diff --git a/.changelog/2787.txt b/.changelog/2787.txt
new file mode 100644
index 0000000000..67fc4ab476
--- /dev/null
+++ b/.changelog/2787.txt
@@ -0,0 +1,3 @@
+```release-note:security
+Add NET_BIND_SERVICE capability to restricted security context used for consul-dataplane
+```