ced</a>
in your cluster and unless you use the <a href=/v1.21/docs/setup/additional-setup/cni/>Istio CNI Plugin</a>, your pods must have the
<code>NET_ADMIN</code> and <code>NET_RAW</code> capabilities allowed. The initialization containers of the Envoy
proxies require these capabilities.</p><p>To check if the <code>NET_ADMIN</code> and <code>NET_RAW</code> capabilities are allowed for your pods, you need to check if their
<a href=https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-ac