From c396c8b0a115d3cfa5f9e99dc95648592e4b78ee Mon Sep 17 00:00:00 2001
From: AnchorArray <aberg.dev@gmail.com>
Date: Fri, 26 Jan 2024 12:19:39 -0700
Subject: [PATCH] Change root file system to readonly by default

---
 charts/langkit/values.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/charts/langkit/values.yaml b/charts/langkit/values.yaml
index ae8b132..eac1834 100644
--- a/charts/langkit/values.yaml
+++ b/charts/langkit/values.yaml
@@ -33,10 +33,10 @@ podSecurityContext: {}
   # fsGroup: 2000
 
 securityContext:
+  readOnlyRootFilesystem: true
   # capabilities:
   #   drop:
   #   - ALL
-  # readOnlyRootFilesystem: true
   # runAsNonRoot: true
   # runAsUser: 1000