Fix container readable root (#119)

duckhawk · web-flow · commit 9b253d1b379c · 2025-09-03T09:29:03.000+03:00
Signed-off-by: v.oleynikov &lt;vasily.oleynikov@flant.com&gt;
diff --git a/templates/controller/deployment.yaml b/templates/controller/deployment.yaml
@@ -91,6 +91,7 @@ spec:
               {{- include "controller_resources" . | nindent 14 }}
 {{- end }}
           securityContext:
+            readOnlyRootFilesystem: true
             privileged: true
             seLinuxOptions:
               level: s0
