diff --git a/gremlin/templates/chao-deployment.yaml b/gremlin/templates/chao-deployment.yaml
index 582b4b6..4459957 100644
--- a/gremlin/templates/chao-deployment.yaml
+++ b/gremlin/templates/chao-deployment.yaml
@@ -48,6 +48,8 @@ spec:
       imagePullSecrets:
       - name: {{ .Values.chaoimage.pullSecret }}
       {{- end }}
+      securityContext:
+        readOnlyRootFilesystem: true
       containers:
         - image: {{ .Values.chaoimage.repository }}:{{ .Values.chaoimage.tag }}
         {{- if .Values.resources }}