My test Deployment had two ready pods. I deleted one. Kubernetes replaced it, and the new pod inherited the same writable-root-filesystem setting.
Kubernetes did exactly what you asked. The workload template still described that configuration.
Microsoft’s October 5, 2026 Defender for Cloud update brings Kubernetes security posture management fin...
