From 7cc8adf73e4ff93594545e8691decd903c66ec26 Mon Sep 17 00:00:00 2001
From: Chenxiong Qi <cqi@redhat.com>
Date: Mon, 8 Jan 2024 14:04:27 +0800
Subject: [PATCH] Revert "Revert readOnlyRootFilesystem for image_pruner (#65)"

This reverts commit 2b2e5a559a38bcc897ae3a822037fd12ae0670d9.
---
 config/registry_image_pruner/cronjob.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/config/registry_image_pruner/cronjob.yaml b/config/registry_image_pruner/cronjob.yaml
index 3bc63a5..b1d6b74 100644
--- a/config/registry_image_pruner/cronjob.yaml
+++ b/config/registry_image_pruner/cronjob.yaml
@@ -42,6 +42,8 @@ spec:
               requests:
                 cpu: 150m
                 memory: 128Mi
+            securityContext:
+              readOnlyRootFilesystem: true
           restartPolicy: OnFailure
           securityContext:
             runAsNonRoot: true