From 2b3003bc9989745d7512c153f0b7a2d70edc0572 Mon Sep 17 00:00:00 2001
From: Chmouel Boudjnah <chmouel@chmouel.com>
Date: Thu, 26 Sep 2024 10:54:23 +0200
Subject: [PATCH] set  readOnlyRootFilesystem: true in k8 deployment

---
 misc/kubernetes-deployment.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/misc/kubernetes-deployment.yaml b/misc/kubernetes-deployment.yaml
index 586758e..1986162 100644
--- a/misc/kubernetes-deployment.yaml
+++ b/misc/kubernetes-deployment.yaml
@@ -32,5 +32,6 @@ spec:
               drop:
                 - "ALL"
             runAsNonRoot: true
+            readOnlyRootFilesystem: true
             seccompProfile:
               type: RuntimeDefault