diff --git a/assets/node.yaml b/assets/node.yaml
index 8e06db1b..9dad7715 100644
--- a/assets/node.yaml
+++ b/assets/node.yaml
@@ -76,6 +76,7 @@ spec:
         - name: csi-driver
           securityContext:
             privileged: true
+            readOnlyRootFilesystem: true
           image: ${DRIVER_IMAGE}
           imagePullPolicy: IfNotPresent
           args:
@@ -143,6 +144,7 @@ spec:
         - name: csi-node-driver-registrar
           securityContext:
             privileged: true
+            readOnlyRootFilesystem: true
           image: ${NODE_DRIVER_REGISTRAR_IMAGE}
           imagePullPolicy: IfNotPresent
           args:
@@ -168,6 +170,8 @@ spec:
               memory: 50Mi
               cpu: 10m
         - name: csi-liveness-probe
+          securityContext:
+            readOnlyRootFilesystem: true
           image: ${LIVENESS_PROBE_IMAGE}
           imagePullPolicy: IfNotPresent
           args: