Microsoft Defender for Cloud reports 2 problems related to my AKS instance with Istio installed.
- Usage of pod HostPath volume mounts should be restricted to a known list to restrict node access from compromised containers"
- Running containers as root user should be avoided
It indicates that both problems are coming from Istio CNI pod. Is there any way to remediate them?