fix indentation and add missing field (#12516)

content/en/docs/ops/integrations/spire/index.md

@@ -261,39 +261,40 @@ To improve workload attestation security robustness, SPIRE is able to verify aga
     apiVersion: apps/v1
     kind: Deployment
     metadata:
-    name: sleep
+      name: sleep
     spec:
-    replicas: 1
+      replicas: 1
-    selector:
+      selector:
-        matchLabels:
+          matchLabels:
-        app: sleep
-    template:
-        metadata:
-        labels:
             app: sleep
-        # Injects custom sidecar template
+      template:
-        annotations:
+          metadata:
-            inject.istio.io/templates: "sidecar,spire"
+            labels:
-        spec:
+              app: sleep
-        terminationGracePeriodSeconds: 0
+            # Injects custom sidecar template
-        serviceAccountName: sleep
+            annotations:
-        containers:
+                inject.istio.io/templates: "sidecar,spire"
-        - name: sleep
+          spec:
-            image: curlimages/curl
+            terminationGracePeriodSeconds: 0
-            command: ["/bin/sleep", "3650d"]
+            serviceAccountName: sleep
-            imagePullPolicy: IfNotPresent
+            containers:
-            volumeMounts:
+            - name: sleep
-            - name: tmp
+              image: curlimages/curl
-            mountPath: /tmp
+              command: ["/bin/sleep", "3650d"]
-            securityContext:
+              imagePullPolicy: IfNotPresent
-            runAsUser: 1000
+              volumeMounts:
-        volumes:
+                - name: tmp
-        - name: tmp
+                  mountPath: /tmp
-            emptyDir: {}
+              securityContext:
-        # CSI volume
+                runAsUser: 1000
-        - name: workload-socket
+            volumes:
-            csi:
+              - name: tmp
-            driver: "csi.spiffe.io"
+                emptyDir: {}
+              # CSI volume
+              - name: workload-socket
+                csi:
+                  driver: "csi.spiffe.io"
+                  readOnly: true
     {{< /text >}}
 
 1. Get pod information: