diff --git a/.changelog/2909.txt b/.changelog/2909.txt
index e69de29bb2..cae7f44d45 100644
--- a/.changelog/2909.txt
+++ b/.changelog/2909.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+helm: Add readOnlyRootFilesystem to the default restricted security context when runnning `consul-k8s` in a restricted namespaces.
+```
\ No newline at end of file