diff --git a/apps/overlays/au-syd1/consul/statefulset.yaml b/apps/overlays/au-syd1/consul/statefulset.yaml
index 48aabd1..8f42c2f 100644
--- a/apps/overlays/au-syd1/consul/statefulset.yaml
+++ b/apps/overlays/au-syd1/consul/statefulset.yaml
@@ -42,6 +42,10 @@ spec:
       containers:
         - name: consul
           image: hashicorp/consul:1.22.7
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: [ALL]
           command:
             - /bin/sh
             - -ec
@@ -65,8 +69,11 @@ spec:
             - {name: dns-tcp, containerPort: 8600, protocol: TCP}
             - {name: dns-udp, containerPort: 8600, protocol: UDP}
           readinessProbe:
-            tcpSocket:
-              port: 8301
+            exec:
+              command:
+                - /bin/sh
+                - -c
+                - wget -qO- http://127.0.0.1:8500/v1/status/leader | grep -q ':8300'
             initialDelaySeconds: 5
             periodSeconds: 10
           resources: