diff --git a/content/zh-cn/examples/pods/inject/secret-pod.yaml b/content/zh-cn/examples/pods/inject/secret-pod.yaml
index b1abd9b037..61e7a13050 100644
--- a/content/zh-cn/examples/pods/inject/secret-pod.yaml
+++ b/content/zh-cn/examples/pods/inject/secret-pod.yaml
@@ -10,6 +10,7 @@ spec:
         # name 必须与下面的卷名匹配
         - name: secret-volume
           mountPath: /etc/secret-volume
+          readOnly: true
   # Secret 数据通过一个卷暴露给该 Pod 中的容器
   volumes:
     - name: secret-volume