Enable read-only root filesystem.

dask · Oct 9, 2023 · 71cac1f · 71cac1f
1 parent c783909
commit 71cac1f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/dask_kubernetes/operator/deployment/helm/dask-kubernetes-operator/values.yaml b/dask_kubernetes/operator/deployment/helm/dask-kubernetes-operator/values.yaml
@@ -28,7 +28,7 @@ securityContext:  # Security context for the operator container
   runAsNonRoot: true
   runAsUser: 1000
   allowPrivilegeEscalation: false
-  # readOnlyRootFilesystem: true
+  readOnlyRootFilesystem: true
 
 resources: {}  # Resources for the operator pod
   # We usually recommend not to specify default resources and to leave this as a conscious