Add readOnlyRootFilesystem to manager deployment

jacobsee · jacobsee · commit 14d8074ce28f · 2025-07-02T16:20:36.000-07:00
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -81,6 +81,7 @@ spec:
         image: controller:latest
         name: manager
         securityContext:
+          readOnlyRootFilesystem: true
           allowPrivilegeEscalation: false
           capabilities:
             drop:
