Merge pull request #47 from jacobsee/read-only-root-filesystem

openshift-merge-bot[bot] · web-flow · commit aeb85d39fca0 · 2025-07-08T05:37:38.000Z
ESO-71: Read Only Root Filesystem
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -81,6 +81,7 @@ spec:
         image: controller:latest
         name: manager
         securityContext:
+          readOnlyRootFilesystem: true
           allowPrivilegeEscalation: false
           capabilities:
             drop:
