use readOnlyRootFilesystem

bradwhitfield · bradwhitfield · commit e1633dcea1c8 · 2024-09-16T20:28:31.000-04:00
diff --git a/templates/helm/templates/deployment.yaml.tpl b/templates/helm/templates/deployment.yaml.tpl
@@ -152,6 +152,7 @@ spec:
         securityContext:
           allowPrivilegeEscalation: false
           privileged: false
+          readOnlyRootFilesystem: true
           runAsNonRoot: true
           capabilities:
             drop:
