ions to deploy <a href=https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-capabilities-for-a-container>containers with the <code>NET_ADMIN</code> and <code>NET_RAW</code> capabilities</a>. Requiring Istio users to have elevated Kubernetes privileges can be problematic for security compliance within an organization. The Istio CNI plugin is a replacement for the <code>istio-init</code> container that performs the same networking functionality, but without requiring Istio users to e