Set readOnlyRootFilesystem as true in Interceptor

tektoncd · Sep 4, 2024 · 0dd4391 · 0dd4391
1 parent 62e7857
commit 0dd4391
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/interceptors/core-interceptors-deployment.yaml b/config/interceptors/core-interceptors-deployment.yaml
@@ -82,6 +82,7 @@ spec:
           timeoutSeconds: 5
         securityContext:
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
           # User 65532 is the distroless nonroot user ID
           runAsUser: 65532
           runAsGroup: 65532