Kubernetes Readonly filesystem nginx example

nginx.yaml

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: readonly-fs-test
spec:
  replicas: 1
  template:
    metadata:
      labels:
        name: readonly-fs-test
    spec:
      containers:
      - name: nginx
        image: nginx:1.17.2
        securityContext:
          readOnlyRootFilesystem: true
        volumeMounts:
          - name: run
            mountPath:  /var/run
          - name: log
            mountPath:  /var/log/nginx
          - name: cache
            mountPath:  /var/cache/nginx
      volumes:
        - name: run
          emptyDir:
            medium: ""
        - name: log
          emptyDir:
            medium: ""
        - name: cache
          emptyDir:
            medium: ""