diff --git a/bundle/manifests/activemq-artemis-operator.clusterserviceversion.yaml b/bundle/manifests/activemq-artemis-operator.clusterserviceversion.yaml
index 72647e9ad..1a21fadc2 100644
--- a/bundle/manifests/activemq-artemis-operator.clusterserviceversion.yaml
+++ b/bundle/manifests/activemq-artemis-operator.clusterserviceversion.yaml
@@ -2938,6 +2938,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                   runAsNonRoot: true
                   seccompProfile:
                     type: RuntimeDefault
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
index 412983a87..8ccb52c50 100644
--- a/config/manager/manager.yaml
+++ b/config/manager/manager.yaml
@@ -74,6 +74,7 @@ spec:
           capabilities:
             drop:
             - ALL
+          readOnlyRootFilesystem: true
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault
diff --git a/deploy/activemq-artemis-operator.yaml b/deploy/activemq-artemis-operator.yaml
index 5665b92ab..7ba97d87f 100644
--- a/deploy/activemq-artemis-operator.yaml
+++ b/deploy/activemq-artemis-operator.yaml
@@ -6964,6 +6964,7 @@ spec:
           capabilities:
             drop:
             - ALL
+          readOnlyRootFilesystem: true
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault
diff --git a/deploy/operator.yaml b/deploy/operator.yaml
index 03db5df04..9eab93a7c 100644
--- a/deploy/operator.yaml
+++ b/deploy/operator.yaml
@@ -154,6 +154,7 @@ spec:
           capabilities:
             drop:
             - ALL
+          readOnlyRootFilesystem: true
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault