feat: use readOnlyRootFilesystem

Signed-off-by: Christian Kotzbauer <[email protected]>
kubereboot · Aug 2, 2023 · b0c95f8 · b0c95f8
1 parent d019e7a
commit b0c95f8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/kured-ds.yaml b/kured-ds.yaml
@@ -37,6 +37,7 @@ spec:
           imagePullPolicy: IfNotPresent
           securityContext:
             privileged: true # Give permission to nsenter /proc/1/ns/mnt
+            readOnlyRootFilesystem: true
           ports:
             - containerPort: 8080
               name: metrics