diff --git a/charts/vault-raft-snapshot-agent/templates/deployment.yaml b/charts/vault-raft-snapshot-agent/templates/deployment.yaml
index 52b7094..10b0b28 100644
--- a/charts/vault-raft-snapshot-agent/templates/deployment.yaml
+++ b/charts/vault-raft-snapshot-agent/templates/deployment.yaml
@@ -51,6 +51,7 @@ spec:
           volumeMounts:
             - mountPath: /etc/vault.d/
               name: config
+              readOnly: true
             {{- if .Values.config.uploaders.local.enabled }}
             - mountPath: {{ .Values.config.uploaders.local.path }}
               name: snapshots