1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
This commit is contained in:
Jim Bugwadia 2019-11-12 17:39:12 -08:00 committed by GitHub
parent 7131711bb4
commit 50952fbf48
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,4 +1,4 @@
# Require Read-only root filesystem
# Require read-only root filesystem
A read-only root file system helps to enforce an immutable infrastructure strategy; the container only needs to write on mounted volumes that can persist state even if the container exits. An immutable root filesystem can also prevent malicious binaries from writing to the host system.
@ -26,4 +26,4 @@ spec:
containers:
- securityContext:
readOnlyRootFilesystem: true
````
````