Set readOnly on consuming containers for authz/n (#11759)

Signed-off-by: Jeff Bachtel <jeff.bachtel@gmail.com>

stable/opa/Chart.yaml

@@ -6,7 +6,7 @@ keywords:
 - opa
 - admission control
 - policy
-version: 0.4.0
+version: 0.5.0
 home: https://www.openpolicyagent.org
 icon: https://raw.githubusercontent.com/open-policy-agent/opa/master/logo/logo.png
 sources:

stable/opa/templates/deployment.yaml

@@ -66,6 +66,7 @@ spec:
               mountPath: /config
 {{- if .Values.authz.enabled }}
             - name: authz
+              readOnly: true
               mountPath: /authz
 {{- end }}
 {{- if .Values.mgmt.enabled }}
@@ -92,6 +93,7 @@ spec:
 {{- if .Values.authz.enabled }}
           volumeMounts:
             - name: authz
+              readOnly: true
               mountPath: /authz
 {{- end }}
 {{- end }}