Change root file system to readonly by default

whylabs · Jan 26, 2024 · c396c8b · c396c8b
1 parent 7e48514
commit c396c8b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/charts/langkit/values.yaml b/charts/langkit/values.yaml
@@ -33,10 +33,10 @@ podSecurityContext: {}
   # fsGroup: 2000
 
 securityContext:
+  readOnlyRootFilesystem: true
   # capabilities:
   #   drop:
   #   - ALL
-  # readOnlyRootFilesystem: true
   # runAsNonRoot: true
   # runAsUser: 1000