Skip to content

Commit ca65ae7

Browse files
authored
fix: enable read-only root filesystem for trainer manager (#3119)
Signed-off-by: Sameer_yadav <159073326+Goku2099@users.noreply.github.com>
1 parent 5c3d80a commit ca65ae7

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

manifests/base/manager/manager.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ spec:
2424
- name: manager
2525
image: ghcr.io/kubeflow/trainer/trainer-controller-manager
2626
securityContext:
27+
readOnlyRootFilesystem: true
2728
allowPrivilegeEscalation: false
2829
runAsNonRoot: true
2930
capabilities:

0 commit comments

Comments
 (0)