readOnlyRootFilesystem: true

Signed-off-by: Scott Trent <[email protected]>
sustainable-computing-io · Sep 12, 2024 · cfef775 · cfef775
1 parent 97a6886
commit cfef775
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -169,6 +169,7 @@ spec:
           runAsUser: 12001
           runAsGroup: 12001
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
           capabilities:
             drop:
               - "ALL"