diff --git a/charts/fleet/templates/deployment.yaml b/charts/fleet/templates/deployment.yaml
index edf681fcb71..04e1ac6cbe5 100644
--- a/charts/fleet/templates/deployment.yaml
+++ b/charts/fleet/templates/deployment.yaml
@@ -448,7 +448,11 @@ spec:
           capabilities:
             drop: [ALL]
           privileged: false
+          {{- if hasKey .Values.fleet.securityContext "readOnlyRootFilesystem" }}
+          readOnlyRootFilesystem: {{ .Values.fleet.securityContext.readOnlyRootFilesystem }}
+          {{- else }}
           readOnlyRootFilesystem: true
+          {{- end }}
           {{- if .Values.fleet.securityContext.runAsGroup }}
           runAsGroup: {{ int64 .Values.fleet.securityContext.runAsGroup }}
           {{- end }}
diff --git a/charts/fleet/values.yaml b/charts/fleet/values.yaml
index 4522695653b..46c4279b371 100644
--- a/charts/fleet/values.yaml
+++ b/charts/fleet/values.yaml
@@ -125,8 +125,9 @@ fleet:
     licenseKey: license-key
   extraVolumes: []
   extraVolumeMounts: []
-  # Currently only passes runAsNonRoot, runAsUser, runAsGroup
+  # Currently only passes readOnlyRootFilesystem, runAsNonRoot, runAsUser, runAsGroup
   securityContext:
+    readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 3333
     runAsGroup: 3333