Set readOnlyRootFilesystem as true in Interceptor

tektoncd · Sep 4, 2024 · 616cae1 · 616cae1
1 parent 25bad02
commit 616cae1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/interceptors/core-interceptors-deployment.yaml b/config/interceptors/core-interceptors-deployment.yaml
@@ -82,6 +82,7 @@ spec:
           timeoutSeconds: 5
         securityContext:
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
           # User 65532 is the distroless nonroot user ID
           runAsUser: 65532
           runAsGroup: 65532