diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
index 8f19a53..7d2c56d 100644
--- a/config/manager/manager.yaml
+++ b/config/manager/manager.yaml
@@ -75,6 +75,7 @@ spec:
         image: controller:latest
         name: manager
         securityContext:
+          readOnlyRootFilesystem: true
           allowPrivilegeEscalation: false
           capabilities:
             drop: