diff --git a/misc/kubernetes-deployment.yaml b/misc/kubernetes-deployment.yaml
index 586758e..1986162 100644
--- a/misc/kubernetes-deployment.yaml
+++ b/misc/kubernetes-deployment.yaml
@@ -32,5 +32,6 @@ spec:
               drop:
                 - "ALL"
             runAsNonRoot: true
+            readOnlyRootFilesystem: true
             seccompProfile:
               type: RuntimeDefault