diff --git a/kured-ds.yaml b/kured-ds.yaml
index 7721fa119..615db3d03 100644
--- a/kured-ds.yaml
+++ b/kured-ds.yaml
@@ -37,6 +37,7 @@ spec:
           imagePullPolicy: IfNotPresent
           securityContext:
             privileged: true # Give permission to nsenter /proc/1/ns/mnt
+            readOnlyRootFilesystem: true
           ports:
             - containerPort: 8080
               name: metrics