uirement for the <code>NET_ADMIN</code> and <code>NET_RAW</code> capabilities</a> for users deploying pods into the Istio mesh. The Istio CNI plugin replaces the functionality provided by the <code>istio-init</code> container.</p><ol><li><p>Verify that the <code>istio-cni-node</code> pods are running:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl -n kube-system get pod -l k8s-app=istio-cni-node
</code></pre></li><li><p>If <code>PodSecurityPolicy</code> is being enforced i