enable readOnlyRootFilesystem on cluster permission pod (#16)

Signed-off-by: Xiangjing Li <[email protected]>
open-cluster-management-io · Jan 29, 2024 · 213e35b · 213e35b
1 parent 3e82c76
commit 213e35b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/chart/templates/cluster-permission.yaml b/chart/templates/cluster-permission.yaml
@@ -77,6 +77,7 @@ spec:
             drop:
             - ALL
           privileged: false
+          readOnlyRootFilesystem: true
         terminationMessagePath: /dev/termination-log
         terminationMessagePolicy: File
       hostIPC: false