Set readOnlyRootFilesystem explicitly to true (#845)

ardaguclu · web-flow · commit a3fa15ca6c58 · 2025-03-20T06:34:31.000-07:00
diff --git a/charts/jobset/values.yaml b/charts/jobset/values.yaml
@@ -58,6 +58,7 @@ controller:
   # -- Security context of the jobset controller container.
   securityContext:
     allowPrivilegeEscalation: false
+    readOnlyRootFilesystem: true
     capabilities:
       drop:
         - ALL
diff --git a/config/components/manager/manager.yaml b/config/components/manager/manager.yaml
@@ -74,6 +74,7 @@ spec:
         name: manager
         securityContext:
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
           capabilities:
             drop:
               - "ALL"
