title: What are the reasons Envoy needs admin privileges, and can it be avoid?
body: <p>I want to use Envoy as an L7 Load balancer implementation running alongside kubernetes, but I cannot give it admin access, as that is a security problem I have to worry about. Some research tells me that Envoy needs admin access to modify some IP tables, but do the other containers in the pod also need admin access? If so, why? And is that something for which a workaround exists? </p>
  
  <p>Thank you</p>