Set readOnlyRootFilesystem to true

An immutable root file system prevents applications from writing to their local disk
medik8s · Oct 14, 2024 · 73b3a2e · 73b3a2e
1 parent 7581e2d
commit 73b3a2e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -56,6 +56,7 @@ spec:
           key: node-role.kubernetes.io/infra
           operator: Exists
       securityContext:
+        readOnlyRootFilesystem: true
         runAsNonRoot: true
       priorityClassName: system-cluster-critical
       containers: