feat(workload): add support for read only rootfs security option (#8)

azenla · web-flow · commit 2b9a484c5247 · 2025-12-02T12:56:49.000-08:00
diff --git a/protect/control/v1/common.proto b/protect/control/v1/common.proto
@@ -323,6 +323,7 @@ message WorkloadSecuritySpec {
   bool privileged = 5;
   bool disable_all_namespaces = 6;
   repeated ProcessNamespace disable_namespaces = 7;
+  bool read_only_rootfs = 8;
 }
 
 enum WorkloadState {

Original file line number	Diff line number	Diff line change
`@@ -323,6 +323,7 @@ message WorkloadSecuritySpec {`
`323`	`323`	`bool privileged = 5;`
`324`	`324`	`bool disable_all_namespaces = 6;`
`325`	`325`	`repeated ProcessNamespace disable_namespaces = 7;`
	`326`	`+ bool read_only_rootfs = 8;`
`326`	`327`	`}`
`327`	`328`
`328`	`329`	`enum WorkloadState {`