diff --git a/stable/opa/Chart.yaml b/stable/opa/Chart.yaml
index bfe6e126b8..f6de0e21cf 100644
--- a/stable/opa/Chart.yaml
+++ b/stable/opa/Chart.yaml
@@ -6,7 +6,7 @@ keywords:
 - opa
 - admission control
 - policy
-version: 0.4.0
+version: 0.5.0
 home: https://www.openpolicyagent.org
 icon: https://raw.githubusercontent.com/open-policy-agent/opa/master/logo/logo.png
 sources:
diff --git a/stable/opa/templates/deployment.yaml b/stable/opa/templates/deployment.yaml
index 940f3736d1..f4929e29ba 100644
--- a/stable/opa/templates/deployment.yaml
+++ b/stable/opa/templates/deployment.yaml
@@ -66,6 +66,7 @@ spec:
               mountPath: /config
 {{- if .Values.authz.enabled }}
             - name: authz
+              readOnly: true
               mountPath: /authz
 {{- end }}
 {{- if .Values.mgmt.enabled }}
@@ -92,6 +93,7 @@ spec:
 {{- if .Values.authz.enabled }}
           volumeMounts:
             - name: authz
+              readOnly: true
               mountPath: /authz
 {{- end }}
 {{- end }}