensely…

…-feasible-herring
hashicorp · Jan 26, 2024 · d507234 · d507234
2 parents 69064cc + 9dd57eb
commit d507234
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.changelog/3498.txt b/.changelog/3498.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cni: When CNI is enabled, set ReadOnlyRootFilesystem=true and AllowPrivilegeEscalation=false for mesh pod init containers and AllowPrivilegeEscalation=false for consul-dataplane containers (ReadOnlyRootFilesystem was already true for consul-dataplane containers).
+```