readOnlyRootFilesystem

ReadOnlyRootFilesystem in spec.containers.securityContext

  containerSecurityContext:
   enabled: true
   runAsUser: 11111
   runAsGroup: 11111
   allowPrivilegeEscalation: false
   capabilities:
     drop:
       - all
   readOnlyRootFilesystem: false
   runAsNonRoot: true

Related

• allowPrivilegeEscalation
• Configure a Security Context for a Pod or Container
• Mount emptyDir to /tmp
• --read-only in Docker
• read_only: true # in docker-compose.yaml

See also

• readOnlyRootFilesystem, emptyDir, read_only, --read-only
• emptyDir, readOnlyRootFilesystem
• securityContext, containerSecurityContext, spec.containers.securityContext, spec.securityContext, spec.securityContext.runAsUser, spec.securityContext.fsGroup, readOnlyRootFilesystem