Worked on the fleetdm/fleet repository to deliver a security hardening feature for Kubernetes deployments using Helm. Focused on making the readOnlyRootFilesystem setting configurable through values.yaml, the work involved updating deployment.yaml and ensuring the new option propagated correctly throughout the Helm chart. Validation was performed across both Ubuntu-based and COS-based container runtimes in Google Kubernetes Engine clusters to maintain secure defaults and compatibility. The implementation used YAML and leveraged DevOps and Kubernetes expertise. Release notes and user documentation were produced to support customer adoption, emphasizing measurable improvements in deployment security posture for self-hosted fleet environments without introducing breaking changes.